last executing test programs:

1.435510791s ago: executing program 1 (id=9755):
r0 = bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000010e4c0)) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000010e6c0)={0x4, [], 0x6, "f52a5f027ae3ab"}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000010f6c0)={0xfffffffffffffff8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}], 0x2, "9e40136fa75c7c"}) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00001106c0)={{0x0, 0x0, 0x1, 0x3, 0x8, 0x2, 0x319e, 0xff, 0x80, 0x4, 0x9, 0x0, 0x5, 0xa, 0x4}, 0x8, [0x0]}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000110740)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}, {}, {}, {}, {}, {0x0, <r5=>0x0}], 0xf7, "b1ad9e4bc8962f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00001117c0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x2, "350e286ae487d0"}) (async)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00001127c0)={0x0, 0x0, "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", "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"}) (async)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00001137c0)={0x0, 0x0, "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", "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"}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00001147c0)) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00001149c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x5, "97cf7a13350a04"}) (async)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00001159c0)={0x0, 0x0, "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", "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"}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00001169c0)) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async)
r6 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x4, 0xa, 0xbaa3bc3a656066c7, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x44050) (async)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x9) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$unix(0x1, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {}, {0x5, 0xf}}}, 0x24}}, 0x20040054) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) (async)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'})

1.330242684s ago: executing program 1 (id=9758):
socket$kcm(0x29, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000500)=0xd0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3)
sendmsg$alg(r3, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004011}, 0x4c040)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'bridge0\x00', {0x2}, 0x2})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'bond0\x00'})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x5, &(0x7f00000004c0), &(0x7f0000000540)=0x4)
syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c200000e00000000000088a83e0081000e000800454c0014006300000f2f9078e00000027f0000", @ANYRES8], 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c00f39ecd0000090a010400000000000000000300000008000a400000000000000900020073797a31030000000000000000000004080003a0000000e00800044000000004140000001000010000000000000000000084000a00"/119], 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000100)=0x4, 0x4)
syz_emit_ethernet(0x94, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ca9646", 0x5e, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"2ed5a812a128c8cdcdfb213d53e21685567a3ae6f6c3e2770d910f5e68933d9a51bd989c50730534aafd86452a5b319639d5a8305a2e7eb1866fc93a67be4772a24c8408a54158aee2c9"}}}}}}}, 0x0)

500.119188ms ago: executing program 2 (id=9763):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) (async)
r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x10001}, 0x1c) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) (async)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r3, 0x6) (async)
getsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000fdff2b000000044dec7c0ad4fd71745b32ca40042c00000002000000000000000000000b00000000000000000100000d00b0f5c9ad6f3ef7e00000000000000000000009030000000000a813127850969b8797fd05fc7337975c463d655413c60c2f1ab0efc0f50f58db4aa3dd417fea6c913b067df1811482ecaa7fa79f355eda4157d380d331e856b30189c5a9edd171a72a711f11c541f80ddf0f02658d099f75c01cfe76d9b64b81ce8627497d2ffafe102691d8c7a3247910253840a3308e237e21ce522bf3947a920d13"], &(0x7f0000001b80)=""/4090, 0x46, 0xffa, 0xa}, 0x20)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000200)={r6, 0x1, 0x6, @multicast}, 0x10)
shutdown(0xffffffffffffffff, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r7=>0x0}) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 64)
r10 = socket(0x400000000010, 0x3, 0x0) (rerun: 64)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@getchain={0x74, 0x66, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9, 0xa}, {0xc}, {0x5, 0xe}}, [{0x8, 0xb, 0x6}, {0x0, 0xb, 0x200}, {0x8, 0xb, 0x4}, {0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x6}, {0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0xe9}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000893}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

445.793477ms ago: executing program 1 (id=9764):
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0xfb)

444.503317ms ago: executing program 1 (id=9765):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x20000040)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
unshare(0x6a040000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff3, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

367.482415ms ago: executing program 2 (id=9766):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000003c0007010000000000400000017c00000400fc800c00018006000600800a00000800028004007280140007000001"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x3ff, 0x18, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0]})
r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect$pppl2tp(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x101000000}, {0xc}}]}, 0x54}}, 0x0)
gettid()
getpid()
getpid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f00000004c0)='pids.current\x00', 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x18, r6, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r8)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r13=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r15, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffefefff}, {0x6, 0x2}]}, 0x10)
sendmmsg(r14, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44040050)
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r11], 0x3c}}, 0x10)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)={0x634, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x121, 0x33, @mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_b, @initial, {0x5, 0x1}}, 0x2504, 0x4, @default, @void, @val={0x2d, 0x1a, {0x8, 0x3, 0x3, 0x0, {0x7, 0x0, 0x0, 0x40, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x6, 0x8}}, [{0xdd, 0xe1, "b1ae409f181a9c7751f7c4baad4bad4ff0bbb9955d783f2be43c2a93336ac07898c087961a14b7ffca1b2d1e269561bfa5b11be98526573ea085b112e8304d38508abbdf21898e4195442db848bed74fce8c6af5b01c4ae0695148c8be004e4a10af8d297327e96600e4ddc21ffa2effda7a398fbd0a049f4136049831c6fd146e0b783254414517705e6a4e5e1a4b016a2e4f684552ce7b7b64a9ad4d2f983d5778a7040d51baa6e2b2df95094259f8243ee0c2b7fb8a7d059de013ae952074adcc39f727a110a7e7ed3d9edf7ae76e4caa2fda514b44bb78c2becff24e548b56"}]}}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x28}, @device_a, @broadcast, @basic={{0x0, 0x0, 0x0, 0x0, 0x7}, {0x8, 0x6}}}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0xbaa}, @broadcast}}, @NL80211_ATTR_FRAME={0x4a1, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x15}, @device_a, @device_b, @initial, {0x7, 0x9}}, 0x8400, 0x7f, {0x0, 0x6, @default_ibss_ssid}, @void, @val={0x2d, 0x1a, {0x8, 0x0, 0x2, 0x0, {0x8000000, 0x4, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x2}, 0x800, 0x1ff, 0x81}}, [{0xdd, 0x50, "2cd87e418701915648f980ae448f42776beb29742f88000d43e00e100f6134cff924cc34329aa8dcec0cab09f3df45430e566fd5cecec3d2874f93d404a9465d8e1d1378f5bc3c5189a18ce645419dfa"}, {0xdd, 0xf4, "afbec34ba7db8af3a39b057f907affe6471f5fce54c4230fad7259c1d545f299818f670497847909262b233a7323a5edf40ad8f3b274ed75dcedcee2498867b4a4b79d5f304be73cbc6383f1a22452ef249311303ed2882dd78f9721b148594f409db6abb86015d57794eb459b425080dc2fa57b47e41405c77fdf20fa1b0ad15b337388f73cd1dcdd0ce278f792e3bf503b328d7c5f9702a0f68594b4aa4b615ae48298af09332044a02dc32e2b7711d1d754b1e5bb807a0facdb8460ebebb0ce10146c86076444611896d70b366c3a7385df1629806ac97411f33ff7eff353cb0fadd3389af7104a4a2ae3de74d4538344d947"}, {0xdd, 0x69, "95aa44621495bca86814e3230ca496db700861aaeb4b4735105406366b50b52c4499854de51599bd58df6c5d40910cbfad8cb30f3ad583da130d2f5ca1fbbf2589b10e1861d9529d8c5c40b507cd04bf323154b08cb23cd7bc3ffa216e81ae40dc881a3d3291bca94e"}, {0xdd, 0x77, "27a7f3294e7379b93b4a7e8ce79d8bbd404df59047eef054731186de63fc10ced39e8ba5f41f5b82ec39e913faff496ebf744309b97dcb4488b45d4bb311b7d5568766fe2436ad3673a625fe7956dc2c314c6bff27d60e84a4f22b39f5080c7f20ab4e0aae626cec494484f72e689c72f4c423b98ceaaf"}, {0xdd, 0x87, "0a0e0eac796a249874219633dba678f5f68a322448d531e001a0f6b85b666c2aa20d5b1d794a733fe1f5e02c02ec05416e3beaf015747a549e178ab497a421563771aa40dc0743ae30c33d53fbba1dde3a65f18a7914392c9db7c8a06cf952482bf3b0e2dcf22e294b52f98d5a5576f0f6651681187d06906e90a67773f2aa922a53867a0346c9"}, {0xdd, 0xdd, "e3778e9aceac90a3f16d93279eebca02d7c0cd3b8e803d170e77048f55c4c6feb672122ac796b773d36dd40381488b0081e2ed3ecc75a19db8b19da99e0a5c7fc61d01bde7ad074d6f4722e713281094d6b4cecee7bbff753e170c87e492614077bbc2541fe643ab1524ae87c604c053d22e418de6644e565261db24693096ff9698cc27738835ca5f49df07e7842f76c18db9705a234058e516a7e1853a1321e497e51f9498a2b4de32712b2f2ebf5b058c07874df02c1e09fa0581fb81b9e378a34b6fb058c372e52f1ff330c419fa384e463bb10cd28d3100384c4d"}, {0xdd, 0x84, "0213ca4fd7c71d7f76f5bb24e855f2e0fd3ef06eea32985f79f9a424229d6cde9808215e3ef2c83aa78cb06e967e77503b69c573b06769e9825dcad3b9aaab778e8bd00710125b51253dd3a68a14e950b0c58b73031a3443cf1322dcd08608bd32d6927af0084c5dddb3d30b2b4c4a3808e15b334fa4575581c8914a8f07525f08506d09"}, {0xdd, 0x41, "e713c9d54cd4d922a82e67103566a5c5a6a825f3812551a9b5732db12dc6d07849569ccf9a99ad3a4f7d62dd55dcd0d3e8db171f358e4d8254ad6ec32c168021ba"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x634}, 0x1, 0x0, 0x0, 0xc011}, 0x20040815)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000e00)={0x14, r4, 0x4, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c1b0557b", @ANYRES16=r16, @ANYBLOB="100028bd7000fcdbdf255500000008000100110000000c009900a103000031000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20004000)

365.90398ms ago: executing program 0 (id=9767):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000000)=0xe, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000340)=0xff, 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80)

313.950578ms ago: executing program 0 (id=9768):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6}) (async, rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
r2 = socket(0x10, 0x803, 0x0) (async)
r3 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000000c0)=0x80, 0x4) (async, rerun: 32)
sendto$inet6(r3, &(0x7f0000000040)="00d8", 0x10b0c, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRES32=r1, @ANYRES32, @ANYRES64, @ANYRESOCT=r7, @ANYRES16=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 64)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) (rerun: 64)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e93800000000000000000a0003000000000004000400"], 0x1c}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) (async)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async, rerun: 64)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}], 0x1c) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

303.28705ms ago: executing program 2 (id=9769):
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)

189.101199ms ago: executing program 0 (id=9770):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(0x0, r1)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42001000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x188, r2, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "82009b4e0a869337e820ab087decacef929c1360a4d5760e9938a2d62c1a8e273f85"}}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x41}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x30}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x54f}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x841}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000)
socket$inet6(0xa, 0x3, 0xfffff43b)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x382, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

188.897519ms ago: executing program 2 (id=9771):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x1000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x11c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xc0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x98, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x30, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x800)
setsockopt$inet6_buf(r0, 0x29, 0x1b, 0x0, 0x21)
socket$nl_audit(0x10, 0x3, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800005000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

