last executing test programs:

22.061198587s ago: executing program 2 (id=8967):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback={0x1000000}, 0x5, 0x1, 0x2, 0xb, 0x2, 0x85}, 0x26)
r1 = socket$inet_sctp(0x2, 0x16803444a3df47ad, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e21, @multicast2}}}, 0x84)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={<r5=>0x0, 0x6}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={r4, 0x0, 0x2, 0x2, 0x2, 0x2, 0x6, 0x10001, {r5, @in={{0x2, 0x4e21, @empty}}, 0xa, 0x714, 0x7f, 0x80000001, 0xb24}}, &(0x7f0000000180)=0xb0)
r6 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
pselect6(0x40, &(0x7f0000000a80)={0x5, 0x5, 0x0, 0x100000000, 0x6, 0x1, 0x3, 0xfffffffffffffffd}, &(0x7f00000003c0)={0xdc, 0xa, 0x100000002ddd, 0x3, 0x1000000000f, 0x7fff, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0)

21.183197628s ago: executing program 2 (id=8992):
r0 = socket$inet(0x2, 0x6, 0xa)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x3b, @remote, 0x4e23, 0x1, 'fo\x00', 0x20, 0xffffffff, 0x31}, 0x2c)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={<r3=>0x0}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e21, 0x7bf, @dev={0xfe, 0x80, '\x00', 0x32}, 0x40}}}, 0x84)
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)=0x40)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r3, 0x8, 0x80000001}, &(0x7f0000000280)=0xc)
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000002c0)={{r2}, "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"})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000012c0), 0x402840, 0x0)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000001300))
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000001340)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x9, @mcast1, 0x5506}, @in6={0xa, 0x4e23, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x10001, @private2, 0x1ff}], 0x74)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f00000013c0)={0x1, 0xc})
bind$inet(r1, &(0x7f0000001400)={0x2, 0x4e24, @remote}, 0x10)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000001440))
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000001480)={0x0, @broadcast, 0x4e24, 0x3, 'wlc\x00', 0x30, 0xbd2, 0x19}, 0x2c)
write(r0, &(0x7f00000014c0), 0x0)
write$bt_hci(r1, &(0x7f0000001500)={0x1, @write_eir={{0xc52, 0xf1}, {0xfd, "732d5ae39101fcc99f560ffe69155250d5e621b0932eaa990f1df2f4fd7078e6f367774e6c281aea69c27bc9dea3e01a90a1b6f8ef78f43bcb12510c488f79426c2aee3038594dc71d062580dccead41fac593425ed1b46d25155d10d7ca8c207baae184f891117aae418160d4b7371e5e7ca85de5f286b3ead6600151b1aebd1b380631fe293b2d1e36ebb7a8ac58ae43994da682f79e331db5b7ece432eca31ec73c62877b221258bec9e38e3a8e5e16560a45b4a692581e2a232b8000d26244aa49efcc3e47cae2a366581431e5bd2c1eb0cad127d1311e8a27243fe7fe910c6f11cc652f747c544981011b606f50"}}}, 0xf5)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001640), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1f, 0x8, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000)
ioctl$VHOST_VDPA_GET_STATUS(r1, 0x8001af71, &(0x7f0000001740))
pread64(r1, &(0x7f0000001780)=""/3, 0x3, 0x9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001a40)={<r6=>0x0}, &(0x7f0000001a80)=0xc)
r7 = getgid()
sendmsg$unix(r2, &(0x7f0000001b00)={&(0x7f00000017c0)=@file={0xccb3aafa3b25a812, './file0\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001840)="830373935ac4e18e01f4e02f3ccb378b5fe96b56364125ea616b81f8eb8e001dcc18dea6258e20464daff296e1bdc83b246e9e018198ec8fb4e82b71ea4e4d197ab3b8348cc5d7c76e8a0ed7b0d76b6b626087803fc66116f67ff0cadaa016deb4591bc41ad867acd98f6895100298", 0x6f}, {&(0x7f00000018c0)="60c5ff08e7c851262fd6", 0xa}, {&(0x7f0000001900)="15fba5105e160436a7b6a73ad500765591b7f76b33898d94508d5d0f1d62a8fb", 0x20}, {&(0x7f0000001940)="34935a9d31fc346a7612435a576aee157326748bb42ea73b2976e7608254dfd3f3a974bc1ec665716eb26854d825bc0403d4af58211fdcad11a32bd4e47d7162cc41da3fae0b84dd1a0a5687e60b0ce831541910ab6bad92d0b86d59df4c997657a08a70faee2dec4f5de2bb281432fecc51363bdf7230b8eccfa73107029db1f6b4e6b08492144f9cba5139551d23f199bb74d3cf1a0be1f25067", 0x9b}], 0x4, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xee01, r7}}}], 0x20, 0x24040805}, 0x8000)
preadv(r1, &(0x7f0000002f00)=[{&(0x7f0000001b40)=""/237, 0xed}, {&(0x7f0000001c40)=""/147, 0x93}, {&(0x7f0000001d00)=""/187, 0xbb}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)}, {&(0x7f0000002e00)=""/215, 0xd7}], 0x6, 0x9, 0x8)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000002f80)={{0x2f, @multicast1, 0x4e22, 0x2, 'nq\x00', 0x1, 0x3, 0x5b}, {@multicast1, 0x4e20, 0x10000, 0xa, 0x8, 0x5}}, 0x44)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f00000030c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x10, 0x140f, 0x800, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4040001}, 0x20040010)
r9 = accept4$inet6(r1, &(0x7f0000003100)={0xa, 0x0, 0x0, @private0}, &(0x7f0000003140)=0x1c, 0x800)
setsockopt$inet6_MCAST_LEAVE_GROUP(r9, 0x29, 0x2d, &(0x7f0000003180)={0x688, {{0xa, 0x4e21, 0x8, @mcast1, 0x2}}}, 0x88)

21.083334435s ago: executing program 2 (id=8994):
r0 = socket(0x1d, 0x2, 0x6)
r1 = epoll_create(0x9660)
close(r0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@mcast1, <r2=>0x0}, &(0x7f00000000c0)=0x14)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@loopback, 0x28, r2})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2000})

21.02378344s ago: executing program 2 (id=8995):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x6, 0x0, 0x72062e6d34210d7d, 0x0, 0x0, 0x8001}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b32, &(0x7f0000000040))
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1e)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff9)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

20.945717676s ago: executing program 2 (id=8997):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001a0001002dbd70000300000002002000ff0000050002000008000300", @ANYRES32=r3, @ANYBLOB="080001000b"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d77e)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)={{0x1007fff, 0x6}, {0x1007fff, 0x9}, 0x7, 0x5})

20.944357183s ago: executing program 2 (id=8999):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20040800}, 0x400c080)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='ip6_vti0\x00', 0x10)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x3393c85ca89fc87a}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000814)
r4 = socket$netlink(0x10, 0x3, 0x8)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x96}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x74458ff133c59442)
syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r0)
sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xc0, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xc0}, 0x1, 0x0, 0x0, 0x90}, 0x0)
getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000700), &(0x7f0000000740)=0x8)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000780)={'veth1_vlan\x00', 0x100})
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8c}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4567fe78}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}}, 0x4008010)
listen(r4, 0x1)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000008c0)={0x2, {{0x2, 0x4e23, @private=0xa010102}}}, 0x88)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r1)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r7, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4881}, 0x20000010)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r5, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5b0}]}, 0x24}}, 0x40)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c40)={0xf, {{0x2, 0x4e22, @multicast2}}, 0x1, 0x5, [{{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e22, @multicast1}}]}, 0x310)
r9 = openat$cgroup_ro(r0, &(0x7f0000000f80)='memory.swap.current\x00', 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000001040)={r3, r9, 0x8, 0x4b, &(0x7f0000000fc0)="8dce810f5255cd52dde0c6a603b68b95749ac7ff9fa0c5f5aa8bbcba750d411d5f43a53debd441406fc9ed82fe3e37033ce7c181d2ce32c2cd3974b277f859505b8d1034b4003f5132f72b", 0x7, 0x4, 0x0, 0x9b, 0x7, 0x2, 0x7fff, 'syz0\x00'})
ioctl$PTP_EXTTS_REQUEST2(r9, 0x40103d0b, &(0x7f0000001100)={0x5, 0x4})
openat$nci(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001180)={r1}, 0x8)
setsockopt$WPAN_WANTACK(r10, 0x0, 0x0, &(0x7f00000011c0), 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001200)=[@in={0x2, 0x4e22, @private=0xa010101}], 0x10)

16.94373459s ago: executing program 1 (id=9057):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='rdma.current\x00', 0x0, 0x0)
connect$phonet_pipe(r2, &(0x7f0000000100)={0x23, 0x10, 0x3, 0x40}, 0x10)
unshare(0x2050800)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xbd4a, 0x42}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a9c3c71e16e72132fe9657d39e55a891f7de5ffda7d1fa34"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f00000002c0)={0x3ce, 0x7, 0x5, 0x3f, 0x3, 0x0, [{0xffffffff, 0x0, 0x7, '\x00', 0x2080}, {0x43e0, 0x3ff, 0x9, '\x00', 0x2004}, {0x81, 0x4, 0x2, '\x00', 0x484}]})
sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r4, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8001, 0x12}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x1ff]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0xbb6, 0x2, 0x8, 0x69009, r2, 0x60e, '\x00', 0x0, r2, 0x2, 0x2, 0x4, 0xc, @value=r2}, 0x50)
ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000680)={0xe05, 0x0, 0x3, 0xfffffffd, 0x9, 0x0, [{0x4, 0x7, 0xc48, '\x00', 0x481}, {0x5, 0xffff, 0xe61a, '\x00', 0x682}, {0x2, 0x2, 0x1ff, '\x00', 0x1}, {0x6, 0x3, 0x5, '\x00', 0x2000}, {0x2, 0x4, 0x401, '\x00', 0x80}, {0x7, 0x2, 0x4, '\x00', 0xc}, {0x1, 0x8000000000000000, 0x416, '\x00', 0x500}, {0x7, 0x8, 0x2, '\x00', 0xa04}, {0x7, 0x7f, 0x6, '\x00', 0x82}]})
r6 = openat$cgroup_ro(r1, &(0x7f00000008c0)='cgroup.controllers\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d40)={&(0x7f0000000d00)='tcp_retransmit_synack\x00'}, 0x18)
bind$inet(r6, &(0x7f0000000d80)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8172}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xb}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x687}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40014}, 0x0)
getpeername$packet(r6, &(0x7f0000000f00)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f40)=0x14)
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000f80)=<r8=>0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000fc0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0x2, 0x4e22, 0x0, 0xa, 0x60, 0x20, 0x32, r7, r8}, {0xffff, 0x8, 0xd, 0x5c, 0xa6, 0x9, 0x7, 0xbc2}, {0xffffffff, 0x80000000, 0x7fffffffffffffff, 0xff8}, 0x5, 0x6e6bb8, 0x1, 0x0, 0x2, 0x3}, {{@in=@broadcast, 0x4d4, 0x33}, 0xa, @in=@remote, 0x3504, 0x1, 0x2, 0x0, 0x7fff, 0x2, 0x3}}, 0xe8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
getsockopt$IP_VS_SO_GET_SERVICES(r9, 0x0, 0x482, &(0x7f0000001100)=""/165, &(0x7f00000011c0)=0xa5)
bind$bt_hci(r6, &(0x7f0000001200)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
vmsplice(r10, &(0x7f00000018c0)=[{&(0x7f0000001240)="d8df37ff570e64c5881417", 0xb}, {&(0x7f0000001280)="5fa957c307bcda62d66310d7371b5ee12b2c73d8690251a9badcb66824555ca1cb536724af6717e92a532624814ab5c54a62dc33c66b5700bc202f566cb8f52f6f6ecef72a940402e10316be23f7efce2d4b370ac2873cfba8fa817dbe", 0x5d}, {&(0x7f0000001300)="ac73a82b706b3d569a218c0f1c2264c97526abb0ad3673b1840d711145e81fee5afe0112fa479408210b292b0745498d3bd233082bc6379253dfb98e3df9ccc53a941bdcee9813d62b6d873c44cd1765d674f31e07a859b0e77bdb9ae045f16c589a7566d2cc5c8fd0600f4e97543b77fa44f376064a1a2307ead11b31a6a71afdbecf21727ddf47c94ff776d557f9beb61a3e17dab0be5f86f4e516a2cae233ba56ba4eee590c91475c337b4039c01c4c6e8aa9d9143d0546f4c80e3030", 0xbe}, {&(0x7f00000013c0)="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", 0xff}, {&(0x7f00000014c0)="c81b01b9e126549efd166674a1b971b5b58b084c5997de5677870a57f4b7517ee0b22c060bfa10c7a0594a8c1165d091143ac7e0837eb12ce38343802e64a6f36bc5c6aa7969e72c50b140c54d3ca67a382743c1c8804a4c037f8f8a4f08897c08ae9d7776c2cac8dc87e26c9ab1f9065a5b2e7257cd3ce2e156bb36af1e416d0da03dbb7f532d5c631a4554cdc1e5db5f324cd045d71b6379a5a6f0c99bca6183162a4e7771f45bad5577399cdd6fe16e50bea9aa77d4ea9a3bcc4400a9be6e44db44da92400a", 0xc7}, {&(0x7f00000015c0)="48e968c7a2e7a6e387", 0x9}, {&(0x7f0000001600)="e1d77b57087c89c7f79ef664d03a1c6f90a63be24c25d29b8fb938dd97606c0aa1749a9481ff13af9d8339fb2a464014d4a608a4243c4decafcfce133525c0cbf86fd0a3be817160889227336a5015a98e542bcf80c80e0ff6695991718b8cffdf27696a3b7d46671f1e806d465827dfb12c6c1d435fcc9dee4fcc7f03ccf06e31f65d819050c465f5edc4663855794392e64a27d6fee07f71ecdc3f7fa284993b1222c0a43c644c8e34762c79e69c6f99178104257685df814a5955434393d46bc33e473c55876f9009cd7740f16429b74596612a5b1221f411e8106299f21bcc318854a6c65670705fb9e0eb6bb637", 0xf0}, {&(0x7f0000001700)="a07c7cb7768dcaa6fd7994f130802d76b9aabd9639644df87b8065eb01ab44a3ad74309dbfdaa28bee411fa16700c3b9ab0902e9045ba904300401c2455ef521f13a2cbd6ff931330c6c5e27364099a464d11aaa2c67cc1f8ddb474d0a0956ab87f3f15d3467544e8a236c5a7fa0a388eccaa864a93f2aa70916ff5266b92fb7fc2550a464ce4eed37ddfb1d7f500116306feb1b2565b76ace39e4f3450c2f0dc4f53209351aab79cdb292ec58990a6d", 0xb0}, {&(0x7f00000017c0)="b632fe529e09458b9c9560db6b6c4db5a134dea36e3d0cfc644e9b7d9bc48553db2bd2ed1020ffbcac7a01bc747e0c8a912eeac83010380871ae75bbc425eb7a639c9dfdc08687d85cbde4a9b96bc041785076cbbae7534338f31acec76cd72c9af8e49a6ae4b9f8e71f8ce447bb0d787e7b14c380454bc63d076424e94a9d3dcc67215db9b53cb89195c2ae1831e5a6df59e5c9f9c2daaf789630f830ee363bd67bdd3d0c78e6ff9e315874a2ec4d3ae24d130db0a7e0f7372fe285aeb3037cb955d25db91fc43fdcea", 0xca}], 0x9, 0x1)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000001a80)={&(0x7f0000001980)=""/219, 0xdb})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000001ac0)={'syz_tun\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x78, r4, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6d}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x67}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xce}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x44810)
accept$netrom(r2, &(0x7f0000001c40)={{0x3, @default}, [@null, @remote, @netrom, @rose, @remote, @rose, @bcast, @bcast]}, &(0x7f0000001cc0)=0x48)

16.94334636s ago: executing program 0 (id=9058):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x95}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x26}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x9, 0x28}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', <r2=>0x0, 0x29, 0xf9, 0xb, 0x800, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, 0x7, 0x80, 0x0, 0xffff6492}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000500)=@ccm_128={{0x303}, '\x00', "9a3790020d4100", "00000001", "3b8eda4d6920ba22"}, 0x28)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
sendfile(r3, r4, 0x0, 0x20000000002)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x3, 0x5, 0x0, 0x4a242, r1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0xd, @value=r4}, 0x50)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close(0x3)

16.942186486s ago: executing program 1 (id=9059):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x800000)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000000c0)={{0x1000, 0x800}, {0x9, 0x3fc000}, 0x7, 0x1})

16.874137675s ago: executing program 1 (id=9060):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80)
socket$packet(0x11, 0x3, 0x300) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'dummy0\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x4, @void}, 0x10)
ioctl$PTP_EXTTS_REQUEST2(r0, 0xc0403d11, &(0x7f00000020c0)={0x25, 0x4}) (async)
ioctl$PTP_EXTTS_REQUEST2(r0, 0xc0403d11, &(0x7f00000020c0)={0x25, 0x4})

