last executing test programs:

3m49.903217067s ago: executing program 1 (id=2052):
r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080)={0x3, "bdbfd0"}, 0x4)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000200)={@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x40000000}, {&(0x7f00000000c0)=""/223, 0xdf}, &(0x7f00000001c0)}, 0xa0)
setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f00000002c0), 0x4)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000300)={<r2=>0x0, 0xdc, "67d03ef4ee9f0ceabf7984d6d77c7c8eebe4c353840afce17110ae6df281623fd3ceb77ac0c98698c4d52967457d595844e7772cb6700efb173eed12c34d6315e260929dc5e98cde4d58f8c0ec068da76eb9b34deae5c589a51784924ca050e7e300478063788bd201cbab1f1cce11622e2cbaff476960cd3bd2108c2cfaefd00f1d0265f0a26b59b429b8a5c4387aeeb44e4ac1584731d6601fcb34882ed0f2fd92f1890d0f2feb97ca634a28c9726795ea45aef7215f8231c9c0243f2deabea0cb8b3e733499b255398f3dab91b5d76801d98adb68284b72c61ca6"}, &(0x7f0000000400)=0xe4)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000440)={r2, 0x101, 0x20}, 0xc)
r3 = socket(0x25, 0xa, 0x2)
sendmsg$SOCK_DESTROY(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x134, 0x15, 0x600, 0x70bd2a, 0x25dfdbfe, {0x8, 0xe}, [@INET_DIAG_REQ_BYTECODE={0x28, 0x1, "7bea5add985f1ab647061d22d0a2d1a3e830bb1245403083fa2bb9fe2ca92d0e3a3c00be"}, @INET_DIAG_REQ_BYTECODE={0xc9, 0x1, "dc1551be9d7bc8964a7fc2f4b4b54b6f560e2c9d576b1202cc9c065513fcaa1733592e114bb20e376228860b7b83b20560120dad055230eb1bb7e57cbf3d2222bdf1c90b884a13f49525764a7be005186614377df98046e1c09ea08af8966bbd42b83e2495e8810cb9cb3ac7a4f510576278f2ecfe1cd5eaab60355d1e0849498538e1ecfcbe1fa7b606de85a970d0ca4f47b603679ecd3c360d473d8f4493ae8be3990b87d812a68b390ca232e2486aae29e31b73f945fb697d1fa9266221c834be965d25"}, @INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "fb9faeffd508fc6d651f690836e5baeb6bcbb76f63a7c41adaf2a6abe8edd784d0b7635c3fc2"}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x20024800)
ioctl$FIONCLEX(r1, 0x5450)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000680)={'bridge0\x00', 0x2})
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0xe3d42d087e5383d6, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xd}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2040000}, 0x4014)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000007c0)={<r5=>r1, 0xa85a, 0x9, 0x6})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r5, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0], 0x0, 0xc, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000980)}}, 0x10)
setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000b00)=0x200, 0x4)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000b40)={{0x0, @local, 0x4e22, 0x1, 'wrr\x00', 0x32, 0x4, 0x70}, {@loopback, 0x4e20, 0x4, 0x0, 0x3, 0x9}}, 0x44)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000bc0), r6)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000c00), 0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000c40)={<r7=>r2, 0x6}, &(0x7f0000000c80)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000cc0)=@assoc_value={r7}, 0x8)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x80049367, &(0x7f0000000d00))
recvmsg$qrtr(r5, &(0x7f0000001fc0)={&(0x7f0000000d40), 0xc, &(0x7f0000000e40)=[{&(0x7f0000000d80)=""/192, 0xc0}], 0x1, &(0x7f0000000e80)=[{0x28, 0x0, 0x0, ""/19}, {0x1010, 0x0, 0x0, ""/4096}, {0xf8, 0x0, 0x0, ""/227}], 0x1130, 0x100}, 0x38, 0x1)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000002000)={r2, 0x49e8, 0x400, 0xc3, 0xa741, 0x1}, &(0x7f0000002040)=0x14)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r9, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x38, 0x140b, 0x0, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x80)
socket$l2tp6(0xa, 0x2, 0x73)

3m49.795424257s ago: executing program 1 (id=2054):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="5017", 0x2}], 0x1, &(0x7f0000002140)=ANY=[], 0x198}, 0x4008000)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)

3m49.783123452s ago: executing program 1 (id=2057):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32)
sendto$inet(r0, 0x0, 0xfffffeab, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (rerun: 32)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x45057bf4ccb05c67, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc9b}, 0x94) (async)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="88000200e180f8e3c0bf06ace85b9ca636a2000008001b0000020000c9608cc0a84627326b9823852f67ff8a6432edad502dfef98c904822c1c18325644d333c3ca8c1863538b71e639d"], 0x28}}, 0x0) (async)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x7, 0x6})
r2 = socket(0x11, 0x2, 0x0)
close(r2) (async)
sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="900d3798e4653207eae6da23bf6c69f8e965679b910b52e0a4de8e3c4ef97ab320820bd9275a6e2a4609c4feb730084e64cc106664be66878f403244c97c0411b65371955f45c915599f9f722d1962a221a86918d50891c838bfdf21f7a255f2e2cf5839d1c3aa3dbfcd94ca44e18c7863d497ff4f85628494915bc016f7c5d62747bb5368ef052201a0ee3cc9dca7156e893cf07b494f98a177460a7ec073fd8af879ae71c8cac715a241052bae3a3f09f4f4dda617e5ca05290be71acaabf4544ca83830272440b95c66d0aa091c738b41f76df43c9498d47f3d35a56205f4c1050cabb8cfd44814884bee33f0131915ac98d983f3cf39715100f932bc657d764c61dd2bb28be0b1a88aa08d2d0bc3d7347506ac629d201098307f21becdf4d9010a4cf9e378b4395a6ca9d83f6a4736351addb590ae9d0ef3fd92ee454850d4a696df0d89ac33d168e985397049904e345d3858d002c5aeee3158fe9936f57a3977b528cd8869848842ef4d398e440c7e37d02c183e3721d261476ea0ef14a39e8853f6826e505d18395f39819d216899ecfea721f134e735d02b1c1951aea0e16f633806c068ced90983f356a50fa23f3402c7abd4a776983880ffd711e9973c7b286c208d59ba5d46132d73a68c135ffe894d36f04c80b7ef620f952d80d189e02b2365cb3abeacf4c767b26d2594fd3be7fe78de02163a9d3633f0eeaa47018f3203a256eb8fb1e56f2159c839964bc178fe2003bbed31ae0efcbb565f62512880ed2837e74b8226060e6a79c0bfe7390af286c902209556a971b3c1b7687a16be5684b209b9a766da9e2b9b6f72215d3ff3f91794b1787332679fe9da9d85cc419e8ad8ecab8812f1c46791205ae2d409c17aad2c4812c490e9c7ecaec717575e2b9a428540e6d1187876ef53e0b304ed115c0afd918f5c03dc3d925474d92f4b4470374ad387a7fe447ebb725609fa456cc9cef927aefa0126484887defb7806c572e894740a627d628b4f75bd2f", 0x2d2}], 0x1}}], 0x1, 0xc0)

3m49.702840085s ago: executing program 1 (id=2058):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0)
setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000040)=0x7, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r5, 0x101, 0x2, &(0x7f0000000180)=0x446906b5, 0x4)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r6, 0x1, 0x70bd2b, 0x65dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x24000841)

3m49.515150705s ago: executing program 1 (id=2061):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x101, 0x14, 0xd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket(0x2, 0xa, 0x300)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r6 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2, 0x0, 0x10}, 0x4840)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @timestamp, @mss={0x2, 0x7}, @timestamp, @window={0x3, 0x8, 0x6}, @mss={0x2, 0x9}, @timestamp, @sack_perm], 0x8)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001821", @ANYRES32=r8, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x1002, &(0x7f00000017c0)=""/4098, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
ioctl$sock_bt_hci(r0, 0x800448f0, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r9, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r10 = accept$inet6(r3, 0x0, &(0x7f0000000300))
setsockopt$inet6_buf(r10, 0x29, 0x2d, &(0x7f0000000840)="20de23bfd4841521f7c94d3e0a5916db58c7413406d34dacba7909b7d848de5f3003036a80157c90e9f321b9a26bffbed10ddafc864ab393c8f9c724bfe2597755ddd071ab76683d95d675f8afde63648b0829ab31cdec413fe5dd2e8ddd493041885bd37640bb328e5c86a3cf3f087da258626ff7b60be9bd9a956e2ce297dddfa58726b12ebdae", 0x88)
socket(0x11, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

3m49.364624484s ago: executing program 1 (id=2063):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273df98ab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000200)={'veth0_macvtap\x00'})
epoll_pwait(r2, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0xffa, &(0x7f0000000080)={[0x7]}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300000000000c000180"], 0x28}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1401"], 0x114}], 0x1}, 0x400c010)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@fadd={0x0, 0x114, 0x6, {{0x9, 0xb}, &(0x7f0000000380)=0x6, &(0x7f00000003c0)=0x342cb223, 0x80, 0x1, 0xffffffffffffffff, 0x5, 0x8, 0x8}}, @mask_cswp={0x0, 0x114, 0x9, {{0xfffeffff, 0xf}, &(0x7f0000000580)=0x7, &(0x7f0000000600)=0x6, 0x7fffffffffffffff, 0x6, 0x7, 0x7, 0x2, 0xfffffffffffffffc}}], 0x48, 0x40014}, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0)
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYRESHEX=r4], 0xfdef)
openat$cgroup_freezer_state(r4, &(0x7f00000000c0), 0x2, 0x0)
r8 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x24048841)
write$cgroup_pid(r8, &(0x7f0000000180), 0x12)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$sock_int(r10, 0x1, 0xb, &(0x7f0000000bc0)=0x5, 0x4)

3m34.260117892s ago: executing program 32 (id=2063):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273df98ab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000200)={'veth0_macvtap\x00'})
epoll_pwait(r2, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0xffa, &(0x7f0000000080)={[0x7]}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300000000000c000180"], 0x28}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1401"], 0x114}], 0x1}, 0x400c010)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@fadd={0x0, 0x114, 0x6, {{0x9, 0xb}, &(0x7f0000000380)=0x6, &(0x7f00000003c0)=0x342cb223, 0x80, 0x1, 0xffffffffffffffff, 0x5, 0x8, 0x8}}, @mask_cswp={0x0, 0x114, 0x9, {{0xfffeffff, 0xf}, &(0x7f0000000580)=0x7, &(0x7f0000000600)=0x6, 0x7fffffffffffffff, 0x6, 0x7, 0x7, 0x2, 0xfffffffffffffffc}}], 0x48, 0x40014}, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0)
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYRESHEX=r4], 0xfdef)
openat$cgroup_freezer_state(r4, &(0x7f00000000c0), 0x2, 0x0)
r8 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x24048841)
write$cgroup_pid(r8, &(0x7f0000000180), 0x12)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$sock_int(r10, 0x1, 0xb, &(0x7f0000000bc0)=0x5, 0x4)

1.98259684s ago: executing program 0 (id=4768):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x7}, 0x8040)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022cbd7000ffdbdf250a000000180001801400020074756e6c30"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x840)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r4, 0x0)
write$cgroup_int(r4, &(0x7f0000000000)=0x5, 0x12)

1.924676618s ago: executing program 0 (id=4770):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r3, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9}, 0x94)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c00781830bd5b641900000c000000020000000000000000001e0d0000e7974c267fd2087be77f57d291199998e4de00aae40d7421b6c2d8b46aa9aff3aa65f96a30a6127147011ad62288201826f11366b9beb776e782f31ae1b3f18fe4f7253c03dd11571926efafc64e26a9333031d93fb8d9e9ce3696b873f7440c355e8cb05c456fd0a47e626aa55f1e650c90650da880988affdef6f4f91c6a93"], 0x0, 0x26}, 0x28)
unshare(0x8000400)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x38, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x4)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000280)={0x8, 0x2, 0x800b, 0x1, 0x0, 0x0, 0x7, 0xc8c4}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={r5, 0x20, &(0x7f0000000a40)={0x0, 0x0, 0x0, &(0x7f0000000a00)=""/56, 0x38}}, 0x10)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x63}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40480c0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x0)

1.923608148s ago: executing program 0 (id=4772):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000030000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x1e, &(0x7f0000000400)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0xac, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x76, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x200000000000000b, 0x2, 0x1, 0x0, [@mcast1]}], {0x0, 0x0, 0x5e, 0x0, @gue={{0x2, 0x0, 0x3, 0x9, 0x100}, "c0c5a4e3e82e6b2724d5d53233b03dcaa09ba14025f30521838db58715b950088622028eb235f4d8047816bb11ce5e5502cbc0ae997891dfcbb32bd039d06e37f433230d02ff6e1e620273e2eae6"}}}}}}}, 0x0)
r2 = socket(0x10, 0x80003, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000100)=0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000081"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

1.845031595s ago: executing program 0 (id=4774):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0004804e0d", @ANYRESDEC], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x7, 0x4, 0x2400000, 0x4f9, 0x20}, 0x48)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', <r5=>0x0})
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r7, @ANYBLOB="8304050000000000280012000820375f000100677265001c00028008000600ac1414bb06000e000100000006000f00b74b0000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
getsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000000080), &(0x7f0000000180)=0x4)
r8 = socket$netlink(0x10, 0x3, 0x7)
bind$802154_dgram(r6, &(0x7f0000000200)={0x24, @short={0x2, 0x0, 0xffff}}, 0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x100, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
recvmmsg(r8, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0)

1.844487505s ago: executing program 2 (id=4775):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @null}, [@null, @remote, @remote, @remote, @bcast, @default, @null, @rose]}, &(0x7f0000000000)=0x48)
ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x20})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
unshare(0x6020480) (rerun: 32)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, 0x0, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0) (async)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)={0x28, r7, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}]}]}, 0x28}}, 0x24040890) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r3}, 0x10)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}], 0x10)
r10 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async)
bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async, rerun: 32)
listen(r10, 0x6) (rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112d9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)

1.703364477s ago: executing program 3 (id=4777):
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@multicast2, @loopback, @private=0xa010100}, 0xc)

1.703106326s ago: executing program 2 (id=4778):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x15, 0x5, 0x0)
ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014001680100008800c000280080001"], 0x38}}, 0x0)

1.632730576s ago: executing program 3 (id=4779):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="120000000300000004000000"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000380)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x14011}, 0x48001)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000004000850000001100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000a560577c7bc550994b9b0406d512da04bc5b43c47c24ade6b61fc2f13e2e2692e5cf8063a13d167d759712bd122663ef60839bd26643cb9f04282280bfd4969d777dfc5b3dca2e570ccf0985604a83bd0ee2edfe491544bbb6eecb74a9a6ea888e84bbd32d15908c82f879db6d8c31e851ed07d8733740a498d9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r8=>0x0})
connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000b40)=ANY=[@ANYBLOB="ac0200001200000129bd7000fddbdf25270904024e224e24030000000000010005000000070000000000c0ff400000001d00000006000000", @ANYRES32=r8, @ANYBLOB="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"], 0x2ac}, 0x1, 0x0, 0x0, 0x8005}, 0x4000)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x100010, r6, 0xfa776000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
listen(r2, 0x3)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @loopback}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff, 0x0, 0xfffd}}}}}}, 0x0)
syz_emit_ethernet(0x139, &(0x7f0000000a00)={@local, @link_local, @val={@val={0x88a8, 0x0, 0x0, 0x403}, {0x8100, 0x5, 0x1}}, {@ipv4={0x800, @udp={{0x3d, 0x4, 0x2, 0x13, 0x123, 0x68, 0x0, 0x2, 0x11, 0x0, @empty, @local, {[@ssrr={0x89, 0x17, 0x9, [@empty, @local, @multicast1, @rand_addr=0x64010100, @local]}, @lsrr={0x83, 0x17, 0xd, [@empty, @loopback, @multicast2, @empty, @loopback]}, @end, @generic={0x94, 0x6, "10d8c3d1"}, @cipso={0x86, 0x5f, 0x3, [{0x2, 0xa, "eb96953b2d6b4f90"}, {0x5, 0xd, "62f3f9dc3b90ecadf9f3fe"}, {0x6, 0x9, "bc0f523658a10e"}, {0x2, 0x11, "8af1bebb0fa780764168d499b90bae"}, {0x2, 0xc, "25e70ca6fded58e0cc1c"}, {0x5, 0xf, "6dd50cf1f537bb1ea5eda6c902"}, {0x6, 0xd, "2ddc838c3b7fad5225d07c"}]}, @timestamp_prespec={0x44, 0x4c, 0xe9, 0x3, 0x8, [{@local, 0xfffffffd}, {@private=0xa010101, 0x4}, {@remote, 0x9}, {@empty, 0x3}, {@broadcast, 0xffff}, {@local, 0x9}, {@local, 0x168}, {@rand_addr=0x64010101, 0x80000000}, {@empty, 0x7ff}]}]}}, {0x4e23, 0x4e22, 0x2f, 0x0, @opaque="eb00c969875004eadfe3be1329a1df5fbbcc228dd467a5c991cdda570c19100767d42fa908cc1a"}}}}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="050000230306000000000000000000004308a986fcadb2b109bac2d8a6e7170dc71c18abbde96e627d940268079560c7078b7437496d1dc70a20f8d9aa07dbe924dafb2faa3342937ab336fce6", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001000000000000000001000094b1c39a3cc2fbfd"], 0x48}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000500)=0xfffffffc, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0xfffd, @local}, 0x10)

364.806388ms ago: executing program 2 (id=4780):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000d80)=0x55, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[], 0xe8}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0)

364.238497ms ago: executing program 3 (id=4781):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x400010, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0)