119.627327ms ago: executing program 1 (id=9772):
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000100)={0x710, 0x0, 0x5, 0x701, 0x0, 0x0, {0x3}, [{{0x254, 0x1, {{0x1, 0x400}, 0x5, 0x4, 0x6, 0x9, 0x14, 'syz0\x00', "48aee2400fb23a268d8f62018d6cd2d0f39c550e95b581c455538a9cc87536a3", "2f5f302d18975a0be6afbbcdc0fa4c537fb6767e84f64ec0658d54315545c652", [{0xd, 0x69cb, {0x0, 0x4}}, {0x7, 0x1ff, {0x3, 0x7}}, {0xfff8, 0x0, {0x2, 0x80000000}}, {0x1, 0xfffd, {0x2, 0x8}}, {0xd, 0x10, {0x3}}, {0x200, 0x9, {0x0, 0x1}}, {0x8, 0xcca, {0x0, 0x3}}, {0x5, 0x5, {0x0, 0xe}}, {0x7, 0x0, {0x0, 0x4}}, {0x0, 0xbfc, {0x1, 0x1000}}, {0x8, 0x7, {0x1, 0xffff0000}}, {0xfffe, 0x81, {0x0, 0x5aa1}}, {0x8772, 0x1, {0x2, 0x7cdd}}, {0x1772, 0xa, {0x3, 0x2}}, {0x8, 0x1ff, {0x2, 0x7}}, {0x8, 0xd, {0x1, 0x9}}, {0x2, 0xa, {0x3, 0x5}}, {0x0, 0x0, {0x0, 0x2}}, {0x4000, 0x4, {0x1, 0x1}}, {0xe, 0x800, {0x2, 0x2d}}, {0x8, 0x6, {0x0, 0x10}}, {0x1, 0x24, {0x3cc0a0b216d79549, 0xd0}}, {0x1ff, 0x4, {0x1, 0x8}}, {0x6, 0x7, {0x1, 0xfffffffd}}, {0x1, 0x10e, {0x1, 0x4}}, {0x1, 0x6, {0x1, 0x6}}, {0xa0, 0xfffd, {0x1, 0x7}}, {0x7f, 0x1, {0x0, 0x1000}}, {0x200, 0x74f, {0x3, 0x7ff}}, {0x5, 0x400, {0x0, 0x401}}, {0x8, 0xc, {0x1, 0x4e1}}, {0x642, 0x2, {0x3, 0xff}}, {0x3a, 0x0, {0x2, 0x4}}, {0x5, 0x5, {0x0, 0x5}}, {0x1, 0x4324, {0x2}}, {0x3, 0x9, {0x1, 0x4}}, {0x8, 0x101, {0x1, 0xf48}}, {0x7, 0x84, {0x1, 0x2}}, {0x2, 0x5ff, {0x1, 0x1}}, {0x6, 0x9, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0x40, 0x1, 0x5, 0x6, 0x5, 'syz0\x00', "5fe8cce693aa6c0278006c98c2e27d8bdb1b5d16c9375f6c8df5a826a1ea3d4a", "f3e5fa437e95682a2d98bdc09b975293cadd314cf58fb7cdc608d0ba9d9387d8", [{0x80, 0x0, {0x1, 0xffe}}, {0xff, 0xb, {0x0, 0x7}}, {0x2, 0x4, {0x0, 0x7}}, {0x9796, 0x0, {0x3, 0x8}}, {0x7, 0x8, {0x1, 0x2}}, {0xd, 0x0, {0x2, 0xf}}, {0x3, 0x6, {0x2, 0x1}}, {0x3, 0x0, {0x2}}, {0xd, 0x6, {0x2, 0x5}}, {0x1, 0x9, {0x3, 0x2}}, {0x8, 0x7, {0x3, 0x2}}, {0x3, 0x4, {0x6, 0xa}}, {0x5, 0x100, {0x1, 0x10000}}, {0x10, 0x4865, {0x0, 0xfffffffb}}, {0x0, 0xba3, {0x0, 0x353}}, {0x0, 0x1, {0x2, 0x5a1a}}, {0x40, 0x7, {0x0, 0xfff0}}, {0x800, 0x4, {0x1, 0x6f1}}, {0x2, 0x4aea, {0x0, 0x3}}, {0x52, 0x101, {0x1, 0x3}}, {0x1ff, 0xfff8, {0x2, 0x8}}, {0x7, 0x3}, {0x1f3, 0xfffd, {0x2, 0x4000000}}, {0x283, 0xfffc, {0x3, 0x32b}}, {0xf0b2, 0x6, {0x1, 0x2}}, {0xe, 0x8, {0x3, 0x3}}, {0xd365, 0x5, {0x2, 0x8}}, {0xc, 0x5, {0x2, 0x6}}, {0x1, 0x0, {0x2, 0xa}}, {0x4, 0x9, {0x0, 0x6}}, {0x2, 0xc, {0x1, 0xc74}}, {0xf246, 0x2, {0x3, 0xfffffff9}}, {0x5, 0x8, {0x0, 0x10000}}, {0x101, 0x6, {0x1, 0xa}}, {0x8, 0xfff7, {0x0, 0x2}}, {0x5, 0x0, {0x3, 0x2}}, {0x4, 0x9, {0x1, 0xfff}}, {0x7, 0x7ff, {0x1, 0x114}}, {0x8000, 0x2, {0x3, 0x2}}, {0xfff0, 0x2, {0x0, 0x10001}}]}}}, {{0x254, 0x1, {{0x1, 0x1000}, 0xa, 0x5, 0x3, 0x7, 0x23, 'syz1\x00', "fcfd16b28dc91585d149fb7df9c2b2303b1b5fe9114c98ab12ed0404cf1e9b76", "d5895589200b7a6ac1faf433e17167a79bc1d0c6df72b6de161ae06e158024c2", [{0x7, 0x2, {0x0, 0x775}}, {0x372, 0x10, {0x3, 0x7}}, {0x9, 0x9, {0x1, 0xc}}, {0x37f, 0x101, {0x2, 0x797c}}, {0x7, 0xb, {0x2, 0xb}}, {0x93, 0x2, {0x2, 0x6}}, {0x4, 0x9, {0x2, 0x10}}, {0x3, 0xa4c, {0x3, 0xd870}}, {0xe137, 0x5, {0x3, 0x5}}, {0x72f, 0x4, {0x1, 0xfffffffb}}, {0x14, 0x20, {0x3, 0x6}}, {0x0, 0xa1fc, {0x2, 0x1}}, {0x0, 0x1, {0x3, 0x3}}, {0x9, 0x3, {0x3, 0xba8}}, {0x5, 0x6, {0x1, 0x9}}, {0xffff, 0x2, {0x1, 0xe8c3}}, {0x100, 0x401, {0x2}}, {0xc81, 0x37d, {0x3, 0xc3d}}, {0x7, 0x57d8, {0x3, 0x2}}, {0x200, 0x3, {0x0, 0x5}}, {0x0, 0x401, {0x0, 0x8}}, {0x6a5, 0x1, {0x0, 0x4}}, {0x7f, 0xfff8, {0x1, 0x8001}}, {0x8, 0x5, {0x2, 0xff}}, {0x745, 0x18, {0x2, 0x5}}, {0x7, 0x4, {0x3, 0x80000000}}, {0x6, 0x5, {0x0, 0x80000000}}, {0x6, 0x6, {0x1, 0x3}}, {0x9, 0x0, {0x2}}, {0x4, 0x9, {0x2, 0x8dc5}}, {0x6, 0x3, {0x1, 0x80000001}}, {0xc, 0x9, {0x0, 0x80000000}}, {0x4, 0x7, {0x2, 0x80000001}}, {0x1, 0x9, {0x2}}, {0x61f, 0x0, {0x2, 0x400}}, {0x80, 0x5, {0x1, 0x7}}, {0x9022, 0x1, {0x0, 0x2}}, {0xcc1b, 0x3, {0x3, 0x6}}, {0x101, 0x5, {0x0, 0x4}}, {0x7, 0x4, {0x2, 0xbdf4}}]}}}]}, 0x710}}, 0x0)
shutdown(r1, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000008c0)="33e825a10199a656e4e71d803ce70b8fcce094aa9f32c25c8d45be0dedfde053f0f76d111cedbee0fed264e94f1d39674b27025b79ac7b5d6b25258d62d9f3211024fd6aea74bd3668758ce4faee4a07814a96b3c7048a12cd57cffb3eeb7c6b053fecb7662d2a1a40b40aaa4cf5fba3377edcc2c7df9294e567f054ee5bdae9219515c36d3344fc69b656e76d70cf2a7fe72bae61706302653e0c419c77be2776748676c1a127e3faeaa795a6eab94ba4765a82178f6ec5e26a62cc12b3331f6238aabd0f0302e0c37fb67516e74acdf8dc1d15a1e6b02651f9d1e88ca17a851ce6973a2a4ae6f2ada90d5fbeb6ec0aab6c2da02490e54b60875f2f4ab776201e21910196bd1c70a244264a068421af80cd85c6100880958e759a1c0335f1eb5087a507cbfed8e92fe2edb2ffb86bec71f45b6fa70e8f0e7b1baa45c288454cc1b7276494ba52b598104a8ff22959ce53e427b0cf7576b4b3e2ddcb0ced2b552508a1d6dd1a52acad3175dcc9368a40129dc92038f7a7cfb13dce03a0786f996bc7f9b98e402eb35a896e0c67d1ccdda58d9b234bf8e830bbdc9c1e3f37dad8022e1ffb00890ffd1416c39658c3794417022ffed4ac99fc66fcec2d0cff2be9a76ea0dc8b1a872e510240458b56fbd0404ead5dfe0219f6dd093eca2325dee736a8aece62d6c38fe841c7b333c0abda91dd0909b7d41b1427e313d3ad4e50aaf357b9c07333a05ac1f9f0e7191304c07dfc205e24a981700852c876a93b328d39b79d409060635c9572c4c7a82ac2d87e5edc83c42e99ee4ab6669471cec9d0f248dc1761bf497726fd764aeb128c629b866c611c7619bbb3a56f1cdc49da8db77985294a75cc5b9bd06219b2187df736bab240089f76e0f16b3f62d9a98a7b377fafe50df6d7a5a115261e20d9e0bac06e2272650a9d99d97f17d1e65bf3dd01a3f78598082e51a647c0960c893e5c2399e1e7ff8b9cdc54e3120181d42f7f8304ba962cffc7dab070a7392208a26367833168bb1daf6c9542562fa1663f1c6556121a9142fe82ac33f0ac3af2505ece61560f3ec6d928cef483642bf2e8224f1753caabdfb815fece78babe6799f4204ddad150e1f982c524c5029a4d3367f827ba2f61268a45f0bec7df5df4082b6956cc3e274086b456675b516922afdfbe169906ceab2047985815254b5dd9753c20e801a8470aa9ff862cc1016233ab832c88021f39e7bc00d9ef75a1fdf85a5a3c3f9631ca0b5ad035ed664fa404ce7fdbc27d3fe088a6c2de1e3e1b4596fb7093ee57f49d0453c04c5ae9a76626a171e8d2b72cb7bf36aa240f09fa3f2947c22954c7fa0fbde1338313cd8438df6364c56fbe015237490ecabfdb380c14421c4d24f28dd3cf78177f7447b291a10d2a603cc0a8e9d10af5044ebd016e44e5a900795e127973ba5f48522fe315cb538cee5d57994ec4ed3f918bdb27a53600247f16287745dc1f11ebfb85baea504063c12966ecd70f4a84056a5158951d74b5a585b8327a1d674e2e89eb053cdb3fd317242f15ead06ef61d1b8e1214fc41bcc81f51dbe9bf472bab2cc3739c07cccdf6e05c3448a2cca3f06d46d40622b0a8a38bacaca1a9ef0ec95099b1d48b3211f87dcff69527a0cd95fd9590117c822c5b5f86acd9ced35c29738f0de41589434daa50173e152b51379646fb34c8c128de4aef2d467372db1941eb53d4cce0c047529e3cc76a58b2969dc5e50130151e1606785e783228b54e2d9985c3884cc1cc3332e96579708e3e9e9521934c627c4dd3a2ca4582ab8a0dd53419f44c4689a185116741ca190120df5fb92171eeec6dd65de2352b19d051930caf5724ba05df1542273e1f8c90b9241e8d5c4db8c49529e5849b43a58cda350bb798b282cac8c016fb31fdc99a3fdbc4dd559baaa02a2763f6ef139e6379814680fb364c581093cb3094ffbe15a366ea2a0d902819a7c8303d2eca67f168f20893086e1ad762d3ecd336e699aed6a8ae8dbafff489de36a4107c497d0728e666b740f13b98c6622e32cc21662b724ebeede65952a92c4e529822e814b17df898a82edf4ceeb1e069291502744ccb8fe2e84c2e271dffdd846948213a8e9ffdec69e9cfaff1e0944558e71ff407d38c48de1bbef8dfb02327cfeeb839bde82845fb4734be4b4e04ff5a8a7c2dd09916cf74423b0e6fdd6880212423fe9c15ed64979885d6b45c2cd7af197f3ae3902ccb19c499410729d1a316f6b7370c0400d7b02e6a78190055d1ce55a639a9db983679fc7e5b824326d3906eeb5d12ed6fbed9a9a82798fe82c0b1badc5230ee54a9ebb7fc5bcb6f380b110cb411a9112820d47b4ef4e9430db4084d784f6d5bba4b9eb07c23c05d1b0667f09d35c838c1aeea68f9d30cae0e4c8ee0eb409b22b7f97bb481ae03b8173e18f1134c125835c25af5b326498a89839a3aef8b051fc4cd9fcadf88f0795d8d0ad305113d9c6440b6737f401f9acfd41990e8efd08c358efee66cfc0b5167401e27bb7c1e7a63992cf4a4024589013b66e5190970532f2379c4085d9c953e3245cefc584711846aa34023fb55c27ba5478b7cd5953adad265c7ada3ecbad58a50e1423488102ab28ea2105b0d3a5cbb0990674576aa99216afc91e6c5eca31f17510130467e10b22bc54207fd08558d145b87ed7df24c28e04a9895956e5b64f5ddd4ada4c3fb04001072013be0b2604a319944cace30b67d22331289122891504bf20529a26772e3503246ec8173173764ba3874a3fc9f0385139afe3311053ba27f4fb91d6937f4b200dabe978448d317af29f079425fcfeb1dcdce11bac6b165a1e0f4f72857d50de5b7ebc36531c3f16cb4e7e54af2fbb668081f563edf51630ef017b7f2edceef2104c26e7f990d408de7ee6d39508086464e2f94dc995d4efacb8769ecd7525911f60e7cff674748424924d6f36db6d26740fb3346e4ed69c60b75922744bc35779f8481ff2d7270d64908155809cd4d9aef0b31622ca9c2c9242e9ef095699fbadc35c9ecfda9937ed1c95d4e84f566d4b1e4658976b2385924026b56e4c065204cf2c1460a7e7417b73ed18f15c89951792b0c84c8560168a648cba5e0e4e89a4d13dee3f7e7f6849ce0c2d9e16e62acb58a1354038522c2cd26e461d548acadab9880f3c3c018f5af3d0ec655eff00ecc4af7a295548729593b199917db1ee00610dbc5c2142ab40f3cae42c7075131a61407c9cc22612735eca993355bf48974b62da2ccbf3ca3a913ceb06ea1509d25bcdaac978b218ca03f242f944534ad8fd8b81876d44dd9ffeb4c368ba232e2016f6c090a3a4c597fe68817aae0351386dbca075f75d5599697ab20252a283182f0ebc21e542decf5c46baf85fd7250e0790c6dc811c3cc3a785dc2695a71fd577174fc32cba6ecc5e34dc7f1c418622974600ad1022f0eef5fdd3dbcac6e080d06c74c97ecc0a99fc768831eb7d9f55fb487c78d58be47df51e2ed10dd76cf5f3ab6fefa49e927cb1bf07404a7b069aabedfa1695e0d0f3fc0720c4220e042421af3e4e9a094c699723913c76561f149adfc57ecc7eecbf3276ccf17390f306919396d160e072fdeb1a32026183a971e27871e0031dc9a9cd8e94897bb6e8e88a8c732de6f3f8b5cc77c06a420a22b5cbc41227faf3b4a7c198184ff7f62017ca0937fcadc762dcdf614a30b9987e9cdc4d59ecdfba7014165307b1261493e32dd19a958c283c6704d8a98ef154c2df4f07085cf5ee214db62febb2f0c43c1807555a6ca160b8e53a4643415c36b680cd371dc437a0def109cd7bb7ec42c595d5dba45f83bc83a84828622faf2230e8d8f05f5be07c30ab1b52071516b52c9009017b4714f22e2757d417856af9852042927b3a88ec7baf0286a74696a7b624e0f485653a1b83211aa1657cda7412c350361fe625eb84b056a014edb61b6db1d5631c5aeee309514becd4db4ffd35c4448fd31540d93a40fa18b848f88c5f021317c8ba423f3aac0803abe9144681a27089b8bf3f764eec96b8ed2f5952e6e75545fd77707d8948695b3995f1d60691257665693f49085697b39dbab5ccb2dfdd58ea1c02e23ddedeaf966d606ebbef4607fe66995652dd93ffdf83a40b371eace9d0810f0ea8253ff91920063b9d399388dcc7a18f00a7aa0daf0d647a56cd778dd7b1790d48cd599b3819bb4d7b334286519bace945fd22fa3ac4d2324a6fe78512449ebf4b8cf1d64a56fc4bc33420dfde0c5341b5d5bd23fabd3c8acefc47925597f4e7b8d9e3ef05b3982cda5d6af1a1a5982b0a792efe8d3033bb04f32fc50f8ea230858136dee1f06b556168fa51ebe1e6c350fe6f7abde2a2ace3397fa47f87a3d345ebfff158f2b40f26faf01d2e5e9b232336a338c7cdf7186ab341aec852c87bdfd60037e55375787771b72ab4c9e66d2ccbcf264cad26e4ec9834cc57d649b236f370d9c60f4e5f4e95585f38fd39cc8bfb5d632902245957366bc935e55a921c2f45646a219dc6c0f2e2bf11db74c3b679bd5849112636535742db858a8f045bd018e43e58a5e307331ad17ab77be9115f10614c6e3e5f209904ed2bedc3e9405ad5dc792c2995018976ffd20832bffd01acdd893b1b3853ca998b4c8f7d1c36f01bf07546e3e30b8c3355569d48c3e8c2a75f96e2065db2b0291f4125621bc342a1811e3c5274a3dde38f10e00ad2eb90d33df3f8b597e57a6a7598f0e414faa8c276f028dc37cd35cbeaeef8742f8258629747ffaa6a2407ef7582587a2e544de818a5a24209ebbae95194fe4e4d2c36862515ab7ee32a4ce4d375a3acefbe68b8a3f18caa6ca9212807d1a8af83f3310c2912be8b9d6151ad11098b2c647893ff095c4d58b5fbc7b02488655b997ea2e82293c37474be2638d02682490e1c1fd4e6ee3af72cd788dda834c4c3976af393b6aee42558c2d48c04ed7da9a9b7fffea6debcdcea3e76a10353c53416b6e45ab5601d3750a3ae734770e116eae53d0ac60d9f76a861f7536652ee0e7db3d0fdcb0de9c13ab0831a1b16cfaa8191425def79523f719105368aaafe0eb818f63cdc55e06e9cd48b62f5d3bfaf465fed671d84e03488cc165a4871ec3299eaa7dccd242ca3ab3414d82172d3e02cf96637785ad01c74b79ef9911b1a7374a7734c7548e96d46fd0b8ff8e0373ec3de6305782580f0d04c249ec0b55c76fdde1de36686a4398d9618c5978f758be56fe332651bd6bda288517edb7fa4be5fab1bccc6d74355b3694d76787740d13b7f8edacd86193bebf67540fd9a0cef65c9db461194051fd3c50c45258e8e770a8adbcd59b5ed4363ee1b33c4f2174a25a5155327b8f30624109a3fd6e8ae5750460c58c4d6fde3f853866d8512e5a4cd54928543d733c5da0fa4c2d8e0e1f26a5ddcc53c13a3ccc86ddb5494c282b8bbd0b1b3aa4da7a1601aa5f252686ed75f02eec2a6087f7570264b8b450e067fac480ccaf05890289843559196d7eef8698a06a84214181faf37677a2ececb97c8efa0c5de5a513ddf24e0be4ab68d3646b749045aa1ab6e0124e09aa0d8eb1a1a64a1910960eb18e65ab69a27b1996161a6a094d38f62dc06c36203a48ff3950e4dd28a7a54b630e1ba77c6f123e9c302ad83246269195d317e529f0b76b59e0d6205a3f078f4fc6638db48c6a146fc9dde728f47ae3e71c8f4ed0416de2e026a3b96f4e018418ab4b59b3c3d401e8bb2c9941ebf6501a8f1fbc0beb84c3447c6033e2eec885b72921e9c6684176bf3c0ed2989637ece609d52ed5", 0x1000, 0x4, &(0x7f00000018c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001900)={0x1b, 0x0, 0x0, 0x8c76, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000001980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x5, [@enum={0xe, 0x5, 0x0, 0x6, 0x4, [{0x1, 0x10000}, {0x10, 0x41a}, {0xb, 0x2}, {0x1}, {0x5, 0x3}]}, @enum64={0xd, 0x3, 0x0, 0x13, 0x0, 0xa, [{0x10, 0x0, 0x57b8}, {0xc}, {0xb, 0x1, 0x2}]}, @typedef={0x4, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x0, 0x2e, 0x30]}}, &(0x7f0000001a40), 0x8d, 0x0, 0x1, 0xfffffffd, 0x10000}, 0x28)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0xd7, 0x0, r2, 0xb5f, '\x00', 0x0, r3, 0x1, 0x1, 0x2}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001c00)={'tunl0\x00', &(0x7f0000001b40)={'tunl0\x00', <r5=>0x0, 0x7, 0x78c0, 0xfffffffa, 0x58, {{0x28, 0x4, 0x3, 0x1e, 0xa0, 0x65, 0x0, 0x2, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@timestamp={0x44, 0x10, 0x5c, 0x0, 0x6, [0xe2e, 0x1, 0x9]}, @cipso={0x86, 0x17, 0x1, [{0x7, 0x2}, {0x5, 0xd, "b6af94bfa579712adbee10"}, {0x7, 0x2}]}, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x4, [@rand_addr=0x64010102, @local, @private=0xa010102, @private=0xa010101, @loopback, @private=0xa010102]}, @timestamp_addr={0x44, 0x14, 0xd7, 0x1, 0x3, [{@local, 0x7}, {@empty, 0x7fff}]}, @timestamp_prespec={0x44, 0x14, 0xb6, 0x3, 0x7, [{@empty, 0x401}, {@empty, 0x2}]}, @timestamp_addr={0x44, 0x1c, 0x9c, 0x1, 0x9, [{@remote, 0xfe}, {@loopback, 0x5}, {@remote, 0x7}]}]}}}}})
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f0000001c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x76, 0x76, 0x4, [@const={0x9, 0x0, 0x0, 0xa, 0x1}, @restrict={0xc, 0x0, 0x0, 0xb, 0x4}, @enum={0xb, 0x4, 0x0, 0x6, 0x4, [{0xc, 0x5}, {0x9, 0xb}, {0x10, 0x9}, {0x0, 0x7}]}, @datasec={0x4, 0x1, 0x0, 0xf, 0x2, [{0x5, 0x8, 0xc2}], "6d10"}, @typedef={0xb, 0x0, 0x0, 0x8, 0x2}, @fwd={0x1}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001d00)=""/198, 0x94, 0xc6, 0x1, 0xed6, 0x10000}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffff, '\x00', r5, r6, 0x4, 0x3, 0x4}, 0x50)
r7 = accept(r1, &(0x7f0000001ec0)=@xdp, &(0x7f0000001f40)=0x80)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000001f80)={0x0, {{0x2, 0x4e22, @multicast1}}, 0x1, 0x5, [{{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @private=0xa010102}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e23, @multicast2}}]}, 0x310)
r8 = bpf$TOKEN_CREATE(0x24, &(0x7f00000022c0)={0x0, r0}, 0x8)
ioctl$AUTOFS_IOC_FAIL(r8, 0x9361, 0x6e34)
connect$caif(0xffffffffffffffff, &(0x7f0000002300)=@rfm={0x25, 0xa4ca, "e832009e2e13a6c98fe61e50520f0d4c"}, 0x18)
r9 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$OSF_MSG_REMOVE(r9, &(0x7f0000002d40)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002d00)={&(0x7f0000002380)={0x964, 0x1, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [{{0x254, 0x1, {{0x2, 0x5}, 0x80, 0x5, 0x81, 0x2, 0x11, 'syz0\x00', "e3ee193c3635db3ea34fbb1a54a63397158812aef4c055ad0a1601dd6fa39583", "e9742be709824fb518e74b60a664d796d42e26c8303b66deccdbf3b9ce8cb798", [{0x200, 0x7, {0x1, 0x7ff}}, {0x5, 0xb7, {0x2, 0xddb}}, {0x5, 0x7, {0x2, 0x3}}, {0x4, 0x1, {0x3, 0x5}}, {0x1, 0x806a, {0x0, 0x10}}, {0xb4, 0x401, {0x3, 0x7}}, {0x9, 0x8, {0x0, 0x1e}}, {0x2, 0x100, {0x2, 0x7fff}}, {0x5, 0x69d, {0x1, 0x1000}}, {0x9, 0x6, {0x3, 0x9776}}, {0x7f, 0x7f, {0x1, 0x7}}, {0x8, 0xd, {0x1, 0x8001}}, {0x0, 0x4, {0x0, 0x263f}}, {0x7, 0x8, {0x1, 0xdaa1}}, {0x9, 0x9, {0x0, 0x7cc}}, {0x7ae, 0xd3fe, {0x2, 0xfffffff6}}, {0x1ff, 0x5, {0x0, 0x9c4cf62}}, {0xff, 0x6, {0x3}}, {0x3, 0x1000, {0x0, 0x17482bef}}, {0x4, 0xfffb, {0x3, 0xf7d}}, {0xff7f, 0x2, {0x0, 0x1}}, {0x10, 0x9, {0x3, 0xfffffffd}}, {0x3, 0x38, {0x2, 0x101}}, {0x5, 0x9, {0x2, 0x800}}, {0x0, 0x1, {0x3, 0xbb}}, {0x2, 0x0, {0x1, 0x3}}, {0x1000, 0x80, {0x1, 0x73}}, {0xec, 0x0, {0x1, 0x4}}, {0x8, 0x1, {0x0, 0x5af}}, {0x200, 0x6, {0x1, 0x5}}, {0x5, 0xf9f, {0x0, 0x4}}, {0x1, 0x4, {0x3, 0x40}}, {0x30e, 0x100, {0x2, 0x3}}, {0x3ff, 0x8, {0x0, 0xff}}, {0x7f, 0x5, {0x0, 0x1}}, {0x1, 0x35, {0x1, 0x5}}, {0x81, 0x4, {0x1, 0x5}}, {0x6, 0x6, {0x2, 0x7fff}}, {0x9, 0x0, {0x0, 0x10}}, {0x7, 0x655, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x2, 0x78, 0x2b48, 0x8, 0x1e, 'syz0\x00', "122429b35fff734f595dc9dac24fcacd7ef9e72622bdfd3e942aa3b581db5379", "f5a12e91d2989a9e45dd2544d5d41843a9c3ca8cd5147b1aaeda921aca74bdff", [{0x2, 0x8000, {0x2, 0x9}}, {0x8, 0xfff, {0x7, 0x9}}, {0xfff8, 0xffff, {0x2, 0x1}}, {0xfff, 0xf8, {0x2, 0x2}}, {0xfe00, 0x81, {0x0, 0x9}}, {0xb8, 0x4, {0x2, 0xff}}, {0x7, 0x1, {0x1, 0x9}}, {0x3, 0x1, {0x1, 0xcd}}, {0xc48, 0x1, {0x3, 0x2}}, {0x5, 0x9, {0x3, 0x9}}, {0x2, 0x2, {0x3}}, {0xfff8, 0x7, {0x1, 0x3}}, {0x0, 0x8, {0x0, 0x4}}, {0x1, 0x2, {0x1, 0x5}}, {0x2, 0x0, {0x3, 0x2}}, {0xb, 0x6, {0x1, 0xfff}}, {0xff7f, 0x7ff, {0x3, 0x5785aab9}}, {0x1ff, 0x6, {0x2, 0x7}}, {0x1, 0x3, {0x0, 0x200}}, {0x8, 0xfe00, {0x1, 0x7}}, {0x2, 0x3, {0x0, 0x9}}, {0x6, 0x1}, {0x4, 0x6, {0x2, 0x6f0b66d7}}, {0x5, 0x4, {0x3, 0x2}}, {0x80, 0x7f, {0x2, 0x9}}, {0x7, 0x5, {0x0, 0xffff}}, {0x8, 0x6, {0x0, 0x1}}, {0xe3, 0x1, {0x3, 0x3}}, {0x8, 0x9, {0x3, 0x9}}, {0x0, 0xb, {0x3, 0x9}}, {0xffff, 0x6, {0x2, 0x4}}, {0x4, 0x4300, {0x0, 0x9}}, {0x2, 0x2, {0x1, 0xe}}, {0x0, 0x1b77, {0x3, 0x38bb}}, {0x0, 0xf, {0x0, 0x8}}, {0x8, 0x3ff, {0x3}}, {0x5, 0xa000, {0x3, 0x4}}, {0x59, 0xfffd, {0x2, 0x5}}, {0x5, 0xa1fc, {0x3, 0x9}}, {0x1, 0xb, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x6, 0x6, 0x101, 0x0, 0x8, 'syz0\x00', "338b32f6da07cb5330d863765b8be059404fbf8f01a6140b32013d433f0dfa6e", "0df9400c8ae25bd637dae0a90c9803d8669e50a6a1535cb0b2a4420123cfe2ff", [{0x80, 0x0, {0x0, 0xffffda29}}, {0x0, 0x81, {0x2, 0x3db}}, {0xf467, 0x7, {0x2, 0x6bc}}, {0x8, 0x5, {0x3, 0x743c}}, {0x91b, 0xfff8, {0x3, 0x9}}, {0x50, 0x80bf, {0x1, 0x5}}, {0x6, 0xff, {0x1, 0x9}}, {0x0, 0x5, {0x0, 0x2}}, {0x81, 0x7, {0x0, 0x10}}, {0xb774, 0x24, {0x0, 0x4}}, {0x8000, 0x6, {0x0, 0x98}}, {0x8, 0x9, {0x2, 0x9}}, {0x3, 0xc, {0x0, 0xfffffffc}}, {0x1, 0x7, {0x0, 0x7}}, {0xd67, 0x2, {0x2, 0x43}}, {0x5, 0x3, {0x0, 0x39}}, {0x1a77, 0x4, {0x0, 0xd80}}, {0x1000, 0x9, {0x3, 0xb99}}, {0x81, 0x540, {0x0, 0x6}}, {0xa, 0x1, {0x2, 0x1}}, {0x3, 0x8, {0x2, 0x8}}, {0x2, 0xffff, {0x3, 0x2}}, {0x3, 0x3, {0x0, 0xffff}}, {0x2, 0x535, {0x3, 0x2}}, {0x8, 0x1200, {0x2, 0xfffffff9}}, {0x8001, 0x6, {0x2, 0x4}}, {0x6, 0x6, {0x2, 0x3}}, {0x0, 0x8, {0x0, 0x6}}, {0x8f, 0xfdb3, {0x1, 0x51a}}, {0x7fff, 0x200, {0x2, 0x3}}, {0x121e, 0x8, {0x0, 0x10}}, {0xa, 0x5, {0x3, 0x54}}, {0x2, 0x1, {0x3, 0x6}}, {0x6, 0x7fff, {0x3, 0x5}}, {0x74, 0x5, {0x0, 0xffffff7f}}, {0x9, 0xf74, {0x3, 0x5}}, {0x3, 0x7, {0x3, 0x7}}, {0x4, 0x2, {0x1, 0x1ff}}, {0x4, 0x3, {0x1, 0x1}}, {0x1, 0xffff, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x1ff}, 0x5, 0x5, 0x81, 0x3, 0x1f, 'syz0\x00', "7e834a17044b60e346b5e8b7ad764a995e75820cb5cce6144a6078050ca1117c", "98eda4529e20e61d9ad3d37851de1052f36325a3943e7d9f44e54be05a38cc2f", [{0xf, 0x6, {0x0, 0x9}}, {0x9, 0xa, {0x2, 0xe}}, {0x7, 0x989, {0xd25efb679dc29e0f, 0x80000000}}, {0xb, 0x2, {0x1, 0x3000000}}, {0x2, 0x4, {0x0, 0x81}}, {0x8, 0x8, {0x3, 0x3}}, {0x3, 0x6, {0x1, 0x1000}}, {0x5, 0x3d5, {0x2, 0x7}}, {0x0, 0x3ff, {0x2, 0x9}}, {0x3, 0x9, {0x1, 0xffffffff}}, {0x6, 0xffff, {0x3, 0xb}}, {0x1ff, 0x2, {0x2, 0x7fff}}, {0x8, 0x81, {0x2, 0x9}}, {0x2, 0x8}, {0x3, 0x3, {0x3, 0x1}}, {0x5a5c, 0x6, {0x1, 0x4}}, {0x9, 0x7, {0x2, 0xf}}, {0x0, 0xfc4, {0x1, 0x9}}, {0x81, 0x890, {0x3, 0x7}}, {0x0, 0x80, {0x1, 0x9}}, {0x88ca, 0x5, {0x2}}, {0x2, 0x1, {0x0, 0x6}}, {0x1, 0x7, {0x2}}, {0x3, 0x0, {0x3}}, {0x0, 0x3, {0x3, 0x1}}, {0xed, 0x96, {0x2, 0x4}}, {0x2, 0xdb4, {0x1, 0x6ccb990d}}, {0x401, 0x8, {0x1, 0x7}}, {0x1, 0x4, {0x1, 0x4}}, {0x52, 0xf129, {0x7, 0xe56c}}, {0x8ad, 0x1765, {0x1, 0x2}}, {0x709, 0x8, {0x2, 0xe0}}, {0x3483, 0x3, {0x3, 0x9}}, {0x6, 0xa, {0x2, 0x9}}, {0x1, 0xff, {0x2, 0x3}}, {0x5, 0x8fc, {0x0, 0x2}}, {0x5, 0x5, {0x3}}, {0x2000, 0x9, {0x3, 0x1}}, {0x2, 0x4, {0x2, 0x3}}, {0x86, 0x7fff, {0x0, 0x3}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x24048041}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000002e40)={'tunl0\x00', &(0x7f0000002d80)={'syztnl1\x00', <r10=>r5, 0x7800, 0x10, 0xfffffffd, 0xa30c, {{0x1a, 0x4, 0x2, 0x0, 0x68, 0x67, 0x0, 0x9, 0x0, 0x0, @rand_addr=0x64010100, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x51, 0x1, 0x0, [{@rand_addr=0x64010100, 0x3}, {@broadcast, 0xaf1}, {@remote, 0x1}]}, @cipso={0x86, 0x33, 0x3, [{0x5, 0x5, "f47fb9"}, {0x5, 0xa, "bf64cdce61085b6c"}, {0x0, 0xc, "81b9e70a69e5252214c9"}, {0x2, 0x12, "c4b35e3e10759a5375a330867e69af0f"}]}, @timestamp_prespec={0x44, 0x4, 0x79, 0x3, 0x9}]}}}}})
setsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000002e80)={r10, @rand_addr=0x64010102, @multicast2}, 0xc)
sendmmsg$inet(r1, &(0x7f0000003400)=[{{&(0x7f0000002ec0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000003280)=[{&(0x7f0000002f00)="43f800b08aaace6acafd2bb24836869aa5d8e19a013d47cdf30dd2da9dddfcbf1ab61d77a398ffbc040664091d040140f3bca2dbdbe270b8fc4662ced55097eb1ea7c4a3aab62ad9afa7392e794a820f4a", 0x51}, {&(0x7f0000002f80)="ca6699259e01f7d96d11bc1dc58083f2c78ed59f022816eabd0f1c2be54865b473bfbf665b1e67bb7aebb24ed66751d1cce09669c8075bdfaa2d4bd4227c03196efb6ac11103f44897d4425de15a3f45de503e0427184645d76eac4b4d4f2d046365875123796e6de2d83e91e8bd8a3c36ee63114e7ebdd48c025591b283284e189acac214e351b11b75c9772d713cb85c4d0269e7ca38ffc592c6de8262ad8f2101dda9264f81b1821823b10aa2", 0xae}, {&(0x7f0000003040)="f9ed01e351a07be2a0f47eabc87c35957fb14f3d30a5fd367db61eed441146322f7dfabb10e321654c50bada1dfe25d38c7eb887a83ec0400d9a4329171402e2f1cad6d7b428787bd0500b5d0314f40f981197a4313cd2648a5b1e33833ea81c3e1fccd9a3c5ca2b56065ececcd97cd7633ac3a0e27afa29e196bcd8c8e5878139c730229475b8163f25aedbfc2299d5253b11472db3731b9af2e9e4a1ce77d9f3b5b50a2f15d5ff69f611768eef1eba49af3b07f7ad54bfb195c3", 0xbb}, {&(0x7f0000003100)="c8d6c0bba9c32b15893197218e2981", 0xf}, {&(0x7f0000003140)="cd284c1642fe77223cc50700a57be8b2e6682ccb704fce83ce5059f9e75847214173257db0f95d99009e13e846160bcd317778fd9bf3b1380082d2c0eecb398c1f628efd6e25d26772ea8f636474b933d39ae2", 0x53}, {&(0x7f00000031c0)="8d3ec80de83056e70a30f62255c90fdbc6ac9b24aa08ba8ac15d0cf41b31518398e52ef4c4d2bf7b20d1e7445532e771fd3ad52193035eb39e9edd03dc94cfe38408eb2400f6151e3fe5630c12d9ac7d63a728162014eb447d14d7203fc904ec97ff2a2289797ba4c169f2f2c37784634a09ad2a43569fa0cc4f00ffeab8805c2dbd9da93c19094f99dd731954b6020883e6bc86bc91f981b7ad90e9b2", 0x9d}], 0x6, &(0x7f0000003300)=[@ip_retopts={{0xac, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xe8, 0x3, 0x0, [{@remote, 0xbbc}, {@local, 0xc}, {@private=0xa010101, 0x8}, {@remote, 0xffffff7f}]}, @timestamp_addr={0x44, 0x44, 0x54, 0x1, 0x2, [{@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa49c}, {@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x60db}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xfffffffe}, {@local, 0x81}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @timestamp_prespec={0x44, 0x34, 0xa0, 0x3, 0x4, [{@local, 0x36a}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x800}, {@remote, 0x1}, {@remote, 0xb}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0xe0}}], 0x1, 0x50000)
openat$tun(0xffffffffffffff9c, &(0x7f0000003440), 0x3, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000003500), 0xffffffffffffffff)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f0000003600)={0x2, '^c'}, 0x3)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003680), r11)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003740)={0x58, r12, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20044091)