16.87351897s ago: executing program 1 (id=9061):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000035c0)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xa, 0x1000, 0x8, 0x5, 0x3}, 0xa3}, [{0x6, 0x5, 0x9, 0x5, 0x5, 0x8}, {0x0, 0x4, 0x7, 0x7, 0x3, 0x3}, {0x0, 0x6, 0x324, 0x5, 0x10, 0x5}, {0x80, 0x8, 0xc, 0x7, 0x400, 0x1000}, {0x4, 0x0, 0x4, 0x6, 0xffffffd3, 0x6}, {0xf, 0x2, 0x8001, 0xfffffffa, 0x800, 0xe5d}, {0xf, 0x6d7, 0x7, 0x1000, 0x2, 0xff}, {0x4, 0x0, 0x6, 0x4, 0x7, 0x1}, {0xe8b, 0x8, 0x7, 0x3, 0x8, 0x8}, {0x45ca, 0x8, 0x0, 0x5, 0x0, 0x5}, {0xd0c, 0x4, 0x7, 0x800, 0x4, 0x5}, {0x4, 0x0, 0x7f, 0x8, 0xb4, 0x3}, {0x5, 0x100, 0x2, 0x1ff, 0x10000, 0xffffffff}, {0x6, 0x3, 0x9, 0x6, 0x6, 0xfffffff8}, {0x7f, 0x3, 0x2, 0x5, 0x563, 0x8}, {0x0, 0x9, 0x87, 0x5, 0x8, 0x800}, {0x5, 0x585e, 0x6, 0x3, 0x400, 0x7}, {0x7, 0x6fc, 0x7fff, 0x6, 0x6, 0x4}, {0x3, 0xef0a, 0x9, 0x4, 0x7c1103b4, 0x5}, {0x7f, 0x4, 0x5, 0x1, 0x6, 0xffff}, {0x80, 0x56, 0x4, 0x9, 0xfffffff4, 0xdff}, {0x7, 0x1, 0x2400, 0x81, 0x0, 0x2}, {0x8, 0x3, 0x4, 0x1, 0xffff8f3e, 0x94e}, {0x0, 0x80, 0x5, 0xc5c3, 0x5, 0xb}, {0xfb, 0x540fb8a0, 0x3, 0x400, 0x8000, 0x8001}, {0xfcf, 0xe0, 0x3, 0x4, 0x1000, 0x4923fb63}, {0x6, 0x5, 0xff, 0x7ff, 0x3, 0x401}, {0x4745c803, 0x9, 0x9, 0x6e, 0x39, 0x9}, {0x0, 0x0, 0x4, 0x3, 0x5, 0x4b9d252f}, {0x40000000, 0x0, 0x7d1, 0xb7, 0x7, 0x8}, {0x9909, 0x3, 0x800, 0x1, 0x7b, 0xffffffc0}, {0x3, 0x200, 0x1, 0x81, 0x10, 0x401}, {0xfffffff4, 0x1, 0x3, 0x10000, 0x5, 0x1}, {0x6, 0xcc6e, 0xee1, 0x3ff, 0xa4f, 0x3}, {0x9, 0x6, 0xc, 0x7, 0x23, 0x200}, {0x5, 0x3, 0x0, 0x6, 0x2, 0x100}, {0x1ff, 0x78d, 0x7, 0x5, 0x942d, 0x8}, {0x6, 0x9, 0xf, 0x401, 0x0, 0xe6}, {0xffffffe8, 0x81, 0x8000, 0x40, 0x0, 0xf192d4b}, {0x5, 0x100, 0x6, 0x4, 0x7, 0x400}, {0x8000, 0x5, 0x4, 0x4, 0x3, 0x8cfa}, {0x0, 0x9, 0x9, 0x2, 0x4, 0x1}, {0x4, 0x7, 0x5, 0x3ff, 0x8, 0x80000000}, {0xb, 0x6, 0x3dcd, 0x5, 0x0, 0x7}, {0x4, 0x7f, 0x8, 0x7, 0xa, 0xdc5}, {0x3, 0x5, 0x6543, 0x8, 0x5, 0x4}, {0x9, 0x1ab, 0xf, 0x7, 0x8001, 0x8}, {0xe, 0x6, 0xfffffc00, 0x9876, 0x81, 0x9}, {0x3, 0x10001, 0xa, 0x400, 0x4c9e, 0xffffff01}, {0x0, 0xce000000, 0xe, 0xfffffff9, 0x401, 0x6}, {0x6, 0xf, 0x2, 0x0, 0x5, 0x2}, {0x80000001, 0x2, 0xf9, 0x9, 0x2, 0x4}, {0x1, 0x400, 0x5, 0x200, 0xed, 0x3}, {0x7, 0x7, 0x899, 0x1000, 0xfff, 0xfffffffb}, {0x3, 0x1, 0xe2, 0x6, 0x160, 0xb8}, {0x3, 0x0, 0xbf6, 0x3, 0x0, 0x81}, {0x2000009, 0x1, 0xed, 0x11e, 0x7fffffff, 0x7}, {0x100, 0xc, 0x7, 0xaa, 0x50000, 0x7fff}, {0x3, 0x19a8, 0x6, 0x529, 0x4, 0x9c2}, {0x4, 0xb, 0x9, 0x3, 0x5, 0x8001}, {0x9, 0x5ad, 0x1, 0x4, 0x10000, 0x25}, {0x0, 0x2, 0x3, 0x1, 0x6, 0x80}, {0x101, 0x1, 0x5, 0xb, 0x1a0d, 0xad47}, {0x9, 0x8, 0x3, 0xb, 0x8, 0xce64}, {0xd, 0x10000000, 0x0, 0x7, 0x7, 0xeee}, {0x9, 0xc8, 0x9e1, 0x55, 0x2, 0x2}, {0x15bd, 0x6, 0x68d, 0x10001, 0xb, 0x5}, {0x1, 0x9, 0x59a, 0x1, 0x6, 0x3ff}, {0x8456, 0x7, 0x3, 0x0, 0x7, 0x2}, {0x759, 0x11, 0x3, 0x9, 0x3, 0x628}, {0x3, 0x4, 0x4, 0x1, 0x9, 0x2}, {0xc71, 0x2, 0x6, 0x7fff, 0x9, 0x5c0}, {0x1, 0x1, 0x5, 0x7, 0xde9, 0x8}, {0x8, 0xfffffffe, 0x1, 0x3, 0x7, 0x36}, {0x0, 0x8, 0x4c6, 0x0, 0x7863, 0x1}, {0x0, 0x8, 0x7152, 0x5, 0x1, 0x6}, {0x0, 0xe08, 0x7, 0x9, 0x7, 0x8}, {0x3, 0xcb86, 0x100, 0x976, 0x935, 0x800}, {0x4, 0x40, 0x0, 0x2, 0x2, 0x80000000}, {0x3, 0x3, 0x0, 0x15, 0x3, 0xa}, {0x4, 0x7fc, 0xb2, 0x7, 0x1}, {0x3, 0x6f15, 0x101, 0x401, 0x8, 0x1}, {0x1, 0x1, 0x0, 0x800, 0x1, 0xfffffe01}, {0x8, 0xa, 0x8000, 0x3, 0x0, 0x6}, {0x6, 0x1, 0x1, 0x46a, 0x5, 0x8001}, {0x0, 0x9a9, 0x9, 0x29b, 0xfffffffc, 0x5}, {0x9, 0x3e0, 0x4, 0x80000001, 0x6, 0x80000000}, {0x6, 0xd, 0xfffffffc, 0x325, 0x8, 0x1}, {0x7fff, 0x7, 0x3ff, 0x0, 0x6}, {0x100, 0xfffffc00, 0x2e, 0x5, 0xfffffffa, 0x9}, {0x0, 0x8f, 0x100, 0x3, 0x4, 0x7}, {0x7ff, 0x4, 0x435d, 0x125, 0x10, 0xfffffff9}, {0x36, 0x2, 0xf, 0xfffffffd, 0x3, 0x8}, {0x7, 0x7, 0x1, 0x0, 0x6, 0x10001}, {0xd609, 0xcd6, 0x0, 0x3, 0xfffffba5, 0x401}, {0x8, 0x7fff, 0x37, 0x8d45, 0x952f, 0x8}, {0x8, 0x4, 0x8, 0x8, 0x0, 0x5}, {0xffff, 0x80000000, 0x8, 0x3ff, 0xff, 0x2}, {0x6, 0xb, 0x9, 0x6, 0x1, 0x1}, {0x4, 0x8, 0x7, 0x0, 0x4, 0x297efd19}, {0x663e, 0x8, 0x81, 0x1, 0x7, 0x8001}, {0x5, 0x2, 0x4b42, 0x5, 0x5, 0x401}, {0xa20, 0xfffffffa, 0x5, 0x6, 0x0, 0xae}, {0x7fff, 0x800, 0x6, 0x262e, 0x5, 0x2}, {0x7fffffff, 0x4, 0x3, 0x2, 0x5, 0xb339}, {0x96, 0x758, 0x9, 0x400, 0x3ff, 0x5}, {0x3, 0x7, 0x4, 0x4, 0x7, 0x9}, {0x3, 0x2, 0x9, 0x7, 0x4, 0xb5}, {0x8, 0x0, 0x2, 0x9, 0x2, 0x200}, {0xff, 0xaf9a, 0x0, 0x7, 0x1, 0x6}, {0xe, 0x9, 0xf, 0x1, 0x460, 0x7}, {0x5e82, 0x0, 0x32, 0xffffffff, 0x81, 0x6}, {0x2, 0x2, 0xfff, 0x1728, 0x200, 0x7}, {0x7, 0x3, 0x6, 0x8, 0x1, 0x6}, {0x7f, 0xfff, 0x9, 0xe037, 0x3, 0xfffffff7}, {0xa0000000, 0xd, 0x8000, 0xf05, 0x6, 0x6b}, {0xffffffff, 0x8, 0x5f94, 0xfffff1f5, 0x7fffffff, 0x1000}, {0x0, 0x3e2, 0x9, 0xfffffffb, 0x0, 0x9}, {0x1, 0x5, 0x9, 0x0, 0x800, 0x401}, {0x513f, 0x8, 0x0, 0x80000000, 0x28e, 0x9}, {0x2, 0x8, 0x80, 0x3, 0x9f8, 0x80000001}, {0x80000001, 0xc1, 0x4, 0xeb3, 0x40000005, 0x2568}, {0xc14c, 0x6, 0x2, 0x71, 0x3062, 0x7}, {0x9, 0x2, 0xd920, 0x1, 0x8, 0x1}, {0x7f, 0x9, 0x7, 0x4, 0xdd2b}, {0x0, 0x8000, 0x819, 0x8, 0x81, 0xb8}, {0x5, 0x2, 0x7, 0x0, 0x2, 0x687d7ec1}, {0x8, 0x80, 0xfffffff7, 0x8001, 0x4, 0x6}], [{0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x5}, {}, {0x3}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {}, {0x4, 0x1}, {}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x7, 0x1}, {}, {0x2}, {0x3}, {0x1}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x5}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x6}, {}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x7e76235531e31529}, {0x2}, {0x3, 0x1}, {0xa}, {0x4}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x6}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x40}]}}]}, 0x44}}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0xffffffffffffffff, 0x0)
unshare(0x40580)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, 0x0, 0x810)
r5 = socket$nl_route(0x10, 0x3, 0x0)
close(0x3)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r6, 0x29, 0x17, 0x0, 0x0)
setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4)
sendto$inet6(r6, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c)
sendmsg$nl_route(r5, 0x0, 0x800)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32], 0x50}, 0x1, 0xba01}, 0x0)
socket(0x10, 0x3, 0x0)
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r7, 0x40103d0b, &(0x7f0000000000)={0x25, 0x9})

16.812774712s ago: executing program 1 (id=9062):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
close(0x3)
r0 = socket$pptp(0x18, 0x1, 0x2)
ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)=0x7)

16.812447381s ago: executing program 1 (id=9063):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0xc0403d11, &(0x7f00000020c0)={0x25, 0x4})
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
close(0x3)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000001c0)='batadv_slave_0\x00')
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000))

16.800217677s ago: executing program 0 (id=9064):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x8, 0x4)
sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="1a07", 0x2}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0xfffffffffffffd24, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_tos_u8], 0x20}, 0x200040c4)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1387cfc131545caa84df385d40c00da6cba15357bc40e316faabb2a1f5b0fa9be064927343a8de54222e4f0933360aa2b1e0c9261961e22560ca7c888ed7f4285efae662b14217cb5f64f2e783"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x14000485)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206030000000000000000000000000705000100070000000900020073797a31000000001400077c050015004100000008001240000000000500050002000000050004000100000011000300686173683a69702c706f727400000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0)=0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x3, 0x6a1, 0x9, 0x2a610, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0xa}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x2}, [@exit, @ldst={0x3, 0x0, 0x4, 0x4, 0xb, 0x80, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @generic={0x7, 0x3, 0xe, 0x401}]}, &(0x7f0000000480)='GPL\x00', 0xffff, 0xbf, &(0x7f00000004c0)=""/191, 0x41100, 0x8, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0xf, 0xfffffeff, 0x61ce4c9d}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000740)=[r5], &(0x7f0000000780)=[{0x3, 0x2, 0x8, 0xc}, {0x5, 0x5, 0xb, 0xb}], 0x10, 0x3}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000001c0), 0x12)
r8 = openat$cgroup_freezer_state(r6, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r8, &(0x7f00000000c0)='THAWED\x00', 0x7)
r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0)
ioctl$PTP_PEROUT_REQUEST(r9, 0x40383d03, 0xfffffffffffffffe)

15.864067242s ago: executing program 0 (id=9065):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = socket$inet_sctp(0x2, 0x4, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0]}, &(0x7f0000000200)=0x1c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={r2, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0x8, 0x10001, 0x1}, &(0x7f00000003c0)=0x98)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000140)=0x8, &(0x7f0000000180)=0x2)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r5=>0x0})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, 0x0, &(0x7f00000004c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x68, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0xb48, 0x3, 0x1, 0x200, 0x9, 0x9}}, {0x16, 0x2, [0x1, 0x9, 0x9, 0x1, 0x4, 0x4, 0x7, 0x5, 0x7]}}, {{0x1c, 0x1, {0x1, 0x6, 0x7fff, 0xffffffff, 0x2, 0x78, 0x8, 0x8}}, {0xfffffffffffffea5, 0x2, [0x9, 0x7, 0x200, 0x6, 0x5, 0x6, 0x5fcd, 0x0]}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)
socket$alg(0x26, 0x5, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000100)=ANY=[@ANYRESDEC=r4], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r3)

15.773112952s ago: executing program 0 (id=9066):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYBLOB], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x87c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000)
socket$inet_udp(0x2, 0x2, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async, rerun: 32)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x9, 0x2012, 0xffffffffffffffff, 0x0) (async)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000002bc0)={@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0x9, 0xff, "ec76a331a87fbc970991a8ff120deb85f45a4f7acdc8b424f5d251b1556285ebc47ff540daa3544de7a40e63ca3e40303cc0e93ed9531ecfa0388f60bff7cb", 0x37}, {0x0}, 0x0, 0x18}, 0xa0) (async)
setsockopt$ax25_int(r0, 0x101, 0x7, 0x0, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x1, 0x0, 0x0) (async, rerun: 64)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (rerun: 64)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000001c0)={'ip6erspan0\x00', 0x7}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, 0x0, 0x4}, 0x94) (async)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, 0x0, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (rerun: 64)
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg(r4, 0x0, 0x0) (async, rerun: 64)
close(r4) (rerun: 64)

15.772185975s ago: executing program 0 (id=9067):
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x35b0c000)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c815}, 0x404c094)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x78}}, 0x4000)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000071187b000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x9)
bind$netlink(r12, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc)
close(0x3)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r10}, &(0x7f0000000080), &(0x7f0000000240)=r13}, 0x20)
socket$inet6_sctp(0xa, 0x5, 0x84)

15.712155568s ago: executing program 0 (id=9068):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x18, 0x5, 0x400, 0x9, 0x1}, 0x48)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1)
unshare(0x400)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88)
sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x1, 0xfffffffc, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xc82, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r7)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000002000c116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x100, 0x2, 0xec})

5.687036092s ago: executing program 32 (id=8999):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20040800}, 0x400c080)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='ip6_vti0\x00', 0x10)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x3393c85ca89fc87a}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000814)
r4 = socket$netlink(0x10, 0x3, 0x8)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x96}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x74458ff133c59442)
syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r0)
sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xc0, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xc0}, 0x1, 0x0, 0x0, 0x90}, 0x0)
getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000700), &(0x7f0000000740)=0x8)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000780)={'veth1_vlan\x00', 0x100})
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8c}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4567fe78}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}}, 0x4008010)
listen(r4, 0x1)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000008c0)={0x2, {{0x2, 0x4e23, @private=0xa010102}}}, 0x88)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r1)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r7, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4881}, 0x20000010)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r5, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5b0}]}, 0x24}}, 0x40)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c40)={0xf, {{0x2, 0x4e22, @multicast2}}, 0x1, 0x5, [{{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e22, @multicast1}}]}, 0x310)
r9 = openat$cgroup_ro(r0, &(0x7f0000000f80)='memory.swap.current\x00', 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000001040)={r3, r9, 0x8, 0x4b, &(0x7f0000000fc0)="8dce810f5255cd52dde0c6a603b68b95749ac7ff9fa0c5f5aa8bbcba750d411d5f43a53debd441406fc9ed82fe3e37033ce7c181d2ce32c2cd3974b277f859505b8d1034b4003f5132f72b", 0x7, 0x4, 0x0, 0x9b, 0x7, 0x2, 0x7fff, 'syz0\x00'})
ioctl$PTP_EXTTS_REQUEST2(r9, 0x40103d0b, &(0x7f0000001100)={0x5, 0x4})
openat$nci(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001180)={r1}, 0x8)
setsockopt$WPAN_WANTACK(r10, 0x0, 0x0, &(0x7f00000011c0), 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001200)=[@in={0x2, 0x4e22, @private=0xa010101}], 0x10)

1.014857817s ago: executing program 33 (id=9063):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0xc0403d11, &(0x7f00000020c0)={0x25, 0x4})
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
close(0x3)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000001c0)='batadv_slave_0\x00')
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000))

