last executing test programs:

1.050496839s ago: executing program 1 (id=8552):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x905, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000012c0), r1)
sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x100)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'geneve1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "9e10ca1c4bcb8d812a86f1aef52eba19719c78cfd7222b2639b90f7dc70f33eb", "9d51b95305302c62a6ebc6ceb3e740422abd24b41495e53e3b1cb422546c9a92", "5d766a42e23ee91a725598ba37e50e2670e5fd9cadaeccbd745b4a7c97d40b8f", "6a23d7463882fd0380ae3da81fc699f43ab8831af454930135ade949498e962c", "1519fc8065d640d2a08689c86d56f35fef67a66df1abfc781c3cf937784bcb5f", "d1e70cd786c3ea83209fec3b", 0x9, 0x6, 0x4, 0x2708}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f00000013c0)=""/4096, &(0x7f0000000200)=0x1000)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x7c}}, 0x0)
sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00040}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x20040090)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x905, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000012c0), r1) (async)
sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x100) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'geneve1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "9e10ca1c4bcb8d812a86f1aef52eba19719c78cfd7222b2639b90f7dc70f33eb", "9d51b95305302c62a6ebc6ceb3e740422abd24b41495e53e3b1cb422546c9a92", "5d766a42e23ee91a725598ba37e50e2670e5fd9cadaeccbd745b4a7c97d40b8f", "6a23d7463882fd0380ae3da81fc699f43ab8831af454930135ade949498e962c", "1519fc8065d640d2a08689c86d56f35fef67a66df1abfc781c3cf937784bcb5f", "d1e70cd786c3ea83209fec3b", 0x9, 0x6, 0x4, 0x2708}}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f00000013c0)=""/4096, &(0x7f0000000200)=0x1000) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x7c}}, 0x0) (async)
sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00040}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x20040090) (async)