362.692801ms ago: executing program 0 (id=4782):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r2, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)}}], 0x1, 0x4000)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000005000080050011802efff2"], 0x20}], 0x1}, 0x300)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000000007000001000000000000000000001294200c8d8a2ef2eb0831614ff8bf4afa37724e7ec462c046576ad80265177e5e4e429ebe422ffc3c94fb48959e3779871a3fb0e93616c2"], 0x14}, 0x1, 0x0, 0x0, 0x20040815}, 0x800) (async)
shutdown(r2, 0x1) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r6}, 0x10) (async, rerun: 64)
r7 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) (async)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 64)
r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 64)
ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000100)={r8, r8, 0xfffe, 0x0, 0x0, 0xc2, 0x85, 0x15c2, 0x5886, 0x6, 0x0, 0x0, 'syz0\x00'}) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
pipe(&(0x7f00000001c0)) (rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))

244.595218ms ago: executing program 3 (id=4783):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$xdp(0x2c, 0x3, 0x0) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000500)={0x0, 0x0, 0x1800, 0x3}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0xbc}}, 0xc0)

244.225623ms ago: executing program 2 (id=4784):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0) (async)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0xb, 0x0, 0x1b}, 0x10) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
writev(r3, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) (async)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98)
ioctl$F2FS_IOC_SET_PIN_FILE(r7, 0x4004f50d, &(0x7f0000000100)=0x1) (async)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, 0x0, 0x0) (async)
splice(r2, 0x0, r6, 0x0, 0x80, 0x6) (async)
write(r4, 0x0, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r9) (async)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000000c0)=0x20, 0x4) (async)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r10, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) (async)
bind$vsock_stream(r10, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) (async)
listen(r10, 0x0) (async)
r11 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r11, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)

191.337981ms ago: executing program 3 (id=4785):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private=0xa010101, @in=@empty, 0x0, 0xbf, 0x0, 0x0, 0x2}, {0xfffffffffffffffb, 0xfffffffffffffffd, 0x1}, {0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x0, 0xf000000}}, 0xe8)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
listen(r1, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaff01ffffefff08004500000000000000004e227c8129141728c6eebd8e173cf9a928eac83acec015812d944c3fdd3f9523f5132953d2445d198dc13191a8d5d3f329d29b405b1b5b77e7f1cde21d9df1327c94bb7cc24e584151516bf5ddb40c1dd12467c24a7b047d7c140c2e5e00"/131, @ANYRES32=0x41424344, @ANYRESHEX=r0, @ANYBLOB="5010000090780000"], 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="3cf6123f", 0x4}], 0x1}, 0x24000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x14, r5, 0x321, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x4048004)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000340))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$nl_route_sched(r3, 0x0, 0x48c0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, 0x0, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r7, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/50, 0x32}], 0x5}, 0xfffffffc}], 0x2, 0x42, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14)
sendmsg$nl_route_sched(r2, 0x0, 0x8000)

134.534549ms ago: executing program 0 (id=4786):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111750000000000851000000200000085000000a0000000951f0000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_mreq(r1, 0x29, 0x1, 0x0, &(0x7f0000000100))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0xca58c30f81b6079f})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})
write$tun(r2, &(0x7f0000000280)=ANY=[], 0xc2)
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd)

132.781718ms ago: executing program 3 (id=4787):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x69)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x7e, 0x4f6, 0x15, @empty, @loopback={0xff00, 0xffff888101827518}, 0x40, 0x40, 0x8, 0x10}})
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0xc40c8)
close(r0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={<r4=>0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}]}, &(0x7f0000000080)=0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="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", @ANYRES32=<r5=>0xffffffffffffffff, @ANYBLOB, @ANYRES32=<r6=>0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0600000004000000fd0f00000200000000000000", @ANYRESHEX=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r5, @ANYRESHEX=r0], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r7, &(0x7f0000000ac0)="c876f1c31ef0831156adb791103284ee9082639d20fe5145d5fcefcc79fd468e59053a5fd62c846579af10d9cdc9e540f622eb8ac161d95dca82368b8c06caae9015a30655971c7f0df6b1c67125fb668bb8b47a915183e21633cbe147f276fe29d5c033958ea62e64230816", &(0x7f00000009c0)=""/191}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1, @ANYRESHEX=r6], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
unshare(0x4a060100)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0xffbfff}, 0x2d)
write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000002000000000800040001000000", 0x24)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f0000000200))
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000002800))
ioctl$int_out(r8, 0x5460, &(0x7f0000000080))
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={<r11=>0x0, @in6={{0xa, 0x3, 0x5, @mcast1, 0x7}}}, &(0x7f0000000000)=0x84)
r12 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r12, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006)
accept(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x12, 0xc, &(0x7f0000001040)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=r4, @ANYRES16=r11, @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4)

581.214µs ago: executing program 2 (id=4788):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
write$cgroup_int(r2, &(0x7f0000000180)=0x57f, 0x12)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
r4 = socket(0x15, 0x2, 0xffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000030a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x2c000010)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r4)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_udp_int(r7, 0x11, 0x66, 0x0, &(0x7f0000000040))
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00"/112], 0xb8}}, 0x0)
r8 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r8, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f0000001f00))
r9 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r9, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$PPPIOCBRIDGECHAN(r10, 0x40047435, &(0x7f0000000200)=0x1)
sendmmsg(r8, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
r11 = accept4$inet(r7, &(0x7f0000000440)={0x2, 0x0, @local}, &(0x7f0000000480)=0x10, 0x80800)
setsockopt$inet_group_source_req(r11, 0x0, 0x2f, &(0x7f0000000000)={0x2, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e23, @loopback}}}, 0x108)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="01002dbd7000ffdbdf251200000000080007000800"/30], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

0s ago: executing program 2 (id=4789):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x0, 0xb152, 0x1, 0x1fc, 0x0, 0x5}}) (async)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r1, 0x11, 0x68, &(0x7f0000000080), 0x4) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

kernel console output (not intermixed with test programs):