117.627747ms ago: executing program 0 (id=9773):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x5c3101, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x3ff, 0x18, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0]})
sendto$x25(0xffffffffffffffff, &(0x7f00000000c0)="08c3e8999710d34db8e69f57f6a8aff7ea6fee924f9f6b9e478c5f896500ed4aa9b91f243fa882123f40b9708d07575b61b960efb21d17d9a533cf43f6920d06d8860e18c3387cf8c77006c1a7c3605963dcfb2a1f3e35e6138184b1e318c1ce9e15f145ff5de0e59b6cb1457bbe597d79cfa08e53372763b544415fad5d7b801ce532b86df9a1474bfdf48c26f39bd4e4ba37889e581c566f90a8492c2e20", 0x9f, 0x40c0, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)

69.19623ms ago: executing program 0 (id=9774):
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1)

68.597101ms ago: executing program 1 (id=9775):
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x20, 0x1, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x3, 0x40000, @dev={0xfe, 0x80, '\x00', 0x2a}}}}, 0x108)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket(0x80000000000000a, 0x5, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpeername$packet(r0, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000003c0)={@rand_addr=' \x01\x00', r4}, 0x14)
setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r0)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0xc800)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r6 = socket(0x28, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x1000, 0x9, 0x0, 0x7ff, 0x4, 0xc0000002, 0x402, 0xfffffffd, 0x4, 0x4, 0x80000003, 0x4006, 0x80, 0xfffffffc, 0xd, 0x800002, 0x80002005, 0x2, 0xdac9, 0xfffffff9, 0xffffe67d}})
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000780)=@ethtool_drvinfo={0x3, "33b12a917279c6c58edbb39713911114a1ba99880fc09a8c9b86080060c98058", "08b7d7d8e1ae11d5bbc97c42ddd38de1aeec624bb138ba3067e16d354e31feda", "a6c8450e711200b17d05a2afdda58713a4dfe60fc8a6d449ab34d1af6211957a", "922adadc7cbc7f75dd883c42e7cb093f1c1dee40bd14163f14a6b39ea65aa92e", "ea0b0e050331c6c317cc0c30f824f1f2505fdbf3d47b6569d072422bb6f23a4d", "1e23f60a92c023ff03b65b01", 0x5, 0x6, 0x7f, 0x7, 0x1}})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000040))

67.260122ms ago: executing program 2 (id=9776):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4a, &(0x7f0000000280)=0xfffff908, 0x4)

262.949µs ago: executing program 0 (id=9777):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x800006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r9=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000080)={r9, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={r9, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x57f, 0x4, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

0s ago: executing program 2 (id=9778):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x2cc, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2a4, 0x3, 0x0, 0x1, [{0x180, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xf8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_USERDATA={0x62, 0x6, 0x1, 0x0, "972b6dbb0ba58138f425c0f5780cc0bfc52be43c1c9aac78d9d127fbc7d200558ad7f2132a2db3d467b33af3e9a56be3eef0f6dad1d48132d4739bf2486d1d2c63339ee12918a7533fa49bef39007cf64ca96d44af3d325ec3c63f42323f"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_USERDATA={0x26, 0x6, 0x1, 0x0, "16507705fe1db9c8a6119f633d987eb89d1cee9906b541b34b48659326b8f7305bdd"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0xd4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x360}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2)
r3 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r3, 0x89ee, &(0x7f0000000180)=0x7ffff)
getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x74bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x3c}}, 0x84000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040041}, 0x20000000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x7fffffff}]}}]}, 0x150}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00'})
syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @mcast1, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x12a13, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x20004000)

kernel console output (not intermixed with test programs):