999.705069ms ago: executing program 1 (id=8554):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00', <r1=>0x0}) (async)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@newtclass={0x24, 0x28, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {0xf, 0x4}, {0x2, 0x7}}}, 0x24}}, 0x400c0)
getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000020000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff020000000000"], 0x48}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000100008000000ffff000000fbff000000", @ANYRES32=r4, @ANYBLOB="0025000000000000300012800b000100697036746e6c00002000028014000200fe8800000000000000000000000001010500040001000000"], 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={<r5=>0x0, @loopback, @local}, &(0x7f00000003c0)=0xc) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', <r6=>0x0, 0x29, 0xff, 0x6, 0xffffffff, 0x8, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x20, 0x8, 0xa}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f00000004c0)={'gre0\x00', <r7=>0x0, 0x7800, 0x40, 0x6, 0x9, {{0x20, 0x4, 0x0, 0x22, 0x80, 0x64, 0x0, 0x78, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x14}, {[@cipso={0x86, 0x6a, 0x3, [{0x6, 0xb, "ad8d5cca60b1d4adb0"}, {0x5, 0xf, "1c7b0cfdb868ba0defa673ef70"}, {0x7, 0xe, "ece2e33fe8c8ff33eab620ce"}, {0x5, 0x6, "d080d325"}, {0x6, 0xc, "6da3e175cb5c720d3cda"}, {0x2, 0x10, "457c8f9aa8292830665623ceb3ed"}, {0x0, 0xc, "77d4153c037c2ae4f259"}, {0x1, 0xe, "1464498fed2805561b2006da"}]}]}}}}})
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x2e4, 0x30, 0x100, 0x70bd27, 0x25dfdbff, {}, [{0x2d0, 0x1, [@m_xt={0xfffffffffffffe8e, 0xa, 0x0, 0x0, {{0x7}, {0x150, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x103, 0x6, {0xfbdb, 'nat\x00', 0x1, 0x7, "686afb437cb90e8dde0beb520258c9a9b19eafb4bce35aadf31bac1e9790e811ea9f65a4be3534148b9cfef860d555a7a12f59f418529a202cf720ad57aeb81bda64ec4eb47791afea2481d7580bab52fcc315825b6f9712644a4659865e478bb970a11225e29710b8265c720daa6567a15cfef8da7afb43bce12e37f77a4f591d419c36d7f192c90632106bd323be7a1ca50579f09b701c1c6cbc2ae05d15323e82b38ad3fa1cfe01f8210f1b93ed1de8f996b3b8f015b21099acb18ef7b1ebc5decfd22bf3a4f90e0dae7d776719801ef7847488c8876880"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x79, 0x6, "9a3f067cb4f92592928a96b6d82862d5a92c0092c9d1bc077f80eed0703bc1fea55680910ce6d02bb635cf7e9659d65c14f98a8a75dda93c8df0ed5cdc04e21627e96a8f1dffda1e4113aac685e72f5d1a250bf0f343ddda04cc4ff3c8d36ee0964c18f6bac4d954f8278e222a21af809ac68141fb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0xdc, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0xad, 0x6, "a9950939ca7cf92f2b20d8c03e8f0acf5389199f8610a980da68e6a715502ad6e8757f6563a671725be2b2a06ff3619d69c4eb124316da97484177aa9aa42de221fd71ca0e64f74ce0cc757cc419857d3f05eace128255dbe24e982d11cb273df49794a194cda09c60997b926e72e3fef77246b0a6f26fdd20d3441f40a21c3bde28e52d5f7784c9fb91bc5258276e67afeee74f7c7c7c2772a82745971470f77ef8a5404512ea5df1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x0, 0xd, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x0, 0x2, {{0x5, 0x1, 0x7, 0xffffb4e2, 0x6}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x6, 0x7ff, 0x10000000, 0x101, 0x4}, 0xf, r4}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x5, 0x7, 0x2, 0x84, 0x5}, 0x6, r5}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x33, 0x9674f95, 0x2, 0x4, 0x6}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x8, 0x7, 0x10000000, 0x0, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0xba03, 0xfffff4fd, 0x4, 0x6, 0xb}, 0x3, r7}}]}, {0x0, 0x6, "0662ff8207284d87b33f9976f29998152491488a5b7c92dbc6b31dd4a1bbe6bc7c2edfd0bc5558e72668a8896de6984f7da75d3bdcde6f7629abddd174095f94530a7d1ce6b54fb92c75aa2b9c84ab57143dd068e9c824553c464a5a7ad8c0fe0ddadcb2935da52f1f6344a42df282713507b280b119dde88ab4de20b52b487c9418e6e9c24da633f721546d03cc47299a1b80c8a20805a7645b4c980579afa2ad570f"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x1, 0x2}}}}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x8090}, 0xc0) (async)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2f, &(0x7f0000000180)={0xe9, {{0xa, 0x4e21, 0xfffffffa, @rand_addr=' \x01\x00', 0x8}}, {{0xa, 0x4e22, 0x372b, @private1, 0x401}}}, 0x108) (async)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22, 0x33, @mcast2, 0x2}, 0x1c) (async)
connect$inet6(r9, &(0x7f00000002c0)={0x2, 0xffff, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r10 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, 0x0, 0x0) (async)
setsockopt$inet6_udp_int(r10, 0x11, 0xb, &(0x7f00000000c0)=0x80009, 0x4) (async)
r11 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x80}, {0xb, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x1, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in6=@private1, 0x0, 0x6c}, 0x2, @in6=@private2, 0x3502, 0x0, 0x8, 0x0, 0x9075, 0x2, 0xfffffffe}}, 0xe8) (async)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) (async)
setsockopt$MRT6_INIT(r11, 0x29, 0xc8, &(0x7f00000005c0), 0x4) (async)
poll(&(0x7f0000000300)=[{r9, 0x9128}, {r9, 0x2200}], 0x2, 0x1) (async)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0)
write(r8, &(0x7f00000000c0)="6b6e81ea1531acd8bc13abebc24007326f5c31dfe7da8380a5b57a01c35282596394ad07e3a95d8c9ef809aa9386dfe3a80aaf9d8fd95387889f60130f37cb52e8068d8b8cae57c7016ba6314690fa55f0255fc296081f7fd65c24ab720386cd1d5464fc4d9c", 0x66) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000140)={0x7, 'batadv_slave_0\x00', {0x3}, 0x2000}) (async)
pipe(&(0x7f0000000000))