pe 12 has an invalid length.
[  352.601867][T17107] __nla_validate_parse: 27 callbacks suppressed
[  352.601877][T17107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3003'.
[  352.895791][T17118] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3006'.
[  352.918191][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3006'.
[  352.924642][T17115] netlink: 'syz.2.3006': attribute type 1 has an invalid length.
[  353.482184][T17144] netlink: 'syz.0.3011': attribute type 10 has an invalid length.
[  353.516456][T17146] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3012'.
[  353.519625][T17146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3012'.
[  353.522417][T17146] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  353.529456][T17148] sctp: [Deprecated]: syz.3.3013 (pid 17148) Use of int in max_burst socket option.
[  353.529456][T17148] Use struct sctp_assoc_value instead
[  353.574007][T17152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.579888][T17152] syzkaller0: entered promiscuous mode
[  353.582132][T17152] syzkaller0: entered allmulticast mode
[  353.591346][T17152] tipc: Resetting bearer <eth:syzkaller0>
[  353.593735][T17148] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  353.600327][T17151] tipc: Resetting bearer <eth:syzkaller0>
[  353.611569][T17151] tipc: Disabling bearer <eth:syzkaller0>
[  353.671068][T17155] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.693972][T17157] tap0: tun_chr_ioctl cmd 1074025677
[  353.695802][T17157] tap0: linktype set to 0
[  353.803459][T17163] netlink: 'syz.2.3017': attribute type 83 has an invalid length.
[  353.812443][T17163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3017'.
[  353.817608][T17163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3017'.
[  353.821010][T17163] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3017'.
[  353.829596][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3017'.
[  353.833751][T17163] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3017'.
[  353.853335][T17165] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  354.091506][T17175] sctp: [Deprecated]: syz.0.3021 (pid 17175) Use of int in max_burst socket option.
[  354.091506][T17175] Use struct sctp_assoc_value instead
[  354.107080][T17177] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  354.207134][T17183] bond0: entered promiscuous mode
[  354.210699][T17183] bond0: left promiscuous mode
[  354.481692][T17216] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  354.609017][T17237] dummy0: mtu less than device minimum
[  354.809941][T17254] vxcan4: entered promiscuous mode
[  355.226551][T17294] IPVS: length: 49 != 24
[  355.235743][T17294] batadv0: entered promiscuous mode
[  355.241407][T17294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.409412][T17301] validate_nla: 3 callbacks suppressed
[  355.409424][T17301] netlink: 'syz.0.3057': attribute type 1 has an invalid length.
[  355.518387][T17316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.521053][T17316] syzkaller0: entered promiscuous mode
[  355.523326][T17316] syzkaller0: entered allmulticast mode
[  355.546243][T17316] tipc: Resetting bearer <eth:syzkaller0>
[  355.552175][T17315] tipc: Resetting bearer <eth:syzkaller0>
[  355.568043][T17315] tipc: Disabling bearer <eth:syzkaller0>
[  355.790782][T17330] sctp: [Deprecated]: syz.0.3065 (pid 17330) Use of int in max_burst socket option.
[  355.790782][T17330] Use struct sctp_assoc_value instead
[  355.883088][T17337] netlink: 'syz.2.3066': attribute type 3 has an invalid length.
[  355.961007][T17337] lo speed is unknown, defaulting to 1000
[  355.964348][T17337] lo speed is unknown, defaulting to 1000
[  355.970765][T17337] lo speed is unknown, defaulting to 1000
[  356.056150][T17352] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20004
[  356.345885][T17361] sctp: [Deprecated]: syz.3.3070 (pid 17361) Use of int in max_burst socket option deprecated.
[  356.345885][T17361] Use struct sctp_assoc_value instead
[  356.687042][T17366] pim6reg1: entered allmulticast mode
[  356.873717][T17375] netlink: 'syz.2.3075': attribute type 1 has an invalid length.
[  356.876896][T17375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.932061][T17381] netlink: 'syz.0.3076': attribute type 4 has an invalid length.
[  356.936700][T17381] netlink: 'syz.0.3076': attribute type 4 has an invalid length.
[  357.083930][T17388] netlink: 'syz.3.3079': attribute type 9 has an invalid length.
[  357.241273][T17402] netlink: 'syz.3.3081': attribute type 7 has an invalid length.
[  357.244021][T17402] netlink: 'syz.3.3081': attribute type 8 has an invalid length.
[  357.709146][T17426] __nla_validate_parse: 17 callbacks suppressed
[  357.709159][T17426] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3088'.
[  357.714984][T17426] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3088'.
[  358.020326][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3090'.
[  358.028266][T17437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3091'.
[  358.062764][T17439] netlink: 'syz.0.3092': attribute type 11 has an invalid length.
[  358.077066][T17441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3093'.
[  358.131467][T17443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3094'.
[  358.230729][T17454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3097'.
[  358.321103][T17459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3098'.
[  358.329943][T17459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3098'.
[  358.462101][T17468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3102'.
[  359.957277][T17505] netlink: 'syz.3.3109': attribute type 49 has an invalid length.
[  360.014952][T17511] bond0: entered promiscuous mode
[  360.024168][T17511] debugfs: 'hsr0' already exists in 'hsr'
[  360.026037][T17511] Cannot create hsr debugfs directory
[  360.027947][T17511] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  360.033902][T17511] hsr0: entered allmulticast mode
[  360.035732][T17511] bond0: entered allmulticast mode
[  360.048842][T17511] batadv0: entered allmulticast mode
[  360.053113][T17511] 8021q: adding VLAN 0 to HW filter on device hsr0
[  360.058722][T17511] bond0: left promiscuous mode
[  360.143677][T17524] netem: incorrect gi model size
[  360.145891][T17524] netem: change failed
[  360.225979][T17530] sch_tbf: burst 0 is lower than device ip6gre0 mtu (65485) !
[  361.714267][T17541] netlink: 'syz.2.3122': attribute type 1 has an invalid length.
[  361.740872][T17541] bond33: (slave geneve4): making interface the new active one
[  361.744233][T17541] bond33: (slave geneve4): Enslaving as an active interface with an up link
[  361.748414][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  361.752332][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  361.755015][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  361.759285][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  363.378260][T17555] __nla_validate_parse: 3 callbacks suppressed
[  363.378271][T17555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3127'.
[  363.389773][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3127'.
[  363.561349][T17571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3129'.
[  363.564750][T17571] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3129'.
[  363.649656][T17572] bond22: (slave veth19): Releasing backup interface
[  363.774359][T17574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3129'.
[  364.248475][T17580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  364.253464][T17581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3132'.
[  364.306194][T17583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3132'.
[  364.309594][    T9] lo speed is unknown, defaulting to 1000
[  364.311382][T17583] openvswitch: netlink: Flow key attr not present in new flow.
[  364.311645][    T9] syz0: Port: 1 Link DOWN
[  364.315520][    T9] lo speed is unknown, defaulting to 1000
[  364.345862][T17585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3133'.
[  364.351830][T17585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3133'.
[  364.399671][T17587] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3134'.
[  364.431940][T17587] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.434621][T17587] syzkaller0: entered promiscuous mode
[  364.436307][T17587] syzkaller0: entered allmulticast mode
[  364.472006][T17587] tipc: Resetting bearer <eth:syzkaller0>
[  364.487344][T17587] tipc: Disabling bearer <eth:syzkaller0>
[  364.790793][T17607] bond25: entered promiscuous mode
[  366.347745][T17683] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  366.514979][T17688] veth0_vlan: left promiscuous mode
[  366.524358][T17688] veth0_vlan: entered promiscuous mode
[  366.540124][T17689] netlink: 'syz.3.3160': attribute type 1 has an invalid length.
[  366.543159][T17689] netlink: 'syz.3.3160': attribute type 1 has an invalid length.
[  366.552081][T17688] netlink: 'syz.3.3160': attribute type 1 has an invalid length.
[  366.554649][T17688] netlink: 'syz.3.3160': attribute type 1 has an invalid length.
[  366.621338][T17699] bond33: (slave geneve4): Releasing active interface
[  366.691720][ T9250] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  366.695046][ T9250] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  366.715828][T17709] team0: Unable to change to the same mode the team is in
[  366.721738][ T9250] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  366.724984][ T9250] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  366.735281][T17699] vlan0: entered promiscuous mode
[  366.747818][T17699] tipc: Enabled bearer <eth:team0>, priority 0
[  367.867479][   T51] tipc: Node number set to 2192053553
[  369.793091][T17722] tap0: tun_chr_ioctl cmd 1074025676
[  369.795205][T17722] tap0: owner set to 0
[  369.805479][T17724] tap0: tun_chr_ioctl cmd 62723
[  369.854820][T17730] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  370.069813][T17745] __nla_validate_parse: 16 callbacks suppressed
[  370.069830][T17745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3176'.
[  371.109915][T17776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3185'.
[  371.895775][T17791] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  371.905472][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3188'.
[  371.923140][T17791] bond0: entered promiscuous mode
[  371.935441][T17791] bond0: left promiscuous mode
[  372.236243][T17803] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  372.416950][T17810] lo speed is unknown, defaulting to 1000
[  372.439600][T17810] lo speed is unknown, defaulting to 1000
[  372.469431][T17810] lo speed is unknown, defaulting to 1000
[  372.799263][T17825] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3196'.
[  372.854777][T17825] lo speed is unknown, defaulting to 1000
[  372.858511][T17825] lo speed is unknown, defaulting to 1000
[  372.862639][T17825] lo speed is unknown, defaulting to 1000
[  373.091774][T17831] netlink: 'syz.3.3198': attribute type 16 has an invalid length.
[  373.098856][T17831] netlink: 'syz.3.3198': attribute type 17 has an invalid length.
[  373.188496][T17831] tipc: Resetting bearer <eth:syzkaller0>
[  373.277654][ T5741] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  373.280276][ T5741] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  373.282796][ T5741] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  373.285207][ T5741] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  373.650422][T17856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3203'.
[  373.699841][T17856] netem: change failed
[  373.712692][T17856] vlan4: entered allmulticast mode
[  373.714268][T17856] bridge0: entered allmulticast mode
[  373.716070][T17856] bridge9: port 1(vlan4) entered blocking state
[  373.727651][T17856] bridge9: port 1(vlan4) entered disabled state
[  373.731236][T17856] vlan4: entered promiscuous mode
[  373.732808][T17856] bridge0: entered promiscuous mode
[  373.903863][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3206'.
[  373.918821][T17867] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  374.218807][T17886] netlink: 'syz.2.3209': attribute type 10 has an invalid length.
[  374.268370][T17891] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  374.383255][   T61] block nbd2: Possible stuck request ffff8880214e0000: control (read@0,4096B). Runtime 240 seconds
[  374.386963][   T11] block nbd1: Possible stuck request ffff8880214b8000: control (read@0,4096B). Runtime 240 seconds
[  374.425717][T17902] netlink: 'syz.2.3214': attribute type 1 has an invalid length.
[  374.432844][T17902] netlink: 'syz.2.3214': attribute type 1 has an invalid length.
[  374.436149][T17902] netlink: 'syz.2.3214': attribute type 1 has an invalid length.
[  374.447265][T17902] netlink: 'syz.2.3214': attribute type 1 has an invalid length.
[  374.451001][T17902] netlink: 'syz.2.3214': attribute type 1 has an invalid length.
[  374.454028][T17902] netlink: 'syz.2.3214': attribute type 1 has an invalid length.
[  374.457199][T17902] netlink: 'syz.2.3214': attribute type 1 has an invalid length.
[  374.673685][T17923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3218'.
[  374.873121][T17941] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  375.040720][T17960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3228'.
[  375.173880][T17980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3235'.
[  375.554201][T17999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3239'.
[  375.561461][T18001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3239'.
[  375.605675][T18003] vxcan0: entered promiscuous mode
[  375.683270][T18005] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3241'.
[  375.687093][T18005] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3241'.
[  375.694325][T18005] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  375.700353][T18005] gretap4: entered promiscuous mode
[  375.702145][T18005] gretap4: entered allmulticast mode
[  375.705014][T18005] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3241'.
[  375.911294][T18017] 8021q: adding VLAN 0 to HW filter on device bond34
[  375.926343][T18018] 8021q: adding VLAN 0 to HW filter on device bond34
[  375.929098][T18018] bond34: (slave vxcan5): The slave device specified does not support setting the MAC address
[  375.933730][T18018] bond34: (slave vxcan5): Error -95 calling set_mac_address
[  376.186691][T18044] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3251'.
[  376.320656][T18047] lo speed is unknown, defaulting to 1000
[  376.324341][T18047] lo speed is unknown, defaulting to 1000
[  376.330052][T18047] lo speed is unknown, defaulting to 1000
[  376.793352][T18057] lo speed is unknown, defaulting to 1000
[  376.797098][T18057] lo speed is unknown, defaulting to 1000
[  376.802921][T18057] lo speed is unknown, defaulting to 1000
[  376.905697][T18062] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  377.024965][T18066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3256'.
[  377.472323][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3260'.
[  377.486273][T18117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3268'.
[  377.556008][T18128] lo: entered allmulticast mode
[  377.574695][T18128] ip6_vti0: left promiscuous mode
[  377.599935][T18128] ip6_vti0: left allmulticast mode
[  377.626799][T18128] 8021q: adding VLAN 0 to HW filter on device team0
[  377.639284][T18128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  377.648413][   T51] lo speed is unknown, defaulting to 1000
[  377.650887][   T51] syz0: Port: 1 Link ACTIVE
[  377.670562][T18126] lo: left allmulticast mode
[  377.672398][   T51] lo speed is unknown, defaulting to 1000
[  377.809882][T18146] 8021q: adding VLAN 0 to HW filter on device bond26
[  377.852562][T18146] bond26: (slave ip6gretap0): making interface the new active one
[  377.861403][T18146] bond26: (slave ip6gretap0): Enslaving as an active interface with an up link
[  377.906874][T18146] veth21: entered promiscuous mode
[  377.915838][T18146] bond26: (slave veth21): Enslaving as an active interface with a down link
[  377.921593][T18146] erspan0: entered allmulticast mode
[  377.942905][T18146] bond26: (slave erspan0): Enslaving as an active interface with an up link
[  378.208840][ T1363] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  379.086814][T18203] _Z`Ԁ@: entered promiscuous mode
[  379.162458][T18214] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  379.185803][T18216] validate_nla: 34 callbacks suppressed
[  379.185816][T18216] netlink: 'syz.0.3286': attribute type 1 has an invalid length.
[  379.229018][T18216] 8021q: adding VLAN 0 to HW filter on device bond27
[  379.242698][T18217] bond27: (slave geneve3): making interface the new active one
[  379.246521][T18217] bond27: (slave geneve3): Enslaving as an active interface with an up link
[  379.253939][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  379.257054][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.267285][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  379.270979][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  379.336501][T18227] netlink: 'syz.0.3289': attribute type 4 has an invalid length.
[  379.543484][T18238] bond0: Device is already in use.
[  379.620733][T18246] netlink: 'syz.0.3294': attribute type 6 has an invalid length.
[  379.676538][T18250] lo speed is unknown, defaulting to 1000
[  379.679785][T18250] lo speed is unknown, defaulting to 1000
[  379.682444][T18250] lo speed is unknown, defaulting to 1000
[  380.184201][T18275] __nla_validate_parse: 12 callbacks suppressed
[  380.184214][T18275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3303'.
[  380.241542][T18281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3305'.
[  380.270047][T18283] syzkaller0: entered promiscuous mode
[  380.272151][T18283] syzkaller0: entered allmulticast mode
[  380.358136][T18289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3307'.
[  380.361262][T18289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3307'.
[  380.412695][T18294] vxcan6: entered promiscuous mode
[  380.440111][T18296] netlink: 'syz.2.3308': attribute type 1 has an invalid length.
[  380.443288][T18296] netlink: 'syz.2.3308': attribute type 3 has an invalid length.
[  380.446358][T18296] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3308'.
[  380.507657][T18300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3310'.
[  380.666202][T18309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3314'.
[  380.825047][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3317'.
[  380.828855][T18324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3317'.
[  381.000707][T18333] lo speed is unknown, defaulting to 1000
[  381.004366][T18333] lo speed is unknown, defaulting to 1000
[  381.011394][T18333] lo speed is unknown, defaulting to 1000
[  381.043191][T18342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3321'.
[  381.230806][T18357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.240373][T18357] syzkaller0: entered promiscuous mode
[  381.242186][T18357] syzkaller0: entered allmulticast mode
[  381.348239][T18357] tipc: Resetting bearer <eth:syzkaller0>
[  381.375738][T18356] tipc: Resetting bearer <eth:syzkaller0>
[  381.405179][T18356] tipc: Disabling bearer <eth:syzkaller0>
[  381.848105][T18382] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  381.920204][T18386] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  382.027501][T18400] netlink: 'syz.3.3340': attribute type 1 has an invalid length.
[  382.182924][T18415] vlan4: left promiscuous mode
[  382.184854][T18415] bridge0: left promiscuous mode
[  382.187142][T18415] bridge9: port 1(vlan4) entered disabled state
[  382.216112][T18415] team0: Mode changed to "activebackup"
[  382.403173][T18429] netlink: 'syz.3.3349': attribute type 4 has an invalid length.
[  382.765031][T18455] pim6reg1: entered promiscuous mode
[  382.772814][T18455] pim6reg1: entered allmulticast mode
[  382.900050][T18466] lo speed is unknown, defaulting to 1000
[  382.906298][T18466] lo speed is unknown, defaulting to 1000
[  382.921253][T18466] lo speed is unknown, defaulting to 1000
[  384.261892][T18508] syzkaller0: entered promiscuous mode
[  384.264006][T18508] syzkaller0: entered allmulticast mode
[  384.280195][T18508] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.294961][T18507] tipc: Resetting bearer <eth:syzkaller0>
[  384.320785][T18507] tipc: Disabling bearer <eth:syzkaller0>
[  384.469174][T18516] netlink: 'syz.2.3373': attribute type 3 has an invalid length.
[  384.472419][T18516] netlink: 'syz.2.3373': attribute type 3 has an invalid length.
[  384.571235][T18522] netlink: 'syz.2.3377': attribute type 29 has an invalid length.
[  384.578731][T18522] bond0: entered promiscuous mode
[  384.580979][T18522] bond0: left promiscuous mode
[  384.628814][T18524] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  385.143883][T18533] lo speed is unknown, defaulting to 1000
[  385.146744][T18533] lo speed is unknown, defaulting to 1000
[  385.150839][T18533] lo speed is unknown, defaulting to 1000
[  385.198073][T18531] bridge0: port 1(macsec0) entered blocking state
[  385.200829][T18531] bridge0: port 1(macsec0) entered disabled state
[  385.203749][T18531] macsec0: entered allmulticast mode
[  385.208710][T18531] macsec0: left allmulticast mode
[  385.766071][T18558] __nla_validate_parse: 21 callbacks suppressed
[  385.766088][T18558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3385'.
[  385.817552][T18566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3389'.
[  385.822445][T18566] netlink: 'syz.2.3389': attribute type 7 has an invalid length.
[  386.016676][T18590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3394'.
[  386.095443][T18591] netlink: 'syz.0.3392': attribute type 4 has an invalid length.
[  386.101988][T18582] netlink: 'syz.0.3392': attribute type 4 has an invalid length.
[  386.106699][T18582] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3392'.
[  386.245348][T18606] lo: entered allmulticast mode