0s ago: executing program 34 (id=9068):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x18, 0x5, 0x400, 0x9, 0x1}, 0x48)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1)
unshare(0x400)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88)
sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x1, 0xfffffffc, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xc82, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r7)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000002000c116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x100, 0x2, 0xec})

kernel console output (not intermixed with test programs):

etlink: 65039 bytes leftover after parsing attributes in process `syz.0.4716'.
[  366.701814][T20695] syzkaller1: entered promiscuous mode
[  366.703775][T20695] syzkaller1: entered allmulticast mode
[  366.748454][T20700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4726'.
[  367.095642][T20717] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.102848][T20717] gre0: entered promiscuous mode
[  367.105242][T20717] gre0: entered allmulticast mode
[  367.116170][T20717] syzkaller0: entered promiscuous mode
[  367.118772][T20717] syzkaller0: entered allmulticast mode
[  367.125101][T20716] tipc: Resetting bearer <eth:syzkaller0>
[  367.142839][T20716] tipc: Disabling bearer <eth:syzkaller0>
[  367.305294][T20721] netlink: 296 bytes leftover after parsing attributes in process `syz.2.4732'.
[  368.140806][T20719] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.143434][T20719] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.146107][T20719] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  368.154425][T20719] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.157720][T20719] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.161140][T20719] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  368.164521][T20719] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.174668][T20719] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.177828][T20719] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  368.184847][T20719] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.188069][T20719] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.191406][T20719] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  368.255978][T20736] x_tables: duplicate underflow at hook 1
[  368.316508][T20741] syzkaller0: entered promiscuous mode
[  368.318237][T20741] syzkaller0: entered allmulticast mode
[  368.324747][T20740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  368.341050][T20740] tipc: Resetting bearer <eth:syzkaller0>
[  368.355232][T20747] sctp: [Deprecated]: syz.0.4741 (pid 20747) Use of int in maxseg socket option.
[  368.355232][T20747] Use struct sctp_assoc_value instead
[  368.360557][T20740] tipc: Disabling bearer <eth:syzkaller0>
[  368.361702][T20747] netlink: 'syz.0.4741': attribute type 1 has an invalid length.
[  368.399469][T20747] bond21: (slave vxcan5): The slave device specified does not support setting the MAC address
[  368.415564][T20747] bond21: (slave vxcan5): Setting fail_over_mac to active for active-backup mode
[  368.422528][T20747] bond21: (slave vxcan5): making interface the new active one
[  368.430947][T20747] bond21: (slave vxcan5): Enslaving as an active interface with an up link
[  368.435094][T20747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4741'.
[  368.441694][T20747] bond21 (unregistering): (slave vxcan5): Releasing backup interface
[  368.448648][T20747] bond21 (unregistering): Released all slaves
[  368.522718][T20757] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4745'.
[  368.533437][T20757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4745'.
[  368.538303][T20757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4745'.
[  368.549116][T20761] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4745'.
[  389.460698][T20767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.610387][T20787] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  389.967418][T20824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4765'.
[  390.643692][T20836] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  391.582083][T20895] IPVS: set_ctl: invalid protocol: 29 172.20.20.13:20003
[  391.619534][T20898] nbd: couldn't find a device at index 0
[  391.647729][T20900] sctp: [Deprecated]: syz.0.4792 (pid 20900) Use of int in max_burst socket option.
[  391.647729][T20900] Use struct sctp_assoc_value instead
[  391.683278][T20902] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4793'.
[  391.758511][T20910] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4796'.
[  391.759339][T20911] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4795'.
[  391.765197][T20911] netlink: 170 bytes leftover after parsing attributes in process `syz.1.4795'.
[  391.834873][T20918] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4798'.
[  391.862801][T20920] netlink: 'syz.2.4799': attribute type 1 has an invalid length.
[  391.867407][T20916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  392.516029][T20979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4817'.
[  392.573177][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4820'.
[  392.765179][T21002] netlink: 'syz.0.4826': attribute type 83 has an invalid length.
[  392.826662][T21004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4827'.
[  392.829504][T21004] netlink: 'syz.0.4827': attribute type 7 has an invalid length.
[  392.832421][T21004] netlink: 'syz.0.4827': attribute type 8 has an invalid length.
[  392.835067][T21004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4827'.
[  392.844330][T21004] syz_tun: entered promiscuous mode
[  392.846804][T21004] syz_tun: left promiscuous mode
[  393.207978][T21055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  393.911308][   T26] wlan0: Trigger new scan to find an IBSS to join
[  393.913553][ T9601] wlan1: Trigger new scan to find an IBSS to join
[  394.648111][T21140] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  394.729519][T21146] syzkaller1: entered promiscuous mode
[  394.735783][T21146] syzkaller1: entered allmulticast mode
[  397.906349][T21168] Timeout policy `syz0' can only be used by L3 protocol number 34984
[  397.961524][T21174] __nla_validate_parse: 11 callbacks suppressed
[  397.961538][T21174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4882'.
[  397.969748][T21174] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR
[  397.970834][T21174] block (null): Could not allocate knbd recv work queue.
[  398.010878][T21174] nbd: failed to add new device
[  398.012745][T21173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4882'.
[  398.018408][T21173] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR
[  398.018494][T21173] block (null): Could not allocate knbd recv work queue.
[  398.062683][T21173] nbd: failed to add new device
[  398.069526][T21187] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20003
[  398.173244][T21190] wg1 speed is unknown, defaulting to 1000
[  398.181992][T21196] wg1 speed is unknown, defaulting to 1000
[  398.190680][T21190] lo speed is unknown, defaulting to 1000
[  398.201459][T21196] lo speed is unknown, defaulting to 1000
[  398.354780][T21211] netlink: 584 bytes leftover after parsing attributes in process `syz.0.4890'.
[  398.441016][T21215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4895'.
[  398.521422][T21215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4895'.
[  398.603969][T21218] openvswitch: netlink: IP tunnel TTL not specified.
[  398.644776][T21223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4897'.
[  398.847414][T21237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4902'.
[  398.910053][T21242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  399.459066][T21264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4913'.
[  399.463758][T21263] netlink: 'syz.0.4912': attribute type 83 has an invalid length.
[  399.491800][T21266] openvswitch: netlink: IP tunnel TTL not specified.
[  399.507838][T21268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  399.513485][T21268] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  399.516550][T21268] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  399.520915][T21268] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  399.534307][T21268] tipc: Resetting bearer <eth:syzkaller0>
[  399.635021][T21283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  399.900627][ T7419] wlan0: Trigger new scan to find an IBSS to join
[  399.900707][   T26] wlan1: Trigger new scan to find an IBSS to join
[  400.421687][T21299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4927'.
[  400.427852][T21299] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR
[  400.451444][T21304] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  400.542348][T21307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4926'.
[  400.791577][T21310] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  400.847052][ T2192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.019515][T21339] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode
[  401.031310][T21339] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  401.064625][T21344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  401.074356][T21346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  401.109412][T21347] wg1 speed is unknown, defaulting to 1000
[  401.114330][T21347] lo speed is unknown, defaulting to 1000
[  401.701529][T21378] netlink: 'syz.0.4949': attribute type 2 has an invalid length.
[  401.863467][T21388] netlink: 'syz.1.4954': attribute type 3 has an invalid length.
[  401.866087][T21388] netlink: 'syz.1.4954': attribute type 1 has an invalid length.
[  401.968721][T21404] sctp: [Deprecated]: syz.2.4961 (pid 21404) Use of int in max_burst socket option.
[  401.968721][T21404] Use struct sctp_assoc_value instead
[  402.131321][T21427] xt_l2tp: missing protocol rule (udp|l2tpip)
[  402.285455][T21445] netlink: 'syz.2.4976': attribute type 1 has an invalid length.
[  402.287993][T21445] netlink: 'syz.2.4976': attribute type 3 has an invalid length.
[  402.296610][T21444] netlink: 'syz.1.4977': attribute type 12 has an invalid length.
[  402.787547][T21499] netlink: 'syz.1.4996': attribute type 4 has an invalid length.
[  402.789833][T21499] netlink: 'syz.1.4996': attribute type 1 has an invalid length.
[  403.436765][T21560] __nla_validate_parse: 16 callbacks suppressed
[  403.436774][T21560] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5008'.
[  403.670247][T21574] netem: change failed
[  403.787496][T21582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  404.019283][T21602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5024'.
[  404.096277][T21612] syzkaller0: entered promiscuous mode
[  404.099729][T21612] syzkaller0: entered allmulticast mode
[  404.214373][T21627] lo: MTU too low for tipc bearer
[  404.216158][T21627] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  404.252956][T21635] netlink: 'syz.0.5036': attribute type 29 has an invalid length.
[  404.272944][T21635] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5036'.
[  404.353231][T21649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5039'.
[  404.445705][T21660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  404.608530][T21676] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5050'.
[  404.683298][T21675] wg1 speed is unknown, defaulting to 1000
[  404.685697][T21675] lo speed is unknown, defaulting to 1000
[  405.212484][T21706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  405.252362][T21708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  405.760427][T21735] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5069'.
[  405.837265][T21742] netpci0: tun_chr_ioctl cmd 1074025678
[  405.839093][T21742] netpci0: group set to 0
[  406.388326][T21789] af_packet: tpacket_rcv: packet too big, clamped from 64862 to 3944. macoff=96
[  406.396316][T21789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5089'.
[  406.466697][T21794] syzkaller0: entered promiscuous mode
[  406.468892][T21794] syzkaller0: entered allmulticast mode
[  406.480077][T21794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5091'.
[  406.573456][T21804] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5095'.
[  406.686068][T21814] netlink: 312 bytes leftover after parsing attributes in process `syz.2.5099'.
[  406.773218][T21817] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  406.823227][T21828] validate_nla: 1 callbacks suppressed
[  406.823237][T21828] netlink: 'syz.0.5104': attribute type 21 has an invalid length.
[  406.825125][T21827] netlink: 'syz.0.5104': attribute type 21 has an invalid length.
[  406.825941][T21827] netlink: 'syz.0.5104': attribute type 1 has an invalid length.
[  406.837391][T21828] netlink: 'syz.0.5104': attribute type 1 has an invalid length.
[  406.861301][ T7401] wlan0: Trigger new scan to find an IBSS to join
[  407.063484][T21855] x_tables: ip_tables: icmp match: only valid for protocol 1
[  407.341900][T21886] netlink: 'syz.1.5123': attribute type 10 has an invalid length.
[  407.344457][T21886] hsr0: entered promiscuous mode
[  407.346155][T21886] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  407.349793][T21886] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  407.354285][T21886] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  407.464975][T21899] xt_hashlimit: overflow, try lower: 0/0
[  407.562759][T21910] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  407.810869][T21937] nbd: must specify a size in bytes for the device
[  407.859687][T21942] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  408.031894][T21954] netlink: 'syz.2.5145': attribute type 6 has an invalid length.
[  408.098259][T21960] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  408.186069][T21971] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  408.212694][T21980] ipt_REJECT: ECHOREPLY no longer supported.
[  408.556151][T22027] __nla_validate_parse: 13 callbacks suppressed
[  408.556160][T22027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5169'.
[  408.894685][T22065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5186'.
[  409.022605][T22075] wg1 speed is unknown, defaulting to 1000
[  409.025362][T22075] lo speed is unknown, defaulting to 1000
[  409.316572][T22106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5200'.
[  409.388892][T22111] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  409.494976][T22121] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5205'.
[  409.498692][T22121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5205'.
[  409.509457][T22123] netlink: 'syz.1.5206': attribute type 7 has an invalid length.
[  409.687027][T22144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5213'.
[  409.716769][T22144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5213'.
[  409.719421][T22144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5213'.
[  409.730402][T22144] netlink: 'syz.2.5213': attribute type 11 has an invalid length.
[  409.733419][T22144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5213'.
[  409.736104][T22144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5213'.
[  409.738792][T22144] netlink: 'syz.2.5213': attribute type 11 has an invalid length.
[  410.477320][T22214] netlink: 'syz.0.5237': attribute type 1 has an invalid length.
[  410.511991][T22214] 8021q: adding VLAN 0 to HW filter on device bond21
[  410.536007][T22214] 8021q: adding VLAN 0 to HW filter on device bond21
[  410.538622][T22214] bond21: (slave vxcan7): The slave device specified does not support setting the MAC address
[  410.542292][T22214] bond21: (slave vxcan7): Error -95 calling set_mac_address
[  410.575524][T22216] bond21: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  410.902518][T22259] wg1 speed is unknown, defaulting to 1000
[  410.905437][T22259] lo speed is unknown, defaulting to 1000
[  410.919326][T22253] dummy0: left allmulticast mode
[  410.926779][T22253] bridge0: port 1(dummy0) entered disabled state
[  410.930024][T22253] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  411.087378][T22272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  411.431563][T22286] macvlan0: entered allmulticast mode
[  411.457500][T22286] can_create: 23 callbacks suppressed
[  411.457510][T22286] can: request_module (can-proto-5) failed.
[  411.836876][T22316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  412.045659][T22342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  412.048740][T22344] validate_nla: 2 callbacks suppressed
[  412.048749][T22344] netlink: 'syz.0.5278': attribute type 21 has an invalid length.
[  412.055025][T22344] netlink: 'syz.0.5278': attribute type 4 has an invalid length.
[  412.057861][T22344] netlink: 'syz.0.5278': attribute type 5 has an invalid length.
[  412.597931][T22378] wg1 speed is unknown, defaulting to 1000
[  412.600450][T22378] lo speed is unknown, defaulting to 1000
[  413.359946][T22389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  413.389711][T22391] netlink: 'syz.0.5297': attribute type 1 has an invalid length.
[  413.688416][T22408] __nla_validate_parse: 35 callbacks suppressed
[  413.688431][T22408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5303'.
[  413.877381][T22420] syzkaller1: entered promiscuous mode
[  413.879588][T22420] syzkaller1: entered allmulticast mode
[  413.914210][T22422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5309'.
[  413.949537][T22424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5310'.
[  413.953478][T22424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5310'.
[  413.957999][T22424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5310'.
[  413.963599][T22424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5310'.
[  413.967201][T22424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5310'.
[  413.970815][T22424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5310'.
[  414.016225][T22430] IPVS: ip_vs_add_dest(): server weight less than zero
[  414.099600][T22434] sctp: [Deprecated]: syz.1.5313 (pid 22434) Use of int in maxseg socket option.
[  414.099600][T22434] Use struct sctp_assoc_value instead
[  414.244206][T22443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5317'.
[  414.247892][T22443] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5317'.
[  414.663378][T22493] netlink: 'syz.1.5333': attribute type 1 has an invalid length.
[  414.718770][T22497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  414.991196][T22506] can: request_module (can-proto-3) failed.
[  415.504385][T22528] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  415.620279][T22526] team0: No ports can be present during mode change
[  415.704699][T22532] bridge9: entered allmulticast mode
[  415.709061][T22537] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  415.735163][T22542] bridge8: entered promiscuous mode
[  415.737257][T22542] bridge8: entered allmulticast mode
[  415.766399][T22546] netlink: 'syz.0.5350': attribute type 1 has an invalid length.
[  415.862890][T22558] netlink: 'syz.1.5354': attribute type 3 has an invalid length.
[  415.900703][ T9603] wlan1: Trigger new scan to find an IBSS to join
[  415.932997][T22558] wg1 speed is unknown, defaulting to 1000
[  415.937384][T22558] lo speed is unknown, defaulting to 1000
[  416.192998][T22592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  416.811735][ T7417] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  416.954240][T22628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  417.320905][T22678] netlink: 'syz.0.5394': attribute type 2 has an invalid length.
[  417.327660][T22678] : entered promiscuous mode
[  417.662204][T22726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  417.747687][T22734] xt_hashlimit: max too large, truncated to 1048576
[  417.828660][T22744] ipt_ECN: cannot use operation on non-tcp rule
[  417.954970][T22758] netlink: 'syz.0.5423': attribute type 4 has an invalid length.
[  417.958140][T22758] netlink: 'syz.0.5423': attribute type 4 has an invalid length.
[  417.968997][    T9] lo speed is unknown, defaulting to 1000
[  417.974058][    T9] syz2: Port: 1 Link ACTIVE
[  418.616341][T22812] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  418.729385][T22821] __nla_validate_parse: 25 callbacks suppressed
[  418.729396][T22821] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5445'.
[  418.765647][T22827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5446'.
[  418.894663][T22837] netlink: 'syz.0.5449': attribute type 9 has an invalid length.
[  418.916289][T22839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5450'.
[  419.035162][T22853] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  419.137282][T22868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5461'.
[  419.177034][T22870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5462'.
[  419.322379][T22884] netlink: 'syz.2.5467': attribute type 7 has an invalid length.
[  419.324865][T22884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5467'.
[  419.383145][T22890] netlink: 'syz.2.5469': attribute type 2 has an invalid length.
[  419.393928][T22890] netlink: 'syz.2.5469': attribute type 1 has an invalid length.
[  419.502944][T22898] netlink: 'syz.0.5471': attribute type 1 has an invalid length.
[  419.947820][T22923] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  419.955028][T22923] netlink: 'syz.0.5482': attribute type 1 has an invalid length.
[  420.136458][T22934] smc: net device bond0 applied user defined pnetid SYZ0
[  420.139025][T22934] smc: net device bond0 erased user defined pnetid SYZ0
[  420.176904][T22937] netlink: 'syz.0.5488': attribute type 8 has an invalid length.
[  420.318439][T22948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5492'.