.3950'.
[  200.558130][T15100] block nbd1: shutting down sockets
[  200.793634][T15120] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  200.908197][T15131] netlink: 'syz.1.3963': attribute type 12 has an invalid length.
[  200.910898][T15131] netlink: 'syz.1.3963': attribute type 29 has an invalid length.
[  200.917548][T15131] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3963'.
[  200.920647][T15131] netlink: 'syz.1.3963': attribute type 2 has an invalid length.
[  200.926249][T15131] netlink: 'syz.1.3963': attribute type 3 has an invalid length.
[  201.285798][T15157] netlink: 'syz.1.3975': attribute type 1 has an invalid length.
[  201.466925][T15169] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  201.656697][T15184] veth1: mtu greater than device maximum
[  201.795799][T15196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3984'.
[  202.344265][T15245] lo speed is unknown, defaulting to 1000
[  203.689775][T15288] ieee802154 phy0 wpan0: encryption failed: -22
[  203.978178][T15312] lo speed is unknown, defaulting to 1000
[  204.527493][T15347] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4064'.
[  204.530808][T15347] NCSI netlink: No device for ifindex 0
[  204.804438][T15375] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  205.740343][T15409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4091'.
[  205.756596][T15411] validate_nla: 1 callbacks suppressed
[  205.756606][T15411] netlink: 'syz.0.4092': attribute type 9 has an invalid length.
[  205.761364][T15411] netlink: 'syz.0.4092': attribute type 7 has an invalid length.
[  205.776053][T15411] netlink: 'syz.0.4092': attribute type 8 has an invalid length.
[  205.959993][T15419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4096'.
[  205.969653][T15421] vcan0: tx drop: invalid da for name 0x0000000000000001
[  205.977800][T15419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4096'.
[  206.295826][T15461] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4116'.
[  206.298717][T15461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4116'.
[  206.302005][T15459] syzkaller1: entered promiscuous mode
[  206.305876][T15459] syzkaller1: entered allmulticast mode
[  206.590130][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4135'.
[  207.123197][T15530] infiniband syz1: set active
[  207.125085][T15530] infiniband syz1: added macvlan1
[  207.151538][T15530] RDS/IB: syz1: added
[  207.153847][T15530] smc: adding ib device syz1 with port count 1
[  207.156392][T15530] smc:    ib device syz1 port 1 has pnetid SYZ1 (user defined)
[  207.381649][T15545] netlink: 'syz.0.4151': attribute type 10 has an invalid length.
[  207.697822][T15577] netlink: 'syz.1.4167': attribute type 1 has an invalid length.
[  207.998592][T15616] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  208.698687][T15650] syzkaller0: entered promiscuous mode
[  208.701083][T15650] syzkaller0: entered allmulticast mode
[  209.007407][T15660] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4204'.
[  209.156997][T15668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  210.022716][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4216'.
[  210.046648][T15690] netlink: 'syz.0.4215': attribute type 1 has an invalid length.
[  210.049960][T15690] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4215'.
[  210.251157][T15714] netlink: zone id is out of range
[  210.258329][T15714] netlink: zone id is out of range
[  210.262488][T15714] netlink: zone id is out of range
[  210.264753][T15714] netlink: zone id is out of range
[  210.266481][T15714] netlink: zone id is out of range
[  210.268207][T15714] netlink: zone id is out of range
[  210.280854][T15714] netlink: zone id is out of range
[  210.283351][T15714] netlink: zone id is out of range
[  210.285070][T15714] netlink: zone id is out of range
[  210.288562][T15714] netlink: zone id is out of range
[  210.556818][T15743] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  210.810562][T15762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4250'.
[  211.002866][T15786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4262'.
[  211.007183][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4262'.
[  211.012002][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4263'.
[  211.016470][T15788] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4263'.
[  211.019418][T15786] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4262'.
[  211.023138][T15788] gretap2: entered promiscuous mode
[  211.066210][T15792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4264'.
[  211.090913][T15794] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4266'.
[  211.281730][T15822] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  212.257539][T15891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  212.335398][T15893] bridge_slave_1: left allmulticast mode
[  212.337736][T15893] bridge_slave_1: left promiscuous mode
[  212.339823][T15893] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.078190][T15893] bridge_slave_0: left allmulticast mode
[  213.081099][T15893] bridge_slave_0: left promiscuous mode
[  213.087140][T15893] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.448405][T15932] vxcan1: entered allmulticast mode
[  213.557552][T15944] lo speed is unknown, defaulting to 1000
[  214.297980][ T2399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.300719][ T2399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.695856][T16032] netlink: 'syz.2.4356': attribute type 10 has an invalid length.
[  214.707100][T16036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  214.711341][T16036] bond_slave_0: left promiscuous mode
[  214.719117][T16036] bond_slave_0: left allmulticast mode
[  214.726468][T16036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  214.731779][T16036] bond_slave_1: left promiscuous mode
[  214.736127][T16036] bond_slave_1: left allmulticast mode
[  214.743965][T16036] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  214.747314][T16036] dummy0: left promiscuous mode
[  214.749589][T16036] dummy0: left allmulticast mode
[  214.757390][T16036] bond0 (unregistering): Released all slaves
[  214.778450][T16032] dummy0: entered promiscuous mode
[  214.787518][T16032] team0: Port device dummy0 removed
[  215.090907][T16074] netlink: 'syz.2.4376': attribute type 3 has an invalid length.
[  215.602930][   T25] block nbd0: Possible stuck request ffff8880228e0000: control (read@0,4096B). Runtime 150 seconds
[  216.205400][T16117] __nla_validate_parse: 10 callbacks suppressed
[  216.205422][T16117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4392'.
[  216.319262][T16125] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.514907][T16146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4405'.
[  216.824824][T16162] netlink: 'syz.1.4411': attribute type 16 has an invalid length.
[  216.828151][T16162] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.4411'.
[  217.151567][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4416'.
[  217.156516][T16175] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  217.160497][T16175] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  217.671672][T16202] netlink: 'syz.2.4420': attribute type 10 has an invalid length.
[  217.778421][T16208] ieee802154 phy0 wpan0: encryption failed: -90
[  217.873103][T16216] tipc: New replicast peer: 255.255.255.255
[  217.875603][T16216] tipc: Enabled bearer <udp:syz2>, priority 10
[  217.878055][T16216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4426'.
[  217.881055][T16216] tipc: Disabling bearer <udp:syz2>
[  217.942048][T16224] netlink: 'syz.1.4430': attribute type 4 has an invalid length.
[  217.948879][    T9] lo speed is unknown, defaulting to 1000
[  217.950806][    T9] syz2: Port: 1 Link ACTIVE
[  218.228492][T16264] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  218.266355][T16266] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4449'.
[  218.390862][T16280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4456'.
[  218.423286][T16286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4458'.
[  218.427063][T16280] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4456'.
[  218.509373][T16293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4462'.
[  218.513507][T16293] netlink: 'syz.2.4462': attribute type 7 has an invalid length.
[  218.538322][T16295] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  218.909842][T16343] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.919102][T16343] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  218.921624][T16343] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  218.933443][T16343] tipc: Resetting bearer <eth:syzkaller0>
[  218.987168][T16351] bridge4: entered promiscuous mode
[  218.988902][T16351] bridge4: entered allmulticast mode
[  218.990752][T16353] tipc: Invalid UDP bearer configuration
[  218.990781][T16353] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  219.255074][T16384] lo speed is unknown, defaulting to 1000
[  220.010864][T16399] netem: incorrect ge model size
[  220.017591][T16399] netem: change failed
[  220.788881][T16461] bridge5: entered promiscuous mode
[  220.791153][T16461] macsec0: entered promiscuous mode
[  220.793459][T16461] macsec0: entered allmulticast mode
[  220.795291][T16461] bridge5: entered allmulticast mode
[  220.798056][T16461] bridge5: port 1(macsec0) entered blocking state
[  220.800431][T16461] bridge5: port 1(macsec0) entered disabled state
[  220.805568][T16461] bridge5: left allmulticast mode
[  220.807551][T16461] bridge5: left promiscuous mode
[  220.916959][T16465] trusted_key: syz.1.4537 sent an empty control message without MSG_MORE.
[  221.102147][T16475] netlink: 'syz.2.4541': attribute type 1 has an invalid length.
[  221.388722][T16489] __nla_validate_parse: 12 callbacks suppressed
[  221.388739][T16489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4547'.
[  222.152060][T16522] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4562'.
[  222.181263][T16524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4564'.
[  222.211214][T16528] netlink: 'syz.1.4565': attribute type 1 has an invalid length.
[  222.395453][T16537] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  222.400693][T16537] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  222.544307][T16538] block nbd1: server does not support multiple connections per device.
[  222.550107][T16538] block nbd1: shutting down sockets
[  222.589154][T16546] net_ratelimit: 17 callbacks suppressed
[  222.589203][T16546] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  222.631485][T16548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4571'.
[  223.042721][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4589'.
[  223.294573][T16605] dvmrp1: left allmulticast mode
[  223.641279][T16622] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4606'.
[  223.675915][T16624] vlan2: entered promiscuous mode
[  223.865035][T16642] netlink: 'syz.0.4615': attribute type 1 has an invalid length.
[  224.141361][T16674] netem: incorrect gi model size
[  224.143790][T16674] netem: change failed
[  224.327529][T16692] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.417152][T16702] wg1: entered promiscuous mode
[  224.418768][T16702] wg1: entered allmulticast mode
[  224.550403][T16712] 8021q: adding VLAN 0 to HW filter on device bond5
[  224.601017][T16716] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  224.604276][T16716] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  225.451392][T16782] lo speed is unknown, defaulting to 1000
[  225.858712][T16810] netlink: 'syz.1.4689': attribute type 12 has an invalid length.
[  225.867407][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4689'.
[  225.871250][T16810] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  226.740844][T16842] netlink: 'syz.0.4702': attribute type 3 has an invalid length.
[  226.769836][T16844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4703'.
[  227.390253][T16854] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  227.393705][T16854] team0: Device macvtap0 is already an upper device of the team interface
[  227.739055][T16877] netlink: 'syz.2.4718': attribute type 10 has an invalid length.
[  228.070231][T16913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4734'.
[  228.334183][T16937] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  228.623412][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4753'.
[  228.731996][T16957] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  228.840110][T16960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4755'.
[  229.067833][T16971] vlan3: entered promiscuous mode
[  229.070267][T16971] bond0: entered promiscuous mode
[  229.076543][T16971] : entered promiscuous mode
[  229.078835][T16971] vlan3: entered allmulticast mode
[  229.080970][T16971] bond0: entered allmulticast mode
[  229.083916][T16971] : entered allmulticast mode
[  230.530721][T17032] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.534424][T17032] syzkaller0: entered promiscuous mode
[  230.536780][T17032] syzkaller0: entered allmulticast mode
[  230.567334][T17032] tipc: Resetting bearer <eth:syzkaller0>
[  230.574236][T17031] tipc: Resetting bearer <eth:syzkaller0>
[  230.586809][T17031] tipc: Disabling bearer <eth:syzkaller0>
[  231.568073][T17093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4813'.
[  231.599157][T17093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4813'.
[  231.666959][T17097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4814'.
[  232.017580][T17116] openvswitch: netlink: IP tunnel dst address not specified
[  232.025287][T17117] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.293984][T17139] !: renamed from dummy0
[  232.350469][T17149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4839'.
[  232.365977][T17151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4835'.
[  232.376443][T17151] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  232.596943][T17186] netlink: 'syz.2.4848': attribute type 13 has an invalid length.
[  232.600548][T17186] netlink: 'syz.2.4848': attribute type 17 has an invalid length.
[  232.678564][T17186] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.681778][T17186] 8021q: adding VLAN 0 to HW filter on device team0
[  232.733254][T17186] dummy0: left promiscuous mode
[  232.745375][T17186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  232.785401][T17192] lo speed is unknown, defaulting to 1000
[  232.829474][T17186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  232.853057][T17209] netlink: 164548 bytes leftover after parsing attributes in process `syz.0.4857'.
[  233.056475][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4865'.
[  233.160988][T17230] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  233.182322][T17230] netlink: 'syz.1.4867': attribute type 4 has an invalid length.
[  233.220305][T17230] tipc: Resetting bearer <ib:ip6gre0>
[  233.234845][T17230] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.237421][T17230] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.341243][T17230] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.428891][T17230] veth1_vlan: left allmulticast mode
[  233.482084][T17186] syz.2.4848 (17186) used greatest stack depth: 19224 bytes left
[  233.594192][ T5885] lo speed is unknown, defaulting to 1000
[  233.596938][ T5885] syz2: Port: 1 Link DOWN
[  233.604518][   T51] syz1: Port: 1 Link DOWN
[  233.606601][T15900] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  233.612045][T15900] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  233.681351][T15900] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  233.686244][T15900] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  233.791170][T17261] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4879'.
[  233.950359][T17271] netlink: 504 bytes leftover after parsing attributes in process `syz.0.4884'.
[  234.031889][T17277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4887'.
[  234.461713][T17300] lo speed is unknown, defaulting to 1000
[  234.511370][T17304] netlink: 'syz.0.4897': attribute type 10 has an invalid length.
[  235.019727][T17338] netlink: 'syz.2.4914': attribute type 3 has an invalid length.
[  235.022810][T17338] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4914'.
[  235.098188][T17348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4919'.
[  235.105713][T17348] openvswitch: netlink: Missing key (keys=40, expected=80)
[  235.111254][T17348] netlink: 'syz.1.4919': attribute type 10 has an invalid length.
[  235.117329][T17348] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4919'.
[  235.121993][T17348] !: entered promiscuous mode
[  235.135108][T17348] bridge0: port 4(0!) entered blocking state
[  235.137951][T17348] bridge0: port 4(0!) entered disabled state
[  235.140267][T17348] !: entered allmulticast mode
[  235.467682][T17388] netlink: 'syz.2.4938': attribute type 19 has an invalid length.
[  235.534388][T17403] netlink: 'syz.0.4945': attribute type 13 has an invalid length.
[  235.538119][T17403] netlink: 'syz.0.4945': attribute type 12 has an invalid length.
[  235.700360][T17424] team0: Device gtp0 is of different type
[  235.844458][T17444] netlink: 'syz.2.4962': attribute type 2 has an invalid length.
[  235.858873][T17444] k*]: entered promiscuous mode
[  235.878877][T17444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  235.909970][T17444] veth0_to_team: entered allmulticast mode
[  236.019106][T17460] lo speed is unknown, defaulting to 1000
[  237.053403][T17525] lo speed is unknown, defaulting to 1000
[  237.447412][T17541] __nla_validate_parse: 11 callbacks suppressed
[  237.447431][T17541] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5003'.
[  237.459582][T17541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5003'.
[  237.465830][T17541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5003'.
[  237.546909][T17549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5007'.
[  238.092745][T17587] nbd2: detected capacity change from 0 to 127
[  238.096586][   T55] block nbd2: Receive control failed (result -104)
[  238.101717][ T6571] block nbd2: Dead connection, failed to find a fallback
[  238.105132][ T6571] block nbd2: shutting down sockets
[  238.107684][ T6571] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  238.111595][ T6571] Buffer I/O error on dev nbd2, logical block 2, async page read
[  238.116319][ T6571] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  238.120384][ T6571] Buffer I/O error on dev nbd2, logical block 3, async page read
[  240.138785][T17640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5042'.
[  240.462793][T17666] block nbd3: server does not support multiple connections per device.
[  240.467293][T17666] block nbd3: shutting down sockets
[  240.783183][    C0] vcan0: j1939_tp_rxtimer: 0xffff888024d4f800: rx timeout, send abort
[  241.286220][    C0] vcan0: j1939_tp_rxtimer: 0xffff888024d4f800: abort rx timeout. Force session deactivation
[  241.634287][T17711] validate_nla: 1 callbacks suppressed
[  241.634304][T17711] netlink: 'syz.0.5074': attribute type 8 has an invalid length.
[  241.919668][T17730] lo speed is unknown, defaulting to 1000
[  242.178173][T17735] netlink: 'syz.0.5084': attribute type 1 has an invalid length.
[  242.181370][T17735] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5084'.
[  242.209852][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5084'.
[  242.475856][T17748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5089'.
[  242.520448][T17757] netlink: 304 bytes leftover after parsing attributes in process `syz.0.5093'.
[  242.620431][T17767] lo speed is unknown, defaulting to 1000
[  243.508995][T17821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5120'.
[  243.518812][T17821] dummy0: entered promiscuous mode
[  243.531273][T17821] dummy0: left promiscuous mode
[  244.199839][T17847] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  244.209237][T17847] syzkaller0: entered promiscuous mode
[  244.211598][T17847] syzkaller0: entered allmulticast mode
[  244.273489][T17847] tipc: Resetting bearer <eth:syzkaller0>
[  244.283074][T17846] tipc: Resetting bearer <eth:syzkaller0>
[  244.324733][T17846] tipc: Disabling bearer <eth:syzkaller0>
[  244.479443][T17851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5135'.
[  244.710449][T17859] netlink: 'syz.1.5139': attribute type 1 has an invalid length.
[  244.864594][T17870] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.909071][T17870] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.947716][T17870] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.987454][T17870] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.053230][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.062218][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.072265][T15900] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.081835][T15900] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.139798][T17882] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5148'.
[  245.687561][   T25] block nbd0: Possible stuck request ffff8880228e0000: control (read@0,4096B). Runtime 180 seconds
[  245.876354][T17919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5160'.
[  246.170630][T17938] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5168'.
[  246.174694][T17938] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5168'.
[  246.178514][T17938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5168'.
[  247.111126][T18012] netlink: 'syz.2.5203': attribute type 30 has an invalid length.
[  247.205140][T18022] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5207'.
[  247.223082][T18022] netlink: zone id is out of range
[  247.225240][T18022] netlink: get zone limit has 8 unknown bytes
[  248.212555][T18051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5216'.
[  248.227916][T18051] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  248.249831][T18051] lo speed is unknown, defaulting to 1000
[  248.953827][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5232'.
[  249.810155][T18125] netlink: 'syz.1.5245': attribute type 1 has an invalid length.
[  249.854158][T18129] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  249.858588][T18129] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  249.863647][T18129] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  250.233499][T18170] netlink: 550 bytes leftover after parsing attributes in process `syz.1.5263'.
[  250.355905][T18185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5271'.
[  250.658943][T18216] lo speed is unknown, defaulting to 1000
[  250.661929][T18221] lo speed is unknown, defaulting to 1000
[  251.091173][T18244] lo speed is unknown, defaulting to 1000
[  251.401365][T18258] lo speed is unknown, defaulting to 1000
[  251.599872][T18269] bpq0: entered promiscuous mode
[  251.702208][T18275] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  252.320442][T18321] netlink: 'syz.2.5327': attribute type 1 has an invalid length.
[  252.323313][T18321] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5327'.
[  252.802574][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  252.877188][T18356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5343'.
[  253.131609][T18376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5353'.
[  253.144597][T18376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5353'.
[  253.487407][T18392] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5360'.
[  253.701292][T18404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5365'.
[  253.705373][T18404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5365'.
[  253.967286][T18425] netlink: 'syz.2.5375': attribute type 3 has an invalid length.
[  253.982584][T18425] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5375'.
[  254.109748][T18430] netlink: 'syz.2.5377': attribute type 4 has an invalid length.
[  254.117734][T18430] netlink: 'syz.2.5377': attribute type 4 has an invalid length.
[  254.289304][T18444] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.453481][T18451] nbd3: detected capacity change from 0 to 127
[  254.457148][   T55] block nbd3: Receive control failed (result -104)
[  254.512888][T18458] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5390'.
[  255.287688][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  255.317502][T18478] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5397'.
[  255.322058][T18478] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5397'.
[  255.651453][T18489] lo speed is unknown, defaulting to 1000
[  256.230393][T18520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5415'.
[  256.275306][T18522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5416'.
[  256.516325][T18552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5430'.
[  256.542241][T18547] lo speed is unknown, defaulting to 1000
[  257.621649][T18610] netlink: 'syz.1.5456': attribute type 4 has an invalid length.
[  258.527336][T18677] __nla_validate_parse: 5 callbacks suppressed
[  258.527347][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5483'.
[  258.568469][T18679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5484'.
[  258.572145][T18679] netlink: 'syz.0.5484': attribute type 5 has an invalid length.
[  258.958813][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5494'.
[  259.140680][T18735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5510'.
[  259.245774][T18749] delete_channel: no stack
[  259.461345][T18772] netlink: 'syz.1.5524': attribute type 13 has an invalid length.
[  259.466299][T18772] netlink: 'syz.1.5524': attribute type 17 has an invalid length.