[  386.299297][T18612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3401'.
[  386.304199][T18607] lo: left allmulticast mode
[  386.965238][T18632] netlink: 'syz.0.3407': attribute type 1 has an invalid length.
[  386.970479][T18632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3407'.
[  386.973918][T18632] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  386.982073][T18632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3407'.
[  386.985508][T18632] netlink: 'syz.0.3407': attribute type 4 has an invalid length.
[  387.028993][T18634] nbd: nbd0 already in use
[  387.215307][T18644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3410'.
[  387.226807][T18646] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3411'.
[  387.364734][T18654] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  388.008219][T18668] sctp: [Deprecated]: syz.3.3418 (pid 18668) Use of struct sctp_assoc_value in delayed_ack socket option.
[  388.008219][T18668] Use struct sctp_sack_info instead
[  388.015647][T18668] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3418'.
[  388.040759][T18669] lo speed is unknown, defaulting to 1000
[  388.045506][T18669] lo speed is unknown, defaulting to 1000
[  388.049947][T18669] lo speed is unknown, defaulting to 1000
[  388.178444][T18683] lo speed is unknown, defaulting to 1000
[  388.181491][T18683] lo speed is unknown, defaulting to 1000
[  388.300815][T18683] lo speed is unknown, defaulting to 1000
[  389.780285][T18775] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  390.289120][T18814] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  390.418285][T18834] bridge_slave_1: default FDB implementation only supports local addresses
[  390.600008][T18852] netlink: 'syz.3.3460': attribute type 8 has an invalid length.
[  390.772129][T18850] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.829400][T18850] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.900843][T18850] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.931714][T18868] erspan0: entered promiscuous mode
[  390.939231][T18870] __nla_validate_parse: 50 callbacks suppressed
[  390.939246][T18870] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3462'.
[  390.953912][T18870] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3462'.
[  390.963510][T18850] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.979985][T18870] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  390.984381][T18870] gretap2: entered promiscuous mode
[  390.986526][T18870] gretap2: entered allmulticast mode
[  391.012946][T18872] gtp0: entered promiscuous mode
[  391.084588][ T9250] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  391.118719][ T9250] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  391.139786][ T9250] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  391.171486][ T9250] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  391.175696][T18883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3466'.
[  391.232585][T18887] syzkaller1: entered promiscuous mode
[  391.234922][T18887] syzkaller1: entered allmulticast mode
[  391.376050][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3470'.
[  391.431424][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3470'.
[  391.446755][T18900] netlink: 'syz.3.3471': attribute type 1 has an invalid length.
[  391.484453][T18901] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3470'.
[  391.532174][T18903] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  391.541597][T12451] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  391.549958][T18900] 8021q: adding VLAN 0 to HW filter on device bond6
[  391.689654][T18900] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  391.693696][T18900] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface
[  391.701653][T18900] bond6 (unregistering): Released all slaves
[  391.860729][T18918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3479'.
[  391.865826][T18918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3479'.
[  391.878345][T18918] netlink: 'syz.2.3479': attribute type 19 has an invalid length.
[  391.881372][T18918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3479'.
[  391.897158][T18918] netlink: 'syz.2.3479': attribute type 19 has an invalid length.
[  391.980735][T18926] netlink: 'syz.2.3480': attribute type 2 has an invalid length.
[  392.097124][T18941] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3484'.
[  392.142835][T18949] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  393.274503][T19003] netlink: 'syz.3.3501': attribute type 5 has an invalid length.
[  393.283872][T19003] netlink: 'syz.3.3501': attribute type 12 has an invalid length.
[  393.438708][T19017] tipc: Failed to remove unknown binding: 66,1,1/3587999051:1837752022/1837752024
[  393.442464][T19017] tipc: Failed to remove unknown binding: 66,1,1/3587999051:1837752022/1837752024
[  393.445734][T19017] tipc: Failed to remove unknown binding: 66,1,1/3587999051:1837752022/1837752024
[  393.538295][T19024] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  393.573636][T19026] netlink: 'syz.3.3507': attribute type 1 has an invalid length.
[  393.608284][T19026] 8021q: adding VLAN 0 to HW filter on device bond6
[  393.700922][T19026] bond6 (unregistering): Released all slaves
[  393.842436][T19037] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.845615][T19037] syzkaller0: entered promiscuous mode
[  393.848432][T19037] syzkaller0: entered allmulticast mode
[  393.863381][T19037] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  393.883408][T19037] tipc: Resetting bearer <eth:syzkaller0>
[  393.892576][T19036] tipc: Resetting bearer <eth:syzkaller0>
[  393.911153][T19036] tipc: Disabling bearer <eth:syzkaller0>
[  394.351619][T19074] netlink: 'syz.0.3518': attribute type 7 has an invalid length.
[  394.462074][T19077] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[  394.510513][T19079] nbd: nbd0 already in use
[  394.512816][T19079] nbd: nbd0 already in use
[  394.578601][T19083] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  394.697874][T19082] netlink: 'syz.2.3521': attribute type 1 has an invalid length.
[  394.816267][T19094] syzkaller1: entered promiscuous mode
[  394.819591][T19094] syzkaller1: entered allmulticast mode
[  395.119032][T19099] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  395.122280][T19099] syzkaller0: entered promiscuous mode
[  395.124496][T19099] syzkaller0: entered allmulticast mode
[  395.141174][T19099] tipc: Resetting bearer <eth:syzkaller0>
[  395.144709][T19098] tipc: Resetting bearer <eth:syzkaller0>
[  395.156244][T19098] tipc: Disabling bearer <eth:syzkaller0>
[  395.500702][T19125] bridge0: failed insert local address into bridge forwarding table
[  395.841396][T19163] validate_nla: 2 callbacks suppressed
[  395.841407][T19163] netlink: 'syz.2.3544': attribute type 11 has an invalid length.
[  395.918552][T19166] vlan3: entered promiscuous mode
[  395.920277][T19166] hsr_slave_1: entered promiscuous mode
[  395.922602][T19166] vlan3: entered allmulticast mode
[  395.925820][T19166] hsr_slave_1: entered allmulticast mode
[  395.942836][T19168] bond6: (slave vxcan9): The slave device specified does not support setting the MAC address
[  395.948242][T19168] bond6: (slave vxcan9): Error -95 calling set_mac_address
[  395.979182][T19175] __nla_validate_parse: 27 callbacks suppressed
[  395.979195][T19175] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3547'.
[  396.036506][T19180] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3550'.
[  396.073290][T19183] netlink: 'syz.0.3551': attribute type 10 has an invalid length.
[  396.076375][T19183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3551'.
[  396.084865][T19183] bond0: option arp_all_targets: invalid value (196616)
[  396.195944][T19193] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3555'.
[  396.199703][T19193] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3555'.
[  396.212111][T19193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3555'.
[  396.272007][T19203] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3557'.
[  396.332349][T19207] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3559'.
[  396.335489][T19207] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3559'.
[  396.343801][T19207] rdma_rxe: rxe_newlink: failed to add lo
[  396.353438][T19207] erspan0: left allmulticast mode
[  396.385648][T19207] !: left promiscuous mode
[  396.390477][T19207] !: left allmulticast mode
[  396.420414][T19207] x9: entered promiscuous mode
[  396.447044][T19207] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  396.466067][T19207] veth1_vlan: left promiscuous mode
[  396.470643][T19207] @: left promiscuous mode
[  396.473608][T19207] @: entered promiscuous mode
[  396.483938][T19207] veth1_vlan: entered promiscuous mode
[  396.490102][T19223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3561'.
[  396.502953][T19207] geneve1: entered promiscuous mode
[  396.508779][T19207] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  396.705278][T19237] netlink: 'syz.2.3566': attribute type 32 has an invalid length.
[  396.780841][T19243] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  396.792116][T19241] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  396.884068][T19254] netlink: 'syz.3.3570': attribute type 10 has an invalid length.
[  397.072905][T19278] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  397.345660][T19302] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  397.476925][T19318] netlink: 'syz.3.3590': attribute type 4 has an invalid length.
[  397.492182][   T96] lo speed is unknown, defaulting to 1000
[  397.494346][   T96] syz0: Port: 1 Link DOWN
[  397.495724][   T96] lo speed is unknown, defaulting to 1000
[  397.500898][T19318] netlink: 'syz.3.3590': attribute type 4 has an invalid length.
[  397.506178][   T96] lo speed is unknown, defaulting to 1000
[  397.508431][   T96] syz0: Port: 1 Link ACTIVE
[  397.510169][   T96] lo speed is unknown, defaulting to 1000
[  397.684319][T19327] netlink: 'syz.3.3593': attribute type 8 has an invalid length.
[  397.692396][T19327] bond0: entered promiscuous mode
[  397.694979][T19327] bond0: left promiscuous mode
[  398.192691][T19345] netlink: zone id is out of range
[  398.194633][T19345] netlink: zone id is out of range
[  398.196350][T19345] netlink: zone id is out of range
[  398.199706][T19345] netlink: zone id is out of range
[  398.201406][T19345] netlink: zone id is out of range
[  398.203208][T19345] netlink: zone id is out of range
[  398.204933][T19345] netlink: zone id is out of range
[  398.206676][T19345] netlink: get zone limit has 8 unknown bytes
[  398.652159][T19347] nbd: couldn't find device at index 536870912
[  399.293618][T19392] netlink: 'syz.3.3607': attribute type 1 has an invalid length.
[  399.327407][T19392] veth5: entered promiscuous mode
[  399.331368][T19392] bond7: (slave veth5): Enslaving as a backup interface with a down link
[  399.334551][T19395] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  399.344408][T19392] bond7: (slave veth5): Releasing backup interface
[  399.356237][T19395] tipc: Resetting bearer <eth:syzkaller0>
[  399.371230][T19394] tipc: Disabling bearer <eth:syzkaller0>
[  399.454548][T19400] netlink: 'syz.3.3610': attribute type 11 has an invalid length.
[  399.457788][T19400] netlink: 'syz.3.3610': attribute type 11 has an invalid length.
[  399.916800][T19411] netlink: 'syz.0.3613': attribute type 21 has an invalid length.
[  399.935278][T19417] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  399.941682][T19415] syzkaller0: entered promiscuous mode
[  399.943512][T19415] syzkaller0: entered allmulticast mode
[  400.050967][T19424] bpq0: entered promiscuous mode
[  400.053100][T19424] bpq0: entered allmulticast mode
[  400.063711][T19428] bpq0: left promiscuous mode
[  400.067471][T19428] bpq0: left allmulticast mode
[  400.083039][T19432] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  400.086102][T19432] syzkaller0: entered promiscuous mode
[  400.095448][T19432] syzkaller0: entered allmulticast mode
[  400.149696][T19436] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  400.252931][T19440] lo speed is unknown, defaulting to 1000
[  400.256767][T19440] lo speed is unknown, defaulting to 1000
[  400.261349][T19440] lo speed is unknown, defaulting to 1000
[  400.514400][T19460] netlink: 'syz.2.3629': attribute type 1 has an invalid length.
[  400.862661][T19425] tipc: Resetting bearer <eth:syzkaller0>
[  400.876101][T19425] tipc: Disabling bearer <eth:syzkaller0>
[  401.020945][T19498] netlink: 'syz.0.3640': attribute type 1 has an invalid length.
[  401.081213][T19500] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.142475][T19500] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.182674][T19500] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.243794][T19500] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.279049][T19502] netlink: 'syz.0.3640': attribute type 1 has an invalid length.
[  401.284174][T19502] nbd: error processing sock list
[  401.286305][T19502] block nbd3: shutting down sockets
[  401.323123][ T5741] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.335996][ T5741] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.349915][ T5741] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.365666][ T5884] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.815116][T19514] __nla_validate_parse: 36 callbacks suppressed
[  401.815128][T19514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3644'.
[  402.037096][T19529] netlink: 'syz.3.3648': attribute type 1 has an invalid length.
[  402.040732][T19529] netlink: 'syz.3.3648': attribute type 3 has an invalid length.
[  402.043212][T19529] netlink: 564 bytes leftover after parsing attributes in process `syz.3.3648'.
[  402.093323][T19531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3649'.
[  402.121927][T19532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3648'.
[  402.125433][T19532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3648'.
[  402.189071][T19532] nbd3: detected capacity change from 0 to 875674160
[  402.261460][T19534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3650'.
[  402.276229][T19544] netlink: 'syz.2.3652': attribute type 1 has an invalid length.
[  402.460171][T19554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3656'.
[  402.689317][T19561] syzkaller1: entered allmulticast mode
[  402.748679][T19559] netlink: 'syz.0.3657': attribute type 3 has an invalid length.
[  402.867326][   T57] block nbd3: Receive control failed (result -104)
[  402.932597][T19566] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3659'.
[  402.938760][T19566] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3659'.
[  402.941860][T19566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  402.970162][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3660'.
[  403.606464][T19594] syzkaller0: entered promiscuous mode
[  403.612871][T19594] syzkaller0: entered allmulticast mode
[  403.616691][T19593] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  403.637080][T19593] tipc: Resetting bearer <eth:syzkaller0>
[  403.657281][T19593] tipc: Disabling bearer <eth:syzkaller0>
[  403.714189][T19598] bond26: (slave erspan0): Releasing active interface
[  403.717110][T19598] ip6gretap0: entered promiscuous mode
[  403.741478][T19598] bond26: (slave ip6gretap0): Releasing active interface
[  403.744467][T19598] bond26: (slave ip6gretap0): the permanent HWaddr of slave - 82:30:d8:47:55:e0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  403.756173][T19598] ip6gretap0: left promiscuous mode
[  403.774545][T19598] bond26: (slave veth21): Releasing active interface
[  403.786178][T19598] bond27: (slave geneve3): Releasing active interface
[  403.808775][T19598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  403.960837][T19606] netlink: 'syz.0.3671': attribute type 1 has an invalid length.
[  404.001670][T19606] 8021q: adding VLAN 0 to HW filter on device bond29
[  404.007988][T19606] netlink: 'syz.0.3671': attribute type 11 has an invalid length.
[  404.452159][   T11] block nbd2: Possible stuck request ffff8880214e0000: control (read@0,4096B). Runtime 270 seconds
[  404.456175][   T61] block nbd1: Possible stuck request ffff8880214b8000: control (read@0,4096B). Runtime 270 seconds
[  405.159643][T19646] netlink: 'syz.3.3682': attribute type 3 has an invalid length.
[  405.211510][T19651] syzkaller0: entered promiscuous mode
[  405.213645][T19651] syzkaller0: entered allmulticast mode
[  405.217667][T19650] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  405.220576][T19650] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  405.223844][T19650] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  405.229827][T19650] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  405.237171][T19655] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  405.240120][T19656] netlink: 'syz.3.3684': attribute type 10 has an invalid length.
[  405.243988][T19656] macvlan0: entered promiscuous mode
[  405.259622][T19648] tipc: Resetting bearer <eth:syzkaller0>
[  405.281667][T19648] tipc: Disabling bearer <eth:syzkaller0>
[  406.534116][T19723] bridge18: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  407.062329][T19723] __nla_validate_parse: 8 callbacks suppressed
[  407.062340][T19723] netlink: 428 bytes leftover after parsing attributes in process `syz.0.3702'.
[  407.079332][T19735] validate_nla: 1 callbacks suppressed
[  407.079343][T19735] netlink: 'syz.2.3704': attribute type 3 has an invalid length.
[  407.126508][T19737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3705'.
[  407.174772][T19741] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3706'.
[  407.180865][T19741] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  407.404424][T19750] netlink: 'syz.0.3708': attribute type 10 has an invalid length.
[  408.964469][T19757] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3711'.
[  409.345903][T19774] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  409.773177][T19787] Failed to register nexthop notifier
[  409.821880][T19796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3721'.
[  409.825577][T19796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3721'.
[  409.834549][T19796] netlink: 'syz.2.3721': attribute type 7 has an invalid length.
[  409.864042][T19798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3722'.
[  409.889579][T19800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3723'.
[  409.959590][T19803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3724'.
[  409.977891][T19804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  409.993996][T19803] vlan0: entered allmulticast mode
[  409.996304][T19803] bridge0: entered allmulticast mode
[  410.101539][T19807] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  410.105840][T19807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3725'.
[  410.110751][T19807] batadv_slave_1: entered promiscuous mode
[  410.266737][T19817] lo speed is unknown, defaulting to 1000
[  410.273766][T19817] lo speed is unknown, defaulting to 1000
[  410.278620][T19817] lo speed is unknown, defaulting to 1000
[  410.336108][T19822] lo speed is unknown, defaulting to 1000
[  410.339997][T19822] lo speed is unknown, defaulting to 1000
[  410.404310][T19822] lo speed is unknown, defaulting to 1000
[  410.788935][T19849] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  410.794033][T19849] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  410.967921][T19855] IPVS: length: 163 != 219656
[  410.970517][T19854] delete_channel: no stack
[  411.130677][T19865] netlink: 'syz.2.3742': attribute type 21 has an invalid length.
[  411.133056][T19865] netlink: 'syz.2.3742': attribute type 4 has an invalid length.
[  411.135387][T19865] netlink: 'syz.2.3742': attribute type 3 has an invalid length.
[  411.164465][T19867] netlink: 'syz.2.3742': attribute type 8 has an invalid length.
[  411.192149][T19867] netlink: 'syz.2.3742': attribute type 21 has an invalid length.
[  411.210086][T19869] 8021q: adding VLAN 0 to HW filter on device bond8
[  411.212488][T19867] netlink: 'syz.2.3742': attribute type 4 has an invalid length.
[  411.215399][T19867] netlink: 'syz.2.3742': attribute type 3 has an invalid length.
[  411.239221][T19869] bond8: (slave veth9): Enslaving as an active interface with an up link
[  411.300270][T19874] lo speed is unknown, defaulting to 1000
[  411.304227][T19874] lo speed is unknown, defaulting to 1000
[  411.309232][T19874] lo speed is unknown, defaulting to 1000
[  411.666271][T19892] tipc: Resetting bearer <eth:syzkaller0>
[  411.668651][T19892] tipc: Resetting bearer <eth:syzkaller0>
[  411.730707][T19899] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  411.734415][T19899] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  411.810830][T19901] bridge0: entered promiscuous mode
[  411.814226][T19901] bridge0: left promiscuous mode
[  411.870604][T19905] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  411.874207][T19905] tipc: Resetting bearer <eth:syzkaller0>
[  411.935089][T19911] lo speed is unknown, defaulting to 1000
[  411.938050][T19911] lo speed is unknown, defaulting to 1000
[  411.940816][T19911] lo speed is unknown, defaulting to 1000
[  412.132926][T19925] __nla_validate_parse: 13 callbacks suppressed
[  412.132939][T19925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3761'.
[  412.152760][T19931] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3762'.
[  412.278566][T19941] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  412.542010][T19961] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3770'.
[  412.550791][T19961] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3770'.
[  412.616294][T19961] netlink: 356 bytes leftover after parsing attributes in process `syz.0.3770'.
[  413.070277][T19985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3775'.
[  413.073727][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3775'.
[  413.159707][T19985] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.370419][T19994] Bluetooth: hci1: Opcode 0x080f failed: -22