[  420.333937][T22950] wg1 speed is unknown, defaulting to 1000
[  420.337519][T22950] lo speed is unknown, defaulting to 1000
[  421.000709][T23007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5506'.
[  421.042613][T23007] bond0 (unregistering): Released all slaves
[  421.470041][T23035] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5514'.
[  421.849609][T23058] nftables ruleset with unbound set
[  422.223074][T23089] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  422.225686][T23089] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  422.232089][T23091] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5532'.
[  422.333085][T23103] x_tables: duplicate underflow at hook 2
[  423.063808][T23152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  423.074735][T23152] x_tables: duplicate underflow at hook 1
[  423.216004][T23158] validate_nla: 1 callbacks suppressed
[  423.216014][T23158] netlink: 'syz.2.5555': attribute type 1 has an invalid length.
[  423.568699][T23168] pimreg: tun_chr_ioctl cmd 2147767506
[  423.723874][T23178] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  423.726308][T23178] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  424.095308][T23194] xt_l2tp: v2 doesn't support IP mode
[  424.364511][T23222] netlink: 'syz.1.5577': attribute type 4 has an invalid length.
[  424.488085][T23233] __nla_validate_parse: 7 callbacks suppressed
[  424.488100][T23233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5581'.
[  424.812645][T23266] netlink: 'syz.0.5588': attribute type 4 has an invalid length.
[  424.982022][T23287] netlink: 'syz.2.5596': attribute type 8 has an invalid length.
[  425.061502][T23301] xt_limit: Overflow, try lower: 271964/0
[  425.066410][T23301] netlink: 25 bytes leftover after parsing attributes in process `syz.2.5601'.
[  425.086630][T23301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5601'.
[  425.091436][T23307] netlink: 'syz.1.5602': attribute type 1 has an invalid length.
[  425.306149][T23322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5608'.
[  425.310273][T23322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5608'.
[  425.347966][T23325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5609'.
[  425.382694][T23329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5610'.
[  425.637173][T23338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5613'.
[  425.696103][T23343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5614'.
[  425.699024][T23343] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5614'.
[  425.739653][T23345] xt_time: unknown flags 0xf4
[  426.388127][T23390] bridge0: port 1(macvtap0) entered blocking state
[  426.392041][T23390] bridge0: port 1(macvtap0) entered disabled state
[  426.394273][T23390] macvtap0: entered allmulticast mode
[  426.396058][T23390] bridge0: entered allmulticast mode
[  426.398658][T23390] macvtap0: left allmulticast mode
[  426.400818][T23390] bridge0: left allmulticast mode
[  426.544758][T23414] openvswitch: netlink: Missing key (keys=40, expected=80)
[  426.547547][T23414] netlink: 'syz.2.5637': attribute type 21 has an invalid length.
[  426.550274][T23414] netlink: 'syz.2.5637': attribute type 22 has an invalid length.
[  426.553119][T23414] netlink: 'syz.2.5637': attribute type 23 has an invalid length.
[  426.644837][T23424] xt_l2tp: invalid flags combination: 8
[  426.861116][T23444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  426.886964][T23448] syzkaller0: left promiscuous mode
[  426.889108][T23448] syzkaller0: left allmulticast mode
[  426.933375][T23452] syzkaller0: entered promiscuous mode
[  426.935166][T23452] syzkaller0: entered allmulticast mode
[  427.275883][T23486] netlink: 'syz.2.5661': attribute type 3 has an invalid length.
[  427.312093][T23488] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20001
[  427.573373][T23512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  428.405398][T23538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  428.410367][T23538] x_tables: duplicate underflow at hook 1
[  429.127623][T23551] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  429.147567][T23551] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  429.170410][T23551] netlink: 'syz.0.5682': attribute type 10 has an invalid length.
[  429.173144][T23551] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  429.180995][T23551] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  429.183909][T23551] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  429.278177][T23569] netlink: 'syz.2.5688': attribute type 1 has an invalid length.
[  429.314660][T23569] 8021q: adding VLAN 0 to HW filter on device bond0
[  429.598160][T23615] __nla_validate_parse: 16 callbacks suppressed
[  429.598175][T23615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5701'.
[  429.607629][T23609] bond7: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  429.611873][T23609] bond7: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  429.676538][T23619] syzkaller1: entered promiscuous mode
[  429.679110][T23619] syzkaller1: entered allmulticast mode
[  429.759227][T23624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5705'.
[  429.794387][T23628] batadv_slave_1: entered promiscuous mode
[  429.842398][T23633] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5709'.
[  429.862275][T23627] batadv_slave_1: left promiscuous mode
[  429.992689][T23648] netlink: 'syz.0.5715': attribute type 3 has an invalid length.
[  429.992819][T23649] netlink: 'syz.0.5715': attribute type 3 has an invalid length.
[  430.039939][T23657] sctp: [Deprecated]: syz.1.5716 (pid 23657) Use of int in maxseg socket option.
[  430.039939][T23657] Use struct sctp_assoc_value instead
[  430.098207][T23660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  430.103901][T23662] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5719'.
[  430.326936][T23698] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5730'.
[  430.529226][T23715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5734'.
[  430.768485][T23744] bond22: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  430.773621][T23744] bond22 (unregistering): Released all slaves
[  430.925233][T23752] hsr0: left promiscuous mode
[  430.942443][T23752] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  430.955191][T23761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5748'.
[  430.969485][T23752] tipc: Resetting bearer <eth:syzkaller0>
[  430.973908][T23752] syzkaller0: left promiscuous mode
[  430.976914][T23752] gtp0: left promiscuous mode
[  430.979985][T23752] bond6: left promiscuous mode
[  430.981856][T23752] veth11: left promiscuous mode
[  430.983544][T23752] bond7: left promiscuous mode
[  430.985190][T23752] gre2: left promiscuous mode
[  430.994913][T23752] macvtap0: left promiscuous mode
[  430.998522][T23752] vlan0: left promiscuous mode
[  431.000301][T23752] bridge0: left promiscuous mode
[  431.002550][T23752] team1: left promiscuous mode
[  431.004353][T23752] team2: left promiscuous mode
[  431.005917][T23752] veth1: left promiscuous mode
[  431.018904][T23752] bridge8: left promiscuous mode
[  431.060396][T23765] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  431.064269][T23765] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  431.253004][T23780] netlink: 'syz.2.5754': attribute type 2 has an invalid length.
[  431.255506][T23780] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5754'.
[  431.306577][T23782] wg1 speed is unknown, defaulting to 1000
[  431.309954][T23782] lo speed is unknown, defaulting to 1000
[  431.682246][T23818] netlink: 'syz.2.5762': attribute type 32 has an invalid length.
[  431.713476][T23820] netlink: 'syz.0.5764': attribute type 1 has an invalid length.
[  431.715832][T23820] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5764'.
[  431.748608][T23822] IPv6: NLM_F_CREATE should be specified when creating new route
[  431.813019][T23826] netlink: 'syz.0.5766': attribute type 11 has an invalid length.
[  431.815543][T23826] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5766'.
[  432.074267][T23836] dummy0: left promiscuous mode
[  432.076879][T23836] geneve3: left promiscuous mode
[  432.079936][T23836] bond11: left promiscuous mode
[  432.085675][T23836] bond12: left promiscuous mode
[  432.087935][T23836] gre1: left promiscuous mode
[  432.089571][T23836] veth15: left promiscuous mode
[  432.091805][T23836] geneve4: left promiscuous mode
[  432.093416][T23836] bond16: left promiscuous mode
[  432.094885][T23836] bond17: left promiscuous mode
[  432.096630][T23836] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  432.098878][T23836] mac80211_hwsim hwsim17 wlan0: left promiscuous mode
[  432.128140][T23843] netlink: 'syz.0.5771': attribute type 15 has an invalid length.
[  432.244709][T23854] bond22: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  432.841010][T23941] syzkaller0: entered promiscuous mode
[  432.898865][T23940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  433.237764][T23999] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  433.547900][T24039] nbd: couldn't find a device at index 0
[  433.578890][T24043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  433.758447][T24052] netlink: 'syz.1.5831': attribute type 2 has an invalid length.
[  433.761205][T24052] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  434.158340][T24080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.163148][T24080] netlink: 'syz.1.5839': attribute type 10 has an invalid length.
[  434.169541][T24080] team0: Port device dummy0 added
[  434.530378][T24111] mac80211_hwsim hwsim3 ;: renamed from wlan0
[  434.649560][T24118] __nla_validate_parse: 14 callbacks suppressed
[  434.649569][T24118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5851'.
[  434.814888][T24124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5855'.
[  434.817752][T24124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5855'.
[  434.820579][T24124] netlink: 'syz.1.5855': attribute type 11 has an invalid length.
[  434.822979][T24124] netlink: 'syz.1.5855': attribute type 6 has an invalid length.
[  434.996407][T24141] vet0_virt_wif: renamed from lo (while UP)
[  435.003938][T20731] vet0_virt_wif speed is unknown, defaulting to 1000
[  435.013694][T20731] syz2: Port: 1 Link DOWN
[  435.037385][T24143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  435.668664][T24183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5874'.
[  435.791515][T24186] SET target dimension over the limit!
[  437.455948][T24211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5882'.
[  437.726044][T24239] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5894'.
[  437.728898][T24239] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5894'.
[  437.868822][T24249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5897'.
[  438.035892][T24263] netlink: 'syz.0.5903': attribute type 11 has an invalid length.
[  459.512126][T24291] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .	΁*]
[  459.766781][T24328] netlink: 'syz.0.5923': attribute type 11 has an invalid length.
[  459.769925][T24328] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.5923'.
[  459.791851][T24328] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[  459.798838][T24328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5923'.
[  459.970406][T24349] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5930'.
[  459.974176][T24349] openvswitch: netlink: Flow key attr not present in new flow.
[  459.979916][T24349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5930'.
[  459.989189][T24351] netlink: 'syz.0.5932': attribute type 2 has an invalid length.
[  460.045029][T24357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  460.056712][T24357] x_tables: duplicate underflow at hook 1
[  460.477503][T24385] dvmrp1: tun_chr_ioctl cmd 1074812118
[  460.962201][T24412] netlink: 'syz.1.5951': attribute type 6 has an invalid length.
[  461.134442][T24415] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5952'.
[  461.178065][T24417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5953'.
[  461.229422][T24422] syzkaller1: entered promiscuous mode
[  461.232223][T24422] syzkaller1: entered allmulticast mode
[  461.503293][T24437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5958'.
[  461.509729][T24437] openvswitch: netlink: nsh attribute has 996 unknown bytes.
[  461.516878][T24437] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  461.590128][T24452] netlink: 'syz.0.5961': attribute type 15 has an invalid length.
[  461.657409][T24463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  462.225512][T24468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5966'.
[  462.229204][T24468] netlink: 'syz.0.5966': attribute type 2 has an invalid length.
[  462.234207][T24468] netlink: 'syz.0.5966': attribute type 2 has an invalid length.
[  462.353472][T24471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5967'.
[  462.559968][T24486] netlink: 'syz.1.5972': attribute type 30 has an invalid length.
[  462.676503][T24498] geneve0: entered promiscuous mode
[  462.678332][T24498] geneve0: entered allmulticast mode
[  462.682189][ T5860] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.684853][ T5860] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.687427][ T5860] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.696122][ T5860] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.847540][T24507] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5977'.
[  463.749494][T24533] netlink: 'syz.0.5986': attribute type 5 has an invalid length.
[  463.810373][T24540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  463.900933][ T4423] wlan1: Trigger new scan to find an IBSS to join
[  463.919034][T24548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  463.925460][T24548] x_tables: duplicate underflow at hook 1
[  464.440286][T24549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  464.468857][T24554] netlink: 'syz.0.5995': attribute type 1 has an invalid length.
[  464.540087][T24558] syzkaller1: entered promiscuous mode
[  464.542350][T24558] syzkaller1: entered allmulticast mode
[  464.724814][   T33] audit: type=1107 audit(1765963904.684:3): pid=24577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  464.990799][T24601] __nla_validate_parse: 3 callbacks suppressed
[  464.990809][T24601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6013'.
[  465.044284][T24599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6012'.
[  465.047246][T24599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6012'.
[  465.459483][T24655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6028'.
[  465.538724][T24664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6031'.
[  465.577553][T24666] bond13: Unable to set down delay as MII monitoring is disabled
[  465.581260][T24666] bond13 (unregistering): Released all slaves
[  465.817271][T24681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6035'.
[  465.846790][T24683] wg1 speed is unknown, defaulting to 1000
[  465.849411][T24683] vet0_virt_wif speed is unknown, defaulting to 1000
[  466.364234][T24740] sctp: [Deprecated]: syz.0.6046 (pid 24740) Use of int in maxseg socket option.
[  466.364234][T24740] Use struct sctp_assoc_value instead
[  466.370272][T24740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6046'.
[  466.462542][T24750] sctp: [Deprecated]: syz.0.6047 (pid 24750) Use of int in maxseg socket option.
[  466.462542][T24750] Use struct sctp_assoc_value instead
[  466.564000][T24766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6048'.
[  466.612222][T24772] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  466.713500][T24780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6051'.
[  466.716384][T24780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6051'.
[  466.824330][T24787] sctp: [Deprecated]: syz.1.6053 (pid 24787) Use of int in max_burst socket option.
[  466.824330][T24787] Use struct sctp_assoc_value instead
[  466.942271][ T9603] wlan1: Trigger new scan to find an IBSS to join
[  467.060691][T24804] vti0: entered promiscuous mode
[  467.850805][ T9603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.094656][T24841] "syz.2.6070" (24841) uses obsolete ecb(arc4) skcipher
[  468.201434][T24851] netlink: 'syz.1.6074': attribute type 2 has an invalid length.
[  468.600920][T24892] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING
[  468.967975][T24915] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  469.090153][T24929] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[  469.146764][T24932] netlink: 'syz.2.6105': attribute type 1 has an invalid length.
[  469.229750][T24948] netlink: 'syz.1.6111': attribute type 5 has an invalid length.
[  469.470067][T24977] netlink: 'syz.1.6122': attribute type 22 has an invalid length.
[  469.473251][T24977] netlink: 'syz.1.6122': attribute type 22 has an invalid length.
[  469.504695][T24983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  469.666558][T24986] netlink: 'syz.2.6125': attribute type 1 has an invalid length.
[  469.942441][T24997] wg1 speed is unknown, defaulting to 1000
[  469.945057][T24997] vet0_virt_wif speed is unknown, defaulting to 1000
[  470.233231][T25016] netlink: 'syz.1.6133': attribute type 7 has an invalid length.
[  470.246927][T25016] __nla_validate_parse: 82 callbacks suppressed
[  470.246938][T25016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6133'.
[  470.256738][T25010] wg1 speed is unknown, defaulting to 1000
[  470.272840][T25010] vet0_virt_wif speed is unknown, defaulting to 1000
[  470.382037][T25036] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6139'.
[  470.495450][T25045] netlink: 'syz.0.6139': attribute type 2 has an invalid length.
[  470.498133][T25044] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.625876][T25053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6144'.
[  471.257310][T25082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  471.816924][T25105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6160'.
[  471.826009][T25105] macsec0: entered promiscuous mode
[  471.827769][T25105] macsec0: entered allmulticast mode
[  472.275646][T25150] geneve4: entered promiscuous mode
[  472.277979][ T5860] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  472.287689][ T5860] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  472.290265][ T5860] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  472.300711][ T5860] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  472.350041][T25154] netlink: 'syz.2.6178': attribute type 1 has an invalid length.
[  472.353697][T25154] netlink: 'syz.2.6178': attribute type 2 has an invalid length.
[  472.356625][T25154] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  472.523586][T25176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6183'.
[  472.561601][T25178] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6186'.
[  472.564472][T25178] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6186'.
[  472.700128][T25192] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6190'.
[  473.170301][T25247] netlink: 71 bytes leftover after parsing attributes in process `syz.0.6208'.
[  473.174736][T25247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6208'.
[  473.659689][T25313] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  473.838457][T25337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  473.916214][T25339] wg1 speed is unknown, defaulting to 1000
[  473.918787][T25339] vet0_virt_wif speed is unknown, defaulting to 1000
[  474.418086][T25402] validate_nla: 1 callbacks suppressed
[  474.418096][T25402] netlink: 'syz.2.6261': attribute type 1 has an invalid length.
[  474.426839][T25398] xt_socket: unknown flags 0x50
[  474.578855][T25422] delete_channel: no stack
[  475.355100][T25447] __nla_validate_parse: 35 callbacks suppressed
[  475.355111][T25447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6275'.
[  475.495969][T25466] netlink: 'syz.1.6282': attribute type 1 has an invalid length.
[  475.582627][T25471] netlink: 'syz.0.6284': attribute type 142 has an invalid length.
[  475.611592][T25483] veth13: entered promiscuous mode
[  475.667086][T25490] netlink: 'syz.2.6289': attribute type 1 has an invalid length.
[  475.719837][T25490] 8021q: adding VLAN 0 to HW filter on device batadv3
[  475.724660][T25490] bond8: (slave batadv3): making interface the new active one
[  475.727390][T25490] bond8: (slave batadv3): Enslaving as an active interface with an up link
[  475.731319][T25490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6289'.
[  475.738572][T25490] 8021q: adding VLAN 0 to HW filter on device bond8
[  475.776824][T25501] netlink: 364 bytes leftover after parsing attributes in process `syz.2.6292'.
[  475.900647][ T7417] wlan1: Trigger new scan to find an IBSS to join
[  475.931498][T25517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6298'.
[  476.043866][T25542] netlink: 'syz.2.6305': attribute type 4 has an invalid length.
[  476.109864][T25553] ip6gre1: entered promiscuous mode
[  476.112437][T25553] ip6gre1: entered allmulticast mode
[  476.116583][T25555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6310'.
[  476.119588][T25554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6310'.
[  476.166072][T25563] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6313'.
[  476.344994][T25576] syz.0.6313 (25576) used obsolete PPPIOCDETACH ioctl
[  476.347213][T25578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6317'.
[  476.375901][T25570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6313'.
[  476.394100][T25581] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  476.517217][T25594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6322'.