[  259.508548][T18772] bridge0: port 4(0!) entered blocking state
[  259.510713][T18772] bridge0: port 4(0!) entered forwarding state
[  259.527593][T18772] 8021q: adding VLAN 0 to HW filter on device team0
[  259.539711][T18772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  259.556487][T17238] lo speed is unknown, defaulting to 1000
[  259.561748][T17238] syz2: Port: 1 Link ACTIVE
[  259.578494][T18776] lo speed is unknown, defaulting to 1000
[  259.631826][T18772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.695586][T18772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.881244][T18799] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5538'.
[  259.885290][T18799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5538'.
[  259.889161][T18799] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5538'.
[  259.893451][T18799] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5538'.
[  260.839205][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5558'.
[  261.477030][T18899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5586'.
[  261.481600][T18899] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  261.487604][T18899] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  261.499951][T18901] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.503647][T18901] syzkaller0: entered promiscuous mode
[  261.505725][T18901] syzkaller0: entered allmulticast mode
[  261.524458][T18901] tipc: Resetting bearer <eth:syzkaller0>
[  261.533015][T18900] tipc: Resetting bearer <eth:syzkaller0>
[  261.542848][T18900] tipc: Disabling bearer <eth:syzkaller0>
[  261.604324][T18903] IPv6: Can't replace route, no match found
[  262.594057][T18946] netlink: 'syz.1.5607': attribute type 21 has an invalid length.
[  263.649354][T19021] lo speed is unknown, defaulting to 1000
[  264.790512][T19060] __nla_validate_parse: 3 callbacks suppressed
[  264.790526][T19060] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5656'.
[  264.803126][T19060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5656'.
[  265.055694][T19088] vlan2: entered promiscuous mode
[  265.057669][T19088] bond0: entered promiscuous mode
[  265.059421][T19088] vlan2: entered allmulticast mode
[  265.061142][T19088] bond0: entered allmulticast mode
[  265.507721][T19123] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  265.511878][T19123] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  265.517515][T19123] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  265.875617][T19146] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  266.027886][T19162] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5702'.
[  266.088601][T19167] netlink: 'syz.1.5704': attribute type 1 has an invalid length.
[  266.104575][T19167] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5704'.
[  266.572341][T19198] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5716'.
[  267.028367][T19244] netlink: 'syz.1.5735': attribute type 1 has an invalid length.
[  267.031421][T19244] netlink: 'syz.1.5735': attribute type 2 has an invalid length.
[  267.035556][T19244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5735'.
[  267.870773][T19296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5756'.
[  267.900854][T19296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5756'.
[  268.524329][T19344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5778'.
[  268.529538][T19344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5778'.
[  268.533465][T19344] netlink: 'syz.1.5778': attribute type 15 has an invalid length.
[  268.537882][T19344] netlink: 'syz.1.5778': attribute type 18 has an invalid length.
[  268.727562][   T60] block nbd2: Possible stuck request ffff8880229b8000: control (read@0,1024B). Runtime 30 seconds
[  268.732605][   T60] block nbd2: Possible stuck request ffff8880229b8200: control (read@1024,1024B). Runtime 30 seconds
[  268.756164][T19355] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.760418][T19355] syzkaller0: entered promiscuous mode
[  268.763212][T19355] syzkaller0: entered allmulticast mode
[  268.784889][T19355] tipc: Resetting bearer <eth:syzkaller0>
[  268.789948][T19354] tipc: Resetting bearer <eth:syzkaller0>
[  268.802255][T19354] tipc: Disabling bearer <eth:syzkaller0>
[  269.196245][T19368] sock: sock_set_timeout: `syz.1.5788' (pid 19368) tries to set negative timeout
[  269.226658][ T5271] udevd[5271]: worker [5820] /devices/virtual/block/nbd0 timeout; kill it
[  269.229912][ T5271] udevd[5271]: seq 10519 '/devices/virtual/block/nbd0' killed
[  269.469764][T19386] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  269.657847][T19410] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  269.805603][T19427] netlink: 'syz.2.5816': attribute type 3 has an invalid length.
[  269.808991][T19427] __nla_validate_parse: 2 callbacks suppressed
[  269.809003][T19427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5816'.
[  270.009284][T19448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5827'.
[  270.057777][T19459] netlink: 'syz.2.5832': attribute type 3 has an invalid length.
[  270.206318][T19470] tipc: Enabled bearer <eth:team0>, priority 0
[  270.323658][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5842'.
[  270.349939][T19484] erspan0: entered promiscuous mode
[  270.354498][T19484] erspan0: left promiscuous mode
[  270.475153][T19503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5851'.
[  270.478669][T19503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5851'.
[  270.928460][T19553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5873'.
[  270.932322][T19553] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5873'.
[  270.936777][T19553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5873'.
[  271.464173][T19588] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.518363][T19674] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5925'.
[  273.157712][T19712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5941'.
[  273.168723][T19712] veth0: entered promiscuous mode
[  273.175985][T19712] veth0: left promiscuous mode
[  275.195694][T19826] netlink: zone id is out of range
[  275.198011][T19826] netlink: zone id is out of range
[  275.200247][T19826] netlink: set zone limit has 4 unknown bytes
[  275.248584][T19832] bond0: option use_carrier: invalid value (2)
[  275.270933][T19836] __nla_validate_parse: 1 callbacks suppressed
[  275.270943][T19836] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5998'.
[  275.277201][T19836] netlink: 560 bytes leftover after parsing attributes in process `syz.1.5998'.
[  275.302998][T19838] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.511585][T19869] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6013'.
[  275.516002][T19870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6010'.
[  275.588587][T19875] lo speed is unknown, defaulting to 1000
[  275.633542][T19884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  275.766883][   T25] block nbd0: Possible stuck request ffff8880228e0000: control (read@0,4096B). Runtime 210 seconds
[  276.364897][T19937] netlink: 'syz.2.6042': attribute type 11 has an invalid length.
[  276.367935][T19937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6042'.
[  276.482111][   T33] audit: type=1800 audit(1754968119.657:4): pid=19952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6047" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9997 res=0 errno=0
[  276.500142][   T33] audit: type=1800 audit(1754968119.657:5): pid=19952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6047" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9997 res=0 errno=0
[  276.585063][T19964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6053'.
[  276.616161][T19964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6053'.
[  276.630467][T19964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6053'.
[  276.639698][T19964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6053'.
[  276.645177][T19964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6053'.
[  276.648718][T19964] tipc: Resetting bearer <eth:gre0>
[  276.710875][T19964] tipc: Resetting bearer <eth:team0>
[  276.908465][T19992] macsec1: entered promiscuous mode
[  276.910864][T19992] macsec1: entered allmulticast mode
[  276.926855][T19982] bpq0: left promiscuous mode
[  277.322298][T20014] netlink: 'syz.0.6076': attribute type 322 has an invalid length.
[  278.016729][T20072] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  278.081447][T20079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  278.084367][T20079] syzkaller0: entered promiscuous mode
[  278.086133][T20079] syzkaller0: entered allmulticast mode
[  278.114122][T20079] tipc: Resetting bearer <eth:syzkaller0>
[  278.121253][T20078] tipc: Resetting bearer <eth:syzkaller0>
[  278.135463][T20078] tipc: Disabling bearer <eth:syzkaller0>
[  278.139569][T20083] veth1_to_team: entered allmulticast mode
[  278.242922][T20089] macsec0: entered allmulticast mode
[  278.244708][T20089] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  278.367302][T20111] netlink: 'syz.1.6120': attribute type 4 has an invalid length.
[  278.450036][T20124] netlink: 'syz.2.6126': attribute type 2 has an invalid length.
[  278.459430][T20124] : entered promiscuous mode
[  278.494932][T20121] lo speed is unknown, defaulting to 1000
[  279.243880][T20192] tun0: tun_chr_ioctl cmd 2148553947
[  279.437781][T20215] netlink: 'syz.2.6166': attribute type 3 has an invalid length.
[  280.704675][T20319] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  280.948908][T20336] lo speed is unknown, defaulting to 1000
[  281.428217][T20359] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  281.439780][T20359] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  281.467604][T20360] __nla_validate_parse: 35 callbacks suppressed
[  281.467620][T20360] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6229'.
[  281.492752][T20360] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6229'.
[  282.966323][T20462] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.181746][    C1] vcan0: j1939_tp_rxtimer: 0xffff88803a2bd000: rx timeout, send abort
[  283.275500][T20502] lo speed is unknown, defaulting to 1000
[  283.320008][T20507] netlink: 'syz.0.6295': attribute type 21 has an invalid length.
[  283.418140][T20516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6299'.
[  283.684518][    C1] vcan0: j1939_tp_rxtimer: 0xffff88803a2bd000: abort rx timeout. Force session deactivation
[  283.932172][T20551] lo: entered allmulticast mode
[  283.938611][T20551] dvmrp1: entered allmulticast mode
[  283.942362][T20550] lo: left allmulticast mode
[  284.147657][T20565] geneve0: entered promiscuous mode
[  284.201856][T20569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6324'.
[  284.230322][T20571] netlink: 'syz.0.6325': attribute type 10 has an invalid length.
[  284.233224][T20571] macvlan0: entered promiscuous mode
[  284.236841][T20571] macvlan0: entered allmulticast mode
[  284.238757][T20571] veth1_vlan: entered allmulticast mode
[  284.241078][T20571] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  284.373456][T20575] block nbd4: server does not support multiple connections per device.
[  284.377029][T20575] block nbd4: shutting down sockets
[  284.723043][   T25] block nbd3: Possible stuck request ffff8880229e8000: control (read@0,1024B). Runtime 30 seconds
[  284.726733][   T25] block nbd3: Possible stuck request ffff8880229e8200: control (read@1024,1024B). Runtime 30 seconds
[  284.730629][   T25] block nbd3: Possible stuck request ffff8880229e8400: control (read@2048,1024B). Runtime 30 seconds
[  284.735414][   T25] block nbd3: Possible stuck request ffff8880229e8600: control (read@3072,1024B). Runtime 30 seconds
[  284.797756][T20612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.211219][T20629] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6349'.
[  285.215938][T20628] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6349'.
[  285.287634][T20633] netlink: 'syz.1.6351': attribute type 31 has an invalid length.
[  285.413962][T20644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6356'.
[  285.414232][T20645] netlink: 'syz.1.6357': attribute type 3 has an invalid length.
[  285.420949][T20645] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6357'.
[  285.555151][T20649] lo speed is unknown, defaulting to 1000
[  285.601826][T20656] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6362'.
[  285.607139][T20656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6362'.
[  286.838329][T20740] lo speed is unknown, defaulting to 1000
[  287.071236][T20739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  287.408557][T20767] __nla_validate_parse: 2 callbacks suppressed
[  287.408571][T20767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6408'.
[  287.864336][T20811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  287.893785][T20811] syzkaller0: entered promiscuous mode
[  287.900606][T20811] syzkaller0: entered allmulticast mode
[  287.923207][T20811] tipc: Resetting bearer <eth:syzkaller0>
[  287.928632][T20809] tipc: Resetting bearer <eth:syzkaller0>
[  287.943821][T20809] tipc: Disabling bearer <eth:syzkaller0>
[  288.003562][T20821] wireguard0: entered promiscuous mode
[  288.005750][T20821] wireguard0: entered allmulticast mode
[  288.724169][T20845] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  288.925441][T20855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6446'.
[  290.116895][T20978] IPVS: persistence engine module ip_vs_pe_ not found
[  290.177982][T20983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6503'.
[  290.392250][T20997] netlink: 87 bytes leftover after parsing attributes in process `syz.1.6510'.
[  290.791177][T21005] netlink: 'syz.2.6513': attribute type 3 has an invalid length.
[  290.859057][T21013] netlink: 'syz.2.6517': attribute type 3 has an invalid length.
[  290.922055][T21021] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  290.929316][T21019] lo speed is unknown, defaulting to 1000
[  291.134183][T21022] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6521'.
[  291.480263][T21035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6525'.
[  291.490238][T21035] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6525'.
[  291.509925][T21035] gretap4: entered promiscuous mode
[  291.683008][ T5830] Bluetooth: hci2: command 0x0406 tx timeout
[  291.683756][   T54] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  291.750309][T21057] lo speed is unknown, defaulting to 1000
[  291.802087][T21065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6534'.
[  291.880663][T21065] 8021q: adding VLAN 0 to HW filter on device bond6
[  291.921139][T21068] 8021q: adding VLAN 0 to HW filter on device bond6
[  291.936780][T21068] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  291.942384][T21068] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  292.124172][T21081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6542'.
[  292.181457][T21089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6542'.
[  292.275155][T21095] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  292.444385][T21111] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6557'.
[  293.275096][T21149] syzkaller1: entered promiscuous mode
[  293.276923][T21149] syzkaller1: entered allmulticast mode
[  293.557176][T21169] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  293.560512][T21169] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  294.306087][T21179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6589'.
[  294.900898][T21248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6621'.
[  295.647985][T21277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6633'.
[  295.651934][T21277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6633'.
[  295.656599][T21277] netlink: 'syz.0.6633': attribute type 1 has an invalid length.
[  295.659892][T21277] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6633'.
[  295.712763][T21277] nbd: socks must be embedded in a SOCK_ITEM attr
[  295.716936][T21277] block nbd4: shutting down sockets
[  296.026786][T21292] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[  297.607115][T21340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  297.609554][T21340] IPv6: NLM_F_CREATE should be set when creating new route
[  297.611922][T21340] IPv6: NLM_F_CREATE should be set when creating new route
[  297.614338][T21340] IPv6: NLM_F_CREATE should be set when creating new route
[  297.617862][T21340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  297.757895][T21350] lo speed is unknown, defaulting to 1000
[  298.011609][T21367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6671'.
[  298.086540][T21371] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  298.118452][  T440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.122001][  T440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.134844][T21373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.287421][T21384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6679'.
[  298.290623][T21384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6679'.
[  298.677447][T21414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6693'.
[  298.818772][   T60] block nbd2: Possible stuck request ffff8880229b8000: control (read@0,1024B). Runtime 60 seconds
[  298.823549][   T60] block nbd2: Possible stuck request ffff8880229b8200: control (read@1024,1024B). Runtime 60 seconds
[  298.858384][T21434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6700'.
[  298.877241][T21436] netlink: 'syz.1.6701': attribute type 11 has an invalid length.
[  298.879939][T21436] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6701'.
[  298.907490][T21440] netlink: 'syz.1.6703': attribute type 5 has an invalid length.
[  299.296156][T21475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6719'.
[  300.508191][T21511] syzkaller1: entered promiscuous mode
[  300.510141][T21511] syzkaller1: entered allmulticast mode
[  300.829485][T21542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6751'.
[  301.209697][T21579] v: renamed from ip6_vti0
[  301.327718][ T5271] udevd[5271]: worker [6571] /devices/virtual/block/nbd2 is taking a long time
[  301.883070][T21624] bridge6: entered promiscuous mode
[  301.885515][T21624] bridge6: entered allmulticast mode
[  302.516408][T21691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6809'.
[  302.569126][T21698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6812'.
[  302.648602][T21706] gretap3: entered promiscuous mode
[  302.650396][T21706] gretap3: entered allmulticast mode
[  302.884044][T21728] lo speed is unknown, defaulting to 1000
[  303.138344][T21749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6836'.
[  303.454968][T21770] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  303.511816][T21774] netlink: 'syz.1.6847': attribute type 1 has an invalid length.
[  303.514702][T21774] netlink: 236 bytes leftover after parsing attributes in process `syz.1.6847'.
[  303.681987][T21785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6853'.
[  303.690833][T21785] IPVS: Unknown mcast interface: batadv0
[  303.725963][T21787] netlink: 356 bytes leftover after parsing attributes in process `syz.0.6854'.
[  303.793509][T21789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6855'.
[  303.800940][T21789] smc: removing ib device syz1
[  304.156136][T21792] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6856'.
[  304.478408][T21808] netlink: 212280 bytes leftover after parsing attributes in process `syz.2.6864'.
[  305.176304][T21876] bridge0: port 3(team0) entered disabled state
[  305.464267][T21898] netlink: 'syz.2.6901': attribute type 15 has an invalid length.
[  305.466931][T21898] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6901'.
[  305.471098][T21900] netlink: 'syz.1.6902': attribute type 10 has an invalid length.
[  305.555900][T21914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6909'.
[  305.598741][T21920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6912'.
[  305.706034][T21934] sock: sock_timestamping_bind_phc: sock not bind to device
[  305.734341][T21936] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  305.845894][   T25] block nbd0: Possible stuck request ffff8880228e0000: control (read@0,4096B). Runtime 240 seconds
[  306.131745][T21955] netlink: 'syz.0.6927': attribute type 7 has an invalid length.
[  306.396050][T21987] bridge7: entered promiscuous mode
[  306.508639][T22001] netlink: 'syz.2.6947': attribute type 21 has an invalid length.
[  306.511694][T22001] netlink: 'syz.2.6947': attribute type 1 has an invalid length.
[  306.827661][T22047] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  306.846237][T22049] lo speed is unknown, defaulting to 1000
[  307.057924][T22065] lo speed is unknown, defaulting to 1000
[  308.283057][T22125] lo: entered allmulticast mode
[  308.286501][T22123] lo: left allmulticast mode
[  308.714032][T22146] netlink: 'syz.1.7007': attribute type 5 has an invalid length.
[  309.206023][T22159] __nla_validate_parse: 4 callbacks suppressed
[  309.206032][T22159] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7012'.
[  310.129694][T22183] netlink: 'syz.0.7021': attribute type 1 has an invalid length.
[  310.132932][T22183] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7021'.
[  310.226635][T22194] netlink: 'syz.0.7025': attribute type 2 has an invalid length.
[  310.234248][T22194] `: entered promiscuous mode
[  310.445210][T22224] gretap0: entered promiscuous mode
[  310.447725][T22224] vlan3: entered promiscuous mode
[  310.955875][   T33] audit: type=1800 audit(1754968154.137:6): pid=22282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7068" name="memory.events" dev="tmpfs" ino=11631 res=0 errno=0
[  310.968286][T22287] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  311.716371][T22340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7096'.
[  311.727229][T22340] team0: Failed to send options change via netlink (err -105)
[  311.739991][T22340] team0: Failed to send options change via netlink (err -105)
[  311.744386][T22340] team0: Mode changed to "activebackup"
[  312.549662][T22387] netlink: 'syz.0.7115': attribute type 4 has an invalid length.
[  312.557201][T22387] netlink: 'syz.0.7115': attribute type 4 has an invalid length.
[  312.771707][T22399] lo speed is unknown, defaulting to 1000
[  312.861997][T22402] netlink: 'syz.2.7122': attribute type 29 has an invalid length.
[  313.072865][T22408] lo speed is unknown, defaulting to 1000
[  313.323599][T22427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7132'.
[  313.384544][T22433] veth0_to_bond: entered allmulticast mode
[  314.061318][T22478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7152'.
[  314.584706][T22513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7167'.
[  314.812032][   T25] block nbd3: Possible stuck request ffff8880229e8000: control (read@0,1024B). Runtime 60 seconds
[  314.816471][   T25] block nbd3: Possible stuck request ffff8880229e8200: control (read@1024,1024B). Runtime 60 seconds
[  314.820577][   T25] block nbd3: Possible stuck request ffff8880229e8400: control (read@2048,1024B). Runtime 60 seconds
[  314.826481][   T25] block nbd3: Possible stuck request ffff8880229e8600: control (read@3072,1024B). Runtime 60 seconds
[  315.461723][T22559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7188'.
[  315.695268][T22573] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.708400][T22574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7194'.
[  316.144892][T22598] pim6reg: entered allmulticast mode
[  316.147283][T22598] vxcan1: left allmulticast mode
[  316.148986][T22598] pim6reg: left allmulticast mode
[  316.235545][T22598] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7205'.
[  317.298155][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7229'.
[  317.311184][T22660] macvtap1: entered promiscuous mode
[  317.313800][T22660] team0: entered promiscuous mode
[  317.317316][T22660] team_slave_0: entered promiscuous mode
[  317.320712][T22660] team_slave_1: entered promiscuous mode
[  317.324837][T22660] macvtap1: entered allmulticast mode
[  317.327205][T22660] team0: entered allmulticast mode
[  317.329715][T22660] team_slave_0: entered allmulticast mode
[  317.333463][T22660] team_slave_1: entered allmulticast mode
[  317.344766][T22660] team0: left allmulticast mode
[  317.347169][T22660] team_slave_0: left allmulticast mode
[  317.349708][T22660] team_slave_1: left allmulticast mode
[  317.352192][T22660] team0: left promiscuous mode
[  317.355507][T22660] team_slave_0: left promiscuous mode
[  317.358600][T22660] team_slave_1: left promiscuous mode
[  317.532719][T22677] netlink: 'syz.2.7237': attribute type 30 has an invalid length.
[  317.608120][T22688] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.739622][T22695] netlink: 'syz.0.7244': attribute type 1 has an invalid length.
[  317.768546][T22695] bond3: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  317.780801][ T8229] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  317.781321][T22695] 8021q: adding VLAN 0 to HW filter on device bond3
[  317.798252][T22695] veth15: entered promiscuous mode
[  317.801697][T22695] bond3: (slave veth15): Enslaving as a backup interface with a down link
[  317.812170][T22695] bond0: (slave 5): Releasing backup interface
[  317.814789][T22695] : left promiscuous mode
[  317.816558][T22695] : left allmulticast mode
[  317.823849][T22695] team0: Port device team_slave_0 removed
[  317.830064][T22695] team0: Port device team_slave_1 removed