[  413.547278][T20002] validate_nla: 3 callbacks suppressed
[  413.547290][T20002] netlink: 'syz.0.3780': attribute type 4 has an invalid length.
[  413.638743][T20009] netlink: 'syz.0.3781': attribute type 12 has an invalid length.
[  413.648186][T20008] vxcan9: entered allmulticast mode
[  413.906068][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3786'.
[  413.923149][T20023] netlink: 'syz.0.3786': attribute type 1 has an invalid length.
[  414.005529][T20034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3787'.
[  414.151984][T20042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3790'.
[  414.717291][T20061] netlink: 'syz.3.3796': attribute type 10 has an invalid length.
[  414.726259][T20061] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  414.762970][T20065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  415.062418][T20087] netlink: 'syz.2.3805': attribute type 1 has an invalid length.
[  415.065274][T20087] netlink: 'syz.2.3805': attribute type 1 has an invalid length.
[  415.099621][T20089] tipc: Resetting bearer <eth:gre0>
[  415.101969][T20089] tipc: Resetting bearer <eth:gre0>
[  415.407990][ T5843] Bluetooth: hci1: command tx timeout
[  415.464691][T20124] tun0: tun_chr_ioctl cmd 2147767520
[  415.514605][T20128] macsec0: entered promiscuous mode
[  415.516652][T20128] macvlan1: entered promiscuous mode
[  415.540714][T20128] macvlan1: left promiscuous mode
[  416.245016][T20147] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  416.251919][T20147] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  416.373514][T20153] netlink: 'syz.3.3821': attribute type 1 has an invalid length.
[  416.493361][T20165] rdma_rxe: rxe_newlink: failed to add lo
[  416.515219][T20165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  416.522229][ T5891] lo speed is unknown, defaulting to 1000
[  416.524195][ T5891] syz2: Port: 1 Link ACTIVE
[  416.609518][T20174] pim6reg1: entered promiscuous mode
[  416.611633][T20174] pim6reg1: entered allmulticast mode
[  416.658969][T20177] netlink: 'syz.2.3826': attribute type 4 has an invalid length.
[  416.662901][T20176] netlink: 'syz.2.3826': attribute type 4 has an invalid length.
[  416.702000][T20180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  416.760060][T20182] macvlan4: entered promiscuous mode
[  416.762245][T20182] macvlan4: entered allmulticast mode
[  416.764875][T20182] bond9: (slave macvlan4): Opening slave failed
[  416.959510][T20200] geneve3: entered allmulticast mode
[  417.146905][T20212] lo speed is unknown, defaulting to 1000
[  417.153483][T20212] lo speed is unknown, defaulting to 1000
[  417.159077][T20212] lo speed is unknown, defaulting to 1000
[  417.161380][T20213] netlink: 'syz.3.3836': attribute type 13 has an invalid length.
[  417.176654][T20213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  417.242464][T20213] lo speed is unknown, defaulting to 1000
[  417.262347][T20213] lo speed is unknown, defaulting to 1000
[  417.354574][T20213] lo speed is unknown, defaulting to 1000
[  417.659062][T20239] __nla_validate_parse: 14 callbacks suppressed
[  417.659078][T20239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3844'.
[  417.682547][T20239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3844'.
[  417.899827][T20246] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  417.913710][T20246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3846'.
[  417.918868][T20246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3846'.
[  418.117763][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'.
[  418.121430][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'.
[  418.142055][T20253] 8021q: adding VLAN 0 to HW filter on device bond18
[  418.346689][T20274] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3853'.
[  418.378428][T20276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3852'.
[  418.417188][T20280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3855'.
[  418.445312][T20278] pim6reg: entered allmulticast mode
[  418.604714][T20296] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  418.722871][T20305] validate_nla: 1 callbacks suppressed
[  418.722886][T20305] netlink: 'syz.2.3862': attribute type 13 has an invalid length.
[  418.845743][T20308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3863'.
[  418.863238][T20308] tipc: Resetting bearer <eth:gre0>
[  419.091927][T20316] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  419.098852][T12451] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.103095][T12451] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.107584][T12451] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.116592][T12451] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.153472][T20319] netlink: 'syz.2.3866': attribute type 7 has an invalid length.
[  419.215164][T20323] tipc: Resetting bearer <eth:gre0>
[  419.220116][T20323] tipc: Resetting bearer <eth:gre0>
[  419.255682][T20323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  419.260832][T20323] veth1_vlan: left promiscuous mode
[  419.263863][T20323] @: left promiscuous mode
[  419.266945][T20323] @: entered promiscuous mode
[  419.271229][T20323] veth1_vlan: entered promiscuous mode
[  419.279359][T20323] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  419.306511][T12451] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.324561][T20325] lo speed is unknown, defaulting to 1000
[  419.330361][T20325] lo speed is unknown, defaulting to 1000
[  419.333963][T20325] lo speed is unknown, defaulting to 1000
[  419.546973][T20332] netlink: 'syz.3.3869': attribute type 1 has an invalid length.
[  419.564726][T20332] 8021q: adding VLAN 0 to HW filter on device bond10
[  419.579665][T20332] bond10: (slave geneve3): making interface the new active one
[  419.594231][T20332] bond10: (slave geneve3): Enslaving as an active interface with an up link
[  420.148858][T20356] netlink: 'syz.3.3877': attribute type 21 has an invalid length.
[  420.151554][T20356] netlink: 'syz.3.3877': attribute type 1 has an invalid length.
[  420.781275][T20320] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.869404][ T5741] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  420.890921][ T5884] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  420.914052][ T9250] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  420.949535][ T9250] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  421.024286][T20398] syzkaller0: entered promiscuous mode
[  421.026424][T20398] syzkaller0: entered allmulticast mode
[  422.588377][T20400] lo speed is unknown, defaulting to 1000
[  422.592065][T20400] lo speed is unknown, defaulting to 1000
[  422.595661][T20400] lo speed is unknown, defaulting to 1000
[  422.725956][T20420] __nla_validate_parse: 13 callbacks suppressed
[  422.725981][T20420] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3896'.
[  422.737157][T20415] vti0: entered promiscuous mode
[  422.743581][T20415] tipc: Resetting bearer <eth:gre0>
[  422.828273][T20425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3897'.
[  422.862842][T20425] bond11: entered promiscuous mode
[  422.864979][T20425] bond11: entered allmulticast mode
[  422.871213][T20425] 8021q: adding VLAN 0 to HW filter on device bond11
[  422.981761][T20431] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  423.002498][T20431] vlan6: entered promiscuous mode
[  423.004572][T20431] gretap0: entered promiscuous mode
[  423.008702][T20433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3900'.
[  423.393804][T20449] netlink: 624 bytes leftover after parsing attributes in process `syz.0.3905'.
[  423.397960][T20449] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3905'.
[  423.523066][T20461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3908'.
[  423.526673][T20461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3908'.
[  423.671283][T20471] netlink: 'syz.0.3912': attribute type 10 has an invalid length.
[  423.673833][T20471] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3912'.
[  423.776655][T20475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3913'.
[  423.783218][T20475] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  423.831139][T20475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3913'.
[  423.992462][T20483] syzkaller0: entered allmulticast mode
[  424.025884][T20483] syzkaller0 (unregistering): left allmulticast mode
[  424.459856][T20511] netlink: 'syz.3.3922': attribute type 1 has an invalid length.
[  424.463364][T20511] NCSI netlink: No device for ifindex 813332851
[  424.650786][T20519] syzkaller1: entered promiscuous mode
[  424.652908][T20519] syzkaller1: entered allmulticast mode
[  425.721625][T20525] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.764830][T20525] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.838912][T20525] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.874598][T20552] netlink: 'syz.2.3933': attribute type 14 has an invalid length.
[  425.882208][T20552] netlink: 'syz.2.3933': attribute type 14 has an invalid length.
[  425.906240][T20525] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.043977][ T9250] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  426.047246][ T9250] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  426.105911][ T9250] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  426.142286][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.232513][T20565] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  426.370192][T20579] team0: Unable to change to the same mode the team is in
[  426.373148][T20579] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  426.830894][T20609] netlink: 'syz.0.3949': attribute type 10 has an invalid length.
[  427.315638][T20625] netlink: 'syz.2.3952': attribute type 4 has an invalid length.
[  427.333362][   T51] lo speed is unknown, defaulting to 1000
[  427.335401][   T51] syz2: Port: 1 Link DOWN
[  427.338936][T20625] netlink: 'syz.2.3952': attribute type 4 has an invalid length.
[  427.344688][ T5877] lo speed is unknown, defaulting to 1000
[  427.346600][ T5877] syz2: Port: 1 Link ACTIVE
[  428.123791][T20657] __nla_validate_parse: 24 callbacks suppressed
[  428.123807][T20657] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3962'.
[  428.145356][T20657] batadv3: entered promiscuous mode
[  428.152232][T20657] batadv3: entered allmulticast mode
[  428.687037][ T9250] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  428.710511][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  428.730487][T20670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  428.736839][T20673] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3967'.
[  428.739929][T20672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3967'.
[  428.750315][T20673] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3967'.
[  428.758610][T20673] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3967'.
[  428.764603][ T5741] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  428.769793][ T5741] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  428.911734][T20692] netlink: 'syz.3.3973': attribute type 1 has an invalid length.
[  429.006758][T20704] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3978'.
[  429.110184][T20710] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3981'.
[  429.113953][T20710] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3981'.
[  429.154957][T20714] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3983'.
[  429.175543][T20715] netlink: 'syz.3.3982': attribute type 10 has an invalid length.
[  429.182004][T20715] netlink: 'syz.3.3982': attribute type 10 has an invalid length.
[  429.184959][T20715] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3982'.
[  429.500734][T20726] netlink: 'syz.0.3986': attribute type 1 has an invalid length.
[  429.799269][T20749] openvswitch: netlink: Flow actions attr not present in new flow.
[  429.803305][T20750] openvswitch: netlink: Flow actions attr not present in new flow.
[  429.914925][T20756] syzkaller0: entered allmulticast mode
[  429.928658][T20756] syzkaller0 (unregistering): left allmulticast mode
[  430.009809][T20764] netlink: 'syz.3.3996': attribute type 13 has an invalid length.
[  430.012664][T20764] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  430.136840][T20768] netlink: 'syz.0.3998': attribute type 83 has an invalid length.
[  430.232069][T20778] geneve4: entered promiscuous mode
[  430.836061][T20806] netlink: 'syz.3.4009': attribute type 1 has an invalid length.
[  430.836687][T20802] tipc: Resetting bearer <eth:gre0>
[  430.840266][T20806] netlink: 'syz.3.4009': attribute type 4 has an invalid length.
[  431.015295][T12451] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  431.019138][T12451] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  431.027994][T12451] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  431.030627][T12451] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  431.282071][T20814] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  431.284987][T20814] openvswitch: netlink: Message has 8454 unknown bytes.
[  431.308146][T20815] netlink: 'syz.2.4011': attribute type 10 has an invalid length.
[  431.332691][T20817] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  431.383360][T20817] syzkaller0: entered promiscuous mode
[  431.385518][T20817] syzkaller0: entered allmulticast mode
[  431.391258][T20817] tipc: Resetting bearer <eth:syzkaller0>
[  431.407926][T20816] tipc: Resetting bearer <eth:syzkaller0>
[  432.617636][   T61] block nbd3: Possible stuck request ffff888021518000: control (read@0,4096B). Runtime 30 seconds
[  433.019350][T20816] tipc: Disabling bearer <eth:syzkaller0>
[  433.146787][T20855] netlink: 'syz.2.4025': attribute type 4 has an invalid length.
[  433.153366][T20855] __nla_validate_parse: 9 callbacks suppressed
[  433.153376][T20855] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4025'.
[  433.222478][T20859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4023'.
[  433.226581][T20859] netlink: 'syz.0.4023': attribute type 4 has an invalid length.
[  433.231198][T20859] netlink: 'syz.0.4023': attribute type 4 has an invalid length.
[  433.239501][T20859] netlink: 51 bytes leftover after parsing attributes in process `syz.0.4023'.
[  433.295586][T20862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4023'.
[  433.441307][T20877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4027'.
[  433.505453][T20880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4030'.
[  433.620964][T20880] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4030'.
[  433.624330][T20880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4030'.
[  433.627848][T20880] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4030'.
[  433.631149][T20880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4030'.
[  434.121106][T20891] netlink: 'syz.3.4033': attribute type 1 has an invalid length.
[  434.289517][T20898] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  434.294378][T20898] bond0: (slave lo): Error: Device can not be enslaved while up
[  434.528161][   T61] block nbd2: Possible stuck request ffff8880214e0000: control (read@0,4096B). Runtime 300 seconds
[  434.531845][   T11] block nbd1: Possible stuck request ffff8880214b8000: control (read@0,4096B). Runtime 300 seconds
[  434.931708][T20955] validate_nla: 3 callbacks suppressed
[  434.931720][T20955] netlink: 'syz.3.4051': attribute type 32 has an invalid length.
[  434.942009][T20955] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  435.050424][T20953] netlink: 'syz.0.4050': attribute type 3 has an invalid length.
[  435.200615][T20975] netlink: 'syz.2.4055': attribute type 4 has an invalid length.
[  435.228501][   T51] lo speed is unknown, defaulting to 1000
[  435.230863][   T51] syz2: Port: 1 Link DOWN
[  435.285154][T20980] netlink: 'syz.3.4056': attribute type 171 has an invalid length.
[  435.331883][T20995] netlink: 'syz.3.4060': attribute type 1 has an invalid length.
[  435.334501][T20996] netlink: 'syz.3.4060': attribute type 1 has an invalid length.
[  435.470127][T21003] netlink: 'syz.2.4061': attribute type 1 has an invalid length.
[  435.518328][T21003] 8021q: adding VLAN 0 to HW filter on device bond39
[  436.060166][T21036] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  436.159313][T21045] IPVS: length: 163 != 8
[  436.760692][T21054] lo speed is unknown, defaulting to 1000
[  436.765972][T21054] lo speed is unknown, defaulting to 1000
[  436.775459][T21054] lo speed is unknown, defaulting to 1000
[  436.994935][T21079] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode
[  437.027130][T21079] tipc: Resetting bearer <eth:syzkaller0>
[  437.039114][T21079] bond8: (slave veth9): Releasing backup interface
[  437.055480][T21079] bond10: (slave geneve3): Releasing active interface
[  437.136670][T21093] netlink: 'syz.2.4082': attribute type 2 has an invalid length.
[  437.150335][T21093] `: entered promiscuous mode
[  437.189588][T21098] netlink: 'syz.2.4085': attribute type 1 has an invalid length.
[  437.222980][T21098] 8021q: adding VLAN 0 to HW filter on device bond40
[  437.242411][T21098] ipvlan1: entered allmulticast mode
[  437.244379][T21098] bond40: entered allmulticast mode
[  437.275628][T21096] lo speed is unknown, defaulting to 1000
[  437.282750][T21096] lo speed is unknown, defaulting to 1000
[  437.285460][T21096] lo speed is unknown, defaulting to 1000
[  437.593520][T21120] openvswitch: netlink: IP tunnel dst address not specified
[  437.693036][T21122] hsr_slave_1 (unregistering): left promiscuous mode
[  438.234287][T21153] __nla_validate_parse: 24 callbacks suppressed
[  438.234304][T21153] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4098'.
[  438.245499][T21150] netlink: 'syz.0.4098': attribute type 29 has an invalid length.
[  438.419421][T21163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4102'.
[  438.435094][T21163] gtp3: entered promiscuous mode
[  438.437219][T21163] gtp3: entered allmulticast mode
[  438.446659][T21163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4102'.
[  438.496697][T21165] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.4103'.
[  438.514208][T21168] IPv6: sit1: Disabled Multicast RS
[  439.066976][T21209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4115'.
[  439.312703][T21229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4120'.
[  439.343757][T21229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4120'.
[  439.420235][T21236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4122'.
[  439.441950][T21236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4122'.
[  439.646094][T21246] ksmbd: Unknown IPC event: 3, ignore.
[  439.924609][T21263] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4129'.
[  439.979079][T21263] team0: Port device sit3 added
[  440.150492][T21273] validate_nla: 2 callbacks suppressed
[  440.150508][T21273] netlink: 'syz.0.4130': attribute type 10 has an invalid length.
[  440.202396][T21275] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  440.492075][T21297] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  440.498635][T21297] syzkaller0: entered promiscuous mode
[  440.500863][T21297] syzkaller0: entered allmulticast mode
[  440.509681][T21298] tipc: Resetting bearer <eth:syzkaller0>
[  440.549525][T21296] tipc: Resetting bearer <eth:syzkaller0>
[  440.566363][T21296] tipc: Disabling bearer <eth:syzkaller0>
[  440.695080][T21309] lo speed is unknown, defaulting to 1000
[  440.700817][T21309] lo speed is unknown, defaulting to 1000
[  440.705590][T21309] lo speed is unknown, defaulting to 1000
[  440.749216][T21314] netlink: 'syz.3.4139': attribute type 21 has an invalid length.
[  440.758941][T21314] netlink: 'syz.3.4139': attribute type 6 has an invalid length.
[  440.998677][T21329] siw: device registration error -23
[  441.003982][T21329] netlink: 'syz.3.4143': attribute type 1 has an invalid length.
[  441.237830][T21347] netlink: 'syz.0.4146': attribute type 10 has an invalid length.
[  441.640554][T21374] batadv_slave_1: left promiscuous mode
[  441.648513][T21374] macvlan0: left promiscuous mode
[  441.650433][T21374] macvlan0: left allmulticast mode
[  441.661799][T21374] mac80211_hwsim hwsim24 wlan1: left allmulticast mode
[  441.664737][T21374] ip6gre1: left allmulticast mode
[  441.667203][T21374] bond2: left promiscuous mode
[  441.669433][T21374] bond2: left allmulticast mode
[  441.671788][T21374] gretap1: left promiscuous mode
[  441.673798][T21374] gretap1: left allmulticast mode
[  441.676435][T21374] tipc: Resetting bearer <eth:syzkaller0>
[  441.680275][T21374] syzkaller0: left promiscuous mode
[  441.683322][T21374] syzkaller0: left allmulticast mode
[  441.688400][T21374] sit1: left promiscuous mode
[  441.690478][T21374] bond3: left promiscuous mode
[  441.692104][T21374] vti0: left promiscuous mode
[  441.694762][T21374] vlan3: left allmulticast mode
[  441.696505][T21374] veth1: left allmulticast mode
[  441.704705][T21374] vlan4: left allmulticast mode
[  441.726565][T21374] gtp0: left promiscuous mode
[  441.735091][T21374] veth5: left promiscuous mode
[  441.757248][T21374] bond11: left promiscuous mode
[  441.759343][T21374] bond11: left allmulticast mode
[  441.762579][T21374] vlan6: left promiscuous mode
[  441.764194][T21374] gretap0: left promiscuous mode
[  441.770276][T21374] geneve4: left promiscuous mode
[  441.799168][   T51] lo speed is unknown, defaulting to 1000
[  441.803895][   T51] syz0: Port: 1 Link DOWN
[  441.807904][T21378] hsr_slave_0: left promiscuous mode
[  441.843194][ T5741] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.850057][ T5741] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.853382][ T5741] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.856635][ T5741] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.868614][   T51] lo speed is unknown, defaulting to 1000
[  442.064782][T21402] dvmrp1: entered allmulticast mode
[  442.157684][T21411] ipvlan4: entered promiscuous mode