[  476.592915][T25599] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  477.161877][T25643] Timeout policy `syz0' can only be used by L3 protocol number 35085
[  477.632130][T25711] IPv6: NLM_F_CREATE should be specified when creating new route
[  477.999958][T25749] bridge0: entered promiscuous mode
[  478.736976][T25815] netlink: 'syz.0.6386': attribute type 21 has an invalid length.
[  478.739465][T25815] netlink: 'syz.0.6386': attribute type 1 has an invalid length.
[  478.777117][T25820] block nbd1: Unsupported socket: should be TCP or UNIX.
[  478.863346][ T7417] wlan1: Trigger new scan to find an IBSS to join
[  479.048837][T25861] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  479.398860][T25898] netlink: 'syz.0.6416': attribute type 1 has an invalid length.
[  480.180615][    T9] tipc: Node number set to 1848355303
[  482.410978][ T4423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.595730][T25929] __nla_validate_parse: 16 callbacks suppressed
[  482.595747][T25929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6420'.
[  482.652266][T25921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  483.387145][T25948] netlink: 'syz.0.6429': attribute type 83 has an invalid length.
[  483.496156][T25965] wg1 speed is unknown, defaulting to 1000
[  483.498685][T25965] vet0_virt_wif speed is unknown, defaulting to 1000
[  483.650108][T25974] netlink: 'syz.1.6437': attribute type 21 has an invalid length.
[  483.653365][T25974] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6437'.
[  483.863658][T25997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  483.866592][T25996] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  484.797541][T26032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6457'.
[  484.800891][T26032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6457'.
[  484.870117][T26036] bond23: Removing last arp target with arp_interval on
[  484.966894][T26046] wg1 speed is unknown, defaulting to 1000
[  484.969824][T26046] vet0_virt_wif speed is unknown, defaulting to 1000
[  485.081294][T26046] netlink: 'syz.0.6462': attribute type 2 has an invalid length.
[  485.128674][T26056] wg1 speed is unknown, defaulting to 1000
[  485.133480][T26056] vet0_virt_wif speed is unknown, defaulting to 1000
[  485.137104][T26058] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6465'.
[  485.918444][T26148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6492'.
[  486.019004][T26148] tipc: Disabling bearer <eth:vlan0>
[  486.042444][T26151] sctp: [Deprecated]: syz.1.6493 (pid 26151) Use of int in max_burst socket option deprecated.
[  486.042444][T26151] Use struct sctp_assoc_value instead
[  486.104976][T26154] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6494'.
[  486.109374][T26154] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6494'.
[  486.114646][T26154] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6494'.
[  486.118459][T26154] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6494'.
[  487.160817][T26205] wg1 speed is unknown, defaulting to 1000
[  487.163415][T26205] vet0_virt_wif speed is unknown, defaulting to 1000
[  487.524226][T26234] wg1 speed is unknown, defaulting to 1000
[  487.526787][T26234] vet0_virt_wif speed is unknown, defaulting to 1000
[  487.819427][T26252] ip6gretap1: entered allmulticast mode
[  488.058680][T26264] __nla_validate_parse: 62 callbacks suppressed
[  488.058695][T26264] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6528'.
[  488.070823][T26264] team0: No ports can be present during mode change
[  488.485777][T26281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  489.136644][T26303] netlink: 'syz.2.6541': attribute type 5 has an invalid length.
[  489.152524][T26304] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6540'.
[  489.164324][T26304] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6540'.
[  489.214568][T26310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6543'.
[  489.234036][T26313] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  489.236947][T26313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  489.314431][T26325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6548'.
[  489.351259][T26329] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  489.351312][T26330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  489.381277][T26332] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6549'.
[  489.614370][T26346] veth0_to_team: entered promiscuous mode
[  489.618094][T26346] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6553'.
[  490.010642][T26364] nbd1: detected capacity change from 0 to 3
[  490.016250][T25942] Buffer I/O error on dev nbd1, logical block 1, async page read
[  490.062791][   T59] block nbd1: Receive control failed (result -104)
[  490.088564][T26381] sctp: [Deprecated]: syz.1.6563 (pid 26381) Use of int in maxseg socket option.
[  490.088564][T26381] Use struct sctp_assoc_value instead
[  490.095913][T26381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6563'.
[  490.098738][T26381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6563'.
[  490.364249][T26411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6576'.
[  490.927718][T26461] ip6_vti0: entered allmulticast mode
[  490.936843][T26460] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  491.613068][T26480] netlink: 'syz.0.6598': attribute type 13 has an invalid length.
[  491.617963][T26479] netlink: 'syz.0.6598': attribute type 13 has an invalid length.
[  491.797712][T26499] macsec1: entered allmulticast mode
[  492.011954][T26509] openvswitch: netlink: Key 22 has unexpected len 2 expected 4
[  492.569592][T26552] tipc: Resetting bearer <eth:syzkaller0>
[  492.618570][T26557] netlink: 'syz.0.6626': attribute type 21 has an invalid length.
[  492.621356][T26557] netlink: 'syz.0.6626': attribute type 4 has an invalid length.
[  492.624202][T26557] netlink: 'syz.0.6626': attribute type 5 has an invalid length.
[  492.755732][T26566] netlink: 'syz.0.6630': attribute type 6 has an invalid length.
[  493.165867][T26590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  493.174614][T26590] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  493.759806][T26600] IPVS: stopping backup sync thread 12461 ...
[  493.765053][T26602] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  494.373720][T26631] bridge0: port 1(veth0_to_bridge) entered blocking state
[  494.376223][T26631] bridge0: port 1(veth0_to_bridge) entered disabled state
[  494.378647][T26631] veth0_to_bridge: entered allmulticast mode
[  494.383295][T26631] veth0_to_bridge: entered promiscuous mode
[  494.580350][T26646] __nla_validate_parse: 9 callbacks suppressed
[  494.580363][T26646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6653'.
[  494.586554][T26646] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  494.824282][T26629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  494.862276][T26661] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  494.957365][T26672] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6661'.
[  494.962674][T26672] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6661'.
[  494.976535][T26676] wg1 speed is unknown, defaulting to 1000
[  494.979489][T26676] vet0_virt_wif speed is unknown, defaulting to 1000
[  495.383982][T26699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6669'.
[  495.749144][T26723] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6675'.
[  495.793663][T26728] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  495.796068][T26728] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  495.799211][T26728] tipc: Resetting bearer <eth:syzkaller0>
[  495.864887][T26730] netlink: 296 bytes leftover after parsing attributes in process `syz.2.6677'.
[  496.069732][T26739] sctp: [Deprecated]: syz.1.6681 (pid 26739) Use of struct sctp_assoc_value in delayed_ack socket option.
[  496.069732][T26739] Use struct sctp_sack_info instead
[  496.326319][T26749] openvswitch: netlink: IP tunnel dst address not specified
[  496.731614][T26783] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6696'.
[  496.794493][T26785] netlink: 'syz.2.6697': attribute type 5 has an invalid length.
[  496.832174][T26788] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 1, id = 0
[  496.898305][T26790] netlink: 'syz.2.6699': attribute type 1 has an invalid length.
[  497.005157][T26808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6704'.
[  497.008725][T26808] 8021q: VLANs not supported on ip6tnl0
[  497.195336][T26819] wg1 speed is unknown, defaulting to 1000
[  497.199018][T26819] vet0_virt_wif speed is unknown, defaulting to 1000
[  497.232303][T26825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6708'.
[  497.235579][T26824] batadv3: entered allmulticast mode
[  497.237717][T26824] 8021q: adding VLAN 0 to HW filter on device batadv3
[  497.273613][T26829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6711'.
[  497.671953][T26882] netlink: 'syz.2.6725': attribute type 2 has an invalid length.
[  497.675052][T26882] netlink: 'syz.2.6725': attribute type 1 has an invalid length.
[  497.760930][T26890] netlink: 'syz.1.6729': attribute type 7 has an invalid length.
[  497.902336][T26911] netlink: 'syz.2.6736': attribute type 1 has an invalid length.
[  497.909989][T26911] netlink: 'syz.2.6736': attribute type 2 has an invalid length.
[  498.772436][T26994] dvmrp0: entered allmulticast mode
[  499.186911][T27022] sctp: [Deprecated]: syz.0.6772 (pid 27022) Use of int in max_burst socket option.
[  499.186911][T27022] Use struct sctp_assoc_value instead
[  499.195549][T27022] .70: renamed from hsr0
[  499.198736][T27022] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  499.203655][T27022] .70: entered allmulticast mode
[  499.205305][T27022] hsr_slave_0: entered allmulticast mode
[  499.208678][T27022] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  499.510158][T27031] netlink: 'syz.2.6776': attribute type 1 has an invalid length.
[  499.742758][T27037] __nla_validate_parse: 18 callbacks suppressed
[  499.742770][T27037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6778'.
[  499.849743][T27046] netlink: 'syz.1.6781': attribute type 1 has an invalid length.
[  499.853729][T27046] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6781'.
[  499.908404][T27055] netlink: 'syz.1.6783': attribute type 1 has an invalid length.
[  499.924345][T27055] bond14: entered promiscuous mode
[  499.926489][T27055] 8021q: adding VLAN 0 to HW filter on device bond14
[  499.949272][T27055] 8021q: adding VLAN 0 to HW filter on device bond14
[  499.952532][T27055] bond14: (slave wireguard0): The slave device specified does not support setting the MAC address
[  499.955853][T27055] bond14: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  499.960838][T27055] bond14: (slave wireguard0): making interface the new active one
[  499.963355][T27055] wireguard0: entered promiscuous mode
[  499.965676][T27055] bond14: (slave wireguard0): Enslaving as an active interface with an up link
[  500.003614][T27063] syzkaller1: entered promiscuous mode
[  500.005384][T27063] syzkaller1: entered allmulticast mode
[  501.199000][T27141] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  501.203104][T27141] tipc: Resetting bearer <eth:syzkaller0>
[  501.205950][T27141] syzkaller0: left promiscuous mode
[  501.208056][T27141] syzkaller0: left allmulticast mode
[  501.374883][T27165] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6813'.
[  501.471729][T27172] set match dimension is over the limit!
[  501.507973][T27174] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6817'.
[  501.634949][T27177] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  501.637316][T27177] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  501.641107][T27177] tipc: Resetting bearer <eth:syzkaller0>
[  501.919323][T27183] wg1 speed is unknown, defaulting to 1000
[  501.922343][T27183] vet0_virt_wif speed is unknown, defaulting to 1000
[  502.208188][T27209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6828'.
[  502.254083][T27213] xt_CONNSECMARK: invalid mode: 66
[  514.941185][ T4423] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  520.061555][   T11] block nbd1: Possible stuck request ffff888109f68000: control (read@0,1024B). Runtime 30 seconds
[  523.063601][T27224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6832'.
[  523.090790][    C0] TC_ACT_REPEAT abuse ?
[  523.116383][T27232] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6834'.
[  523.134641][T27232] validate_nla: 1 callbacks suppressed
[  523.134652][T27232] netlink: 'syz.0.6834': attribute type 13 has an invalid length.
[  523.141608][T27232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6834'.
[  523.240878][T27242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6839'.
[  523.423635][T27265] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  523.476700][T27271] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6849'.
[  523.489233][T27265] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6847'.
[  523.612284][T27284] xt_TPROXY: Can be used only with -p tcp or -p udp
[  523.912238][T27308] syzkaller1: entered promiscuous mode
[  523.914039][T27308] syzkaller1: entered allmulticast mode
[  524.140714][    C0] TC_ACT_REPEAT abuse ?
[  524.154886][T27324] netlink: 'syz.0.6870': attribute type 1 has an invalid length.
[  524.167920][T27324] bond24: entered promiscuous mode
[  524.169698][T27324] bond24: entered allmulticast mode
[  524.171754][T27324] 8021q: adding VLAN 0 to HW filter on device bond24
[  524.248707][T27330] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  524.284911][T27334] x_tables: ip_tables: ah match: only valid for protocol 51
[  524.496856][T27353] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20002
[  524.586603][T27362] netlink: 'syz.1.6884': attribute type 1 has an invalid length.
[  524.720717][T27368] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  524.725532][T27368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  524.839505][T27383] xt_TCPMSS: Only works on TCP SYN packets
[  524.883126][T27383] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6890'.
[  525.061597][T27404] wg1 speed is unknown, defaulting to 1000
[  525.065249][T27404] vet0_virt_wif speed is unknown, defaulting to 1000
[  525.108478][T27408] tipc: New replicast peer: 255.255.255.255
[  525.112631][T27408] tipc: Enabled bearer <udp:syz2>, priority 10
[  525.115904][T27408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6898'.
[  525.222820][T27416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6901'.
[  525.518184][T27440] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6911'.
[  525.608280][T27449] geneve1: mtu less than device minimum
[  525.714360][T27467] siw: device registration error -23
[  525.720797][T27467] ip6_vti0: left allmulticast mode
[  525.735916][T27467] 8021q: adding VLAN 0 to HW filter on device bond0
[  525.744901][T27467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  525.750175][T20731] vet0_virt_wif speed is unknown, defaulting to 1000
[  525.753100][T20731] syz2: Port: 1 Link ACTIVE
[  525.949253][T27487] netlink: 'syz.0.6929': attribute type 1 has an invalid length.
[  525.953155][T27487] netlink: 'syz.0.6929': attribute type 3 has an invalid length.
[  525.961497][T27487] netlink: 'syz.0.6929': attribute type 7 has an invalid length.
[  525.964609][T27487] netlink: 'syz.0.6929': attribute type 8 has an invalid length.
[  525.968459][T27487] NCSI netlink: No device for ifindex 131092
[  527.983585][T27602] .70: renamed from hsr0
[  527.986247][T27602] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  527.990390][T27602] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  527.996819][T27602] .70: entered allmulticast mode
[  527.998949][T27602] hsr_slave_0: entered allmulticast mode
[  528.001866][T27602] hsr_slave_1: entered allmulticast mode
[  528.007092][T27602] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  528.043674][T27604] bond25: entered promiscuous mode
[  528.045561][T27604] 8021q: adding VLAN 0 to HW filter on device bond25
[  528.288669][T27644] netlink: 'syz.2.6981': attribute type 29 has an invalid length.
[  528.292912][T27644] netlink: 'syz.2.6981': attribute type 29 has an invalid length.
[  528.296382][T27645] netlink: 'syz.2.6981': attribute type 29 has an invalid length.
[  528.300136][T27644] __nla_validate_parse: 13 callbacks suppressed
[  528.300144][T27644] netlink: 548 bytes leftover after parsing attributes in process `syz.2.6981'.
[  528.347717][T27648] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6982'.
[  528.351202][T27648] .71: renamed from .70 (while UP)
[  528.354946][T27648] A link change request failed with some changes committed already. Interface .71 may have been left with an inconsistent configuration, please check.
[  528.467460][T27653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6983'.
[  529.248146][T27725] vlan0: entered promiscuous mode
[  529.250339][T27725] vlan0: entered allmulticast mode
[  529.284869][T27719] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7004'.
[  529.288087][T27719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7004'.
[  529.294045][T27730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7009'.
[  529.565462][T27740] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  529.568042][T27740] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  529.690881][T27756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7018'.
[  529.696484][T27758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7019'.
[  529.743385][T27763] pimreg: entered allmulticast mode
[  530.041894][T27797] netlink: 14820 bytes leftover after parsing attributes in process `syz.1.7032'.
[  530.357365][T27828] netlink: 'syz.2.7044': attribute type 1 has an invalid length.
[  530.475867][T27845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7050'.
[  530.511501][T27848] netlink: 'syz.1.7051': attribute type 8 has an invalid length.
[  530.593931][T27857] netlink: 'syz.0.7054': attribute type 1 has an invalid length.
[  530.611616][T27857] 8021q: adding VLAN 0 to HW filter on device bond26
[  530.621142][T27857] bond26: (slave ip6gretap3): making interface the new active one
[  530.624318][T27857] bond26: (slave ip6gretap3): Enslaving as an active interface with an up link
[  530.645594][T27857] veth23: entered promiscuous mode
[  530.649460][T27857] bond26: (slave veth23): Enslaving as an active interface with a down link
[  530.655373][T27857] erspan0: entered allmulticast mode
[  530.661334][T27857] bond26: (slave erspan0): Enslaving as an active interface with an up link
[  530.670061][T27857] bond26: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  530.797181][T27868] netlink: 'syz.0.7058': attribute type 1 has an invalid length.
[  530.802043][T27868] sctp: [Deprecated]: syz.0.7058 (pid 27868) Use of int in max_burst socket option.
[  530.802043][T27868] Use struct sctp_assoc_value instead
[  531.078936][T27884] netlink: 'syz.1.7064': attribute type 7 has an invalid length.
[  531.604046][T27964] netlink: 'syz.1.7089': attribute type 3 has an invalid length.
[  531.604678][T27966] netlink: 'syz.2.7090': attribute type 29 has an invalid length.
[  531.692845][T27970] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  531.696687][T27970] syzkaller0: entered promiscuous mode
[  531.698909][T27970] syzkaller0: entered allmulticast mode
[  531.949255][T28003] sctp: [Deprecated]: syz.2.7104 (pid 28003) Use of struct sctp_assoc_value in delayed_ack socket option.
[  531.949255][T28003] Use struct sctp_sack_info instead
[  532.103830][T28001] tipc: Resetting bearer <eth:syzkaller0>
[  532.178878][T20731] vet0_virt_wif speed is unknown, defaulting to 1000
[  532.179573][T28007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  532.184784][T20731] syz2: Port: 1 Link DOWN
[  532.785601][T28044] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  532.788910][T28044] tipc: Resetting bearer <eth:syzkaller0>
[  532.944466][T28057] 8021q: adding VLAN 0 to HW filter on device bond17
[  533.310130][T28077] __nla_validate_parse: 13 callbacks suppressed
[  533.310139][T28077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7126'.
[  533.326962][T28078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7126'.
[  533.607601][T28098] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7132'.
[  533.871651][T28122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7143'.
[  533.924106][T28128] validate_nla: 7 callbacks suppressed
[  533.924115][T28128] netlink: 'syz.2.7145': attribute type 15 has an invalid length.
[  533.988903][T28131] netlink: 'syz.2.7147': attribute type 1 has an invalid length.
[  534.001180][T28131] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7147'.
[  534.004178][T28131] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR
[  534.185635][T28164] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  534.196428][T28164] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  534.198897][T28164] tipc: Resetting bearer <eth:syzkaller0>
[  534.451993][T28199] : renamed from bond_slave_0
[  534.475832][T28199] can: request_module (can-proto-5) failed.
[  534.489195][T28199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7165'.
[  534.581995][T28218] Cannot find del_set index 2 as target
[  534.764626][T28249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7180'.
[  534.837004][T28260] netlink: 'syz.1.7185': attribute type 19 has an invalid length.
[  534.840069][T28260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7185'.
[  534.847172][T28260] netlink: 'syz.1.7185': attribute type 19 has an invalid length.
[  534.850393][T28260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7185'.
[  534.887839][T28266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7186'.
[  535.236509][T28307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  535.278099][T28311] netlink: 'syz.0.7200': attribute type 19 has an invalid length.