940.820664ms ago: executing program 1 (id=8555):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x1f0, 0x12, 0x60d, 0x0, 0x202, 0x1f0, 0x2e8, 0x2e8, 0x2f8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x800, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0x0, 0xff, 0x15544f338ecf0204, 0xffffffff], 0x4e24, 0x4e24, 0x4e23, 0x4e23, 0x6, 0xe, 0x1, 0x80, 0x1}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x0, 0x1ff, 0x0, 0xfffffffb, 0x400, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000000)

939.994154ms ago: executing program 1 (id=8557):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @loopback, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x80, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='i2c_reply\x00', r1, 0x0, 0x2}, 0x18)
epoll_create(0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0)

760.542648ms ago: executing program 0 (id=8564):
r0 = socket(0x10, 0x803, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000003fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000006000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00:\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r2}, 0x0, &(0x7f0000001040)}, 0x20)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r3, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5bc}, 0x8)
bind$inet(r0, 0x0, 0x0)

421.074489ms ago: executing program 2 (id=8571):
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000000)="6e397ace314c9c0a24eb8a94e54f34313e5377b6524c313c79965cba588d03e4fd54976b6eb39eea7ce070770ce0cc31207f184f", 0x34)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0xc8, 0x8, 0x1c0, 0x5803, 0x1c0, 0x2e8, 0x2e8, 0x340, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x33, 0x0, 0x6}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2, {0xfffffffffffffffe}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x98, 0x5df5, 0x800}}}, {{@ipv6={@mcast2, @private0, [0x0, 0x0, 0xff], [], 'batadv_slave_1\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x1ff, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5], 0xff}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x6, 0x1, 0x9, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000002010400000000000000000a00000004000180040003803c0002800c00028005000100000000002c000180"], 0x58}}, 0x0)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newspdinfo={0x1c, 0x24, 0x1, 0x1, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x8004)
sendmmsg(r2, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x844)

420.650102ms ago: executing program 2 (id=8572):
r0 = socket(0x10, 0x400000000080803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x48, 0xfffffffe, 0xc11, 0x7, 0x20000, 0x0, 0xf}})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4008001}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r1, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x101}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@initdev, @initdev, <r5=>0x0}, &(0x7f00000001c0)=0xc)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="d8000000190000032cbd7000fedbdf250a141001fc04ff09000e00000500140009000000080010000b0000000c0009000e000004", @ANYRES32=r3, @ANYBLOB="08000400f5f151e979576e390c4c0f7dda7a2a16a100e607506f981e5edbbb55acf51b4c9aba73ebdfc2c36b0964122d21f71b7ef652e7765211c8d0afc725d889b159c872ecd7edc1d92ac35b8a35d6305beeeaccd3db5c6afa3c45f53ad1ea8070d013f60b9988", @ANYRES32=r4, @ANYBLOB="08000400", @ANYRES32=r5, @ANYBLOB="8f0008806546b3d709b9bd9df7cabf610ff7587949d32755001f7190d6589268451cebbc1b11b014873a0f8ea61c7935ce0f2c1492fa120054aea804ca6eec435531c1e8eade512554eabe6c0773ab2e2a5354b38b603cf9a7bec82107628692f99de8993d65107b695008728671d83a80b6b5328396819616a84884359b46518d11299a35ee1ff1af57ac025c82f900"], 0xd8}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

420.072191ms ago: executing program 0 (id=8573):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000700)=@req={0x80010000, 0x1, 0x2, 0x7}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0xfffffffc, 0x0, 0x400, 0x0, 0x30}, 0x9c)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000a00)="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", 0x130, 0x4000000, &(0x7f000005ffe4)={0xa, 0x4e24, 0x5233436f, @private1}, 0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000540)={<r3=>0x0, 0x8}, &(0x7f0000000640)=0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xc0, &(0x7f0000000640)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r5}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000680)=@sack_info={r3, 0x9, 0x8}, &(0x7f00000006c0)=0xc)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000007c0)={0x62, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x3}, @generic={0xff, 0x36, "7a49a008cb295f11c77a9898c0be7742f6fe01c54245499771d419f4a186a113ce2b528fde8d25c172c35d2423dbe1a43d539de61699"}, @pad1, @jumbo={0xc2, 0x4, 0xd}]}, 0x50)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000780), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="04a4eb4d37edbfcf1592e116a4afc2", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c39600008500000006000000"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r7, &(0x7f0000000440), 0x10)
listen(r7, 0x6d5)
socket$vsock_stream(0x28, 0x1, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)