[  442.375802][T21444] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  442.434329][T21450] netlink: 'syz.2.4174': attribute type 3 has an invalid length.
[  442.440145][T21450] netlink: 'syz.2.4174': attribute type 3 has an invalid length.
[  442.582785][T21460] lo speed is unknown, defaulting to 1000
[  442.586343][T21460] lo speed is unknown, defaulting to 1000
[  442.591411][T21460] lo speed is unknown, defaulting to 1000
[  442.749766][T21471] netlink: 'syz.3.4181': attribute type 1 has an invalid length.
[  442.774103][T21471] 8021q: adding VLAN 0 to HW filter on device bond14
[  443.355650][T21502] __nla_validate_parse: 25 callbacks suppressed
[  443.355661][T21502] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4190'.
[  443.370683][T21502] ip6erspan0: entered promiscuous mode
[  443.394821][T21503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4189'.
[  443.436062][T21505] netlink: 'syz.0.4191': attribute type 13 has an invalid length.
[  443.554016][T21512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4193'.
[  443.572657][T21505] warn_alloc: 1 callbacks suppressed
[  443.572669][T21505] syz.0.4191: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  443.584735][T21505] CPU: 1 UID: 0 PID: 21505 Comm: syz.0.4191 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691-dirty #0 PREEMPT(full) 
[  443.584749][T21505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  443.584755][T21505] Call Trace:
[  443.584759][T21505]  <TASK>
[  443.584764][T21505]  dump_stack_lvl+0x189/0x250
[  443.584781][T21505]  ? __pfx_dump_stack_lvl+0x10/0x10
[  443.584790][T21505]  ? __pfx__printk+0x10/0x10
[  443.584801][T21505]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  443.584811][T21505]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  443.584820][T21505]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  443.584830][T21505]  warn_alloc+0x214/0x310
[  443.584845][T21505]  ? __pfx_warn_alloc+0x10/0x10
[  443.584860][T21505]  ? __get_vm_area_node+0x28f/0x300
[  443.584870][T21505]  ? pfifo_fast_change_tx_queue_len+0x151/0xa30
[  443.584885][T21505]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  443.584909][T21505]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  443.584922][T21505]  ? rcu_is_watching+0x15/0xb0
[  443.584931][T21505]  ? pfifo_fast_change_tx_queue_len+0x151/0xa30
[  443.584941][T21505]  ? pfifo_fast_change_tx_queue_len+0x151/0xa30
[  443.584950][T21505]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  443.584961][T21505]  ? pfifo_fast_change_tx_queue_len+0x151/0xa30
[  443.584971][T21505]  ? pfifo_fast_change_tx_queue_len+0xa2/0xa30
[  443.584983][T21505]  pfifo_fast_change_tx_queue_len+0x151/0xa30
[  443.584996][T21505]  ? ib_device_get_by_netdev+0x84/0x4d0
[  443.585008][T21505]  ? ib_device_get_by_netdev+0x46b/0x4d0
[  443.585020][T21505]  ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10
[  443.585031][T21505]  dev_qdisc_change_tx_queue_len+0x3a6/0x510
[  443.585051][T21505]  ? __pfx_dev_qdisc_change_tx_queue_len+0x10/0x10
[  443.585062][T21505]  ? notifier_call_chain+0x3bf/0x3e0
[  443.585074][T21505]  netif_change_tx_queue_len+0x162/0x270
[  443.585083][T21505]  ? __pfx_netif_change_tx_queue_len+0x10/0x10
[  443.585092][T21505]  ? netif_change_flags+0xe8/0x1a0
[  443.585101][T21505]  do_setlink+0xdfb/0x41c0
[  443.585117][T21505]  ? __pfx_do_setlink+0x10/0x10
[  443.585124][T21505]  ? _printk+0xcf/0x120
[  443.585133][T21505]  ? __pfx____ratelimit+0x10/0x10
[  443.585147][T21505]  ? __lock_acquire+0xab9/0xd20
[  443.585162][T21505]  ? __mutex_trylock_common+0x153/0x260
[  443.585172][T21505]  ? __pfx___mutex_trylock_common+0x10/0x10
[  443.585181][T21505]  ? rcu_is_watching+0x15/0xb0
[  443.585189][T21505]  ? trace_contention_end+0x39/0x120
[  443.585197][T21505]  ? __mutex_lock+0x335/0x1360
[  443.585207][T21505]  ? __pfx___nla_validate_parse+0x10/0x10
[  443.585224][T21505]  ? rtnl_newlink+0x8db/0x1c70
[  443.585236][T21505]  ? __pfx___mutex_lock+0x10/0x10
[  443.585250][T21505]  ? ns_capable+0x8a/0xf0
[  443.585259][T21505]  ? rtnl_link_get_net_capable+0x16a/0x350
[  443.585267][T21505]  rtnl_newlink+0x149f/0x1c70
[  443.585302][T21505]  ? __pfx_rtnl_newlink+0x10/0x10
[  443.585314][T21505]  ? sched_balance_rq+0x19a0/0x57a0
[  443.585325][T21505]  ? __asan_memcpy+0x40/0x70
[  443.585334][T21505]  ? sched_balance_rq+0x19a0/0x57a0
[  443.585343][T21505]  ? is_bpf_text_address+0x26/0x2b0
[  443.585357][T21505]  ? __lock_acquire+0xab9/0xd20
[  443.585373][T21505]  ? __lock_acquire+0xab9/0xd20
[  443.585392][T21505]  ? is_bpf_text_address+0x26/0x2b0
[  443.585404][T21505]  ? is_bpf_text_address+0x292/0x2b0
[  443.585414][T21505]  ? is_bpf_text_address+0x26/0x2b0
[  443.585428][T21505]  ? __lock_acquire+0xab9/0xd20
[  443.585449][T21505]  ? __pfx_rtnl_newlink+0x10/0x10
[  443.585458][T21505]  rtnetlink_rcv_msg+0x7cf/0xb70
[  443.585468][T21505]  ? __lock_acquire+0xab9/0xd20
[  443.585479][T21505]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  443.585488][T21505]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  443.585505][T21505]  netlink_rcv_skb+0x208/0x470
[  443.585515][T21505]  ? __lock_acquire+0xab9/0xd20
[  443.585525][T21505]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  443.585535][T21505]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  443.585550][T21505]  ? netlink_deliver_tap+0x2e/0x1b0
[  443.585564][T21505]  netlink_unicast+0x82f/0x9e0
[  443.585577][T21505]  ? __pfx_netlink_unicast+0x10/0x10
[  443.585587][T21505]  ? netlink_sendmsg+0x642/0xb30
[  443.585596][T21505]  ? skb_put+0x11b/0x210
[  443.585605][T21505]  netlink_sendmsg+0x805/0xb30
[  443.585620][T21505]  ? __pfx_netlink_sendmsg+0x10/0x10
[  443.585631][T21505]  ? aa_sock_msg_perm+0xf1/0x1d0
[  443.585643][T21505]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  443.585651][T21505]  ? __pfx_netlink_sendmsg+0x10/0x10
[  443.585661][T21505]  __sock_sendmsg+0x21c/0x270
[  443.585672][T21505]  ____sys_sendmsg+0x505/0x830
[  443.585683][T21505]  ? __pfx_____sys_sendmsg+0x10/0x10
[  443.585695][T21505]  ? import_iovec+0x74/0xa0
[  443.585706][T21505]  ___sys_sendmsg+0x21f/0x2a0
[  443.585728][T21505]  ? __pfx____sys_sendmsg+0x10/0x10
[  443.585754][T21505]  ? __fget_files+0x2a/0x420
[  443.585760][T21505]  ? __fget_files+0x3a0/0x420
[  443.585771][T21505]  __x64_sys_sendmsg+0x19b/0x260
[  443.585780][T21505]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  443.585796][T21505]  ? do_syscall_64+0xbe/0x3b0
[  443.585808][T21505]  do_syscall_64+0xfa/0x3b0
[  443.585818][T21505]  ? lockdep_hardirqs_on+0x9c/0x150
[  443.585827][T21505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.585834][T21505]  ? exc_page_fault+0x9f/0xf0
[  443.585845][T21505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.585852][T21505] RIP: 0033:0x7f2a1b38ebe9
[  443.585861][T21505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  443.585867][T21505] RSP: 002b:00007f2a1c225038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  443.585876][T21505] RAX: ffffffffffffffda RBX: 00007f2a1b5b5fa0 RCX: 00007f2a1b38ebe9
[  443.585882][T21505] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 000000000000000a
[  443.585886][T21505] RBP: 00007f2a1b411e19 R08: 0000000000000000 R09: 0000000000000000
[  443.585891][T21505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  443.585895][T21505] R13: 00007f2a1b5b6038 R14: 00007f2a1b5b5fa0 R15: 00007ffe2daf18f8
[  443.585908][T21505]  </TASK>
[  443.585989][T21505] Mem-Info:
[  443.798886][T21505] active_anon:16580 inactive_anon:34 isolated_anon:0
[  443.798886][T21505]  active_file:1205 inactive_file:36999 isolated_file:0
[  443.798886][T21505]  unevictable:1768 dirty:233 writeback:0
[  443.798886][T21505]  slab_reclaimable:11197 slab_unreclaimable:191494
[  443.798886][T21505]  mapped:23671 shmem:2427 pagetables:1384
[  443.798886][T21505]  sec_pagetables:0 bounce:0
[  443.798886][T21505]  kernel_misc_reclaimable:0
[  443.798886][T21505]  free:140221 free_pcp:8077 free_cma:0
[  443.814866][T21505] Node 0 active_anon:54864kB inactive_anon:136kB active_file:1848kB inactive_file:16100kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:56844kB dirty:620kB writeback:0kB shmem:4800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7516kB pagetables:2884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  443.826337][T21505] Node 1 active_anon:11456kB inactive_anon:0kB active_file:2972kB inactive_file:131896kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37840kB dirty:312kB writeback:0kB shmem:4908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8372kB pagetables:2652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  443.836380][T21505] Node 0 DMA free:7168kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  443.846395][T21505] lowmem_reserve[]: 0 811 811 811 811
[  443.848218][T21505] Node 0 DMA32 free:220704kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54864kB inactive_anon:136kB active_file:1848kB inactive_file:16100kB unevictable:3536kB writepending:620kB present:1556484kB managed:830952kB mlocked:0kB bounce:0kB free_pcp:14960kB local_pcp:14372kB free_cma:0kB
[  443.859391][T21505] lowmem_reserve[]: 0 0 0 0 0
[  443.861388][T21505] Node 1 DMA32 free:106156kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  443.871492][T21505] lowmem_reserve[]: 0 0 854 854 854
[  443.873387][T21505] Node 1 Normal free:226856kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11456kB inactive_anon:0kB active_file:2972kB inactive_file:131896kB unevictable:3536kB writepending:312kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:18572kB local_pcp:828kB free_cma:0kB
[  443.884198][T21505] lowmem_reserve[]: 0 0 0 0 0
[  443.885896][T21505] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 1*4096kB (M) = 7168kB
[  443.889950][T21505] Node 0 DMA32: 1805*4kB (UM) 787*8kB (UME) 635*16kB (UME) 539*32kB (UME) 338*64kB (UME) 149*128kB (UME) 105*256kB (UME) 92*512kB (UME) 46*1024kB (UME) 9*2048kB (UME) 0*4096kB = 221148kB
[  443.895710][T21505] Node 1 DMA32: 49*4kB (UM) 51*8kB (UM) 51*16kB (UM) 49*32kB (UM) 46*64kB (UM) 47*128kB (UM) 46*256kB (UM) 37*512kB (UM) 40*1024kB (UM) 5*2048kB (UM) 3*4096kB (UM) = 106156kB
[  443.902294][T21505] Node 1 Normal: 744*4kB (UME) 1383*8kB (UME) 1393*16kB (UME) 744*32kB (UME) 396*64kB (UME) 233*128kB (UM) 92*256kB (UM) 34*512kB (UM) 47*1024kB (UME) 9*2048kB (UME) 1*4096kB (M) = 226920kB
[  443.908765][T21505] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  443.911770][T21505] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  443.914787][T21505] 40630 total pagecache pages
[  443.916420][T21505] 0 pages in swap cache
[  443.919087][T21505] Free swap  = 124996kB
[  443.920580][T21505] Total swap = 124996kB
[  443.922007][T21505] 786301 pages RAM
[  443.923360][T21505] 0 pages HighMem/MovableOnly
[  443.925029][T21505] 241331 pages reserved
[  443.926518][T21505] 0 pages cma reserved
[  443.933436][T21505] gretap3: refused to change device tx_queue_len
[  443.936113][T21505] A link change request failed with some changes committed already. Interface gretap3 may have been left with an inconsistent configuration, please check.
[  444.418601][T21561] ip6tnl3: entered promiscuous mode
[  444.625814][T21567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4206'.
[  444.794265][T21573] netlink: 'syz.0.4207': attribute type 5 has an invalid length.
[  445.144672][T21592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4211'.
[  445.256004][T21597] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4213'.
[  445.315418][T21597] lo speed is unknown, defaulting to 1000
[  445.331201][T21597] lo speed is unknown, defaulting to 1000
[  445.339271][T21597] lo speed is unknown, defaulting to 1000
[  446.360934][T21634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4221'.
[  446.431868][T21644] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4224'.
[  446.434850][T21644] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4224'.
[  447.296691][T21658] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  447.335808][T21656] IPVS: length: 113 != 24
[  447.401688][T21669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4232'.
[  447.955662][T21715] netlink: 'syz.2.4247': attribute type 2 has an invalid length.
[  447.963442][T21715] netlink: 'syz.2.4247': attribute type 8 has an invalid length.
[  447.999946][T21719] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  448.289948][T21750] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  448.295031][T21750] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  448.413113][T21764] __nla_validate_parse: 4 callbacks suppressed
[  448.413126][T21764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4262'.
[  448.523327][T21772] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4267'.
[  448.670070][T21793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4268'.
[  448.759299][T21796] netlink: 'syz.0.4269': attribute type 13 has an invalid length.
[  448.762157][T21796] netlink: 'syz.0.4269': attribute type 17 has an invalid length.
[  448.766975][T21796] tipc: Resetting bearer <eth:gre0>
[  448.770715][T21796] tipc: Resetting bearer <eth:gre0>
[  448.797065][T21796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  448.802123][T21796] veth1_vlan: left promiscuous mode
[  448.804949][T21796] @: left promiscuous mode
[  448.808318][T21796] @: entered promiscuous mode
[  448.816763][T21796] veth1_vlan: entered promiscuous mode
[  448.824204][T21796] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  448.846431][ T5884] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  448.849863][ T5884] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  448.868026][ T5884] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  448.871503][ T5884] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  448.892495][T21797] lo speed is unknown, defaulting to 1000
[  448.896413][T21797] lo speed is unknown, defaulting to 1000
[  448.902233][T21797] lo speed is unknown, defaulting to 1000
[  449.252834][T21802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4271'.
[  449.266217][T21802] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4271'.
[  450.353392][T21823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4277'.
[  450.787889][T21825] netlink: 'syz.0.4278': attribute type 1 has an invalid length.
[  450.791079][T21825] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4278'.
[  451.068074][T21856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4287'.
[  451.174779][T21860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4289'.
[  451.222895][T21862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4290'.
[  452.533347][T21889] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  453.520963][T21923] __nla_validate_parse: 7 callbacks suppressed
[  453.520979][T21923] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4308'.
[  453.541081][T21920] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4308'.
[  453.842040][T21932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4309'.
[  453.849183][T21932] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.4309'.
[  453.852321][T21932] openvswitch: netlink: Message has 5 unknown bytes.
[  453.876876][T21924] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  453.897712][T21934] netlink: 'syz.2.4310': attribute type 2 has an invalid length.
[  453.991446][T21941] netlink: 'syz.2.4312': attribute type 21 has an invalid length.
[  453.994490][T21941] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4312'.
[  454.131862][T21949] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4314'.
[  454.138360][T21950] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4314'.
[  454.143843][T21949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4314'.
[  454.155695][T21953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4315'.
[  454.213417][T21957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  454.216839][T21957] syzkaller0: entered promiscuous mode
[  454.222677][T21957] syzkaller0: entered allmulticast mode
[  454.224938][T21957] tipc: Resetting bearer <eth:syzkaller0>
[  454.230083][T21959] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  454.429113][   T56] block nbd4: Receive control failed (result -32)
[  454.501616][T21967] siw: device registration error -23
[  454.537755][T21967] netlink: 'syz.3.4320': attribute type 21 has an invalid length.
[  454.540888][T21967] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4320'.
[  454.722271][T21971] netlink: 'syz.3.4322': attribute type 13 has an invalid length.
[  454.725497][T21971] netlink: 'syz.3.4322': attribute type 12 has an invalid length.
[  455.847212][T22015] team0: Device gtp4 failed to enter team mode
[  455.849782][T22015] team0: Device gtp4 failed to enter team mode
[  456.022079][T22028] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  456.173097][T22042] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  456.176290][T22042] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  456.464248][T22062] geneve4: entered promiscuous mode
[  456.708055][T22073] netlink: 'syz.0.4356': attribute type 3 has an invalid length.
[  456.776521][T22075] 8021q: adding VLAN 0 to HW filter on device bond31
[  456.884675][T22082] netlink: 'syz.0.4358': attribute type 13 has an invalid length.
[  456.888198][T22082] netlink: 'syz.0.4358': attribute type 17 has an invalid length.
[  456.888406][T22083] netlink: 'syz.0.4358': attribute type 13 has an invalid length.
[  456.893224][T22083] netlink: 'syz.0.4358': attribute type 17 has an invalid length.
[  456.894001][T22082] tipc: Resetting bearer <eth:gre0>
[  456.905353][T22082] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  456.912905][T22083] tipc: Resetting bearer <eth:gre0>
[  456.920194][T22083] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  456.946924][T22081] lo speed is unknown, defaulting to 1000
[  456.951249][T22081] lo speed is unknown, defaulting to 1000
[  456.954266][T22081] lo speed is unknown, defaulting to 1000
[  457.352858][T22094] batadv0: left promiscuous mode
[  457.359815][T22094] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  457.392361][T22094] gretap2: left promiscuous mode
[  457.394323][T22094] gretap2: left allmulticast mode
[  457.396954][T22094] vlan3: left promiscuous mode
[  457.400343][T22094] hsr_slave_1: left promiscuous mode
[  457.402661][T22094] vlan3: left allmulticast mode
[  457.404613][T22094] hsr_slave_1: left allmulticast mode
[  457.427151][T22094] ipvlan1: left allmulticast mode
[  457.430271][T22094] bond40: left allmulticast mode
[  457.434408][T22094] gtp3: left promiscuous mode
[  457.437990][T22094] gtp3: left allmulticast mode
[  457.448895][T22094] ipvlan4: left promiscuous mode
[  457.476236][T22096] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  457.586192][T22105] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  458.008776][T22134] sctp: [Deprecated]: syz.3.4371 (pid 22134) Use of int in max_burst socket option deprecated.
[  458.008776][T22134] Use struct sctp_assoc_value instead
[  458.323266][T22151] bond42: entered promiscuous mode
[  458.325089][T22151] bond42: entered allmulticast mode
[  458.327148][T22151] 8021q: adding VLAN 0 to HW filter on device bond42
[  458.340645][T22151] bridge23: entered promiscuous mode
[  458.342601][T22151] bridge23: entered allmulticast mode
[  458.344818][T22151] bond42: (slave bridge23): Enslaving as a backup interface with an up link
[  458.382394][T22156] syzkaller0: entered promiscuous mode
[  458.384761][T22156] syzkaller0: entered allmulticast mode
[  458.389593][T22155] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  458.405491][T22155] tipc: Resetting bearer <eth:syzkaller0>
[  458.420754][T22155] tipc: Disabling bearer <eth:syzkaller0>
[  458.427686][   T12] bond42: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  458.537713][ T9250] bond42: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  458.565539][T22161] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  458.569356][T22162] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.573118][T22161] syzkaller0: entered promiscuous mode
[  458.575461][T22161] syzkaller0: entered allmulticast mode
[  458.594784][T22162] tipc: Resetting bearer <eth:syzkaller0>
[  458.601736][T22160] tipc: Resetting bearer <eth:syzkaller0>
[  458.614032][T22160] tipc: Disabling bearer <eth:syzkaller0>
[  458.732252][T22171] __nla_validate_parse: 32 callbacks suppressed
[  458.732267][T22171] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4384'.
[  458.767342][T22174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4385'.
[  458.827091][T22177] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4386'.
[  458.836647][T22177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4386'.
[  458.891644][T22183] C: renamed from team_slave_0
[  458.899243][T22183] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4388'.
[  458.901659][T22188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4389'.
[  458.902430][T22183] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  458.913266][T22188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4389'.
[  458.949338][T22191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4389'.
[  459.002872][T22197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4392'.
[  459.082524][T22201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4393'.
[  459.131655][T22201] bridge0 (unregistering): left allmulticast mode
[  459.769693][T22231] validate_nla: 2 callbacks suppressed
[  459.769705][T22231] netlink: 'syz.2.4401': attribute type 1 has an invalid length.
[  459.769704][T22230] netlink: 'syz.2.4401': attribute type 1 has an invalid length.
[  460.072175][T22254] netlink: 'syz.2.4408': attribute type 1 has an invalid length.
[  460.101369][T22254] 8021q: adding VLAN 0 to HW filter on device bond43
[  460.543561][T22292] lo speed is unknown, defaulting to 1000
[  460.546709][T22292] lo speed is unknown, defaulting to 1000
[  460.549704][T22292] lo speed is unknown, defaulting to 1000
[  462.687794][   T61] block nbd3: Possible stuck request ffff888021518000: control (read@0,4096B). Runtime 60 seconds
[  462.886206][T22292] geneve0: entered promiscuous mode