[  535.282354][T28311] netlink: 'syz.0.7200': attribute type 20 has an invalid length.
[  535.408247][T28328] wg1 speed is unknown, defaulting to 1000
[  535.411982][T28328] vet0_virt_wif speed is unknown, defaulting to 1000
[  535.415952][T28329] wg1 speed is unknown, defaulting to 1000
[  535.425363][T28329] vet0_virt_wif speed is unknown, defaulting to 1000
[  535.803921][T28368] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  535.828176][T28364] tc_dump_action: action bad kind
[  536.372908][T28438] sctp: [Deprecated]: syz.0.7236 (pid 28438) Use of int in maxseg socket option.
[  536.372908][T28438] Use struct sctp_assoc_value instead
[  536.523840][T28457] sctp: [Deprecated]: syz.2.7244 (pid 28457) Use of int in maxseg socket option.
[  536.523840][T28457] Use struct sctp_assoc_value instead
[  536.593696][T28468] netlink: 'syz.2.7247': attribute type 1 has an invalid length.
[  536.654498][T28477] netlink: 'syz.0.7250': attribute type 29 has an invalid length.
[  536.657390][T28477] netlink: 'syz.0.7250': attribute type 29 has an invalid length.
[  536.660688][T28477] xt_l2tp: v2 doesn't support IP mode
[  536.706978][T28483] x_tables: ip_tables: osf match: only valid for protocol 6
[  536.851609][T28494] netlink: 'syz.0.7255': attribute type 27 has an invalid length.
[  537.386657][T28545] block nbd2: Unsupported socket: should be TCP or UNIX.
[  537.621237][T28572] netem: change failed
[  537.739412][T28586] ipt_ECN: cannot use operation on non-tcp rule
[  537.912706][T28610] 8021q: adding VLAN 0 to HW filter on device bond18
[  537.931399][T28610] 8021q: adding VLAN 0 to HW filter on device bond18
[  537.934204][T28610] bond18: (slave vxcan3): The slave device specified does not support setting the MAC address
[  537.938118][T28610] bond18: (slave vxcan3): Error -95 calling set_mac_address
[  537.974160][T28621] gretap3: entered promiscuous mode
[  537.979204][T28621] bond18: (slave gretap3): making interface the new active one
[  537.984295][T28621] bond18: (slave gretap3): Enslaving as an active interface with an up link
[  537.995818][T28610] macvlan0: entered promiscuous mode
[  537.997507][T28610] macvlan0: entered allmulticast mode
[  537.999611][T28610] bond18: entered promiscuous mode
[  538.010811][T28610] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  538.018879][T28610] bond18: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap3
[  538.023997][T28610] bond18: left promiscuous mode
[  538.242314][T28642] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.307782][T28642] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.355413][T28642] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.396979][T28642] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.447165][ T5660] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  538.459879][ T5660] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  538.474938][ T5660] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  538.487096][ T5660] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  538.568392][T28652] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  538.611221][T28654] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  538.670083][T28658] __nla_validate_parse: 21 callbacks suppressed
[  538.670093][T28658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7311'.
[  538.712730][T28663] netlink: 'syz.0.7312': attribute type 11 has an invalid length.
[  538.718252][T28663] netlink: 'syz.0.7312': attribute type 11 has an invalid length.
[  538.723536][T28663] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7312'.
[  538.778359][T28671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7315'.
[  538.789855][T28671] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7315'.
[  538.798181][T28671] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7315'.
[  538.802641][T28671] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7315'.
[  539.009856][T28697] macvtap1: entered promiscuous mode
[  539.014640][T28697] batadv0: entered promiscuous mode
[  539.017239][T28697] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  539.022980][T28697] batadv0: left promiscuous mode
[  539.048953][T28701] Cannot find set identified by id 0 to match
[  539.283783][T28726] validate_nla: 2 callbacks suppressed
[  539.283794][T28726] netlink: 'syz.2.7333': attribute type 1 has an invalid length.
[  539.312065][T28726] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address
[  539.316079][T28726] bond9: (slave vxcan5): Error -95 calling set_mac_address
[  539.448306][T28745] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7337'.
[  539.477761][T28747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7338'.
[  540.260118][T28821] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7364'.
[  540.271474][T28819] ip6erspan1: entered allmulticast mode
[  540.428196][T28836] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7366'.
[  540.893603][T28865] netlink: 'syz.2.7377': attribute type 4 has an invalid length.
[  540.898346][T28865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  541.307366][   T33] audit: type=1804 audit(1765963981.264:4): pid=28878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7382" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=13461 res=1 errno=0
[  541.320982][   T33] audit: type=1800 audit(1765963981.284:5): pid=28878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7382" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=13461 res=0 errno=0
[  541.328754][   T33] audit: type=1804 audit(1765963981.284:6): pid=28878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.7382" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=13461 res=1 errno=0
[  541.891745][T28888] 8021q: adding VLAN 0 to HW filter on device bond11
[  541.900096][T28888] vlan1: entered promiscuous mode
[  541.902590][T28888] bond11: entered promiscuous mode
[  542.089066][T28903] netlink: 'syz.1.7390': attribute type 3 has an invalid length.
[  542.134942][T28906] x_tables: duplicate underflow at hook 2
[  542.137543][T28906] x_tables: duplicate underflow at hook 2
[  542.139346][T28906] x_tables: duplicate underflow at hook 2
[  542.142179][T28906] x_tables: duplicate underflow at hook 2
[  542.144528][T28906] x_tables: duplicate underflow at hook 2
[  542.356114][T28928] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  542.672709][T28951] SET target dimension over the limit!
[  543.055013][T28997] wg1 speed is unknown, defaulting to 1000
[  543.059850][T28997] vet0_virt_wif speed is unknown, defaulting to 1000
[  543.472573][T29016] xt_CT: You must specify a L4 protocol and not use inversions on it
[  544.283051][T29031] __nla_validate_parse: 16 callbacks suppressed
[  544.283060][T29031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7429'.
[  544.434643][T29050] 8021q: VLANs not supported on ip6_vti0
[  544.774123][T29062] wg1 speed is unknown, defaulting to 1000
[  544.776670][T29062] vet0_virt_wif speed is unknown, defaulting to 1000
[  545.731619][T29096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7448'.
[  545.804322][T29103] batadv_slave_1: entered promiscuous mode
[  545.819716][T29103] batadv_slave_1: left promiscuous mode
[  545.879699][T29112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7453'.
[  545.888418][T29112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7453'.
[  545.894933][T29117] xt_l2tp: v2 doesn't support IP mode
[  545.971584][T29128] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7458'.
[  546.157106][T29167] tipc: Enabled bearer <ib:caif0>, priority 1
[  546.376714][T29193] netlink: 'syz.1.7479': attribute type 11 has an invalid length.
[  546.587034][T29204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7483'.
[  547.456593][T29255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7500'.
[  547.536920][T29262] gre0: left promiscuous mode
[  547.538511][T29262] gre0: left allmulticast mode
[  547.547085][T29262] batadv_slave_0: left promiscuous mode
[  547.549552][T29262] .70: left allmulticast mode
[  547.551397][T29262] hsr_slave_0: left allmulticast mode
[  547.555600][T29262] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  547.558280][T29262] bridge1: left allmulticast mode
[  547.561867][T29262] batadv2: left allmulticast mode
[  547.563813][T29262] geneve3: left promiscuous mode
[  547.565693][T29262] ip6gre1: left promiscuous mode
[  547.567412][T29262] ip6gre1: left allmulticast mode
[  547.570172][T29262] erspan1: left allmulticast mode
[  547.572702][T29262] bridge0: left promiscuous mode
[  547.586990][T29262] bridge9: left allmulticast mode
[  547.590994][T29262] tipc: Resetting bearer <eth:syzkaller0>
[  547.625141][T29262] vti0: left promiscuous mode
[  547.632528][T29262] geneve4: left promiscuous mode
[  547.646758][T29262] ip6gretap1: left allmulticast mode
[  547.655043][T29262] vlan0: left promiscuous mode
[  547.660078][T29262] vlan0: left allmulticast mode
[  547.662167][T29262] hsr_slave_1: left allmulticast mode
[  547.680835][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  547.686681][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  547.689597][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  547.692500][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  547.802214][T29270] wg1 speed is unknown, defaulting to 1000
[  547.806298][T29270] vet0_virt_wif speed is unknown, defaulting to 1000
[  548.392309][T29297] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7512'.
[  548.396099][T29297] netlink: 'syz.1.7512': attribute type 1 has an invalid length.
[  548.675661][T29319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7522'.
[  548.726452][T29328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7526'.
[  548.950337][T29362] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20000
[  549.044823][T29371] bond12: option primary_reselect: invalid value (6)
[  549.049272][T29371] bond12 (unregistering): Released all slaves
[  549.249415][T29389] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  549.343896][T29398] __nla_validate_parse: 8 callbacks suppressed
[  549.343911][T29398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7550'.
[  549.349308][T29398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7550'.
[  550.144751][   T11] block nbd1: Possible stuck request ffff888109f68000: control (read@0,1024B). Runtime 60 seconds
[  550.700118][T29455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7568'.
[  550.825331][T29464] veth0: entered promiscuous mode
[  550.827623][T29464] netlink: 'syz.1.7571': attribute type 16 has an invalid length.
[  550.830120][T29464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7571'.
[  550.835297][T29464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7571'.
[  550.837960][T29464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7571'.
[  550.846501][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  550.846521][T29464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7571'.
[  550.849824][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  550.852688][T29464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7571'.
[  550.862486][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  550.870605][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  550.882486][T29463] veth0: left promiscuous mode
[  550.975311][T29470] wg1 speed is unknown, defaulting to 1000
[  550.978780][T29470] vet0_virt_wif speed is unknown, defaulting to 1000
[  552.026383][T29494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7583'.
[  552.082238][T29496] sctp: [Deprecated]: syz.2.7584 (pid 29496) Use of struct sctp_assoc_value in delayed_ack socket option.
[  552.082238][T29496] Use struct sctp_sack_info instead
[  552.102688][T29499] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7585'.
[  552.116959][T29499] netlink: 'syz.1.7585': attribute type 2 has an invalid length.
[  552.237654][T29511] nbd: must specify a size in bytes for the device
[  552.246537][T29511] caif0: Master is either lo or non-ether device
[  552.436928][T29525] wg1 speed is unknown, defaulting to 1000
[  552.439816][T29525] vet0_virt_wif speed is unknown, defaulting to 1000
[  552.463098][T29528] netlink: 'syz.1.7595': attribute type 21 has an invalid length.
[  552.660959][T29555] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  552.934860][T29590] netlink: 'syz.2.7613': attribute type 2 has an invalid length.
[  552.941895][T29590] netlink: 'syz.2.7613': attribute type 1 has an invalid length.
[  552.944850][T29590] netlink: 'syz.2.7613': attribute type 1 has an invalid length.
[  552.996521][T29592] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  554.125583][T29650] ipt_ECN: cannot use operation on non-tcp rule
[  554.224438][T29667] wg1 speed is unknown, defaulting to 1000
[  554.226882][T29667] vet0_virt_wif speed is unknown, defaulting to 1000
[  554.386427][T29679] __nla_validate_parse: 6 callbacks suppressed
[  554.386444][T29679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7639'.
[  557.660075][ T5279] udevd[5279]: worker [25942] /devices/virtual/block/nbd1 is taking a long time
[  577.722395][T29686] syzkaller1: entered promiscuous mode
[  577.724062][T29686] syzkaller1: entered allmulticast mode
[  577.749569][T29690] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.7642'.
[  577.760791][T29690] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  578.394229][T29773] vlan1: entered allmulticast mode
[  578.395883][T29773] bridge_slave_0: entered allmulticast mode
[  578.667845][T29798] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002
[  578.683333][T29796] block nbd2: Receive control failed (result -32)
[  578.786435][T29811] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000
[  579.133833][T29844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7681'.
[  579.552282][T29880] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  579.569688][T29882] tipc: Resetting bearer <eth:syzkaller0>
[  579.727464][T29893] 8021q: VLANs not supported on lo
[  579.797884][T29897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7699'.
[  579.800210][T29900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  579.806856][T29900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  579.930905][T29910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7701'.
[  579.942215][T29910] wg1 speed is unknown, defaulting to 1000
[  579.944627][T29910] vet0_virt_wif speed is unknown, defaulting to 1000
[  580.034404][T29914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7702'.
[  580.101912][T29910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7701'.
[  580.156063][T29929] netlink: 'syz.1.7705': attribute type 2 has an invalid length.
[  580.230747][   T11] block nbd1: Possible stuck request ffff888109f68000: control (read@0,1024B). Runtime 90 seconds
[  580.237956][T29931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7706'.
[  580.439755][T29947] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  580.448158][T29946] team0: No ports can be present during mode change
[  580.467772][T29947] syzkaller0: left allmulticast mode
[  580.939749][T29992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7725'.
[  581.077322][ T3737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  581.080705][ T3737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  581.138214][T30013] team0: Port device dummy0 removed
[  581.140655][T30013] batman_adv: batadv0: Adding interface: dummy0
[  581.142910][T30013] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem.
[  581.151292][T30013] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  581.198529][T30026] delete_channel: no stack
[  581.739873][T30107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7765'.
[  581.922445][T30122] pimreg: tun_chr_ioctl cmd 2147767506
[  582.256020][T30157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7780'.
[  582.700138][T30171] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  582.814784][T30179] __nla_validate_parse: 2 callbacks suppressed
[  582.814794][T30179] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7789'.
[  582.986525][T30184] delete_channel: no stack
[  582.988191][T30184] delete_channel: no stack
[  582.990166][T30184] delete_channel: no stack
[  582.991876][T30184] delete_channel: no stack
[  582.993542][T30184] delete_channel: no stack
[  582.995123][T30184] delete_channel: no stack
[  582.996761][T30184] delete_channel: no stack
[  582.998392][T30184] delete_channel: no stack
[  582.999914][T30184] delete_channel: no stack
[  583.001897][T30184] delete_channel: no stack
[  583.003669][T30184] delete_channel: no stack
[  583.005223][T30184] delete_channel: no stack
[  583.006773][T30184] delete_channel: no stack
[  583.008456][T30184] delete_channel: no stack
[  583.009975][T30184] delete_channel: no stack
[  583.011601][T30184] delete_channel: no stack
[  583.013222][T30184] delete_channel: no stack
[  583.014869][T30184] delete_channel: no stack
[  583.016428][T30184] delete_channel: no stack
[  583.018088][T30184] delete_channel: no stack
[  583.019627][T30184] delete_channel: no stack
[  583.025048][T30184] delete_channel: no stack
[  583.026794][T30184] delete_channel: no stack
[  583.028354][T30184] delete_channel: no stack
[  583.029874][T30184] delete_channel: no stack
[  583.031525][T30184] delete_channel: no stack
[  583.033255][T30184] delete_channel: no stack
[  583.034818][T30184] delete_channel: no stack
[  583.036418][T30184] delete_channel: no stack
[  583.037936][T30184] delete_channel: no stack
[  583.039464][T30184] delete_channel: no stack
[  583.041173][T30184] delete_channel: no stack
[  583.042893][T30184] delete_channel: no stack
[  583.586206][T30222] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  583.589143][T30222] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  583.592379][T30222] tipc: Resetting bearer <eth:syzkaller0>
[  583.604357][T30222] netlink: 280 bytes leftover after parsing attributes in process `syz.2.7799'.
[  584.077418][T30248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7806'.
[  584.083164][T30248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7806'.
[  584.378957][T30273] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7811'.
[  584.384561][T30273] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7811'.
[  584.388262][T30273] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  584.685449][T30281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7815'.
[  584.692033][T30281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7815'.
[  584.725746][T30283] netlink: 'syz.2.7816': attribute type 10 has an invalid length.
[  584.728278][T30283] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7816'.
[  585.025290][T30304] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7826'.
[  585.179379][T30313] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  585.967942][T30364] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  585.972796][T30364] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  585.980075][T30364] netlink: 'syz.2.7847': attribute type 10 has an invalid length.
[  585.983038][T30364] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  586.363191][T30421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  586.443910][T30432] bridge14: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  586.451715][T30433] bridge15: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  587.493420][T30491] netlink: 'syz.1.7879': attribute type 83 has an invalid length.
[  587.704424][T30507] x_tables: ip6_tables: TPROXY target: only valid in mangle table, not syz1
[  588.026349][T30520] __nla_validate_parse: 9 callbacks suppressed
[  588.026364][T30520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7893'.
[  588.037758][T30520] IPVS: Unknown mcast interface: vlan1
[  588.369968][T30555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7905'.
[  588.424978][T30563] openvswitch: netlink: EtherType 50a is less than min 600
[  588.431241][T30563] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7904'.
[  588.746372][T30599] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  588.810725][T30601] wg1 speed is unknown, defaulting to 1000
[  588.814327][T30601] vet0_virt_wif speed is unknown, defaulting to 1000
[  588.873727][T30606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7912'.
[  589.677866][T30615] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  589.719570][T30615] syzkaller0: entered allmulticast mode
[  589.780346][T30623] team0: entered promiscuous mode
[  589.782688][T30623] team_slave_0: entered promiscuous mode
[  589.785875][T30623] team_slave_1: entered promiscuous mode
[  589.788869][T30623] team0: entered allmulticast mode
[  589.791843][T30623] team_slave_0: entered allmulticast mode
[  589.794232][T30623] team_slave_1: entered allmulticast mode
[  589.796637][T30623] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  589.809422][T30625] sctp: [Deprecated]: syz.2.7920 (pid 30625) Use of struct sctp_assoc_value in delayed_ack socket option.
[  589.809422][T30625] Use struct sctp_sack_info instead
[  589.961536][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  589.962862][T30640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7925'.
[  589.966829][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  589.984227][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  589.986939][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  589.997119][T30644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7926'.
[  590.014437][T30644] team1: entered promiscuous mode
[  590.016054][T30644] team1: entered allmulticast mode
[  590.017813][T30644] 8021q: adding VLAN 0 to HW filter on device team1
[  593.130229][T30687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7941'.