[  317.835831][T22695] bond0: (slave macvlan0): Releasing backup interface
[  317.839121][T22695] macvlan0: left allmulticast mode
[  317.841236][T22695] veth1_vlan: left allmulticast mode
[  317.851288][T22695] bond1: (slave gretap1): Releasing active interface
[  317.863396][T22695] bond2: (slave veth5): Releasing active interface
[  317.866267][T22695] bond2: (slave veth5): the permanent HWaddr of slave - 82:02:ff:4f:0a:e9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  317.874295][T22695] vlan2: entered promiscuous mode
[  317.880931][T22695] bond2: (slave vlan2): Releasing active interface
[  317.884766][T22695] vlan2: left promiscuous mode
[  317.889120][T22695] veth1: left promiscuous mode
[  317.893909][ T8229] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  317.901787][T22695] bond3: (slave ip6gretap3): Removing an active aggregator
[  317.905747][T22695] bond3: (slave ip6gretap3): Releasing backup interface
[  317.908791][T22695] bond3: (slave ip6gretap3): the permanent HWaddr of slave - 2a:4b:bf:f7:92:c5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  317.921493][T22695] bond3: (slave veth15): Releasing backup interface
[  318.310985][T22742] netlink: 'syz.1.7264': attribute type 1 has an invalid length.
[  318.318103][T22742] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7264'.
[  319.608273][T22830] netlink: 'syz.1.7301': attribute type 12 has an invalid length.
[  320.090477][T22849] netlink: zone id is out of range
[  320.093014][T22849] netlink: zone id is out of range
[  320.095170][T22849] netlink: zone id is out of range
[  320.097334][T22849] netlink: zone id is out of range
[  320.099500][T22849] netlink: zone id is out of range
[  320.101656][T22849] netlink: zone id is out of range
[  320.455700][T22875] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7321'.
[  320.703220][T22910] batadv_slave_1: entered promiscuous mode
[  320.706335][T22909] batadv_slave_1: left promiscuous mode
[  321.405138][T22976] syz.1.7368 uses old SIOCAX25GETINFO
[  321.431213][T22978] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  321.726382][T23017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7386'.
[  321.851986][T23037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7395'.
[  321.855095][T23037] netlink: 'syz.1.7395': attribute type 1 has an invalid length.
[  321.889897][T23037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7395'.
[  321.971792][T23050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7400'.
[  322.336059][ T5271] udevd[5271]: worker [7748] /devices/virtual/block/nbd3 is taking a long time
[  322.641736][T23084] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7413'.
[  322.802621][T23097] IPv6: Can't replace route, no match found
[  322.805288][T23096] netlink: 'syz.1.7419': attribute type 14 has an invalid length.
[  323.011598][T23123] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.7433'.
[  323.046833][T23128] netlink: 'syz.2.7434': attribute type 29 has an invalid length.
[  323.050776][T23128] netlink: 'syz.2.7434': attribute type 29 has an invalid length.
[  323.307583][T23150] geneve3: entered allmulticast mode
[  323.521506][T23169] netlink: 'syz.0.7446': attribute type 1 has an invalid length.
[  323.525944][T23169] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7446'.
[  323.660702][T23186] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[  323.722246][T23190] syzkaller1: entered promiscuous mode
[  323.729835][T23190] syzkaller1: entered allmulticast mode
[  324.124892][T23237] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7474'.
[  324.268904][T23256] netlink: 'syz.2.7483': attribute type 3 has an invalid length.
[  324.338713][T23267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7489'.
[  324.441327][T23281] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  327.636492][T23484] netlink: 'syz.0.7576': attribute type 6 has an invalid length.
[  328.044258][T23498] __nla_validate_parse: 3 callbacks suppressed
[  328.044272][T23498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7583'.
[  328.112847][T23498] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.7583'.
[  328.249082][T23501] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  328.371128][T23505] lo speed is unknown, defaulting to 1000
[  328.412256][T23516] netlink: 'syz.1.7587': attribute type 10 has an invalid length.
[  328.416868][T23517] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7591'.
[  328.425248][T23516] netlink: 'syz.1.7587': attribute type 10 has an invalid length.
[  328.427894][T23516] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7587'.
[  328.605475][T23539] net_ratelimit: 18 callbacks suppressed
[  328.605487][T23539] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  328.886106][   T60] block nbd2: Possible stuck request ffff8880229b8000: control (read@0,1024B). Runtime 90 seconds
[  328.889545][   T60] block nbd2: Possible stuck request ffff8880229b8200: control (read@1024,1024B). Runtime 90 seconds
[  328.935371][T23568] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7612'.
[  328.939198][T23568] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  329.378078][T23589] netem: incorrect ge model size
[  329.380501][T23589] netem: change failed
[  329.435163][T23593] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7624'.
[  329.559210][T23609] netlink: 'syz.2.7632': attribute type 1 has an invalid length.
[  329.633785][T23617] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  330.050883][T23665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7659'.
[  330.119391][T23665] vlan0 (unregistering): left allmulticast mode
[  330.121822][T23674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7663'.
[  330.127443][T23674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7663'.
[  330.127734][T23665] veth0_vlan (unregistering): left allmulticast mode
[  330.149301][T23665] team0: Port device vlan0 removed
[  330.396402][T23690] openvswitch: netlink: Unknown key attributes 2
[  330.489921][T23698] lo speed is unknown, defaulting to 1000
[  330.515317][T23701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7674'.
[  330.550247][T23701] bridge8: entered promiscuous mode
[  330.553293][T23701] macsec0: entered promiscuous mode
[  330.555599][T23701] macsec0: entered allmulticast mode
[  330.558725][T23701] bridge8: entered allmulticast mode
[  330.574871][T23701] bridge8: port 1(macsec0) entered blocking state
[  330.578061][T23701] bridge8: port 1(macsec0) entered disabled state
[  330.585310][T23701] bridge8: left allmulticast mode
[  330.587745][T23701] bridge8: left promiscuous mode
[  331.550676][T23772] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.973013][T23795] netlink: 'syz.0.7718': attribute type 1 has an invalid length.
[  332.314796][T23819] netlink: 'syz.2.7728': attribute type 3 has an invalid length.
[  333.524727][T23924] netlink: 'syz.2.7767': attribute type 4 has an invalid length.
[  333.527951][T23924] __nla_validate_parse: 3 callbacks suppressed
[  333.527965][T23924] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7767'.
[  333.550145][T23924] : renamed from bond0 (while UP)
[  334.636975][T23949] can: request_module (can-proto-5) failed.
[  334.805158][T23974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7787'.
[  335.144324][T24005] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7803'.
[  335.284345][T24015] tipc: Resetting bearer <ib:ip6gre0>
[  335.295040][T24015] bridge0: port 4(0!) entered disabled state
[  335.307229][T24015] wg1: left promiscuous mode
[  335.308930][T24015] wg1: left allmulticast mode
[  335.311244][T24015] veth1_to_team: left allmulticast mode
[  335.323612][T24015] gretap1: left promiscuous mode
[  335.325774][T24015] geneve2: left promiscuous mode
[  335.327545][T24015] geneve2: left allmulticast mode
[  335.330040][T24015] gretap3: left promiscuous mode
[  335.331882][T24015] bridge2: left promiscuous mode
[  335.337386][T24015] vlan2: left promiscuous mode
[  335.339464][T24015] bond0: left promiscuous mode
[  335.341262][T24015] vlan2: left allmulticast mode
[  335.343462][T24015] bond0: left allmulticast mode
[  335.348730][T24015] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  335.351235][T24015] macsec0: left allmulticast mode
[  335.359545][    T9] lo speed is unknown, defaulting to 1000
[  335.361932][    T9] syz1: Port: 1 Link DOWN
[  335.400148][T24031] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7815'.
[  335.574069][T24058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7818'.
[  335.701621][T24076] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma?
[  335.924357][   T25] block nbd0: Possible stuck request ffff8880228e0000: control (read@0,4096B). Runtime 270 seconds
[  336.081741][T24118] lo speed is unknown, defaulting to 1000
[  336.219264][T24136] netlink: 'syz.2.7860': attribute type 5 has an invalid length.
[  336.235651][T24123] lo speed is unknown, defaulting to 1000
[  336.579330][T24173] pimreg: entered allmulticast mode
[  336.767956][T24189] netlink: 'syz.2.7876': attribute type 21 has an invalid length.
[  336.775451][T24185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7874'.
[  336.781084][T24189] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7876'.
[  336.789039][T24189] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7876'.
[  337.103623][T24209] tipc: Enabled bearer <udp:syz2>, priority 6
[  337.219022][T24235] netlink: 'syz.1.7898': attribute type 1 has an invalid length.
[  337.355604][T24245] netlink: del zone limit has 4 unknown bytes
[  337.650251][T24270] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7914'.
[  338.095365][T24294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7925'.
[  338.989497][T24352] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  339.054542][T24356] __nla_validate_parse: 4 callbacks suppressed
[  339.054555][T24356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7953'.
[  339.567036][T24372] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7960'.
[  339.620478][T24378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7963'.
[  339.765607][T24396] netlink: 'syz.2.7971': attribute type 3 has an invalid length.
[  340.230168][T24444] macsec2: entered promiscuous mode
[  340.535225][T24470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8007'.
[  340.792893][T24490] lo speed is unknown, defaulting to 1000
[  341.387525][T24540] netlink: 'syz.1.8037': attribute type 6 has an invalid length.
[  341.622276][T24558] netlink: 'syz.2.8046': attribute type 1 has an invalid length.
[  341.625857][T24558] netlink: 'syz.2.8046': attribute type 10 has an invalid length.
[  341.628343][T24558] netlink: 236 bytes leftover after parsing attributes in process `syz.2.8046'.
[  341.700162][T24572] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.8051'.
[  341.742610][T24581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8055'.
[  341.778655][T24585] vlan0: entered promiscuous mode
[  341.916977][T24602] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.8064'.
[  342.141666][T24613] lo speed is unknown, defaulting to 1000
[  342.234196][T24613] netlink: 248 bytes leftover after parsing attributes in process `syz.0.8069'.
[  342.364675][T24624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8072'.
[  342.486765][T24626] IPVS: Scheduler module ip_vs_ not found
[  342.681225][T24643] openvswitch: netlink: IP tunnel dst address not specified
[  342.721961][T24648] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.438137][T24760] __nla_validate_parse: 1 callbacks suppressed
[  344.438154][T24760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8131'.
[  344.654694][T24776] lo speed is unknown, defaulting to 1000
[  344.687946][T24781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  344.754100][T24788] : left promiscuous mode
[  344.883475][   T25] block nbd3: Possible stuck request ffff8880229e8000: control (read@0,1024B). Runtime 90 seconds
[  344.888002][   T25] block nbd3: Possible stuck request ffff8880229e8200: control (read@1024,1024B). Runtime 90 seconds
[  344.892709][   T25] block nbd3: Possible stuck request ffff8880229e8400: control (read@2048,1024B). Runtime 90 seconds
[  344.897204][   T25] block nbd3: Possible stuck request ffff8880229e8600: control (read@3072,1024B). Runtime 90 seconds
[  344.919998][T24800] netlink: 'syz.0.8149': attribute type 1 has an invalid length.
[  344.922940][T24800] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8149'.
[  344.926075][T24800] netlink: 97 bytes leftover after parsing attributes in process `syz.0.8149'.
[  344.974055][T24804] netlink: 504 bytes leftover after parsing attributes in process `syz.0.8151'.
[  345.124988][T24816] netlink: 424 bytes leftover after parsing attributes in process `syz.2.8157'.
[  345.127974][T24816] netlink: 424 bytes leftover after parsing attributes in process `syz.2.8157'.
[  345.452909][T24847] bond0: option packets_per_slave: invalid value (18446744071562067968)
[  345.458511][T24847] bond0: option packets_per_slave: allowed values 0 - 65535
[  345.497445][T24849] netlink: 596 bytes leftover after parsing attributes in process `syz.1.8172'.
[  345.619596][T24861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8178'.
[  345.940732][T24867] netlink: 'syz.1.8181': attribute type 3 has an invalid length.
[  345.945034][T24867] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8181'.
[  346.296635][T24876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8186'.
[  346.493149][T24893] netlink: 'syz.1.8194': attribute type 3 has an invalid length.
[  346.500443][T24893] netlink: 'syz.1.8194': attribute type 3 has an invalid length.
[  346.837723][T24911] netlink: 'syz.0.8203': attribute type 21 has an invalid length.
[  347.058705][T24928] netlink: 'syz.1.8211': attribute type 1 has an invalid length.
[  347.106515][T24930] netlink: 'syz.0.8212': attribute type 10 has an invalid length.
[  348.227228][T24961] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  348.240955][T24961] netlink: 'syz.0.8225': attribute type 4 has an invalid length.
[  348.563409][T15900] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  348.566599][T15900] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  348.581018][T15900] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  348.592835][T15900] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  348.736923][T24988] @000000000: renamed from veth0_vlan
[  349.717946][T25087] netlink: 'syz.2.8280': attribute type 7 has an invalid length.
[  349.721506][T25087] netlink: 'syz.2.8280': attribute type 8 has an invalid length.
[  350.114885][T25108] sctp: [Deprecated]: syz.1.8288 (pid 25108) Use of int in maxseg socket option.
[  350.114885][T25108] Use struct sctp_assoc_value instead
[  350.897218][T25154] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  350.969064][T25158] pim6reg: entered allmulticast mode
[  350.971707][T25158] pim6reg: left allmulticast mode
[  351.245676][T25165] __nla_validate_parse: 11 callbacks suppressed
[  351.245710][T25165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8313'.
[  351.331661][T25171] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  351.334771][T25171] syzkaller0: entered promiscuous mode
[  351.336781][T25171] syzkaller0: entered allmulticast mode
[  351.602320][T25173] tipc: Resetting bearer <eth:syzkaller0>
[  351.694523][T25170] tipc: Resetting bearer <eth:syzkaller0>
[  351.740623][T25170] tipc: Disabling bearer <eth:syzkaller0>
[  351.815035][T25195] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8326'.
[  351.818330][T25195] netlink: 'syz.2.8326': attribute type 1 has an invalid length.
[  351.888110][T25202] netlink: 'syz.1.8330': attribute type 4 has an invalid length.
[  351.900686][T25197] lo speed is unknown, defaulting to 1000
[  351.966308][T25210] netlink: 200 bytes leftover after parsing attributes in process `syz.1.8333'.
[  352.221555][T25234] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.989502][T25252] lo speed is unknown, defaulting to 1000
[  353.237079][T25265] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8355'.
[  353.269474][T25269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8357'.
[  353.274227][T25269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8357'.
[  353.277863][T25269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8357'.
[  353.406285][T25285] netlink: 'syz.0.8364': attribute type 16 has an invalid length.
[  353.408922][T25285] netlink: 'syz.0.8364': attribute type 17 has an invalid length.
[  353.441906][T25285] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.446707][T25285] tipc: Resetting bearer <eth:team0>
[  353.449428][T25287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  353.457698][T25285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  353.468723][ T8229] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  353.550254][T25294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8369'.
[  353.559457][T25294] vlan4: entered promiscuous mode
[  353.561676][T25294] gretap0: entered promiscuous mode
[  353.707769][T25305] openvswitch: netlink: IP tunnel dst address not specified
[  353.752257][T25310] netlink: 'syz.1.8377': attribute type 8 has an invalid length.
[  353.799914][T25316] netlink: 'syz.1.8379': attribute type 17 has an invalid length.
[  353.812701][T25316] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8379'.
[  353.818796][T25316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  353.826365][   T10] lo speed is unknown, defaulting to 1000
[  353.828743][   T10] syz1: Port: 1 Link ACTIVE
[  354.270109][T25347] netlink: 240 bytes leftover after parsing attributes in process `syz.0.8393'.
[  354.300644][T25350] lo speed is unknown, defaulting to 1000
[  354.307756][T25350] lo speed is unknown, defaulting to 1000
[  354.310030][T25350] lo speed is unknown, defaulting to 1000
[  354.319748][T25350] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  354.332175][T25350] lo speed is unknown, defaulting to 1000
[  354.335444][T25350] lo speed is unknown, defaulting to 1000
[  354.338377][T25350] lo speed is unknown, defaulting to 1000
[  355.498625][   T10] lo speed is unknown, defaulting to 1000
[  355.500618][   T10] syz1: Port: 1 Link DOWN
[  356.062345][T25454] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  356.075362][T25454] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  356.077831][T25454] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  356.276682][T25471] __nla_validate_parse: 5 callbacks suppressed
[  356.276696][T25471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8450'.
[  356.823282][T25519] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  356.826497][T25519] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  356.828906][T25519] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  356.897291][T25526] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  357.103706][T25538] lo speed is unknown, defaulting to 1000
[  357.108265][T25538] lo speed is unknown, defaulting to 1000
[  357.452627][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  358.972590][   T60] block nbd2: Possible stuck request ffff8880229b8000: control (read@0,1024B). Runtime 120 seconds
[  358.976183][   T60] block nbd2: Possible stuck request ffff8880229b8200: control (read@1024,1024B). Runtime 120 seconds
[  359.858521][T25520] tipc: Disabling bearer <eth:syzkaller0>
[  359.958778][T25559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8487'.
[  360.100470][T25571] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  360.163024][T25575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.434149][T25601] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  360.654380][T25617] netlink: 'syz.2.8512': attribute type 1 has an invalid length.
[  360.657245][T25617] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8512'.
[  360.660483][T25617] NCSI netlink: No device for ifindex 0
[  360.967431][T25638] lo speed is unknown, defaulting to 1000
[  360.970145][T25638] lo speed is unknown, defaulting to 1000
[  361.190991][T25648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  361.194281][T25648] IPv6: NLM_F_CREATE should be set when creating new route
[  361.197543][T25648] IPv6: NLM_F_CREATE should be set when creating new route
[  361.498260][T25670] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8535'.
[  361.510109][T25672] netlink: 'syz.0.8536': attribute type 1 has an invalid length.
[  361.593136][T25682] !: renamed from dummy0 (while UP)
[  361.607057][T25683] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8539'.
[  361.690920][T25687] lo speed is unknown, defaulting to 1000
[  361.696050][T25687] lo speed is unknown, defaulting to 1000
[  361.870897][T25703] netlink: 200 bytes leftover after parsing attributes in process `syz.2.8543'.
[  361.891540][T25703] netlink: 'syz.2.8543': attribute type 39 has an invalid length.
[  362.563534][T25743] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  363.476239][T25783] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8570'.
[  363.480287][T25783] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8570'.
[  363.532007][T25787] netlink: 'syz.1.8573': attribute type 39 has an invalid length.
[  363.707175][T25798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8577'.
[  363.710809][T25798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8577'.
[  363.715611][T25798] netlink: 'syz.1.8577': attribute type 11 has an invalid length.
[  364.103669][T25821] tipc: Resetting bearer <eth:gre0>
[  364.169586][T25821] tipc: Resetting bearer <eth:team0>
[  364.195630][T25821] veth0_to_bond: left allmulticast mode
[  364.199522][T25821] vlan0: left promiscuous mode
[  364.201808][T25821] macvlan0: left promiscuous mode
[  364.205330][T25821] gretap1: left promiscuous mode
[  364.208918][T25821] vlan2: left allmulticast mode
[  364.211053][T25821] veth1: left allmulticast mode
[  364.215338][T25821] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  364.218287][T25821] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  364.221363][T25821] gretap2: left promiscuous mode
[  364.224128][T25821] vlan3: left promiscuous mode
[  364.226180][T25821] bond0: left promiscuous mode
[  364.228331][T25821] vlan3: left allmulticast mode
[  364.230465][T25821] bond0: left allmulticast mode
[  364.236303][T25821] macsec1: left promiscuous mode
[  364.238937][T25821] macsec1: left allmulticast mode
[  364.241376][T25821] geneve0: left promiscuous mode
[  364.243806][T25821] wireguard0: left promiscuous mode
[  364.246365][T25821] wireguard0: left allmulticast mode
[  364.248741][T25821] gretap4: left promiscuous mode
[  364.250930][T25821] bridge6: left promiscuous mode
[  364.253450][T25821] bridge6: left allmulticast mode
[  364.255903][T25821] macvtap1: left promiscuous mode
[  364.258181][T25821] macvtap1: left allmulticast mode
[  364.260940][T25821] veth15: left promiscuous mode
[  364.860563][T25875] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.865433][T25875] syzkaller0: entered promiscuous mode
[  364.867625][T25875] syzkaller0: entered allmulticast mode
[  364.889985][T25875] tipc: Resetting bearer <eth:syzkaller0>
[  364.892522][T25875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.898329][T25875] tipc: Resetting bearer <eth:syzkaller0>
[  364.909932][T25875] tipc: Disabling bearer <eth:syzkaller0>
[  365.144556][T25888] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8616'.
[  365.148580][T25887] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8616'.
[  365.284272][ T5830] Bluetooth: hci2: command 0x0406 tx timeout
[  365.371160][T25914] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.8629'.
[  365.374463][T25914] netlink: zone id is out of range
[  365.376287][T25914] netlink: get zone limit has 8 unknown bytes
[  365.512182][T25928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.549106][T25928] syzkaller0: entered promiscuous mode
[  365.551457][T25928] syzkaller0: entered allmulticast mode
[  365.556559][T25928] tipc: Resetting bearer <eth:syzkaller0>
[  365.568913][T25926] tipc: Resetting bearer <eth:syzkaller0>
[  365.711913][T25943] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  366.002953][   T25] block nbd0: Possible stuck request ffff8880228e0000: control (read@0,4096B). Runtime 300 seconds
[  366.634791][T25926] tipc: Disabling bearer <eth:syzkaller0>
[  366.778790][T25960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8650'.
[  366.782235][T25960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8650'.
[  367.144460][T25996] block nbd4: server does not support multiple connections per device.
[  367.148693][T25996] block nbd4: shutting down sockets
[  367.269765][T26020] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8676'.
[  367.373471][T26032] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  367.487169][T26047] netlink: 536 bytes leftover after parsing attributes in process `syz.0.8689'.
[  368.576612][T26080] lo speed is unknown, defaulting to 1000
[  368.579277][T26080] lo speed is unknown, defaulting to 1000
[  368.731758][T26095] lo speed is unknown, defaulting to 1000
[  368.737867][T26095] lo speed is unknown, defaulting to 1000
[  368.885357][T26101] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.888411][T26101] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  368.893484][T26101] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[  369.597127][T26137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8731'.
[  369.646486][T26139] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  369.650587][T26139] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[  369.773748][T26107] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  370.039806][T26166] netlink: 'syz.0.8744': attribute type 21 has an invalid length.