371.661009ms ago: executing program 2 (id=8574):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000050000640000002503000000000000080026006c09"], 0x80}}, 0x0)

369.120424ms ago: executing program 2 (id=8575):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2008000000000015000500511b48033d03010000000000950000d300000000bc26080000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socket(0x840000000002, 0x3, 0xfa) (async)
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'hsr0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'hsr0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="0a00c0e3f3b4e24dfe2b2d54"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6096d9b196ad46ed)
sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3, 0x20a, 0x6, {0x0, 0xea60}, {0x0, 0x2710}, {0x3, 0x1, 0x1}, 0x1, @can={{0x4, 0x1}, 0x8, 0x0, 0x0, 0x0, "e98541a75c81fc39"}}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x20044041) (async)
sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3, 0x20a, 0x6, {0x0, 0xea60}, {0x0, 0x2710}, {0x3, 0x1, 0x1}, 0x1, @can={{0x4, 0x1}, 0x8, 0x0, 0x0, 0x0, "e98541a75c81fc39"}}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x20044041)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80}, [@RTA_MARK={0x8, 0x10, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)=ANY=[@ANYBLOB="30000000120009162dbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20a004001000000008001f000200008008001d0061"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24044058)
r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x0, 0x0, 0x1c0, 0xd0, 0x258, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x1, 0x3, 0x0, 0xd}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@addrtype={{0x30}, {0x100, 0x1, 0x0, 0x1}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540)
ioctl$SIOCAX25ADDUID(r6, 0x89e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SIOCAX25GETUID(r6, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async)
ioctl$SIOCAX25GETUID(r6, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6)
write(r8, &(0x7f0000000340)="0a000300010000", 0x7)

282.814644ms ago: executing program 0 (id=8576):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000e0000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57001100860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)

282.242959ms ago: executing program 0 (id=8577):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r1 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(0x4)
sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602200000000e000a000d000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x2400}, 0x0)

282.142466ms ago: executing program 2 (id=8578):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x43, 0x3}, 0x2}}, 0x10) (async, rerun: 32)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) (async, rerun: 32)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) (async)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) (async)
r3 = socket$tipc(0x1e, 0x1, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
accept4$tipc(r0, 0x0, 0x0, 0x0)

189.858044ms ago: executing program 2 (id=8579):
r0 = socket(0x10, 0x803, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000005fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000006000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00:\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r2}, 0x0, &(0x7f0000001040)}, 0x20)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r3, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5bc}, 0x8)
bind$inet(r0, 0x0, 0x0)