[  593.240704][T30695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7943'.
[  593.274170][T30695] SET target dimension over the limit!
[  593.301828][T30702] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  593.374053][T30712] netlink: 'syz.1.7949': attribute type 32 has an invalid length.
[  593.432274][T30715] bond20 (unregistering): Released all slaves
[  593.718183][T30730] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7954'.
[  593.818723][T30732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7955'.
[  593.977542][T30747] tap1: tun_chr_ioctl cmd 1074025677
[  593.979337][T30747] tap1: linktype set to 776
[  594.127340][T30764] netlink: 'syz.2.7963': attribute type 10 has an invalid length.
[  594.238794][T30770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7967'.
[  594.324785][T30775] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7969'.
[  594.339274][T30775] nbd: couldn't find a device at index 0
[  594.387648][T30782] : entered promiscuous mode
[  594.406162][T30785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7972'.
[  594.410389][T30785] bpq0: entered promiscuous mode
[  594.594661][T30806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7979'.
[  594.597778][T30806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7979'.
[  594.605342][T30806] netlink: 'syz.1.7979': attribute type 1 has an invalid length.
[  594.721350][T30818] netlink: 428 bytes leftover after parsing attributes in process `syz.1.7984'.
[  594.859326][T30840] netlink: 'syz.0.7993': attribute type 11 has an invalid length.
[  594.975530][T30846] netlink: 'syz.2.7994': attribute type 5 has an invalid length.
[  595.145399][T30851] geneve5: entered promiscuous mode
[  595.147792][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  595.151210][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  595.154783][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  595.157559][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  596.244924][T30913] wg1 speed is unknown, defaulting to 1000
[  596.248090][T30913] vet0_virt_wif speed is unknown, defaulting to 1000
[  596.387666][T30926] netlink: 'syz.2.8023': attribute type 10 has an invalid length.
[  596.389535][T30910] wg1 speed is unknown, defaulting to 1000
[  596.408841][T30910] vet0_virt_wif speed is unknown, defaulting to 1000
[  596.442427][T30924] 8021q: VLANs not supported on lo
[  596.524738][T30941] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  596.527751][T30941] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.593346][T30941] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  596.597180][T30941] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.670158][T30941] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  596.673596][T30941] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.693198][T30958] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  596.748289][T30964] delete_channel: no stack
[  596.767402][T30941] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  596.782484][T30941] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.817228][T30974] netlink: 'syz.0.8038': attribute type 21 has an invalid length.
[  596.819962][T30974] netlink: 'syz.0.8038': attribute type 22 has an invalid length.
[  596.822829][T30974] netlink: 'syz.0.8038': attribute type 23 has an invalid length.
[  596.825750][T30974] netlink: 'syz.0.8038': attribute type 25 has an invalid length.
[  596.872750][T20719] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  596.875382][T20719] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  596.887399][T20719] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  596.899893][T20719] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  596.929256][T20719] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  596.932096][T20719] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  596.950415][T20719] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  596.953544][T20719] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  597.114260][T31005] netlink: 'syz.0.8051': attribute type 1 has an invalid length.
[  597.131888][T31005] openvswitch: netlink: Missing key (keys=40, expected=100)
[  597.364641][T31027] openvswitch: netlink: Key 10 has unexpected len 0 expected 4
[  597.602106][T31033] delete_channel: no stack
[  598.306298][T31054] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  598.383621][T31057] __nla_validate_parse: 20 callbacks suppressed
[  598.383632][T31057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8070'.
[  599.561391][T31074] netlink: 276 bytes leftover after parsing attributes in process `syz.1.8076'.
[  600.023143][T31111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8090'.
[  600.055548][T31111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8090'.
[  600.249155][T31127] SET target dimension over the limit!
[  600.317582][T31136] netlink: 348 bytes leftover after parsing attributes in process `syz.1.8098'.
[  600.429120][T31148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8101'.
[  600.441812][T31140] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8099'.
[  600.660369][T31167] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.8108'.
[  600.851856][T31202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8118'.
[  600.854673][T31202] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  600.897021][T31205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8119'.
[  600.941794][T31210] sctp: [Deprecated]: syz.2.8121 (pid 31210) Use of int in maxseg socket option.
[  600.941794][T31210] Use struct sctp_assoc_value instead
[  601.074237][T31236] openvswitch: netlink: Flow actions attr not present in new flow.
[  601.235317][T31263] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  601.745176][T31296] bpq0: left promiscuous mode
[  601.965358][T31307] validate_nla: 1 callbacks suppressed
[  601.965368][T31307] netlink: 'syz.2.8151': attribute type 1 has an invalid length.
[  601.969777][T31307] netlink: 'syz.2.8151': attribute type 3 has an invalid length.
[  603.060417][T31365] netlink: 'syz.2.8174': attribute type 11 has an invalid length.
[  603.065001][T31365] netlink: 'syz.2.8174': attribute type 11 has an invalid length.
[  603.068404][T31366] netlink: 'syz.2.8174': attribute type 11 has an invalid length.
[  603.071283][T31366] netlink: 'syz.2.8174': attribute type 11 has an invalid length.
[  603.146793][T31371] wg1 speed is unknown, defaulting to 1000
[  603.150367][T31371] vet0_virt_wif speed is unknown, defaulting to 1000
[  603.627138][ T5860] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  603.630190][ T5860] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  603.653010][T20731] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  603.660906][T20731] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  603.920757][T20731] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  604.873811][T31449] __nla_validate_parse: 8 callbacks suppressed
[  604.873820][T31449] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8200'.
[  605.017898][T31459] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8202'.
[  605.064665][T31464] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8203'.
[  605.089000][T31466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8204'.
[  605.094985][T31467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8204'.
[  605.606753][T31480] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8208'.
[  605.610434][T31480] nbd: couldn't find a device at index 0
[  606.056027][T31483] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  606.059996][T31483] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.087234][T31483] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  606.091305][T31483] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.136589][T31483] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  606.140412][T31483] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.203493][T31483] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  606.208467][T31483] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.278691][T20719] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  606.289259][T20719] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  606.313646][T20719] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  606.320416][T20719] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  606.338814][T20719] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  606.345797][T20719] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  606.362946][ T5660] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  606.366388][ T5660] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  606.521571][T31491] svc: failed to register nfsdv3 RPC service (errno 111).
[  606.527621][T31491] svc: failed to register nfsaclv3 RPC service (errno 111).
[  606.782243][T31524] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8221'.
[  606.784986][T31524] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8221'.
[  606.844315][T31533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8224'.
[  606.995110][T31545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8229'.
[  607.340690][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  607.424058][T31561] syzkaller1: entered promiscuous mode
[  607.426074][T31561] syzkaller1: entered allmulticast mode
[  608.399391][T31601] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode
[  608.523870][T31607] ipt_REJECT: TCP_RESET invalid for non-tcp
[  608.689690][T31630] netlink: 'syz.0.8254': attribute type 6 has an invalid length.
[  608.695625][T31630] IPv6: NLM_F_CREATE should be specified when creating new route
[  608.829195][T31639] wg1 speed is unknown, defaulting to 1000
[  608.832733][T31639] vet0_virt_wif speed is unknown, defaulting to 1000
[  608.956895][T31654] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  609.094790][T31663] pim6reg: entered allmulticast mode
[  609.163973][T31671] netlink: 'syz.1.8268': attribute type 21 has an invalid length.
[  609.166879][T31671] netlink: 'syz.1.8268': attribute type 4 has an invalid length.
[  609.166917][T31672] netlink: 'syz.1.8268': attribute type 21 has an invalid length.
[  609.169576][T31671] netlink: 'syz.1.8268': attribute type 5 has an invalid length.
[  609.174788][T31672] netlink: 'syz.1.8268': attribute type 4 has an invalid length.
[  609.178644][T31672] netlink: 'syz.1.8268': attribute type 5 has an invalid length.
[  609.566886][T31726] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  609.898254][T31761] __nla_validate_parse: 8 callbacks suppressed
[  609.898263][T31761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8293'.
[  609.915553][T31761] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8293'.
[  610.022634][T31776] "syz.2.8299" (31776) uses obsolete ecb(arc4) skcipher
[  610.171114][T31788] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8303'.
[  610.310184][T31797] netlink: 'syz.1.8307': attribute type 1 has an invalid length.
[  610.314804][   T11] block nbd1: Possible stuck request ffff888109f68000: control (read@0,1024B). Runtime 120 seconds
[  610.448215][T31808] bond20: Unable to set up delay as MII monitoring is disabled
[  610.453777][T31808] bond20 (unregistering): Released all slaves
[  610.639212][T31815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8312'.
[  610.639234][T31814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8312'.
[  610.814828][T31821] netlink: 'syz.1.8314': attribute type 2 has an invalid length.
[  610.951488][T31842] openvswitch: netlink: IP tunnel dst address not specified
[  611.089200][T31858] Unsupported ieee802154 address type: 0
[  611.148352][T31856] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8327'.
[  611.258909][T31875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8332'.
[  611.587596][T31904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8342'.
[  611.671257][T31915] netlink: 'syz.0.8345': attribute type 9 has an invalid length.
[  611.676365][T31917] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  611.679542][T31917] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  611.684815][T31917] tipc: Resetting bearer <eth:syzkaller0>
[  611.782649][T31924] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8348'.
[  611.793533][T31924] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  611.795888][T31924] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  611.798313][T31924] tipc: Resetting bearer <eth:syzkaller0>
[  611.809141][T31928] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8349'.
[  612.077480][T31941] wg1 speed is unknown, defaulting to 1000
[  612.079985][T31941] vet0_virt_wif speed is unknown, defaulting to 1000
[  612.149573][T31954] tipc: Enabling of bearer <ib:macvlan0> rejected, failed to enable media
[  612.612821][T32012] ip6t_srh: unknown srh match flags  4000
[  612.636789][T32014] delete_channel: no stack
[  612.967335][T32041] SET target dimension over the limit!
[  615.064130][ T5660] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[  615.066832][ T5660] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[  615.090696][T20731] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[  615.140821][T20731] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[  615.144382][T32149] __nla_validate_parse: 50 callbacks suppressed
[  615.144394][T32149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8421'.
[  615.151609][T32149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8421'.
[  615.154717][T32149] netlink: 1040 bytes leftover after parsing attributes in process `syz.0.8421'.
[  615.333834][T32168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8422'.
[  615.420757][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  615.463361][T32177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8428'.
[  615.490748][T20731] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[  615.527408][T32179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8429'.
[  615.532589][T32179] veth0_to_team: left promiscuous mode
[  615.534901][T32179] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  615.537327][T32179] tipc: Resetting bearer <eth:syzkaller0>
[  615.539253][T32179] mac80211_hwsim hwsim17 wlan0: left promiscuous mode
[  615.542207][T32179] ip6gre1: left promiscuous mode
[  615.543862][T32179] bond24: left promiscuous mode
[  615.545430][T32179] bond25: left promiscuous mode
[  615.547122][T32179] veth23: left promiscuous mode
[  615.549372][T32179] geneve5: left promiscuous mode
[  615.581031][   T44] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  615.679694][T32192] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8433'.
[  615.894863][T32224] netlink: 284 bytes leftover after parsing attributes in process `syz.1.8443'.
[  615.924247][T32220] wg1 speed is unknown, defaulting to 1000
[  615.926716][T32220] vet0_virt_wif speed is unknown, defaulting to 1000
[  615.967555][T32220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8442'.
[  616.131465][T32245] erspan0: left allmulticast mode
[  616.237622][T32256] IPVS: length: 71 != 8
[  616.240335][T32256] bridge0: entered promiscuous mode
[  616.300760][T30654] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  616.435324][T32280] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8462'.
[  617.649134][T32377] sit2: entered promiscuous mode
[  618.079176][T32413] macsec2: entered promiscuous mode
[  618.081495][T32413] macsec2: entered allmulticast mode
[  618.229418][T32425] tipc: Resetting bearer <eth:syzkaller0>
[  618.248932][T32425] tipc: Resetting bearer <eth:syzkaller0>
[  618.691487][T32478] validate_nla: 2 callbacks suppressed
[  618.691503][T32478] netlink: 'syz.2.8518': attribute type 10 has an invalid length.
[  618.696793][T32478] dummy0: entered promiscuous mode
[  618.713638][T32478] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  618.729004][T32479] syzkaller1: entered promiscuous mode
[  618.730966][T32479] syzkaller1: entered allmulticast mode
[  618.786339][T32490] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  619.109188][T32533] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  619.159986][T32545] IPv6: Can't replace route, no match found
[  619.190722][    C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[  619.323591][T32575] netlink: 'syz.0.8541': attribute type 1 has an invalid length.
[  619.777047][T32643] IPVS: length: 35 != 24
[  619.779291][T32643] netlink: 'syz.2.8560': attribute type 1 has an invalid length.
[  619.848815][T32654] 8021q: adding VLAN 0 to HW filter on device bond12
[  619.901994][T32643] veth17: entered promiscuous mode
[  619.907617][T32643] bond12: (slave veth17): Enslaving as a backup interface with a down link
[  619.976841][T32663] x_tables: ip6_tables: mh match: only valid for protocol 135
[  619.979450][T32663] x_tables: ip6_tables: mh match: only valid for protocol 135
[  619.983635][T32663] x_tables: ip6_tables: mh match: only valid for protocol 135
[  619.986041][T32663] x_tables: ip6_tables: mh match: only valid for protocol 135
[  619.988574][T32663] x_tables: ip6_tables: mh match: only valid for protocol 135
[  619.991211][T32663] x_tables: ip6_tables: mh match: only valid for protocol 135
[  619.993969][T32663] x_tables: ip6_tables: mh match: only valid for protocol 135
[  619.996288][T32663] x_tables: ip6_tables: mh match: only valid for protocol 135
[  620.006817][T32663] x_tables: ip6_tables: mh match: only valid for protocol 135
[  620.020999][T32663] x_tables: ip6_tables: mh match: only valid for protocol 135
[  620.167853][T32670] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  621.335089][T32718] __nla_validate_parse: 16 callbacks suppressed
[  621.335100][T32718] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8583'.
[  621.499133][T32750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8590'.
[  621.503206][T32750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8590'.
[  621.505985][T32750] netlink: 'syz.0.8590': attribute type 14 has an invalid length.
[  621.508452][T32750] netlink: 'syz.0.8590': attribute type 13 has an invalid length.
[  621.749677][  T303] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8598'.
[  622.204529][  T340] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  622.313034][  T348] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.8615'.
[  622.323345][  T348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8615'.
[  622.328012][  T348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8615'.
[  622.329137][  T350] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8616'.
[  622.488988][  T367] netlink: 'syz.2.8623': attribute type 1 has an invalid length.
[  622.514099][  T367] bond13: entered promiscuous mode
[  622.516029][  T367] 8021q: adding VLAN 0 to HW filter on device bond13
[  622.570578][  T374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8626'.
[  622.573608][  T374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8626'.
[  622.623977][  T382] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  623.132105][  T437] nbd: couldn't find a device at index 65546
[  623.243260][  T451] netlink: 'syz.2.8652': attribute type 1 has an invalid length.
[  624.188165][  T490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  624.521098][  T519] tipc: New replicast peer: 255.255.255.255
[  624.523504][  T519] tipc: Enabled bearer <udp:syz2>, priority 10
[  624.791191][  T553] netlink: 'syz.0.8685': attribute type 9 has an invalid length.
[  624.823826][  T557] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  624.827734][  T557] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  625.248793][  T607] openvswitch: netlink: Flow key attr not present in new flow.
[  626.200090][  T655] netlink: 'syz.0.8721': attribute type 1 has an invalid length.
[  626.226100][  T657] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  626.358756][  T685] __nla_validate_parse: 24 callbacks suppressed
[  626.358765][  T685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8731'.
[  626.632764][  T706] netlink: 'syz.1.8738': attribute type 3 has an invalid length.
[  626.636058][  T706] netlink: 'syz.1.8738': attribute type 3 has an invalid length.
[  626.701057][  T711] bond0: Error: Cannot enslave bond to itself.
[  626.703413][  T711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8740'.
[  626.706533][  T711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8740'.
[  626.710069][  T711] netlink: 'syz.1.8740': attribute type 13 has an invalid length.
[  626.779541][  T708] netlink: 'syz.0.8739': attribute type 1 has an invalid length.
[  626.782595][  T708] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8739'.
[  627.160888][  T735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8748'.
[  627.341439][  T768] netlink: 'syz.1.8754': attribute type 1 has an invalid length.
[  627.376962][  T768] 8021q: adding VLAN 0 to HW filter on device bond20
[  627.594461][    C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[  627.648207][  T804] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.8765'.
[  627.836964][  T840] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8776'.
[  627.906671][  T850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8781'.
[  628.063262][  T864] netlink: 34 bytes leftover after parsing attributes in process `syz.1.8786'.
[  628.070784][  T864] netlink: 34 bytes leftover after parsing attributes in process `syz.1.8786'.
[  628.227359][  T866] ip6tnl4: entered promiscuous mode
[  628.229424][  T866] ip6tnl4: entered allmulticast mode
[  628.826789][  T878] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  629.060267][  T925] netlink: 'syz.1.8798': attribute type 1 has an invalid length.
[  629.962369][ T1026] sctp: [Deprecated]: syz.1.8827 (pid 1026) Use of struct sctp_assoc_value in delayed_ack socket option.