[  462.942109][T22292] geneve0: entered allmulticast mode
[  464.618861][   T61] block nbd1: Possible stuck request ffff8880214b8000: control (read@0,4096B). Runtime 330 seconds
[  464.648408][   T61] block nbd2: Possible stuck request ffff8880214e0000: control (read@0,4096B). Runtime 330 seconds
[  468.099526][T22311] __nla_validate_parse: 8 callbacks suppressed
[  468.099539][T22311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4427'.
[  468.104405][T22310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4427'.
[  468.160151][T22308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4426'.
[  468.191853][T22318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4428'.
[  468.214478][T22320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4429'.
[  468.510822][T22330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4431'.
[  468.563387][T22330] 8021q: adding VLAN 0 to HW filter on device bond32
[  468.568506][T22351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4435'.
[  468.595515][T22335] bond32: (slave veth29): Enslaving as an active interface with an up link
[  468.600235][T22351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4435'.
[  468.607209][T22351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4435'.
[  468.611420][T22351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4435'.
[  469.130684][T22363] vlan4: entered allmulticast mode
[  469.132387][T22363] bridge0: entered allmulticast mode
[  469.162117][T22365] siw: device registration error -23
[  469.162132][T22366] siw: device registration error -23
[  469.184164][T22363] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode
[  469.287319][T22369] netlink: 'syz.0.4441': attribute type 4 has an invalid length.
[  469.305929][T22369] netlink: 'syz.0.4441': attribute type 4 has an invalid length.
[  469.594323][T22392] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  469.803342][T22400] bond15: (slave vxcan13): The slave device specified does not support setting the MAC address
[  469.810626][T22400] bond15: (slave vxcan13): Error -95 calling set_mac_address
[  469.856298][T22404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  469.870089][   T51] lo speed is unknown, defaulting to 1000
[  469.872377][   T51] syz2: Port: 1 Link ACTIVE
[  469.976190][T22409] sctp: [Deprecated]: syz.3.4456 (pid 22409) Use of int in maxseg socket option.
[  469.976190][T22409] Use struct sctp_assoc_value instead
[  470.036329][T22412] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20002
[  470.073636][T22409] sctp: [Deprecated]: syz.3.4456 (pid 22409) Use of int in maxseg socket option.
[  470.073636][T22409] Use struct sctp_assoc_value instead
[  470.548960][T22437] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  470.578083][T22437] bond33: entered promiscuous mode
[  470.580292][T22437] bond33: entered allmulticast mode
[  470.582904][T22437] 8021q: adding VLAN 0 to HW filter on device bond33
[  472.509048][T22455] lo speed is unknown, defaulting to 1000
[  472.512949][T22455] lo speed is unknown, defaulting to 1000
[  472.516831][T22455] lo speed is unknown, defaulting to 1000
[  472.593277][   T33] audit: type=1107 audit(1755268580.958:7): pid=22458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='-&D=r+/p|cѭL:]/rh/}.v.DP'r$
[  472.593277][   T33] h5sHR6 4xۡ*R{Qn3,!nN8H!4r+t;KHt$۳nN$Nq	[(%IF,9*Jюx`3'*aO1<gɯ)^S1L,gYY[Y*誆 XaOy=[R'
[  473.021447][T22484] bond42: left promiscuous mode
[  473.023479][T22484] bridge23: left promiscuous mode
[  473.038299][T22483] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  473.057919][T12451] bond42: (slave bridge23): link status up again after 0 ms
[  473.084424][T12451] bond42: (slave bridge23): link status up again after 0 ms
[  473.086773][T12451] bond42: (slave bridge23): failed to get link speed/duplex
[  473.165215][T22492] lo speed is unknown, defaulting to 1000
[  473.171107][T22492] lo speed is unknown, defaulting to 1000
[  473.175197][T22492] lo speed is unknown, defaulting to 1000
[  473.226165][T22503] netlink: 'syz.0.4478': attribute type 13 has an invalid length.
[  473.230608][T12451] bond42: (slave bridge23): failed to get link speed/duplex
[  473.233373][T22503] netlink: 'syz.0.4478': attribute type 17 has an invalid length.
[  473.236302][T22503] tipc: Resetting bearer <eth:gre0>
[  473.242291][T22503] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  473.283724][T22503] lo speed is unknown, defaulting to 1000
[  473.286922][T22503] lo speed is unknown, defaulting to 1000
[  473.335807][T22503] lo speed is unknown, defaulting to 1000
[  473.388690][   T13] bond42: (slave bridge23): failed to get link speed/duplex
[  473.441219][T22492] netlink: 'syz.3.4475': attribute type 1 has an invalid length.
[  473.499201][   T13] bond42: (slave bridge23): failed to get link speed/duplex
[  473.510684][T22492] bond0: (slave geneve0): making interface the new active one
[  473.514009][T22492] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  473.533394][T22492] __nla_validate_parse: 47 callbacks suppressed
[  473.533408][T22492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4475'.
[  473.544936][T22492] 8021q: adding VLAN 0 to HW filter on device bond0
[  473.603867][T22521] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  473.608193][   T13] bond42: (slave bridge23): failed to get link speed/duplex
[  473.805779][T22528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4485'.
[  473.913354][T22532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4487'.
[  473.985716][   T12] bond0 (unregistering): (slave geneve0): Releasing active interface
[  474.097961][   T12] bond0 (unregistering): Released all slaves
[  474.207009][T22550] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4491'.
[  474.219783][T22550] pim6reg1: entered promiscuous mode
[  474.221555][T22550] pim6reg1: entered allmulticast mode
[  474.392200][T22564] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4495'.
[  474.397052][T22564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4495'.
[  474.451897][T22568] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  474.516419][T22575] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4498'.
[  474.670185][T22575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4498'.
[  474.673473][T22575] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  474.677197][T22575] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  474.707072][T22586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4499'.
[  474.771011][T22590] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4500'.
[  474.947737][ T5870] net_ratelimit: 8 callbacks suppressed
[  474.947754][ T5870] bond42: (slave bridge23): failed to get link speed/duplex
[  475.057947][ T5870] bond42: (slave bridge23): failed to get link speed/duplex
[  475.167586][ T5870] bond42: (slave bridge23): failed to get link speed/duplex
[  475.278160][ T5870] bond42: (slave bridge23): failed to get link speed/duplex
[  475.377244][T22612] netlink: 'syz.2.4508': attribute type 3 has an invalid length.
[  475.418586][T22612] lo speed is unknown, defaulting to 1000
[  475.421461][T22612] lo speed is unknown, defaulting to 1000
[  475.424138][T22612] lo speed is unknown, defaulting to 1000
[  475.427575][ T5870] bond42: (slave bridge23): failed to get link speed/duplex
[  475.539555][   T12] bond42: (slave bridge23): failed to get link speed/duplex
[  475.670127][   T13] bond42: (slave bridge23): failed to get link speed/duplex
[  475.801073][ T5870] bond42: (slave bridge23): failed to get link speed/duplex
[  475.861215][T22642] netlink: 'syz.3.4517': attribute type 1 has an invalid length.
[  475.967916][T22646] bond16: (slave geneve5): making interface the new active one
[  475.974966][T22646] bond16: (slave geneve5): Enslaving as an active interface with an up link
[  475.980693][ T5870] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  475.984532][ T5870] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  476.021121][ T5870] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  476.025308][ T5870] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  476.037336][T22654] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  476.038115][ T5870] bond42: (slave bridge23): failed to get link speed/duplex
[  476.569815][T22672] netlink: 'syz.3.4524': attribute type 1 has an invalid length.
[  476.695407][T22679] netlink: 'syz.0.4527': attribute type 2 has an invalid length.
[  476.833944][T22693] nbd: must specify at least one socket
[  476.836552][T22693] nbd: must specify a size in bytes for the device
[  476.890608][T22698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  476.893631][T22698] syzkaller0: entered promiscuous mode
[  476.895507][T22698] syzkaller0: entered allmulticast mode
[  476.924240][T22698] tipc: Resetting bearer <eth:syzkaller0>
[  476.927873][T22697] tipc: Resetting bearer <eth:syzkaller0>
[  476.946686][T22697] tipc: Disabling bearer <eth:syzkaller0>
[  477.203168][T22719] bond0: (slave veth0_to_hsr): Device is not bonding slave
[  477.206093][T22719] bond0: option active_slave: invalid value (veth0_to_hsr)
[  477.415517][T22741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  477.421987][T22741] syzkaller0: entered promiscuous mode
[  477.424688][T22741] syzkaller0: entered allmulticast mode
[  477.444123][T22741] tipc: Resetting bearer <eth:syzkaller0>
[  477.450704][T22740] tipc: Resetting bearer <eth:syzkaller0>
[  477.465007][T22740] tipc: Disabling bearer <eth:syzkaller0>
[  477.711158][T22769] netlink: 'syz.3.4560': attribute type 4 has an invalid length.
[  477.719043][T22773] netlink: 'syz.2.4561': attribute type 2 has an invalid length.
[  477.859718][T22789] netlink: 'syz.3.4566': attribute type 11 has an invalid length.
[  477.892148][T22785] tipc: Resetting bearer <eth:gre0>
[  477.913256][T22789] IPv6: sit4: Disabled Multicast RS
[  478.029159][T22813] netlink: 'syz.0.4570': attribute type 9 has an invalid length.
[  478.033142][T22813] netlink: 'syz.0.4570': attribute type 6 has an invalid length.
[  478.468232][T22833] netlink: 'syz.3.4578': attribute type 11 has an invalid length.
[  478.533834][T22839] sctp: [Deprecated]: syz.2.4579 (pid 22839) Use of int in max_burst socket option deprecated.
[  478.533834][T22839] Use struct sctp_assoc_value instead
[  478.571793][T22846] __nla_validate_parse: 37 callbacks suppressed
[  478.571807][T22846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4581'.
[  478.590460][T22839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4579'.
[  478.804465][T22862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4584'.
[  479.083991][T22884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4588'.
[  479.146426][T22888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4590'.
[  479.179849][T22890] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  479.212198][T22892] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4592'.
[  479.241149][T22894] netlink: 'syz.3.4593': attribute type 3 has an invalid length.
[  479.245790][T22894] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  479.293442][T22894] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  479.355488][T22894] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  479.385858][T22899] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4594'.
[  479.439971][T22894] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  479.448483][T22903] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4594'.
[  479.465521][T22899] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4594'.
[  479.470899][T22904] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4594'.
[  479.556856][ T5870] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  479.575198][ T5870] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  479.589282][ T5870] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  479.594156][ T5870] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  480.057681][ T5870] net_ratelimit: 35 callbacks suppressed
[  480.057771][ T5870] bond42: (slave bridge23): failed to get link speed/duplex
[  480.167918][ T5870] bond42: (slave bridge23): failed to get link speed/duplex
[  480.244497][T22922] netlink: 'syz.3.4601': attribute type 10 has an invalid length.
[  480.300474][T12451] bond42: (slave bridge23): failed to get link speed/duplex
[  480.417623][ T5884] bond42: (slave bridge23): failed to get link speed/duplex
[  480.525916][T22944] netlink: 'syz.3.4608': attribute type 1 has an invalid length.
[  480.539695][T12451] bond42: (slave bridge23): failed to get link speed/duplex
[  480.746298][T22950] netlink: 'syz.2.4609': attribute type 1 has an invalid length.
[  480.778170][ T5870] bond42: (slave bridge23): failed to get link speed/duplex
[  480.887558][ T5884] bond42: (slave bridge23): failed to get link speed/duplex
[  480.982295][T22967] syzkaller1: entered promiscuous mode
[  480.984197][T22967] syzkaller1: entered allmulticast mode
[  481.027833][ T5884] bond42: (slave bridge23): failed to get link speed/duplex
[  481.129723][T22985] xfrm3: entered allmulticast mode
[  481.133797][T22983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  481.176086][T22983] syzkaller0: entered promiscuous mode
[  481.179315][T22983] syzkaller0: entered allmulticast mode
[  481.190113][T22983] tipc: Resetting bearer <eth:syzkaller0>
[  481.217953][ T5870] bond42: (slave bridge23): failed to get link speed/duplex
[  481.240683][T22988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  481.244613][T22988] syzkaller0: entered promiscuous mode
[  481.247194][T22988] syzkaller0: entered allmulticast mode
[  481.255496][T22982] tipc: Resetting bearer <eth:syzkaller0>
[  483.064360][T22982] tipc: Disabling bearer <eth:syzkaller0>
[  483.071671][T22992] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  483.088011][T22987] tipc: Resetting bearer <eth:syzkaller0>
[  483.106772][T22987] tipc: Disabling bearer <eth:syzkaller0>
[  483.118345][ T5870] bond42: (slave bridge23): failed to get link speed/duplex
[  483.299690][T23018] tipc: Resetting bearer <eth:syzkaller0>
[  483.303518][T23018] team0: Port device sit3 removed
[  483.311138][T23018] bond16: (slave geneve5): Releasing active interface
[  483.319182][   T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  483.322371][   T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  483.325806][   T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  483.333064][   T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  483.406218][T23025] geneve5: entered promiscuous mode
[  483.410354][T23025] geneve5: entered allmulticast mode
[  483.413217][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 52909 - 0
[  483.416813][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 33409 - 0
[  483.421032][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 52909 - 0
[  483.424723][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 33409 - 0
[  483.429820][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 52909 - 0
[  483.435530][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 33409 - 0
[  483.438671][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 52909 - 0
[  483.441918][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 33409 - 0
[  484.263702][T23063] __nla_validate_parse: 17 callbacks suppressed
[  484.263713][T23063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4638'.
[  484.269379][T23063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4638'.
[  484.315656][T23070] tipc: Resetting bearer <eth:gre0>
[  484.319405][T23070] tipc: Resetting bearer <eth:gre0>
[  484.461322][T23081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4641'.
[  484.531076][T23085] netlink: 'syz.0.4640': attribute type 16 has an invalid length.
[  484.533805][T23085] netlink: 'syz.0.4640': attribute type 17 has an invalid length.
[  484.536942][T23084] netlink: 277 bytes leftover after parsing attributes in process `syz.3.4642'.
[  484.645811][T23089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  484.648250][T23089] IPv6: NLM_F_CREATE should be set when creating new route
[  484.651019][T23089] IPv6: NLM_F_CREATE should be set when creating new route
[  484.727967][T23092] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4644'.
[  485.022268][T23103] netlink: 'syz.3.4647': attribute type 13 has an invalid length.
[  485.037523][T23103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4647'.
[  485.170026][   T13] net_ratelimit: 19 callbacks suppressed
[  485.170043][   T13] bond42: (slave bridge23): failed to get link speed/duplex
[  485.277478][   T13] bond42: (slave bridge23): failed to get link speed/duplex
[  485.308044][T23120] lo speed is unknown, defaulting to 1000
[  485.311139][T23120] lo speed is unknown, defaulting to 1000
[  485.314235][T23120] lo speed is unknown, defaulting to 1000
[  485.387639][ T9250] bond42: (slave bridge23): failed to get link speed/duplex
[  485.493585][T23120] netlink: 'syz.0.4651': attribute type 1 has an invalid length.
[  485.517728][ T5741] bond42: (slave bridge23): failed to get link speed/duplex
[  485.647778][ T5884] bond42: (slave bridge23): failed to get link speed/duplex
[  485.706775][T23125] wireguard1: entered promiscuous mode
[  485.711317][T23125] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4652'.
[  485.758029][ T5884] bond42: (slave bridge23): failed to get link speed/duplex
[  485.867593][ T9250] bond42: (slave bridge23): failed to get link speed/duplex
[  485.977556][ T9250] bond42: (slave bridge23): failed to get link speed/duplex
[  486.087811][ T9250] bond42: (slave bridge23): failed to get link speed/duplex
[  486.099636][T23147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  486.120706][T23149] bond0: Device is already in use.
[  486.193626][T23149] lo speed is unknown, defaulting to 1000
[  486.196333][T23149] lo speed is unknown, defaulting to 1000
[  486.202139][T23149] lo speed is unknown, defaulting to 1000
[  486.695385][T23171] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4666'.
[  486.713486][T23171] tc_dump_action: action bad kind
[  486.733802][T23173] netlink: 'syz.2.4667': attribute type 7 has an invalid length.
[  486.745862][T23173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4667'.
[  486.903265][T23182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4669'.
[  487.138561][T23197] bridge0: port 1(erspan0) entered blocking state
[  487.140895][T23197] bridge0: port 1(erspan0) entered disabled state
[  487.143322][T23197] erspan0: entered allmulticast mode
[  487.148205][T23197] erspan0: left allmulticast mode
[  487.972842][T23225] netlink: 'syz.2.4678': attribute type 4 has an invalid length.
[  487.982741][T23225] netlink: 'syz.2.4678': attribute type 4 has an invalid length.
[  488.016342][   T51] lo speed is unknown, defaulting to 1000
[  488.019189][ T5877] lo speed is unknown, defaulting to 1000
[  488.302164][T23248] netlink: 'syz.0.4687': attribute type 1 has an invalid length.
[  488.370135][T23248] 8021q: adding VLAN 0 to HW filter on device bond34
[  488.381983][T23252] vlan2: entered promiscuous mode
[  488.383600][T23252] bond34: entered promiscuous mode
[  488.385339][T23252] vlan2: entered allmulticast mode
[  488.386966][T23252] bond34: entered allmulticast mode
[  488.434958][T23248] bond34: (slave gretap5): making interface the new active one
[  488.437571][T23248] gretap5: entered promiscuous mode
[  488.440609][T23248] gretap5: entered allmulticast mode
[  488.444497][T23248] bond34: (slave gretap5): Enslaving as an active interface with an up link
[  488.453276][T23248] syz.0.4687 (23248) used greatest stack depth: 18056 bytes left
[  488.761785][T23263] netlink: 'syz.2.4692': attribute type 1 has an invalid length.
[  488.847652][T23263] 8021q: adding VLAN 0 to HW filter on device bond45
[  488.885414][T23265] bond45: (slave geneve6): making interface the new active one
[  488.889781][T23265] bond45: (slave geneve6): Enslaving as an active interface with an up link
[  488.897670][ T9250] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  488.909624][ T9250] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  488.915822][ T9250] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  488.924973][ T9250] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  489.366245][T23273] __nla_validate_parse: 8 callbacks suppressed
[  489.366260][T23273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4695'.
[  489.375590][T23273] veth0_to_bond: entered allmulticast mode
[  489.378148][T23277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4695'.
[  489.419526][T23274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4696'.
[  489.472179][T23284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4699'.
[  489.476661][T23284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4699'.
[  489.534996][T23294] netlink: 'syz.3.4703': attribute type 1 has an invalid length.
[  489.540047][T23294] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4703'.
[  489.681731][T23299] netlink: 'syz.3.4704': attribute type 4 has an invalid length.
[  490.179669][   T13] net_ratelimit: 30 callbacks suppressed
[  490.179687][   T13] bond42: (slave bridge23): failed to get link speed/duplex
[  490.287789][ T9250] bond42: (slave bridge23): failed to get link speed/duplex
[  490.572214][   T13] bond42: (slave bridge23): failed to get link speed/duplex
[  490.677710][   T13] bond42: (slave bridge23): failed to get link speed/duplex
[  490.788010][   T13] bond42: (slave bridge23): failed to get link speed/duplex
[  490.897893][ T5870] bond42: (slave bridge23): failed to get link speed/duplex
[  491.007943][ T5870] bond42: (slave bridge23): failed to get link speed/duplex
[  491.050169][T23315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4709'.
[  491.054414][T23315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4709'.
[  491.059216][T23315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4709'.
[  491.062729][T23315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4709'.
[  491.117264][T23324] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5)
[  491.128086][ T9250] bond42: (slave bridge23): failed to get link speed/duplex