78.366722ms ago: executing program 0 (id=8580):
r0 = socket$inet(0x2, 0x6, 0x2)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@loopback, 0x1, 0x0, 0x90, 0x0, [{@private}, {@empty}, {@local}, {@multicast1}, {@dev}, {@multicast2}, {@loopback}, {@multicast1}, {@broadcast}]}}) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x5, [<r2=>0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x18) (rerun: 64)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0xf}, 0x8) (async)
r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0xe)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async)
listen(r0, 0xd)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0x540, 0x470, 0x378, 0x260, 0x470, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f00000002c0), {[{{@ipv6={@remote, @private1, [0xff000000, 0xffffffff, 0xff000000], [0xff000000, 0xffffff00, 0xff000000, 0xff], 'lo\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x62, 0x5, 0x5, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x26}, @ipv6=@loopback, 0x19, 0x2c, 0x52f5}}}, {{@ipv6={@local, @private1, [0x0, 0xffffff00, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffff00], 'bridge0\x00', 'vxcan1\x00', {0xff}, {}, 0x1d, 0x8, 0x4, 0x18}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x7, 0x4d7f, 0x0, 0x0, "c238e394144fd0c72a58eb41bde8bdf93f3080d8b92b7242c3153872a8008bc42958e01549424a128d4b65638f3261e7cf0c31c778437487011047316e142e89"}}}, {{@ipv6={@remote, @mcast2, [0xff000000, 0xff000000, 0x0, 0xff000000], [0xff, 0x0, 0xffff00, 0xff], 'tunl0\x00', 'pim6reg\x00', {}, {}, 0x3b, 0x9, 0x3, 0x20}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"9b26", 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xffffff00, 0xff, 0xffffffff, 0xffffff00], [0x0, 0xff, 0xffffffff, 0xffffffff], 'vxcan1\x00', 'wg0\x00', {}, {0xff}, 0x87, 0x7, 0x7, 0x2}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5b, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000009c0))
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a00)='freezer.state\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) (async)
getsockopt$inet_mreqn(r3, 0x0, 0x3, &(0x7f0000000ac0)={@loopback, @broadcast, <r6=>0x0}, &(0x7f0000000b00)=0xc)
sendmsg$kcm(r5, &(0x7f0000002140)={&(0x7f0000000b40)=@xdp={0x2c, 0x5, r6, 0x39}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000bc0)="99dec4f715a3de84438f755b418d00fd2979236cfd66e9f93decbeb09a3f7756f05ce620d9ca8c3158a61d8d1db7105b0db6449e447364bdcf8dd91e3901eedb1032d3d53523ece4ff5d6d751cb7d61c4f644f4ec7ab2b0c4e59", 0x5a}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="d8981b62d1112b976135b944a5f642ce26d4664d014f56f0dd510fcdd1eeaf6090ee1e58fb50de8e798d5f3e3184d4ee3c10fe8755b51b5f39f8f5958ba22d0b7927ac8de4000177596f7934f96de280677cbe315386c186bfc8b059d1fecd993d7e4a9668d5f0f67373b522c52f4e801ff7", 0x72}, {&(0x7f0000001cc0)="71cb4ab59c964f3de9ed133d844e", 0xe}, {&(0x7f0000001d00)}, {&(0x7f0000001d40)="ef25c995956741d27394cd22884e6a4710df7b30ffd868ceba60067b5ec1c496521b1446753fe4b8727ededa2c75dd4f778fed2cf0241704b7e0f27ed87d423ad53cfe8903810877368ba739fba41d7a9d761e39a7594e9443c4c8ac3660c74352e73524e65c6aa9854ba9a09097c1e7fcc07d97c8cd705766b771e013901239029b7006d9", 0x85}], 0x6, &(0x7f0000001e80)=[{0xd8, 0x116, 