[  370.045937][T26166] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8744'.
[  370.420454][T26204] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.8759'.
[  370.423637][T26204] netlink: zone id is out of range
[  370.425298][T26204] netlink: zone id is out of range
[  370.426929][T26204] netlink: zone id is out of range
[  370.428794][T26204] netlink: get zone limit has 8 unknown bytes
[  370.453421][T26206] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8760'.
[  370.761794][T26236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8773'.
[  370.889774][T26252] netlink: 276 bytes leftover after parsing attributes in process `syz.1.8781'.
[  371.055073][T26269] lo speed is unknown, defaulting to 1000
[  371.058459][T26269] lo speed is unknown, defaulting to 1000
[  371.347599][T26289] lo speed is unknown, defaulting to 1000
[  371.354813][T26289] lo speed is unknown, defaulting to 1000
[  372.136751][T26295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8796'.
[  372.883947][T26351] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  373.052177][T26369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8828'.
[  373.119955][T26381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8832'.
[  373.123179][T26381] openvswitch: netlink: Flow actions attr not present in new flow.
[  373.124623][T26378] netlink: 788 bytes leftover after parsing attributes in process `syz.1.8833'.
[  373.187724][T26387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8837'.
[  373.869960][T26428] netlink: 'syz.0.8854': attribute type 10 has an invalid length.
[  373.876150][T26428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8854'.
[  373.886572][T26428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8854'.
[  373.890457][T26428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8854'.
[  373.906789][T26428] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5
[  374.081675][T26440] netlink: 'syz.2.8860': attribute type 10 has an invalid length.
[  374.114639][ T8229] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  374.130477][ T8229] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  374.135962][ T8229] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  374.139409][ T8229] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  374.219264][T26447] lo speed is unknown, defaulting to 1000
[  374.223846][T26447] lo speed is unknown, defaulting to 1000
[  374.530019][T26481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8875'.
[  374.535648][T26481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8875'.
[  374.665400][T26486] netlink: 'syz.2.8875': attribute type 1 has an invalid length.
[  374.797221][T26499] lo speed is unknown, defaulting to 1000
[  374.800749][T26499] lo speed is unknown, defaulting to 1000
[  374.933818][T26512] netlink: 'syz.0.8890': attribute type 4 has an invalid length.
[  374.937913][T26512] netlink: 'syz.0.8890': attribute type 4 has an invalid length.
[  374.992780][   T25] block nbd3: Possible stuck request ffff8880229e8000: control (read@0,1024B). Runtime 120 seconds
[  374.997311][   T25] block nbd3: Possible stuck request ffff8880229e8200: control (read@1024,1024B). Runtime 120 seconds
[  375.001713][   T25] block nbd3: Possible stuck request ffff8880229e8400: control (read@2048,1024B). Runtime 120 seconds
[  375.006712][   T25] block nbd3: Possible stuck request ffff8880229e8600: control (read@3072,1024B). Runtime 120 seconds
[  375.060152][T26518] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.066231][T26518] syzkaller0: entered promiscuous mode
[  375.068787][T26518] syzkaller0: entered allmulticast mode
[  375.094742][T26518] tipc: Resetting bearer <eth:syzkaller0>
[  375.100172][T26517] tipc: Resetting bearer <eth:syzkaller0>
[  375.109655][T26517] tipc: Disabling bearer <eth:syzkaller0>
[  375.157372][T26524] netlink: 'syz.0.8896': attribute type 3 has an invalid length.
[  375.885780][T26589] netlink: 'syz.0.8924': attribute type 7 has an invalid length.
[  375.894873][T26589] : entered promiscuous mode
[  375.898923][T26589] netlink: 'syz.0.8924': attribute type 2 has an invalid length.
[  376.352027][T26611] bpq0: entered promiscuous mode
[  376.690763][T26643] bridge0: port 1(erspan0) entered blocking state
[  376.694395][T26643] bridge0: port 1(erspan0) entered disabled state
[  376.696741][T26643] erspan0: entered allmulticast mode
[  376.700024][T26643] erspan0: entered promiscuous mode
[  376.705168][T26643] bridge0: port 1(erspan0) entered blocking state
[  376.707942][T26643] bridge0: port 1(erspan0) entered forwarding state
[  376.713506][T26643] erspan0: left allmulticast mode
[  376.717326][T26643] erspan0: left promiscuous mode
[  376.721033][T26643] bridge0: port 1(erspan0) entered disabled state
[  377.043490][T26674] netlink: 'syz.0.8961': attribute type 1 has an invalid length.
[  377.073221][T26674] nbd: socks must be embedded in a SOCK_ITEM attr
[  377.075906][T26674] block nbd4: shutting down sockets
[  377.352008][T26690] lo speed is unknown, defaulting to 1000
[  377.354945][T26690] lo speed is unknown, defaulting to 1000
[  377.507449][T26695] __nla_validate_parse: 8 callbacks suppressed
[  377.507466][T26695] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8968'.
[  377.513084][T26695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8968'.
[  377.516068][T26695] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8968'.
[  377.599832][T26704] netlink: 'syz.2.8973': attribute type 1 has an invalid length.
[  377.796658][T26724] netlink: 'syz.2.8983': attribute type 21 has an invalid length.
[  377.799672][T26724] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8983'.
[  377.849042][T26728] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8982'.
[  377.853066][T26725] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8982'.
[  377.989575][T26744] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  378.049420][T26747] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  378.117289][T26752] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8993'.
[  378.122062][T26749] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8993'.
[  378.134308][T26754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8995'.
[  378.145112][T26754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8995'.
[  378.149224][T26754] netlink: 'syz.1.8995': attribute type 18 has an invalid length.
[  379.846308][T26871] netlink: 'syz.1.9048': attribute type 30 has an invalid length.
[  379.917806][T26875] lo speed is unknown, defaulting to 1000
[  379.920371][T26875] lo speed is unknown, defaulting to 1000
[  380.596137][T26912] netlink: 'syz.0.9063': attribute type 1 has an invalid length.
[  380.776805][T26921] netlink: 'syz.0.9067': attribute type 1 has an invalid length.
[  380.779467][T26921] netlink: 'syz.0.9067': attribute type 3 has an invalid length.
[  381.398088][T26950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  381.546035][T26956] lo speed is unknown, defaulting to 1000
[  381.550266][T26956] lo speed is unknown, defaulting to 1000
[  382.194268][T27006] netlink: 'syz.0.9102': attribute type 4 has an invalid length.
[  382.197346][T27006] netlink: 'syz.0.9102': attribute type 4 has an invalid length.
[  383.596587][T27093] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  384.496657][T27156] netlink: 'syz.2.9171': attribute type 11 has an invalid length.
[  384.798736][T27182] __nla_validate_parse: 9 callbacks suppressed
[  384.798752][T27182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9184'.
[  384.804654][T27182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9184'.
[  384.868579][T27189] netlink: 'syz.2.9187': attribute type 1 has an invalid length.
[  384.915730][T27189] vlan3: entered allmulticast mode
[  384.918427][T27189] bond0: entered allmulticast mode
[  384.989844][T27200] netlink: 'syz.0.9192': attribute type 4 has an invalid length.
[  384.993420][T27200] netlink: 'syz.0.9192': attribute type 4 has an invalid length.
[  385.061176][T27208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9192'.
[  385.091384][T27211] wg1 speed is unknown, defaulting to 1000
[  385.093466][T27211] wg1 speed is unknown, defaulting to 1000
[  385.095889][T27211] wg1 speed is unknown, defaulting to 1000
[  385.105848][T27211] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  385.134490][T27211] wg1 speed is unknown, defaulting to 1000
[  385.139104][T27211] wg1 speed is unknown, defaulting to 1000
[  385.142051][T27211] wg1 speed is unknown, defaulting to 1000
[  385.234737][T27225] netlink: 'syz.2.9203': attribute type 15 has an invalid length.
[  385.333319][T27235] netlink: 'syz.2.9208': attribute type 1 has an invalid length.
[  385.336755][T27235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9208'.
[  385.544677][T27260] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.115854][T27300] validate_nla: 1 callbacks suppressed
[  386.115867][T27300] netlink: 'syz.1.9238': attribute type 29 has an invalid length.
[  386.120213][T27300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9238'.
[  386.261816][T27304] syzkaller0: entered promiscuous mode
[  386.263998][T27304] syzkaller0: entered allmulticast mode
[  387.149358][T27330] netlink: 844 bytes leftover after parsing attributes in process `syz.2.9252'.
[  387.270316][T27331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9252'.
[  387.960827][T27312] lo speed is unknown, defaulting to 1000
[  387.963874][T27312] lo speed is unknown, defaulting to 1000
[  387.966661][T27312] wg1 speed is unknown, defaulting to 1000
[  388.280950][T27364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9267'.
[  389.043268][   T60] block nbd2: Possible stuck request ffff8880229b8000: control (read@0,1024B). Runtime 150 seconds
[  389.047969][   T60] block nbd2: Possible stuck request ffff8880229b8200: control (read@1024,1024B). Runtime 150 seconds
[  389.515304][T27426] netlink: 'syz.1.9296': attribute type 5 has an invalid length.
[  389.776748][T27449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  389.780057][T27449] IPv6: NLM_F_CREATE should be set when creating new route
[  389.783532][T27449] IPv6: NLM_F_CREATE should be set when creating new route
[  389.811552][T27449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  390.034989][T27470] wireguard1: entered promiscuous mode
[  390.037481][T27470] wireguard1: entered allmulticast mode
[  390.076840][T27475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9316'.
[  390.148729][T27480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9319'.
[  390.200258][T27481] lo speed is unknown, defaulting to 1000
[  390.206008][T27481] lo speed is unknown, defaulting to 1000
[  390.208706][T27486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9321'.
[  390.209626][T27481] wg1 speed is unknown, defaulting to 1000
[  390.211790][T27486] netlink: 'syz.0.9321': attribute type 5 has an invalid length.
[  390.317199][T27492] lo speed is unknown, defaulting to 1000
[  390.319891][T27492] lo speed is unknown, defaulting to 1000
[  390.326675][T27492] wg1 speed is unknown, defaulting to 1000
[  391.908742][T27577] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  391.976177][T27578] netlink: 'syz.1.9360': attribute type 4 has an invalid length.
[  391.979523][T27578] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9360'.
[  392.040671][T27582] delete_channel: no stack
[  392.606708][T27617] openvswitch: netlink: Missing valid actions attribute.
[  392.609449][T27617] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  392.735318][T27633] tc_dump_action: action bad kind
[  392.786963][T27641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9391'.
[  392.949456][T27659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9400'.
[  393.000558][T27665] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  394.065374][T27700] sctp: [Deprecated]: syz.2.9416 (pid 27700) Use of int in maxseg socket option.
[  394.065374][T27700] Use struct sctp_assoc_value instead
[  394.357599][   T33] audit: type=1800 audit(1754968237.537:7): pid=27702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9417" name="cgroup.controllers" dev="tmpfs" ino=15956 res=0 errno=0
[  394.501858][T27706] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9418'.
[  394.505432][T27706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9418'.
[  394.509292][T27706] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9418'.
[  394.514646][T27706] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9418'.
[  395.037773][T27716] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  395.520450][T27725] __nla_validate_parse: 1 callbacks suppressed
[  395.520464][T27725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9422'.
[  395.591975][T27727] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  395.670317][T27729] bridge0: port 3(team0) entered blocking state
[  395.672595][T27729] bridge0: port 3(team0) entered forwarding state
[  395.676466][T27729] 8021q: adding VLAN 0 to HW filter on device team0
[  395.679487][T27729] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  395.685728][  T970] lo speed is unknown, defaulting to 1000
[  395.687803][  T970] syz1: Port: 1 Link ACTIVE
[  395.724452][T27734] netlink: 'syz.1.9425': attribute type 10 has an invalid length.
[  395.729675][T27734] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9425'.
[  395.733647][T27734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  395.739012][T27734] netlink: 'syz.1.9425': attribute type 12 has an invalid length.
[  395.741671][T27734] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9425'.
[  395.904610][T27747] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9429'.
[  395.908470][T27747] 0: renamed from hsr0
[  395.913551][T27747] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  395.917803][T27747] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  395.922101][T27747] 0: entered allmulticast mode
[  395.924579][T27747] hsr_slave_0: entered allmulticast mode
[  395.927103][T27747] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  395.938390][T27748] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9429'.
[  395.941709][T27748] 1: renamed from 70 (while UP)
[  395.944586][T27748] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check.
[  395.971238][T27752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9430'.
[  395.978373][T27752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9430'.
[  396.045908][T27756] lo speed is unknown, defaulting to 1000
[  396.048748][T27756] lo speed is unknown, defaulting to 1000
[  396.051566][T27756] wg1 speed is unknown, defaulting to 1000
[  396.084359][T27756] netlink: 'syz.2.9431': attribute type 13 has an invalid length.
[  396.087580][T27756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9431'.
[  396.095873][   T25] block nbd0: Possible stuck request ffff8880228e0000: control (read@0,4096B). Runtime 330 seconds
[  396.119456][T27760] netlink: 'syz.2.9432': attribute type 1 has an invalid length.
[  396.134060][T27760] 8021q: adding VLAN 0 to HW filter on device bond3
[  396.191539][T27760] bond3: (slave veth9): Enslaving as an active interface with a down link
[  396.209492][T27763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9433'.
[  396.271203][T27759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  396.309980][T27772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9436'.
[  396.550198][T27778] batman_adv: batadv0: Adding interface: ip6gretap4
[  396.553425][T27778] batman_adv: batadv0: The MTU of interface ip6gretap4 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  396.565333][T27778] batman_adv: batadv0: Interface activated: ip6gretap4
[  396.597605][T27779] bond0: (slave rose0): Enslaving as an active interface with an up link
[  396.680480][T27790] bridge0: entered allmulticast mode
[  396.842324][T27799] netlink: 'syz.0.9442': attribute type 5 has an invalid length.
[  396.848961][T27799] geneve3: entered promiscuous mode
[  396.850686][T27799] geneve3: entered allmulticast mode
[  396.867759][ T8229] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  396.867977][T27803] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  396.876010][T27803] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  397.467543][T27823] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.471119][T27823] syzkaller0: entered promiscuous mode
[  397.473943][T27823] syzkaller0: entered allmulticast mode
[  397.477915][T27823] netlink: 'syz.1.9450': attribute type 25 has an invalid length.
[  397.481838][T27823] syzkaller0: left promiscuous mode
[  397.483872][T27823] syzkaller0: left allmulticast mode
[  397.488013][T27823] tipc: Resetting bearer <eth:syzkaller0>
[  397.491117][T27822] tipc: Resetting bearer <eth:syzkaller0>
[  397.503618][T27822] tipc: Disabling bearer <eth:syzkaller0>
[  397.766059][T27834] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  397.768985][T27834] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  397.793738][T27836] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  397.839137][T27841] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000
[  397.855705][T27836] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  397.886557][T27836] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  397.900347][T27846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.904028][T27847] syzkaller0: entered promiscuous mode
[  397.906225][T27847] syzkaller0: entered allmulticast mode
[  397.914747][T27847] tipc: Resetting bearer <eth:syzkaller0>
[  397.918627][T27845] tipc: Resetting bearer <eth:syzkaller0>
[  397.932717][T27845] tipc: Disabling bearer <eth:syzkaller0>
[  397.939792][T27836] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  397.993419][T27850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  398.004136][T27850] syzkaller0: entered promiscuous mode
[  398.006208][T27850] syzkaller0: entered allmulticast mode
[  398.009496][ T8229] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  398.021647][ T8229] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  398.041040][T27850] tipc: Resetting bearer <eth:syzkaller0>
[  398.052349][ T8229] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  398.070970][T13049] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  398.077765][T27851] tipc: Resetting bearer <eth:syzkaller0>
[  398.091303][T27851] tipc: Disabling bearer <eth:syzkaller0>
[  398.278951][T27866] nbd: nbd0 already in use
[  398.424042][T27796] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  398.456166][T27890] IPv6: sit1: Disabled Multicast RS
[  398.516625][T13049] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  398.531730][T13049] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  398.563438][T13049] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  398.576833][ T8229] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  398.795595][T27918] netlink: 'syz.2.9471': attribute type 10 has an invalid length.
[  398.795840][T27919] netlink: 'syz.2.9471': attribute type 10 has an invalid length.
[  398.806236][T27919] 8021q: adding VLAN 0 to HW filter on device 
[  398.810556][T27919] team0: Port device  added
[  398.868272][T27923] syzkaller1: tun_chr_ioctl cmd 1074025680
[  398.870704][T27923] syzkaller1: tun_chr_ioctl cmd 1074025673
[  398.875212][T27923] syzkaller1: tun_chr_ioctl cmd 1074025680
[  398.878004][T27925] syzkaller1: tun_chr_ioctl cmd 1074025673
[  399.186202][T27938] vti0: entered promiscuous mode
[  399.206191][T27940] ip6tnl6: entered promiscuous mode
[  399.207957][T27940] ip6tnl6: entered allmulticast mode
[  399.219645][T27942] netlink: 'syz.1.9477': attribute type 1 has an invalid length.
[  399.249264][T27942] 8021q: adding VLAN 0 to HW filter on device bond8
[  399.432124][T27949] netlink: 'syz.1.9480': attribute type 33 has an invalid length.
[  399.571886][T27954] pim6reg1: entered promiscuous mode
[  399.574600][T27954] pim6reg1: entered allmulticast mode
[  399.714653][T27955] 8021q: adding VLAN 0 to HW filter on device bond9
[  399.718469][T27955] bond9: entered promiscuous mode
[  399.720605][T27955] bond9: entered allmulticast mode
[  399.723528][T27955] team0: Port device bond9 added
[  399.920915][T27967] netlink: 'syz.1.9486': attribute type 13 has an invalid length.
[  399.996859][T13049] syzkaller0: tun_net_xmit 76
[  399.998837][T13049] syzkaller0: tun_net_xmit 48
[  400.235549][T27981] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  400.239036][T27981] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  401.063021][T27987] __nla_validate_parse: 24 callbacks suppressed
[  401.063034][T27987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9490'.
[  401.991999][T28006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9496'.
[  402.008359][T28006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  402.014390][T28006] syzkaller0: entered promiscuous mode
[  402.016573][T28006] syzkaller0: entered allmulticast mode
[  402.042075][T28006] tipc: Resetting bearer <eth:syzkaller0>
[  402.054052][T28005] tipc: Resetting bearer <eth:syzkaller0>
[  402.067642][T28005] tipc: Disabling bearer <eth:syzkaller0>
[  402.075676][T28008] rdma_rxe: rxe_newlink: failed to add lo
[  402.905646][T28051] ip6tnl7: entered promiscuous mode
[  402.909244][T28051] ip6tnl7: entered allmulticast mode
[  402.913229][T28051] team0: Device ip6tnl7 is of different type
[  403.025990][T28057] sctp: [Deprecated]: syz.0.9508 (pid 28057) Use of int in max_burst socket option.
[  403.025990][T28057] Use struct sctp_assoc_value instead
[  403.026265][T28054] syzkaller1: entered promiscuous mode
[  403.037297][T28054] syzkaller1: entered allmulticast mode
[  403.061372][T28059] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  403.075133][T28063] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9510'.
[  403.092328][T28063] ip6gre2: entered allmulticast mode
[  403.232385][T28073] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9513'.
[  403.334036][T28088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9516'.
[  403.367643][T28088] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  403.371664][T28088] syzkaller0: entered promiscuous mode
[  403.374620][T28088] syzkaller0: entered allmulticast mode
[  403.396739][T28088] tipc: Resetting bearer <eth:syzkaller0>
[  403.402811][T28087] tipc: Resetting bearer <eth:syzkaller0>
[  403.416170][T28087] tipc: Disabling bearer <eth:syzkaller0>
[  403.430313][T28090] dvmrp1: left allmulticast mode
[  403.527396][ T6889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.531305][ T6889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.014608][T28100] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9521'.
[  404.017889][T28100] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9521'.
[  404.632206][T28111] netlink: 'syz.0.9523': attribute type 1 has an invalid length.
[  404.635077][T28111] netlink: 236 bytes leftover after parsing attributes in process `syz.0.9523'.
[  404.743145][T28122] netlink: 'syz.2.9525': attribute type 23 has an invalid length.
[  404.791215][T28121] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9525'.
[  404.867331][T28127] netlink: 'syz.2.9526': attribute type 9 has an invalid length.
[  405.025353][T28141] tipc: Enabling of bearer <ib:dvmrp0> rejected, failed to enable media
[  405.072960][   T25] block nbd3: Possible stuck request ffff8880229e8000: control (read@0,1024B). Runtime 150 seconds
[  405.076737][   T25] block nbd3: Possible stuck request ffff8880229e8200: control (read@1024,1024B). Runtime 150 seconds
[  405.080895][   T25] block nbd3: Possible stuck request ffff8880229e8400: control (read@2048,1024B). Runtime 150 seconds
[  405.085019][   T25] block nbd3: Possible stuck request ffff8880229e8600: control (read@3072,1024B). Runtime 150 seconds
[  405.206584][T28144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9530'.
[  405.216928][T28144] vxcan1: entered allmulticast mode
[  405.302136][T28148] netlink: 'syz.1.9531': attribute type 1 has an invalid length.
[  405.334035][T28148] 8021q: adding VLAN 0 to HW filter on device bond11
[  405.338666][T28148] bond10: (slave bond11): making interface the new active one
[  405.343292][T28148] bond10: (slave bond11): Enslaving as an active interface with an up link
[  405.897674][T28176] syzkaller0: entered promiscuous mode
[  405.900152][T28176] syzkaller0: entered allmulticast mode
[  406.097135][T28180] sctp: [Deprecated]: syz.0.9540 (pid 28180) Use of int in max_burst socket option.
[  406.097135][T28180] Use struct sctp_assoc_value instead
[  406.187873][T28185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9541'.
[  407.338805][T28194] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  407.364657][T28200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9547'.
[  407.367555][T28200] netlink: 'syz.2.9547': attribute type 7 has an invalid length.
[  407.370218][T28200] netlink: 'syz.2.9547': attribute type 8 has an invalid length.
[  407.375535][T28200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9547'.
[  407.388777][T28194] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  407.394127][T28196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9544'.
[  407.406572][T28206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9549'.
[  407.409638][T28206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9549'.
[  407.414914][T28206] netlink: 'syz.2.9549': attribute type 5 has an invalid length.
[  407.417643][T28206] netlink: 'syz.2.9549': attribute type 6 has an invalid length.