[  491.165321][T23331] vcan0: Master is either lo or non-ether device
[  491.184257][T23335] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  491.187034][T23335] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  491.238525][ T9250] bond42: (slave bridge23): failed to get link speed/duplex
[  491.405002][T23353] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  491.624679][T23367] netlink: 'syz.0.4722': attribute type 15 has an invalid length.
[  491.642155][T23367] dvmrp1: left allmulticast mode
[  491.719663][T23367] syzkaller0: entered promiscuous mode
[  491.721907][T23367] syzkaller0: entered allmulticast mode
[  492.779725][   T61] block nbd3: Possible stuck request ffff888021518000: control (read@0,4096B). Runtime 90 seconds
[  493.452985][T23383] netlink: 'syz.3.4728': attribute type 13 has an invalid length.
[  493.598062][T23404] netlink: 'syz.3.4734': attribute type 4 has an invalid length.
[  493.615551][T23404] netlink: 'syz.3.4734': attribute type 4 has an invalid length.
[  493.619836][    T9] lo speed is unknown, defaulting to 1000
[  493.621823][    T9] syz0: Port: 1 Link ACTIVE
[  493.623265][    T9] lo speed is unknown, defaulting to 1000
[  493.636450][T23404] netlink: 'syz.3.4734': attribute type 8 has an invalid length.
[  493.758628][T23421] lo speed is unknown, defaulting to 1000
[  493.762235][T23421] lo speed is unknown, defaulting to 1000
[  493.770365][T23421] lo speed is unknown, defaulting to 1000
[  493.826445][T23427] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  493.875822][T23425] lo speed is unknown, defaulting to 1000
[  493.914152][T23435] netlink: 'syz.3.4744': attribute type 4 has an invalid length.
[  493.939036][T23435] netlink: 'syz.3.4744': attribute type 4 has an invalid length.
[  493.952407][   T96] lo speed is unknown, defaulting to 1000
[  493.955123][   T96] lo speed is unknown, defaulting to 1000
[  493.959061][    T9] lo speed is unknown, defaulting to 1000
[  493.961347][T23425] lo speed is unknown, defaulting to 1000
[  494.181418][T23425] lo speed is unknown, defaulting to 1000
[  494.704667][T23468] lo speed is unknown, defaulting to 1000
[  494.707606][   T11] block nbd2: Possible stuck request ffff8880214e0000: control (read@0,4096B). Runtime 360 seconds
[  494.710975][   T61] block nbd1: Possible stuck request ffff8880214b8000: control (read@0,4096B). Runtime 360 seconds
[  494.712928][T23468] lo speed is unknown, defaulting to 1000
[  494.722761][T23468] lo speed is unknown, defaulting to 1000
[  494.858529][T23473] vti1: entered promiscuous mode
[  495.232108][T23478] lo speed is unknown, defaulting to 1000
[  495.235962][T23478] lo speed is unknown, defaulting to 1000
[  495.240966][T23478] lo speed is unknown, defaulting to 1000
[  495.248226][   T13] net_ratelimit: 19 callbacks suppressed
[  495.248238][   T13] bond42: (slave bridge23): failed to get link speed/duplex
[  495.377968][   T13] bond42: (slave bridge23): failed to get link speed/duplex
[  495.489869][ T9250] bond42: (slave bridge23): failed to get link speed/duplex
[  495.597975][ T9250] bond42: (slave bridge23): failed to get link speed/duplex
[  495.632065][T23487] __nla_validate_parse: 42 callbacks suppressed
[  495.632080][T23487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4753'.
[  495.709818][ T9250] bond42: (slave bridge23): failed to get link speed/duplex
[  495.713652][T23490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4754'.
[  495.735566][T23490] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4754'.
[  495.794386][T23492] netlink: 'syz.0.4755': attribute type 13 has an invalid length.
[  495.850130][T23497] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4754'.
[  495.897882][ T9250] bond42: (slave bridge23): failed to get link speed/duplex
[  495.924529][T23500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  495.927259][T23500] syzkaller0: entered promiscuous mode
[  495.932679][T23500] syzkaller0: entered allmulticast mode
[  495.950621][T23500] tipc: Resetting bearer <eth:syzkaller0>
[  495.957206][T23499] tipc: Resetting bearer <eth:syzkaller0>
[  495.983359][T23499] tipc: Disabling bearer <eth:syzkaller0>
[  496.060915][   T13] bond42: (slave bridge23): failed to get link speed/duplex
[  496.106266][T23512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4758'.
[  496.111861][T23512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4758'.
[  496.167717][   T13] bond42: (slave bridge23): failed to get link speed/duplex
[  496.283680][   T51] lo speed is unknown, defaulting to 1000
[  496.285849][   T51] syz2: Port: 1 Link DOWN
[  496.300108][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 52909 - 0
[  496.317696][   T13] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 33409 - 0
[  496.320907][   T13] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  496.323563][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 52909 - 0
[  496.326175][   T13] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 33409 - 0
[  496.331649][T23522] netlink: 'syz.2.4761': attribute type 9 has an invalid length.
[  496.334050][   T13] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  496.348129][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 52909 - 0
[  496.350990][   T13] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 33409 - 0
[  496.353864][   T13] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  496.356494][T23522] netlink: 'syz.2.4761': attribute type 2 has an invalid length.
[  496.361694][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 52909 - 0
[  496.364702][   T13] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 33409 - 0
[  496.370881][   T13] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  496.468730][T23533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4764'.
[  496.473430][T23533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4764'.
[  496.478548][T23534] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  496.481196][T23533] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  496.510822][T23541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4766'.
[  496.620916][T23543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4767'.
[  496.704346][T23564] syzkaller0: entered promiscuous mode
[  496.706093][T23564] syzkaller0: entered allmulticast mode
[  498.212893][T23583] veth1: entered allmulticast mode
[  499.168247][   T34] INFO: task udevd:8397 blocked for more than 143 seconds.
[  499.170565][   T34]       Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691-dirty #0
[  499.173220][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  499.176584][   T34] task:udevd           state:D stack:22632 pid:8397  tgid:8397  ppid:1      task_flags:0x400140 flags:0x00004006
[  499.181014][   T34] Call Trace:
[  499.182219][   T34]  <TASK>
[  499.183181][   T34]  __schedule+0x1798/0x4cc0
[  499.184745][   T34]  ? __pfx___schedule+0x10/0x10
[  499.186532][   T34]  ? schedule+0x91/0x360
[  499.188119][   T34]  schedule+0x165/0x360
[  499.189671][   T34]  io_schedule+0x80/0xd0
[  499.191211][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  499.193320][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  499.195231][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  499.197605][   T34]  ? __filemap_get_folio+0x700/0xaf0
[  499.199477][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  499.201388][   T34]  do_read_cache_folio+0x1aa/0x590
[  499.203472][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  499.205530][   T34]  read_part_sector+0xb6/0x2b0
[  499.207020][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  499.208741][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  499.210606][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  499.212522][   T34]  bdev_disk_changed+0x75f/0x14b0
[  499.214133][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  499.215901][   T34]  ? wait_on_inode+0xc0/0x230
[  499.217480][   T34]  blkdev_get_whole+0x380/0x510
[  499.219029][   T34]  bdev_open+0x31e/0xd30
[  499.220601][   T34]  blkdev_open+0x3a8/0x510
[  499.222181][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  499.223875][   T34]  do_dentry_open+0x953/0x13f0
[  499.225623][   T34]  vfs_open+0x3b/0x340
[  499.226937][   T34]  ? path_openat+0x2ecd/0x3830
[  499.228802][   T34]  path_openat+0x2ee5/0x3830
[  499.230252][   T34]  ? arch_stack_walk+0xfc/0x150
[  499.231796][   T34]  ? stack_depot_save_flags+0x40/0x860
[  499.233501][   T34]  ? __pfx_path_openat+0x10/0x10
[  499.235060][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.236965][   T34]  do_filp_open+0x1fa/0x410
[  499.238675][   T34]  ? __lock_acquire+0xab9/0xd20
[  499.240384][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  499.242208][   T34]  ? _raw_spin_unlock+0x28/0x50
[  499.244028][   T34]  ? alloc_fd+0x64c/0x6c0
[  499.245728][   T34]  do_sys_openat2+0x121/0x1c0
[  499.247397][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  499.249093][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  499.250708][   T34]  ? rcu_is_watching+0x15/0xb0
[  499.252217][   T34]  __x64_sys_openat+0x138/0x170
[  499.253752][   T34]  do_syscall_64+0xfa/0x3b0
[  499.255176][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.257210][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  499.259903][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.262080][   T34] RIP: 0033:0x7fd75cf169a4
[  499.263529][   T34] RSP: 002b:00007ffdef016600 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  499.266341][   T34] RAX: ffffffffffffffda RBX: 0000555898e38850 RCX: 00007fd75cf169a4
[  499.269038][   T34] RDX: 00000000000a0800 RSI: 0000555898e38a60 RDI: 00000000ffffff9c
[  499.271455][   T34] RBP: 0000555898e38a60 R08: 0000000000000001 R09: 7fffffffffffffff
[  499.273909][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  499.276498][   T34] R13: 0000555898e2ba60 R14: 0000000000000001 R15: 0000555898e1a910
[  499.278995][   T34]  </TASK>
[  499.279974][   T34] INFO: task udevd:8485 blocked for more than 143 seconds.
[  499.289034][   T34]       Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691-dirty #0
[  499.291860][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  499.294688][   T34] task:udevd           state:D stack:22608 pid:8485  tgid:8485  ppid:1      task_flags:0x400140 flags:0x00004006
[  499.299676][   T34] Call Trace:
[  499.301135][   T34]  <TASK>
[  499.302537][   T34]  __schedule+0x1798/0x4cc0
[  499.304504][   T34]  ? __pfx___schedule+0x10/0x10
[  499.306569][   T34]  ? schedule+0x91/0x360
[  499.308449][   T34]  schedule+0x165/0x360
[  499.309995][   T34]  io_schedule+0x80/0xd0
[  499.311472][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  499.313374][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  499.315358][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  499.317215][   T34]  ? __filemap_get_folio+0x700/0xaf0
[  499.320194][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  499.322019][   T34]  do_read_cache_folio+0x1aa/0x590
[  499.323831][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  499.325722][   T34]  read_part_sector+0xb6/0x2b0
[  499.327507][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  499.329374][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  499.331288][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  499.333470][   T34]  bdev_disk_changed+0x75f/0x14b0
[  499.335426][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  499.337168][   T34]  ? wait_on_inode+0xc0/0x230
[  499.339804][   T34]  blkdev_get_whole+0x380/0x510
[  499.341481][   T34]  bdev_open+0x31e/0xd30
[  499.343444][   T34]  blkdev_open+0x3a8/0x510
[  499.344923][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  499.346738][   T34]  do_dentry_open+0x953/0x13f0
[  499.349583][   T34]  vfs_open+0x3b/0x340
[  499.351059][   T34]  ? path_openat+0x2ecd/0x3830
[  499.353077][   T34]  path_openat+0x2ee5/0x3830
[  499.354664][   T34]  ? arch_stack_walk+0xfc/0x150
[  499.356342][   T34]  ? stack_depot_save_flags+0x40/0x860
[  499.360224][   T34]  ? __pfx_path_openat+0x10/0x10
[  499.362200][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.364680][   T34]  do_filp_open+0x1fa/0x410
[  499.366451][   T34]  ? __lock_acquire+0xab9/0xd20
[  499.368555][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  499.370437][   T34]  ? _raw_spin_unlock+0x28/0x50
[  499.372505][   T34]  ? alloc_fd+0x64c/0x6c0
[  499.374200][   T34]  do_sys_openat2+0x121/0x1c0
[  499.376017][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  499.378151][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  499.380152][   T34]  ? rcu_is_watching+0x15/0xb0
[  499.382002][   T34]  __x64_sys_openat+0x138/0x170
[  499.383818][   T34]  do_syscall_64+0xfa/0x3b0
[  499.385492][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  499.387582][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.390052][   T34]  ? exc_page_fault+0x9f/0xf0
[  499.391851][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.394054][   T34] RIP: 0033:0x7fd75cf169a4
[  499.395740][   T34] RSP: 002b:00007ffdef016600 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  499.399110][   T34] RAX: ffffffffffffffda RBX: 0000555898e411f0 RCX: 00007fd75cf169a4
[  499.402118][   T34] RDX: 00000000000a0800 RSI: 0000555898e23a90 RDI: 00000000ffffff9c
[  499.405035][   T34] RBP: 0000555898e23a90 R08: 0000000000000001 R09: 7fffffffffffffff
[  499.407884][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  499.410649][   T34] R13: 0000555898e25d60 R14: 0000000000000001 R15: 0000555898e1a910
[  499.412990][   T34]  </TASK>
[  499.413979][   T34] 
[  499.413979][   T34] Showing all locks held in the system:
[  499.416357][   T34] 1 lock held by khungtaskd/34:
[  499.419672][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  499.423497][   T34] 2 locks held by getty/5674:
[  499.425047][   T34]  #0: ffff88810f4fb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  499.428311][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  499.431575][   T34] 1 lock held by udevd/8397:
[  499.433098][   T34]  #0: ffff8880213af358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  499.436133][   T34] 3 locks held by kworker/u10:9/8409:
[  499.439086][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  499.442781][   T34]  #1: ffffc9000303fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  499.446456][   T34]  #2: ffffffff8f537cc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  499.449471][   T34] 1 lock held by udevd/8485:
[  499.450963][   T34]  #0: ffff8880213ab358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  499.453798][   T34] 1 lock held by udevd/10230:
[  499.455340][   T34]  #0: ffff888021473358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  499.459743][   T34] 2 locks held by syz.0.4786/23598:
[  499.461519][   T34]  #0: ffffffff8f537cc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  499.464401][   T34]  #1: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  499.468538][   T34] 2 locks held by syz.3.4787/23602:
[  499.470316][   T34]  #0: ffff88812b1386d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  499.473544][   T34]  #1: ffffffff8f537cc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200
[  499.476270][   T34] 1 lock held by syz.2.4789/23607:
[  499.478976][   T34]  #0: ffffffff8f537cc8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150
[  499.481890][   T34] 1 lock held by syz.2.4789/23608:
[  499.483523][   T34]  #0: ffffffff8f537cc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70
[  499.486542][   T34] 
[  499.487323][   T34] =============================================
[  499.487323][   T34] 
[  499.490441][   T34] NMI backtrace for cpu 1
[  499.490454][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691-dirty #0 PREEMPT(full) 
[  499.490473][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  499.490482][   T34] Call Trace:
[  499.490489][   T34]  <TASK>
[  499.490496][   T34]  dump_stack_lvl+0x189/0x250
[  499.490520][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  499.490539][   T34]  ? __pfx__printk+0x10/0x10
[  499.490572][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  499.490585][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  499.490594][   T34]  ? __pfx__printk+0x10/0x10
[  499.490606][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  499.490618][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  499.490628][   T34]  watchdog+0xf93/0xfe0
[  499.490641][   T34]  ? watchdog+0x1de/0xfe0
[  499.490653][   T34]  kthread+0x711/0x8a0
[  499.490664][   T34]  ? __pfx_watchdog+0x10/0x10
[  499.490673][   T34]  ? __pfx_kthread+0x10/0x10
[  499.490684][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  499.490694][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  499.490703][   T34]  ? __pfx_kthread+0x10/0x10
[  499.490712][   T34]  ret_from_fork+0x3fc/0x770
[  499.490721][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  499.490731][   T34]  ? __switch_to_asm+0x39/0x70
[  499.490739][   T34]  ? __switch_to_asm+0x33/0x70
[  499.490748][   T34]  ? __pfx_kthread+0x10/0x10
[  499.490778][   T34]  ret_from_fork_asm+0x1a/0x30
[  499.490793][   T34]  </TASK>
[  499.490796][   T34] Sending NMI from CPU 1 to CPUs 0:
[  499.538910][    C0] NMI backtrace for cpu 0
[  499.538927][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691-dirty #0 PREEMPT(full) 
[  499.538943][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  499.538951][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  499.538974][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 33 d7 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  499.538985][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  499.538997][    C0] RAX: 1f788bb5fe8d5400 RBX: ffffffff81968308 RCX: 1f788bb5fe8d5400
[  499.539007][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b6ed3 RDI: ffffffff8be33400
[  499.539016][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  499.539025][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa37e30
[  499.539035][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  499.539043][    C0] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  499.539054][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  499.539068][    C0] CR2: 000000110c39e4b1 CR3: 000000002760a000 CR4: 00000000000006f0
[  499.539101][    C0] Call Trace:
[  499.539110][    C0]  <TASK>
[  499.539115][    C0]  default_idle+0x13/0x20
[  499.539127][    C0]  default_idle_call+0x74/0xb0
[  499.539141][    C0]  do_idle+0x1e8/0x510
[  499.539156][    C0]  ? __pfx_do_idle+0x10/0x10
[  499.539174][    C0]  cpu_startup_entry+0x44/0x60
[  499.539186][    C0]  rest_init+0x2de/0x300
[  499.539200][    C0]  start_kernel+0x3a9/0x410
[  499.539216][    C0]  x86_64_start_reservations+0x24/0x30
[  499.539233][    C0]  x86_64_start_kernel+0x143/0x1c0
[  499.539294][    C0]  common_startup_64+0x13e/0x147
[  499.539317][    C0]  </TASK>
[  499.539910][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  499.601953][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691-dirty #0 PREEMPT(full) 
[  499.605717][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  499.608832][   T34] Call Trace:
[  499.609917][   T34]  <TASK>
[  499.610875][   T34]  dump_stack_lvl+0x99/0x250
[  499.612275][   T34]  ? __asan_memcpy+0x40/0x70
[  499.613643][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  499.615176][   T34]  ? __pfx__printk+0x10/0x10
[  499.616580][   T34]  vpanic+0x281/0x750
[  499.617909][   T34]  ? __pfx_vpanic+0x10/0x10
[  499.619397][   T34]  ? preempt_schedule+0xae/0xc0
[  499.620960][   T34]  ? preempt_schedule_common+0x83/0xd0
[  499.622750][   T34]  panic+0xb9/0xc0
[  499.623941][   T34]  ? __pfx_panic+0x10/0x10
[  499.625376][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  499.627116][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  499.629109][   T34]  watchdog+0xfd2/0xfe0
[  499.630553][   T34]  ? watchdog+0x1de/0xfe0
[  499.631952][   T34]  kthread+0x711/0x8a0
[  499.633263][   T34]  ? __pfx_watchdog+0x10/0x10
[  499.634733][   T34]  ? __pfx_kthread+0x10/0x10
[  499.636128][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  499.637826][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  499.639747][   T34]  ? __pfx_kthread+0x10/0x10
[  499.641221][   T34]  ret_from_fork+0x3fc/0x770
[  499.642800][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  499.644608][   T34]  ? __switch_to_asm+0x39/0x70
[  499.646120][   T34]  ? __switch_to_asm+0x33/0x70
[  499.647595][   T34]  ? __pfx_kthread+0x10/0x10
[  499.649479][   T34]  ret_from_fork_asm+0x1a/0x30
[  499.651142][   T34]  </TASK>
[  499.652869][   T34] Kernel Offset: disabled
[  499.654285][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:36:47  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888107670237 R9 =1ffff11020ece046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9901 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c39e4b1 CR3=000000003f848000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0002000afb0e0888 00000010a004c807
XMM02=b88300c500c50008 d8401bda0a0a0002 XMM03=000afb0e08880000 0010a004c807f2b9
XMM04=00007f1b684ed100 00007f1b67987460 XMM05=00007f1b67987478 00007f1b679874c0
XMM06=00007f1b679874b8 00007f1b679874b0 XMM07=00007f1b679874a8 00007f1b679874a0
XMM08=0000000000000000 00007f1b67812ee7 XMM09=0000000000000000 00007f1b67812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000ffffff05 RBX=0000000000000001 RCX=0000000000000002 RDX=0000000000000003
RSI=0000000000000000 RDI=ffff888106171cc0 RBP=0000000000000000 RSP=ffffc90007d378f0
R8 =0000000000000000 R9 =ffffffff8b46e462 R10=dffffc0000000000 R11=ffffffff8b46e390
R12=ffffffffffffff05 R13=0000000000000001 R14=ffff888106172800 R15=ffff8881061727f8
RIP=ffffffff819d63a6 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000f000 CR3=00000000292de000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f1b67812e53
XMM06=0000000000000000 00007f1b67812e4d XMM07=0000000000000000 00007f1b67812e61
XMM08=0000000000000000 00007f1b67812ee7 XMM09=0000000000000000 00007f1b67812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