0x6, "c082f4673afd73c7541ef8a1c4268972e42bcc985fb76c261057cfc5f64e2239394e1536d01191ba3fcda9baed5fae96321fa5c8290eaf7553a844b916f21b055e115ca40ea20957d5e5bf35c41acbbd819db28f57adc6253ad10c12e966c580c99f4b3d456c674d3935e113735e5ec3b8b3291e802539da13d95b93d6a6b84c0f5a7b87cf18ee71a9eb7c89e7be0c527e3a67d5f56530c8f7e5438a9ff45a12f7744c54983653f7a3433d8f639ae5a3cb5d2c64cdc134c922447a47e9795db9d2c4"}, {0x18, 0x109, 0xffffffff, "d423c4a58de481"}, {0x108, 0x118, 0xffffffff, "9493416b46a77a1926053bf0b14b3d5b150fd1e58b679a4a3532cadb4fd55a208c273487261a598c71291200a6836d8ffbf9017b56add4fde7f13f8436e5f4a9fbec6c49bdd27e0a277e83f06603c28f52c62607d9f8d4d9b042ae11c4d7336bc00217a0c229124664d4dc1a4cab60aa55532bcbe3095759243baf12162a988e6f4d132046cc1e218bb09a8c77c603b14e743979556aefa3ef50404d6c54f34e5ae13498a7d1c7bf14dbd2ec461fed457c3cfbee4cd720c52fac0249af6f66247c07001274afc731ccd53afe13a97dd727c3cd738f1cf506150e8744003034e0b54b40a152101df0235416cdd89e264e682c9f8415fc"}, {0xc8, 0x112, 0xe9cc, "3b36a2167d8f2cfad54a72006cd378faddc58655459ce38a6741396a4c3a27d69c6c5a1922b27505b18bd3e3240d30acbeb2c2928816468d9d1ca2a636554795be1a75813448b882d71e1b1890575715cf087b1f9abf3f6aec278059571f377d6d9169b4ec4055e71360473a4592f9043e46359e760fb0daae0e6ce39fbc8e293eaa5d7552c6ffd69b880ec35b08adca8c6cdd76f050a6e9aeb1ff51c785454a0b10aabc4da93d9ffb038612f3230a43471c"}], 0x2c0}, 0x8000) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0xa, 0x10, &(0x7f0000002180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x1, 0x3, 0x4, 0x3, 0x18}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @ldst={0x3, 0x1, 0x2, 0x4, 0xa, 0xffffffffffffffc0}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}]}, &(0x7f0000002200)='syzkaller\x00', 0x61, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000002240)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000002280)={0x5, 0xd, 0x1cc, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f00000022c0)=[r1], &(0x7f0000002300)=[{0x3, 0x3, 0x0, 0x4}, {0x5, 0x4, 0xe, 0x6}, {0x4, 0x1, 0x10, 0x3}, {0x3, 0x4, 0x6, 0x5}, {0x1, 0x4, 0xd, 0xb}, {0x2, 0x4, 0x3, 0xa}, {0x3, 0x2, 0xe, 0x4}], 0x10, 0x20000000}, 0x94) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002540)={@cgroup=r5, 0x1d, 0x1, 0x8, &(0x7f0000002440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000002480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000024c0)=[0x0, 0x0, 0x0], &(0x7f0000002500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002580)={@cgroup=r5, r5, 0x18, 0x21, r7, @void, @void, @void, @value=0xffffffffffffffff, r8}, 0x20)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f00000025c0)={0x0, 0x1f8, [0xd2f, 0x2, 0x3, 0x67, 0x7fffffff, 0x8]})
write$cgroup_int(r5, &(0x7f0000002600)=0x4, 0x12) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000002780)={'team0\x00', <r9=>0x0}) (rerun: 64)
sendmmsg$inet6(r5, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002640)="a85b00bcc3958df596ae3c2c861d1ea2691e66be983b0a83b6c099cd4b3a7a66d53dfaf0af993ccf3f3986b116825bc9c00436e7867339e040efd31875cc0d313d3e85d1223f872b80d7790907bedfb568ee4b1e398d2a927b902aea8e07a159288b5c776e5448f7f09441685039917e735806f4b36887559324a59b6a96bb50e975259458b70334c0761251038b4c7c8bb8f8a13ce493ca2ef52e2f9ae74ac062a74b19b2ec452936c8c6cd40814b2ce1e277c7a34160201fba6952c38a5d621f07", 0xc2}], 0x1, &(0x7f00000027c0)=[@tclass={{0x14, 0x29, 0x43, 0x7fffffff}}, @dstopts={{0xa8, 0x29, 0x37, {0x62, 0x11, '\x00', [@hao={0xc9, 0x10, @private0}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x10, {0x0, 0x2, 0xf8, 0x9, [0xf]}}, @enc_lim={0x4, 0x1, 