[  407.440159][T28194] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  407.455710][T28209] netlink: 'syz.1.9550': attribute type 5 has an invalid length.
[  407.483236][T28210] IPv6: sit2: Disabled Multicast RS
[  407.493723][T28194] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  407.558583][T13049] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  407.579086][T15900] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  407.596152][T13049] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  407.612788][T13049] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  407.699081][T28225] netlink: 172 bytes leftover after parsing attributes in process `syz.1.9557'.
[  407.703032][T28225] netlink: 172 bytes leftover after parsing attributes in process `syz.1.9557'.
[  407.703054][T28224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9557'.
[  407.710593][T28225] netlink: 172 bytes leftover after parsing attributes in process `syz.1.9557'.
[  407.724754][T28224] IPv6: sit1: Disabled Multicast RS
[  407.733841][T28224] sit1: entered allmulticast mode
[  407.817177][T28233] netlink: 'syz.2.9561': attribute type 21 has an invalid length.
[  407.872820][T28233] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  407.876485][T28233] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  408.735324][T28266] lo speed is unknown, defaulting to 1000
[  408.738124][T28266] lo speed is unknown, defaulting to 1000
[  408.740887][T28266] wg1 speed is unknown, defaulting to 1000
[  408.876595][T28278] hsr_slave_0: left promiscuous mode
[  408.879280][T28278] hsr_slave_1: left promiscuous mode
[  409.018669][T28292] bridge0: entered allmulticast mode
[  409.298493][T28315] ipvlan5: entered promiscuous mode
[  409.665754][T28350] validate_nla: 2 callbacks suppressed
[  409.665765][T28350] netlink: 'syz.2.9595': attribute type 1 has an invalid length.
[  409.670671][T28350] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  409.735079][T28358] netlink: 'syz.2.9597': attribute type 1 has an invalid length.
[  409.773258][T28358] 8021q: adding VLAN 0 to HW filter on device bond4
[  409.791118][T28364] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  409.835951][T28364] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  409.866548][T28367] geneve3: left promiscuous mode
[  409.870491][T28367] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  409.876872][T28364] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  409.915690][T28364] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  409.966048][ T8229] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  409.974605][ T8229] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  409.984131][ T8229] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  410.000419][ T8229] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  410.333024][ T5830] Bluetooth: hci2: command 0x0406 tx timeout
[  410.526085][T28412] netlink: 'syz.2.9617': attribute type 1 has an invalid length.
[  410.587379][T28423] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  410.590789][T28423] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  410.596889][T28423] tipc: Resetting bearer <eth:syzkaller0>
[  410.636943][T28425] netlink: 'syz.1.9622': attribute type 5 has an invalid length.
[  410.682265][T28429] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  410.911354][T28452] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  411.058803][T28468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  411.178129][T28487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  411.190252][T28487] vlan0: entered promiscuous mode
[  411.453611][ T3034] tipc: Resetting bearer <eth:syzkaller0>
[  411.778993][T28523] __nla_validate_parse: 81 callbacks suppressed
[  411.779007][T28523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9657'.
[  411.867140][T28531] netlink: 'syz.2.9660': attribute type 1 has an invalid length.
[  411.901312][T28531] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  411.907012][T28531] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  412.137721][T28550] tipc: Resetting bearer <eth:syzkaller0>
[  412.175101][T28550] batman_adv: batadv0: Interface deactivated: ip6gretap4
[  412.186188][T28553] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9667'.
[  412.189567][T28553] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9667'.
[  412.197142][T28553] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9667'.
[  412.197471][ T8229] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  412.211794][ T8229] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  412.219200][ T8229] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  412.227347][ T8229] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  412.374950][T28570] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9672'.
[  412.378631][T28570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9672'.
[  412.382246][T28570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9672'.
[  412.494137][T28582] netlink: 'syz.0.9675': attribute type 10 has an invalid length.
[  412.512195][T28582] tipc: Disabling bearer <eth:syzkaller0>
[  412.545777][T28591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9675'.
[  412.555102][T28591] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9675'.
[  412.558004][T28591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9675'.
[  412.723497][T28604] netlink: 'syz.0.9683': attribute type 9 has an invalid length.
[  412.791704][T28610] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  412.798625][T28610] CPU: 0 UID: 0 PID: 28610 Comm: syz.0.9683 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  412.798637][T28610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  412.798643][T28610] Call Trace:
[  412.798647][T28610]  <TASK>
[  412.798652][T28610]  dump_stack_lvl+0x189/0x250
[  412.798669][T28610]  ? __pfx_dump_stack_lvl+0x10/0x10
[  412.798679][T28610]  ? __pfx__printk+0x10/0x10
[  412.798717][T28610]  ? kernfs_path_from_node+0x2c/0x260
[  412.798728][T28610]  ? kernfs_path_from_node+0x2c/0x260
[  412.798739][T28610]  ? kernfs_path_from_node+0x2c/0x260
[  412.798749][T28610]  ? kernfs_path_from_node+0x22c/0x260
[  412.798758][T28610]  ? kernfs_path_from_node+0x2c/0x260
[  412.798768][T28610]  sysfs_warn_dup+0x8e/0xa0
[  412.798778][T28610]  sysfs_do_create_link_sd+0xc0/0x110
[  412.798788][T28610]  device_add_class_symlinks+0x1cf/0x240
[  412.798801][T28610]  device_add+0x475/0xb50
[  412.798812][T28610]  wiphy_register+0x1ba6/0x28d0
[  412.798834][T28610]  ? __pfx_wiphy_register+0x10/0x10
[  412.798844][T28610]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  412.798857][T28610]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  412.798867][T28610]  ieee80211_register_hw+0x3425/0x4080
[  412.798884][T28610]  ? ieee80211_register_hw+0x1471/0x4080
[  412.798898][T28610]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  412.798908][T28610]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  412.798924][T28610]  ? __hrtimer_setup+0x187/0x210
[  412.798935][T28610]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  412.798950][T28610]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  412.798972][T28610]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  412.798981][T28610]  ? trace_kmalloc+0x1f/0xd0
[  412.798991][T28610]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  412.799001][T28610]  ? kstrndup+0xbf/0x160
[  412.799014][T28610]  hwsim_new_radio_nl+0xea4/0x1b10
[  412.799025][T28610]  ? __pfx___nla_validate_parse+0x10/0x10
[  412.799041][T28610]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  412.799059][T28610]  ? __nla_parse+0x40/0x60
[  412.799070][T28610]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  412.799083][T28610]  genl_family_rcv_msg_doit+0x215/0x300
[  412.799095][T28610]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  412.799109][T28610]  ? bpf_lsm_capable+0x9/0x20
[  412.799119][T28610]  ? security_capable+0x7e/0x2e0
[  412.799132][T28610]  genl_rcv_msg+0x60e/0x790
[  412.799143][T28610]  ? __pfx_genl_rcv_msg+0x10/0x10
[  412.799150][T28610]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  412.799166][T28610]  netlink_rcv_skb+0x208/0x470
[  412.799177][T28610]  ? __lock_acquire+0xab9/0xd20
[  412.799188][T28610]  ? __pfx_genl_rcv_msg+0x10/0x10
[  412.799197][T28610]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  412.799232][T28610]  ? down_read+0x1ad/0x2e0
[  412.799242][T28610]  genl_rcv+0x28/0x40
[  412.799249][T28610]  netlink_unicast+0x82f/0x9e0
[  412.799263][T28610]  ? __pfx_netlink_unicast+0x10/0x10
[  412.799275][T28610]  ? netlink_sendmsg+0x642/0xb30
[  412.799285][T28610]  ? skb_put+0x11b/0x210
[  412.799296][T28610]  netlink_sendmsg+0x805/0xb30
[  412.799312][T28610]  ? __pfx_netlink_sendmsg+0x10/0x10
[  412.799326][T28610]  ? aa_sock_msg_perm+0x94/0x160
[  412.799338][T28610]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  412.799348][T28610]  ? __pfx_netlink_sendmsg+0x10/0x10
[  412.799361][T28610]  __sock_sendmsg+0x21c/0x270
[  412.799375][T28610]  ____sys_sendmsg+0x505/0x830
[  412.799385][T28610]  ? __pfx_____sys_sendmsg+0x10/0x10
[  412.799397][T28610]  ? import_iovec+0x74/0xa0
[  412.799409][T28610]  ___sys_sendmsg+0x21f/0x2a0
[  412.799418][T28610]  ? __pfx____sys_sendmsg+0x10/0x10
[  412.799447][T28610]  ? __fget_files+0x2a/0x420
[  412.799455][T28610]  ? __fget_files+0x3a0/0x420
[  412.799467][T28610]  __x64_sys_sendmsg+0x19b/0x260
[  412.799477][T28610]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  412.799495][T28610]  ? do_syscall_64+0xbe/0x3b0
[  412.799508][T28610]  do_syscall_64+0xfa/0x3b0
[  412.799521][T28610]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.799529][T28610]  ? asm_sysvec_call_function_single+0x1a/0x20
[  412.799541][T28610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.799550][T28610] RIP: 0033:0x7fc1bf78ebe9
[  412.799559][T28610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  412.799566][T28610] RSP: 002b:00007fc1bd9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  412.799576][T28610] RAX: ffffffffffffffda RBX: 00007fc1bf9b6090 RCX: 00007fc1bf78ebe9
[  412.799581][T28610] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  412.799586][T28610] RBP: 00007fc1bf811e19 R08: 0000000000000000 R09: 0000000000000000
[  412.799591][T28610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  412.799595][T28610] R13: 00007fc1bf9b6128 R14: 00007fc1bf9b6090 R15: 00007ffeae257ba8
[  412.799608][T28610]  </TASK>
[  413.221904][T28636] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  413.255532][T28632] lo speed is unknown, defaulting to 1000
[  413.258183][T28632] lo speed is unknown, defaulting to 1000
[  413.260930][T28632] wg1 speed is unknown, defaulting to 1000
[  413.395447][T28647] netlink: 'syz.0.9695': attribute type 1 has an invalid length.
[  413.450883][T28647] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  413.457373][T28647] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  413.519406][T28663] netlink: 'syz.2.9701': attribute type 12 has an invalid length.
[  413.571347][T28665] netlink: 'syz.1.9702': attribute type 6 has an invalid length.
[  413.578325][T28663] bridge0: failed insert local address into bridge forwarding table
[  413.603376][T28663] bridge0 (unregistering): left allmulticast mode
[  413.917179][T28698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  413.924877][T28698] tipc: Resetting bearer <eth:syzkaller0>
[  413.932065][T28697] tipc: Disabling bearer <eth:syzkaller0>
[  414.067838][T28707] !: left allmulticast mode
[  414.072158][T28707] !: left promiscuous mode
[  414.075150][T28707] bridge0: port 4(0!) entered disabled state
[  414.078872][T28707] team0: left allmulticast mode
[  414.080801][T28707] team_slave_0: left allmulticast mode
[  414.083539][T28707] team_slave_1: left allmulticast mode
[  414.088137][T28707] bond9: left allmulticast mode
[  414.091016][T28707] bridge0: port 3(team0) entered disabled state
[  414.096204][T28707] bridge_slave_1: left allmulticast mode
[  414.098824][T28707] bridge_slave_1: left promiscuous mode
[  414.101433][T28707] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.106595][T28707] bridge_slave_0: left allmulticast mode
[  414.108459][T28707] bridge_slave_0: left promiscuous mode
[  414.110911][T28707] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.359222][T28713] batadv0: left promiscuous mode
[  414.363661][T28713] macvlan0: left promiscuous mode
[  414.371851][T28713] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  414.375787][T28713] vlan4: left promiscuous mode
[  414.383579][T28713] bridge4: left promiscuous mode
[  414.396925][T28713] gretap3: left promiscuous mode
[  414.404016][T28713] bridge7: left promiscuous mode
[  414.425426][T28713] ip6tnl6: left promiscuous mode
[  414.537586][T28725] syzkaller1: entered promiscuous mode
[  414.540058][T28725] syzkaller1: entered allmulticast mode
[  414.545113][T28725] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  414.939062][T28729] netlink: ct family unspecified
[  414.941085][T28729] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  415.015021][T28734] veth19: entered promiscuous mode
[  415.152053][ T2399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.155484][ T2399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.230732][T28751] bpq0: left promiscuous mode
[  416.984263][T28812] nbd: illegal input index -1
[  417.365759][T28833] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  417.936310][T28845] batadv_slave_1: entered promiscuous mode
[  418.015935][T28845] batadv_slave_1: left promiscuous mode
[  418.058454][T28856] netlink: 'syz.2.9766': attribute type 7 has an invalid length.
[  418.065842][T28858] netlink: 'syz.0.9767': attribute type 10 has an invalid length.
[  418.065986][T28856] : entered promiscuous mode
[  418.072145][T28858] netlink: 'syz.0.9767': attribute type 10 has an invalid length.
[  418.075738][T28853] lo speed is unknown, defaulting to 1000
[  418.078255][T28853] lo speed is unknown, defaulting to 1000
[  418.079757][T28858] __nla_validate_parse: 18 callbacks suppressed
[  418.079767][T28858] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9767'.
[  418.080996][T28853] wg1 speed is unknown, defaulting to 1000
[  418.082340][T28858] team0: entered promiscuous mode
[  418.102162][T28859] netlink: 'syz.1.9765': attribute type 13 has an invalid length.
[  418.122596][T28859] netlink: 'syz.1.9765': attribute type 17 has an invalid length.
[  418.204390][T28859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  418.438005][T28891] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  418.465965][T28891] tipc: Disabling bearer <eth:syzkaller0>
[  418.483772][   T34] INFO: task udevd:5820 blocked for more than 143 seconds.
[  418.486896][   T34]       Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0
[  418.490670][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  418.497315][   T34] task:udevd           state:D stack:19896 pid:5820  tgid:5820  ppid:5271   task_flags:0x400140 flags:0x00004006
[  418.508316][   T34] Call Trace:
[  418.511046][   T34]  <TASK>
[  418.513037][   T34]  __schedule+0x1737/0x4d30
[  418.523212][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  418.525121][   T34]  ? schedule+0x165/0x360
[  418.526686][   T34]  ? __pfx___schedule+0x10/0x10
[  418.528362][   T34]  ? schedule+0x91/0x360
[  418.533881][   T34]  schedule+0x165/0x360
[  418.535731][   T34]  io_schedule+0x80/0xd0
[  418.537538][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  418.539596][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  418.541940][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  418.544764][   T34]  ? __filemap_get_folio+0x6e0/0xaf0
[  418.546948][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  418.549145][   T34]  do_read_cache_folio+0x1aa/0x590
[  418.551304][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  418.555023][   T34]  read_part_sector+0xb6/0x2b0
[  418.556593][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  418.558405][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  418.560279][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  418.562372][   T34]  bdev_disk_changed+0x75f/0x14b0
[  418.564219][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  418.566251][   T34]  ? wait_on_inode+0xc0/0x230
[  418.567828][   T34]  blkdev_get_whole+0x380/0x510
[  418.569453][   T34]  bdev_open+0x31e/0xd30
[  418.570870][   T34]  blkdev_open+0x3a8/0x510
[  418.572330][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  418.574515][   T34]  do_dentry_open+0xdf3/0x1970
[  418.576100][   T34]  vfs_open+0x3b/0x340
[  418.577432][   T34]  ? path_openat+0x2ecd/0x3830
[  418.579028][   T34]  path_openat+0x2ee5/0x3830
[  418.580673][   T34]  ? arch_stack_walk+0xfc/0x150
[  418.582899][   T34]  ? __pfx_path_openat+0x10/0x10
[  418.584850][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.587471][   T34]  do_filp_open+0x1fa/0x410
[  418.589416][   T34]  ? __lock_acquire+0xab9/0xd20
[  418.591490][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  418.593565][   T34]  ? _raw_spin_unlock+0x28/0x50
[  418.595317][   T34]  ? alloc_fd+0x64c/0x6c0
[  418.597186][   T34]  do_sys_openat2+0x121/0x1c0
[  418.599201][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  418.601529][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  418.603838][   T34]  ? rcu_is_watching+0x15/0xb0
[  418.605832][   T34]  __x64_sys_openat+0x138/0x170
[  418.607856][   T34]  do_syscall_64+0xfa/0x3b0
[  418.609754][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.612279][   T34]  ? asm_sysvec_call_function_single+0x1a/0x20
[  418.615329][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.617789][   T34] RIP: 0033:0x7f8221d169a4
[  418.619686][   T34] RSP: 002b:00007ffc37126560 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  418.623297][   T34] RAX: ffffffffffffffda RBX: 0000564b7c4b6f40 RCX: 00007f8221d169a4
[  418.626499][   T34] RDX: 00000000000a0800 RSI: 0000564b7c4af1e0 RDI: 00000000ffffff9c
[  418.629796][   T34] RBP: 0000564b7c4af1e0 R08: 0000000000000001 R09: 7fffffffffffffff
[  418.633448][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  418.636812][   T34] R13: 0000564b7c4a8a50 R14: 0000000000000001 R15: 0000564b7c497910
[  418.640114][   T34]  </TASK>
[  418.641533][   T34] 
[  418.641533][   T34] Showing all locks held in the system:
[  418.652696][   T34] 1 lock held by khungtaskd/34:
[  418.654763][   T34]  #0: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  418.658939][   T34] 2 locks held by getty/5647:
[  418.660878][   T34]  #0: ffff8880287c80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  418.667151][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  418.671433][   T34] 1 lock held by udevd/5820:
[  418.673832][   T34]  #0: ffff88802284a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  418.677704][   T34] 1 lock held by udevd/6571:
[  418.679676][   T34]  #0: ffff888022912358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  418.683728][   T34] 1 lock held by udevd/7748:
[  418.685625][   T34]  #0: ffff888022916358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  418.689396][   T34] 3 locks held by kworker/u8:4/8229:
[  418.691574][   T34]  #0: ffff88801b2f6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  418.696354][   T34]  #1: ffffc90009747bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  418.700813][   T34]  #2: ffffffff8e141e00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  418.705312][   T34] 
[  418.706366][   T34] =============================================
[  418.706366][   T34] 
[  418.709722][   T34] NMI backtrace for cpu 0
[  418.709736][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  418.709750][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  418.709758][   T34] Call Trace:
[  418.709767][   T34]  <TASK>
[  418.709774][   T34]  dump_stack_lvl+0x189/0x250
[  418.709794][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  418.709806][   T34]  ? __pfx__printk+0x10/0x10
[  418.709830][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  418.709849][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  418.709864][   T34]  ? __pfx__printk+0x10/0x10
[  418.709880][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  418.709900][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  418.709915][   T34]  watchdog+0xf93/0xfe0
[  418.709936][   T34]  ? watchdog+0x1de/0xfe0
[  418.709956][   T34]  kthread+0x711/0x8a0
[  418.709974][   T34]  ? __pfx_watchdog+0x10/0x10
[  418.709989][   T34]  ? __pfx_kthread+0x10/0x10
[  418.710003][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  418.710020][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  418.710035][   T34]  ? __pfx_kthread+0x10/0x10
[  418.710049][   T34]  ret_from_fork+0x3fc/0x770
[  418.710070][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  418.710091][   T34]  ? __switch_to_asm+0x39/0x70
[  418.710104][   T34]  ? __switch_to_asm+0x33/0x70
[  418.710116][   T34]  ? __pfx_kthread+0x10/0x10
[  418.710130][   T34]  ret_from_fork_asm+0x1a/0x30
[  418.710154][   T34]  </TASK>
[  418.710159][   T34] Sending NMI from CPU 0 to CPUs 1:
[  418.768942][    C1] NMI backtrace for cpu 1
[  418.768956][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  418.768969][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  418.768976][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  418.768996][    C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 5f 18 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  418.769005][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  418.769015][    C1] RAX: 041244e2b274d400 RBX: ffffffff81969b18 RCX: 041244e2b274d400
[  418.769023][    C1] RDX: 0000000000000001 RSI: ffffffff8d9792aa RDI: ffffffff8be30a00
[  418.769031][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  418.769038][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa07bf0
[  418.769046][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001e000
[  418.769052][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c80000(0000) knlGS:0000000000000000
[  418.769061][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  418.769067][    C1] CR2: 000055557b7395c8 CR3: 000000010dff8000 CR4: 00000000000006f0
[  418.769098][    C1] Call Trace:
[  418.769104][    C1]  <TASK>
[  418.769108][    C1]  default_idle+0x13/0x20
[  418.769119][    C1]  default_idle_call+0x74/0xb0
[  418.769130][    C1]  do_idle+0x1e8/0x510
[  418.769147][    C1]  ? __pfx_do_idle+0x10/0x10
[  418.769167][    C1]  cpu_startup_entry+0x44/0x60
[  418.769180][    C1]  start_secondary+0x101/0x110
[  418.769193][    C1]  common_startup_64+0x13e/0x147
[  418.769211][    C1]  </TASK>
[  418.770273][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  418.834811][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  418.838627][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  418.842425][   T34] Call Trace:
[  418.843540][   T34]  <TASK>
[  418.844531][   T34]  dump_stack_lvl+0x99/0x250
[  418.846076][   T34]  ? __asan_memcpy+0x40/0x70
[  418.847719][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  418.849931][   T34]  ? __pfx__printk+0x10/0x10
[  418.851475][   T34]  panic+0x2db/0x790
[  418.852823][   T34]  ? __pfx_panic+0x10/0x10
[  418.854300][   T34]  ? __pfx___x2apic_send_IPI_mask+0x10/0x10
[  418.856628][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  418.858970][   T34]  watchdog+0xfd2/0xfe0
[  418.860377][   T34]  ? watchdog+0x1de/0xfe0
[  418.861827][   T34]  kthread+0x711/0x8a0
[  418.863176][   T34]  ? __pfx_watchdog+0x10/0x10
[  418.865041][   T34]  ? __pfx_kthread+0x10/0x10
[  418.866829][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  418.868568][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  418.870315][   T34]  ? __pfx_kthread+0x10/0x10
[  418.871852][   T34]  ret_from_fork+0x3fc/0x770
[  418.873393][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  418.875106][   T34]  ? __switch_to_asm+0x39/0x70
[  418.876720][   T34]  ? __switch_to_asm+0x33/0x70
[  418.878536][   T34]  ? __pfx_kthread+0x10/0x10
[  418.880521][   T34]  ret_from_fork_asm+0x1a/0x30
[  418.882121][   T34]  </TASK>
[  418.883886][   T34] Kernel Offset: disabled
[  418.885311][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:11:01  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888021730237 R9 =1ffff110042e6046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95936 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa9bd4e5440 CR3=00000000398dc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0a3020646165725f 6b72616d20302073
XMM06=65746174735f6b61 6570203020736574 XMM07=6174735f6c61746f 742030206e736e69
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007f7108e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000001 RCX=987d8fdbdd5d4500 RDX=0000000000000000
RSI=ffff88801f25e158 RDI=ffff88801f25d640 RBP=0000000000000000 RSP=ffffc900033d71f0
R8 =0000000000000000 R9 =ffffffff8172cd05 R10=ffffc900033d7558 R11=ffffffff81ac3450
R12=00000000ebe9cac3 R13=ffff88801f25e130 R14=ffff88801f25e158 R15=1090781739e8cf4c
RIP=ffffffff819db974 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fcc6dd8d380 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055f4812377e8 CR3=000000010dff8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000003bf12
XMM02=00005555836c704e 00005555836c7030 XMM03=00005555836c8424 00005555836c8420
XMM04=0000000000000000 0000000000000000 XMM05=00005555836dc2b1 00005555836da8d0
XMM06=0000000000000000 0000000000000000 XMM07=0300100002c00302 100002b003781000
XMM08=1b90030292020022 f00312040022ec03 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