[  629.962369][ T1026] Use struct sctp_sack_info instead
[  630.470266][ T1097] Cannot find del_set index 2 as target
[  630.470709][ T1100] Cannot find del_set index 2 as target
[  630.805314][ T1147] x_tables: duplicate underflow at hook 1
[  630.807148][ T1147] x_tables: duplicate underflow at hook 1
[  630.808899][ T1147] x_tables: duplicate underflow at hook 1
[  630.811952][ T1147] x_tables: duplicate underflow at hook 1
[  630.813682][ T1147] x_tables: duplicate underflow at hook 1
[  630.815460][ T1147] x_tables: duplicate underflow at hook 1
[  630.817268][ T1147] x_tables: duplicate underflow at hook 1
[  630.819086][ T1147] x_tables: duplicate underflow at hook 1
[  630.821043][ T1147] x_tables: duplicate underflow at hook 1
[  630.822878][ T1147] x_tables: duplicate underflow at hook 1
[  631.037180][ T1170] --map-set only usable from mangle table
[  631.420612][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  632.117337][ T1217] __nla_validate_parse: 12 callbacks suppressed
[  632.117352][ T1217] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8879'.
[  632.197558][ T1230] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8883'.
[  632.337580][ T1244] bridge_slave_0: default FDB implementation only supports local addresses
[  632.343367][ T1244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8886'.
[  632.343386][ T1245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8886'.
[  633.116205][ T1276] bridge_slave_0: default FDB implementation only supports local addresses
[  633.206569][ T1276] wg1 speed is unknown, defaulting to 1000
[  633.210565][ T1276] vet0_virt_wif speed is unknown, defaulting to 1000
[  633.605080][ T1287] batadv_slave_0: entered promiscuous mode
[  633.609567][ T1287] batadv_slave_0: entered allmulticast mode
[  633.713671][ T1294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8904'.
[  633.717790][ T1294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8904'.
[  633.856412][ T1313] netlink: 'syz.0.8909': attribute type 15 has an invalid length.
[  633.859234][ T1313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8909'.
[  633.862623][ T1313] netlink: 'syz.0.8909': attribute type 15 has an invalid length.
[  633.865560][ T1313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8909'.
[  633.885243][ T1315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8910'.
[  633.907185][ T1320] netlink: 'syz.0.8911': attribute type 1 has an invalid length.
[  633.909930][ T1320] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8911'.
[  633.971598][ T1325] netlink: 'syz.1.8912': attribute type 11 has an invalid length.
[  634.097530][ T1329] bond27: Unable to set down delay as MII monitoring is disabled
[  634.110428][ T1329] bond27 (unregistering): Released all slaves
[  634.121382][ T1330] workqueue: Failed to create a rescuer kthread for wq "bond27": -EINTR
[  634.183392][ T1350] sctp: [Deprecated]: syz.0.8917 (pid 1350) Use of int in maxseg socket option.
[  634.183392][ T1350] Use struct sctp_assoc_value instead
[  634.194485][ T1351] sctp: [Deprecated]: syz.0.8917 (pid 1351) Use of int in maxseg socket option.
[  634.194485][ T1351] Use struct sctp_assoc_value instead
[  634.202645][ T1352] pimreg: entered allmulticast mode
[  634.329438][ T1372] wg1 speed is unknown, defaulting to 1000
[  634.342674][ T1372] vet0_virt_wif speed is unknown, defaulting to 1000
[  634.498025][ T1395] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  634.971626][ T1433] "syz.1.8931" (1433) uses obsolete ecb(arc4) skcipher
[  635.491042][ T1468] netlink: 'syz.0.8943': attribute type 13 has an invalid length.
[  636.114116][ T1517] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  636.867305][ T1554] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  636.931731][ T1556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  637.185456][ T1583] __nla_validate_parse: 6 callbacks suppressed
[  637.185466][ T1583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8981'.
[  637.193381][ T1583] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  637.195665][ T1583] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  637.276427][ T1592] A link change request failed with some changes committed already. Interface vet0_virt_wif may have been left with an inconsistent configuration, please check.
[  637.283175][T30654] vet0_virt_wif speed is unknown, defaulting to 1000
[  637.285886][T30654] syz2: Port: 1 Link ACTIVE
[  637.344230][ T1601] netlink: 'syz.1.8986': attribute type 1 has an invalid length.
[  637.370246][ T1601] bond22: entered promiscuous mode
[  637.373141][ T1601] bond22: entered allmulticast mode
[  637.375498][ T1601] 8021q: adding VLAN 0 to HW filter on device bond22
[  637.406998][ T1606] wg1 speed is unknown, defaulting to 1000
[  637.411182][ T1606] vet0_virt_wif speed is unknown, defaulting to 1000
[  637.537650][ T1620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8989'.
[  637.773130][ T1643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8997'.
[  637.958656][ T1659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9002'.
[  637.971715][ T1659] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9002'.
[  637.980723][ T1665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9004'.
[  638.856195][ T1683] netlink: 'syz.0.9007': attribute type 30 has an invalid length.
[  639.002983][ T1696] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20001
[  639.935792][ T1750] wg1 speed is unknown, defaulting to 1000
[  639.939481][ T1750] vet0_virt_wif speed is unknown, defaulting to 1000
[  639.970132][ T1750] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  640.020179][ T1750] netlink: 116 bytes leftover after parsing attributes in process `syz.0.9028'.
[  640.387089][   T11] block nbd1: Possible stuck request ffff888109f68000: control (read@0,1024B). Runtime 150 seconds
[  640.398155][ T1778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9037'.
[  640.480097][ T1787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9040'.
[  640.483682][ T1787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9040'.
[  641.779731][ T1837] netlink: 'syz.0.9056': attribute type 1 has an invalid length.
[  642.908184][ T1863] __nla_validate_parse: 6 callbacks suppressed
[  642.908198][ T1863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9065'.
[  643.580846][    C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[  662.140780][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  670.461019][   T25] block nbd1: Possible stuck request ffff888109f68000: control (read@0,1024B). Runtime 180 seconds
[  671.989377][ T5279] udevd[5279]: worker [25942] /devices/virtual/block/nbd1 timeout; kill it
[  671.992600][ T5279] udevd[5279]: seq 22182 '/devices/virtual/block/nbd1' killed
[  676.220901][    C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[  700.541098][   T25] block nbd1: Possible stuck request ffff888109f68000: control (read@0,1024B). Runtime 210 seconds
[  726.790683][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  730.630893][   T25] block nbd1: Possible stuck request ffff888109f68000: control (read@0,1024B). Runtime 240 seconds
[  742.141023][    C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[  760.702166][   T11] block nbd1: Possible stuck request ffff888109f68000: control (read@0,1024B). Runtime 270 seconds
[  785.030758][   T34] INFO: task kworker/1:1:44 blocked for more than 143 seconds.
[  785.033819][   T34]       Not tainted syzkaller #0
[  785.035932][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  785.039438][   T34] task:kworker/1:1     state:D stack:21408 pid:44    tgid:44    ppid:2      task_flags:0x4208060 flags:0x00080000
[  785.044424][   T34] Workqueue: events rfkill_sync_work
[  785.046563][   T34] Call Trace:
[  785.047903][   T34]  <TASK>
[  785.049097][   T34]  __schedule+0x14bc/0x5000
[  785.050999][   T34]  ? __pfx___schedule+0x10/0x10
[  785.052939][   T34]  ? schedule+0x91/0x360
[  785.054612][   T34]  schedule+0x165/0x360
[  785.056267][   T34]  schedule_preempt_disabled+0x13/0x30
[  785.058349][   T34]  __mutex_lock+0x7e6/0x1350
[  785.060130][   T34]  ? __mutex_lock+0x5bb/0x1350
[  785.062271][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  785.064368][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  785.066384][   T34]  ? lockdep_hardirqs_on+0x98/0x140
[  785.068382][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  785.070915][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  785.073450][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  785.075681][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  785.077712][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  785.079878][   T34]  rfkill_set_block+0x1d2/0x440
[  785.081912][   T34]  rfkill_sync_work+0x114/0x200
[  785.083806][   T34]  ? process_scheduled_works+0x9ef/0x1770
[  785.086050][   T34]  process_scheduled_works+0xad1/0x1770
[  785.088260][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  785.090816][   T34]  worker_thread+0x8a0/0xda0
[  785.092670][   T34]  kthread+0x711/0x8a0
[  785.094335][   T34]  ? __pfx_worker_thread+0x10/0x10
[  785.096330][   T34]  ? __pfx_kthread+0x10/0x10
[  785.098115][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  785.100191][   T34]  ? lockdep_hardirqs_on+0x98/0x140
[  785.102752][   T34]  ? __pfx_kthread+0x10/0x10
[  785.104592][   T34]  ret_from_fork+0x599/0xb30
[  785.106444][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  785.108487][   T34]  ? __switch_to_asm+0x39/0x70
[  785.110380][   T34]  ? __switch_to_asm+0x33/0x70
[  785.112492][   T34]  ? __pfx_kthread+0x10/0x10
[  785.114369][   T34]  ret_from_fork_asm+0x1a/0x30
[  785.116277][   T34]  </TASK>
[  785.117616][   T34] INFO: task kworker/1:3:30654 blocked for more than 143 seconds.
[  785.120752][   T34]       Not tainted syzkaller #0
[  785.122874][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  785.126235][   T34] task:kworker/1:3     state:D stack:25232 pid:30654 tgid:30654 ppid:2      task_flags:0x4208060 flags:0x00080000
[  785.131294][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  785.133852][   T34] Call Trace:
[  785.135211][   T34]  <TASK>
[  785.156248][   T34]  __schedule+0x14bc/0x5000
[  785.158150][   T34]  ? __pfx___schedule+0x10/0x10
[  785.160135][   T34]  ? schedule+0x91/0x360
[  785.161899][   T34]  schedule+0x165/0x360
[  785.163572][   T34]  schedule_preempt_disabled+0x13/0x30
[  785.165817][   T34]  __mutex_lock+0x7e6/0x1350
[  785.167612][   T34]  ? __mutex_lock+0x5bb/0x1350
[  785.169464][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  785.172100][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  785.174220][   T34]  ? process_scheduled_works+0x9ef/0x1770
[  785.176903][   T34]  ? process_scheduled_works+0x9ef/0x1770
[  785.179185][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  785.181874][   T34]  ? process_scheduled_works+0x9ef/0x1770
[  785.184141][   T34]  process_scheduled_works+0xad1/0x1770
[  785.186352][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  785.188692][   T34]  worker_thread+0x8a0/0xda0
[  785.190632][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  785.193178][   T34]  ? __kthread_parkme+0x7b/0x200
[  785.195148][   T34]  kthread+0x711/0x8a0
[  785.196778][   T34]  ? __pfx_worker_thread+0x10/0x10
[  785.198800][   T34]  ? __pfx_kthread+0x10/0x10
[  785.201191][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  785.203189][   T34]  ? lockdep_hardirqs_on+0x98/0x140
[  785.205144][   T34]  ? __pfx_kthread+0x10/0x10
[  785.206914][   T34]  ret_from_fork+0x599/0xb30
[  785.208697][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  785.210814][   T34]  ? __switch_to_asm+0x39/0x70
[  785.212714][   T34]  ? __switch_to_asm+0x33/0x70
[  785.214629][   T34]  ? __pfx_kthread+0x10/0x10
[  785.216491][   T34]  ret_from_fork_asm+0x1a/0x30
[  785.218359][   T34]  </TASK>
[  785.219628][   T34] INFO: task syz.2.8999:1646 blocked for more than 143 seconds.
[  785.222873][   T34]       Not tainted syzkaller #0
[  785.224828][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  785.228195][   T34] task:syz.2.8999      state:D stack:26968 pid:1646  tgid:1646  ppid:5840   task_flags:0x400040 flags:0x00080002
[  785.232993][   T34] Call Trace:
[  785.234349][   T34]  <TASK>
[  785.235530][   T34]  __schedule+0x14bc/0x5000
[  785.237329][   T34]  ? lockdep_unlock+0x89/0x120
[  785.239227][   T34]  ? stack_trace_save+0x9c/0xe0
[  785.241485][   T34]  ? __pfx___schedule+0x10/0x10
[  785.243412][   T34]  ? schedule+0x91/0x360
[  785.245066][   T34]  schedule+0x165/0x360
[  785.246724][   T34]  schedule_timeout+0x9a/0x270
[  785.248593][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  785.250860][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  785.252890][   T34]  ? lockdep_hardirqs_on+0x98/0x140
[  785.254918][   T34]  ? wait_for_completion+0x267/0x5d0
[  785.256977][   T34]  wait_for_completion+0x2bf/0x5d0
[  785.258990][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  785.265017][   T34]  ? __flush_work+0xd2/0xbc0
[  785.266862][   T34]  ? __flush_work+0xd2/0xbc0
[  785.268661][   T34]  __flush_work+0x9b9/0xbc0
[  785.270438][   T34]  ? __flush_work+0xd2/0xbc0
[  785.272330][   T34]  ? __pfx___flush_work+0x10/0x10
[  785.274319][   T34]  ? __pfx_wq_barrier_func+0x10/0x10
[  785.276333][   T34]  ? __pfx___cancel_work+0x10/0x10
[  785.278294][   T34]  ? nfc_genl_device_removed+0x23c/0x330
[  785.280438][   T34]  ? __cancel_work_sync+0x5c/0x110
[  785.282572][   T34]  __cancel_work_sync+0xbe/0x110
[  785.284473][   T34]  rfkill_unregister+0x92/0x220
[  785.286335][   T34]  nfc_unregister_device+0x96/0x2a0
[  785.287917][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  785.289833][   T34]  virtual_ncidev_close+0x56/0x90
[  785.291536][   T34]  __fput+0x44c/0xa70
[  785.292780][   T34]  task_work_run+0x1d4/0x260
[  785.294232][   T34]  ? __pfx_task_work_run+0x10/0x10
[  785.295798][   T34]  ? __se_sys_close_range+0x4ed/0x650
[  785.297469][   T34]  ? exit_to_user_mode_loop+0x55/0x4f0
[  785.299140][   T34]  exit_to_user_mode_loop+0xff/0x4f0
[  785.300875][   T34]  ? rcu_is_watching+0x15/0xb0
[  785.302370][   T34]  do_syscall_64+0x2e3/0xf80
[  785.303803][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  785.305682][   T34]  ? exc_page_fault+0xab/0x100
[  785.307270][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  785.309030][   T34] RIP: 0033:0x7f188bd8f7c9
[  785.310427][   T34] RSP: 002b:00007ffe6677cc58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  785.313301][   T34] RAX: 0000000000000000 RBX: 000000000009bb07 RCX: 00007f188bd8f7c9
[  785.315711][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  785.318109][   T34] RBP: 00007f188bfe7da0 R08: 0000000000000001 R09: 0000001e6677cf4f
[  785.320573][   T34] R10: 0000001b30520000 R11: 0000000000000246 R12: 00007f188bfe5fac
[  785.322978][   T34] R13: 00007f188bfe5fa0 R14: ffffffffffffffff R15: 00007ffe6677cd70
[  785.325395][   T34]  </TASK>
[  785.326385][   T34] 
[  785.326385][   T34] Showing all locks held in the system:
[  785.328707][   T34] 1 lock held by khungtaskd/34:
[  785.330223][   T34]  #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  785.333321][   T34] 4 locks held by kworker/1:1/44:
[  785.334896][   T34]  #0: ffff888100075948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  785.338197][   T34]  #1: ffffc90000b47b80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  785.342103][   T34]  #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200
[  785.345188][   T34]  #3: ffff888176ecc100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  785.348685][   T34] 2 locks held by getty/5656:
[  785.350450][   T34]  #0: ffff88811402c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  785.354009][   T34]  #1: ffffc9000357b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  785.357706][   T34] 1 lock held by udevd/25942:
[  785.359482][   T34]  #0: ffff888109eeb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  785.363001][   T34] 3 locks held by kworker/1:3/30654:
[  785.364973][   T34]  #0: ffff888100075948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  785.368985][   T34]  #1: ffffc90003327b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  785.374337][   T34]  #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  785.378511][   T34] 1 lock held by syz.2.8999/1646:
[  785.380408][   T34]  #0: ffff888176ecc100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  785.384104][   T34] 3 locks held by syz.1.9063/1854:
[  785.386028][   T34]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  785.389182][   T34]  #1: ffff88816c3f0100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320
[  785.392938][   T34]  #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  785.396551][   T34] 1 lock held by syz.0.9068/1874:
[  785.398491][   T34]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  785.401710][   T34] 1 lock held by syz.0.9068/1875:
[  785.403626][   T34]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  785.406783][   T34] 1 lock held by syz-executor/1878:
[  785.408742][   T34]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  785.411968][   T34] 1 lock held by syz-executor/1880:
[  785.413929][   T34]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  785.417072][   T34] 1 lock held by syz-executor/1882:
[  785.419003][   T34]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  785.422580][   T34] 1 lock held by syz-executor/1885:
[  785.424555][   T34]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  785.427708][   T34] 1 lock held by syz-executor/1887:
[  785.429707][   T34]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  785.433002][   T34] 1 lock held by syz-executor/1889:
[  785.435007][   T34]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  785.438196][   T34] 1 lock held by syz-executor/1894:
[  785.440079][   T34]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  785.443416][   T34] 1 lock held by syz-executor/1896:
[  785.445379][   T34]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  785.448505][   T34] 1 lock held by syz-executor/1898:
[  785.450539][   T34]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  785.453761][   T34] 
[  785.454678][   T34] =============================================
[  785.454678][   T34] 
[  785.457786][   T34] NMI backtrace for cpu 1
[  785.457797][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  785.457807][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  785.457814][   T34] Call Trace:
[  785.457820][   T34]  <TASK>
[  785.457826][   T34]  dump_stack_lvl+0x189/0x250
[  785.457841][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  785.457851][   T34]  ? __pfx__printk+0x10/0x10
[  785.457870][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  785.457882][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  785.457892][   T34]  ? __pfx__printk+0x10/0x10
[  785.457908][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  785.457924][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  785.457936][   T34]  watchdog+0xf3c/0xf80
[  785.457950][   T34]  ? watchdog+0x1e2/0xf80
[  785.457965][   T34]  kthread+0x711/0x8a0
[  785.457977][   T34]  ? __pfx_watchdog+0x10/0x10
[  785.457988][   T34]  ? __pfx_kthread+0x10/0x10
[  785.457999][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  785.458009][   T34]  ? lockdep_hardirqs_on+0x98/0x140
[  785.458019][   T34]  ? __pfx_kthread+0x10/0x10
[  785.458030][   T34]  ret_from_fork+0x599/0xb30
[  785.458045][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  785.458064][   T34]  ? __switch_to_asm+0x39/0x70
[  785.458073][   T34]  ? __switch_to_asm+0x33/0x70
[  785.458084][   T34]  ? __pfx_kthread+0x10/0x10
[  785.458096][   T34]  ret_from_fork_asm+0x1a/0x30
[  785.458116][   T34]  </TASK>
[  785.458120][   T34] Sending NMI from CPU 1 to CPUs 0:
[  785.508710][    C0] NMI backtrace for cpu 0
[  785.508726][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  785.508738][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  785.508745][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  785.508763][    C0] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  785.508772][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 00000286
[  785.508783][    C0] RAX: a4b9aa061dcda400 RBX: ffffffff8197438a RCX: a4b9aa061dcda400
[  785.508791][    C0] RDX: 0000000000000001 RSI: ffffffff8d76bd39 RDI: ffffffff8bbfc660
[  785.508798][    C0] RBP: ffffffff8dc07ea8 R08: ffff88812123359b R09: 1ffff110242466b3
[  785.508807][    C0] R10: dffffc0000000000 R11: ffffed10242466b4 R12: ffffffff8f805a70
[  785.508814][    C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000
[  785.508820][    C0] FS:  0000000000000000(0000) GS:ffff88818eab1000(0000) knlGS:0000000000000000
[  785.508828][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  785.508835][    C0] CR2: 00007fb7d0487e20 CR3: 000000000dd3a000 CR4: 00000000000006f0
[  785.508873][    C0] Call Trace:
[  785.508880][    C0]  <TASK>
[  785.508884][    C0]  default_idle+0x13/0x20
[  785.508899][    C0]  default_idle_call+0x73/0xb0
[  785.508914][    C0]  do_idle+0x1ea/0x520
[  785.508926][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  785.508937][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[  785.508949][    C0]  ? __pfx_do_idle+0x10/0x10
[  785.508963][    C0]  ? do_idle+0x5/0x520
[  785.508973][    C0]  cpu_startup_entry+0x44/0x60
[  785.508983][    C0]  rest_init+0x2de/0x300
[  785.508993][    C0]  start_kernel+0x3ae/0x410
[  785.509005][    C0]  x86_64_start_reservations+0x24/0x30
[  785.509019][    C0]  x86_64_start_kernel+0x143/0x1c0
[  785.509031][    C0]  common_startup_64+0x13e/0x147
[  785.509048][    C0]  </TASK>
[  790.781504][   T11] block nbd1: Possible stuck request ffff888109f68000: control (read@0,1024B). Runtime 300 seconds