0x9}, @generic={0x2, 0x45, "539b921cfe803ead10fad85a64e7e91e4a3b52d5d95734022073cf7355f0c10c8f42320366c8499409295f9710f7ffb4202feeee7ace8bea21905c4b7cb95cc74700b946dd"}, @jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0xc8}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r9}}}, @hoplimit={{0x14, 0x29, 0x34, 0x10000}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}, r6}}}], 0x128}}, {{&(0x7f0000002900)={0xa, 0x4e23, 0x13d000, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x5}, 0x1c, &(0x7f0000002b00)=[{&(0x7f0000002940)="1a75c1034e6dbfc61ad45dd84bf504cb9f4c02c228fddbdd6cee9c2296fd36301c55bf2a8067cda6965f2c46d9ad761dfe0a16e3cd212db59106cd7c498b854f316248bea6d1661112ec3aa61b10c5845510a2ef52b5d1a93ce9ea307d0c5e3b02aa294457e5987f4a5f29529fb18f3dfdfbdb402cb5b6b0cee0635bb3a4b84c9da40fb3d2ae6cf666f8684be5b6a66f54f00467bff46ea485a1bd56d690921d3da828ab965082c4bec713f3414c1302c8040399183efeb78f4f00daf1c5", 0xbe}, {&(0x7f0000002a00)="b27609af0da3a0f90ec51dea8871d02b66523947", 0x14}, {&(0x7f0000002a40)="189889b269caed7eac812629fa4e773ad4ec3a3c39dd1cb0980c1807ab3dc91e0070daf28c2466c0b55c200505863f5d07b21e6c932af0c313626cb1988fd50fffab52d13152eab83427a296e7cd984673283f8597bc928ee8208980a192b8d132e2dbb8fed14eb30191d545d8fb50c89cdbc7302495a4373b778c7f866c9ea6925d191c8892d769c5b530c1aabb089534994c093879bbe963bbdb24174dd062d6f4e4f3fa59ef309f06b9ec6acea4c5a3b2363349b5f9cdffcb6ae9", 0xbc}], 0x3, &(0x7f0000002b40)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x89, 0x6, 0x2, 0x7f, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x42}, @loopback]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x87, 0x10, 0x0, 0x7, 0x0, [@rand_addr=' \x01\x00', @local, @private2, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00', @mcast1, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x2e, 0x8, 0x0, 0x5, 0x0, [@private1, @empty, @private2, @empty]}}}], 0x138}}, {{&(0x7f0000002c80)={0xa, 0x4e20, 0x4d0c, @empty, 0x4}, 0x1c, &(0x7f00000030c0)=[{&(0x7f0000002cc0)="8e6f3f2511d0f110e6d7298b32fe1d311df5acd57850722297d02515177c6ff44e3fb9d44af6bc81b40085f980408a06319aa7fb618de0e495a97953bfadfc7adaec4532b97bf03665128d5e77b6c87858be86987484d0bbe2076eaad83f23e65c8be4f466c2033bbda07177ed3ab5ea", 0x70}, {&(0x7f0000002d40)="8435cc702f80bfce052a30478910ba541bce801c1aed7dc3de0a565cc996ba520015d4cd20ac15fa662ecf6380804df12695ba48764eaea1c98561b2e288ed52e880ae8e40f3669fcda5360e2e4e6e0aae9dfc9f55eb7b787a0b50c30df3d3930dbe6dc5eb29760dce0850ed34fc7321a9ab9a9f1313d2a779d997c2338e5ad894404a7d4c35fef2ea12c12912fba17ffb3fe2816c4a345e", 0x98}, {&(0x7f0000002e00)="9948b737defb3daa5aa37ab1c5a737b325472b6b6ce7aa648bae5b74ecd5ad239577a08c08d8d5bad1ae0dd96745aedd608f0cb8da040314ac4c77c09a3d672119ae136ac1553264cec167b7fd46929e585f5f2657cc0c9cc356539f9afd92f9c8a387ee44b526499ebc3a8fee24787f10fbc2825d61211193a05415640541a2", 0x80}, {&(0x7f0000002e80)="7c59fbae2c9938a380552ca4c0871e74", 0x10}, {&(0x7f0000002ec0)="34af20d65826d1e4caeaab8797ce1d53fd899e3b71a89dd1688b1b9f4d5792188b32e5c289a9606dcc71a0f71b582a9e9011ce0d524531be34e694c88e49ac7ef0ae9cce8653a231084479548da3be7cc8cf4a9c259f5a0d517bf3facfc70ba6bf258a3f33b60684e88c3de9b1b3d8823349e9473e55ecbe438db4786c2070aa03d2fc401d2b7c6c6dc01948e510583f73ca371242d3858093479ab0507c3c035447fe0a42fcd675f8b729f56b67feaec1527458392b7cb5847691a81d5290d3262375b59990422f44afd076540bfbcf1d7ebf5a2778b4b17902ed17e341c28eace2ca52bcbf88", 0xe7}, {&(0x7f0000002fc0)="864196", 0x3}, {&(0x7f0000003000)="ee01f52949cd6923b23e1d97b356af12779f63ff4b31decce36d38e0dcfaea376c056a03dec7d0aa23edd107137cc2831500c55cdce21f8b0c1e75a2ace5dbc8e4fc62658157af8b9d14fbb0b27074f81eac2cbb8a16243b1591b02a83e149c252becf48e481bad1016cc4faa17eca53371045984ac669df6f045d7ce822b08b554e657ea6d283acbbf6bb8b57bc62767fd39ed4c2b7cff80e079ba84b002e2f18c9bd25b62af984bd5af515bb06b903da12dd4be4e94d5e17567b290a2911", 0xbf}], 0x7, &(0x7f0000003140)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdrdstopts={{0x168, 0x29, 0x37, {0x11, 0x29, '\x00', [@pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0x0, 0x6a, "f6fce1c0f3a633a92d1bcf144d62d50e798da3ec1998497d91d82b2405374dc59392fa706e81d49b4d6de9e40bd044ccec300274abe1774560cab74877706b3ccc980633c7f6d32f5bbea278c463a3ec9159f65732e9cdb3bdffebcb07980b1c1938240a46fdda779db6"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0xc0c3852d76f8b642, 0xc, 0x7, 0x4, [0x6, 0x1, 0x50, 0x8, 0x5ebf, 0x0]}}, @generic={0x1c, 0x7a, "3a3cbe3a10ee28063f501e5beed6e3825af3874de0f11af37603dfa3cf2af2f77e1fddb4974479595c02c936af82b8798382d224ae02ea3ff79eda0b504bf016cfd1a2d811c7e910bacf75740a7cd86f6d96867a89fe137a56f3f1ea962b6950a751a07ac0e51ae2cba53afcb2db0d390066706bbb6fee5594e1"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}]}}}], 0x180}}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000032c0)="0299feee77bbfefaf81f2fd448f3879966998f47d6750a829248d105ecfbf95bfa77bc203cb220a40202e475938a8336572a3d659103749ab9e5decc980679bf743b6c9b915eafa2a3ca35fecfa1e784e309102e4af18e61dd1fe2c288b730011aac2636357c8b1f667d3583db7573ef3f6088728db507d78b42e8c8a23229996074a5f0e12c5090af421f38209f9246d791dd64190ca146577a789fb3096b073f2f8b958fcd530b3cb9d0ddadfc7bc6332b5e6f8d30510183cdba9317bdf9c9531f66a33787386da1a1251f0757b79a6dbc75c6", 0xd4}, {&(0x7f00000033c0)="383be5ec69254f4cb5e27265fa8c93e12c987fbf1b5e9f7710146788002f116ee2c73ddb784eb69f583cb3ab382599c9f31c5d3d40737b9109bbebd120b99b52e95d36b0729406811f48cbcfae05205507d060c652cddb615894745a26173893e197", 0x62}, {&(0x7f0000003440)="a3ae599784b9004cde1ea760b3512e5c5e70329ec4ab89322f23592011249ed04c3d8bcb8fb44edd1b7bf3030dbe962822536f78788b186203cd83bfe65d5164df9a18ecb3a2037504e6ab5e0975109c86a21ef4a0f97fc2091a515bd7ac1c97d6d61a78a3c8bf3740253aaeb17ba0318483454b4a082b2844b44a99d4ba2a4372d56b312bb8e70c63e9f910d4", 0x8d}, {&(0x7f0000003500)="dfcefee161258bf046e25bb3a8dd606030f67fbdd9bddbd0b507e3e4922e6d3a491669402ce65108cab685d9aab75d73b2a318d16d1730beafb2cae8664910002751a1df4fda8db788708adfc3eeff16513b64a1c48b60452a3574c157f3bc2bfc9319fb753bbcb944318aa5ae22004012b2f643233aae56d9f246cde2fd18a149129dae2c6664700ba8298750213176", 0x90}, {&(0x7f00000035c0)="3537c29a00ed2e1e513f41f9e6c4d3d6f2641ffb245226fd864cdfc483231caf69ef34ac5414237185c1cad3e4ee62d07016f108947878816544e842a8a3006192300d9410", 0x45}, {&(0x7f0000003640)="f4260cabec38bd5bfd81b3f70929ce8717cd943d28e9b4855ff8703f61a4d0d3b016093d06b8e5c4aa91b42b75c16ac08553bd144cc309675f5606156c1d97720bf5c71681ffc23c564fb721f5dd574d3b5f0acd2143b41ea870b77be1d61dc2c1927b950a702e694cfccb86bdef01b44db520dc28bd201af5feb67ec53ec1de2b81e80d066e09d5d25e395291458d6dafa7445ce27a4948fc6eda36494c265d22256e3d5fdf8ac30aabab3ade6747d50d0bbd766658e86bd962d89e89", 0xbd}, {&(0x7f0000003700)="46e48e62a5f1763c002009e2549c40177b87f0b48eed46f21fbd33ce0144a82dcee61231915f847443de4a5bc38da805092df858769348fa5529173de6b31fd935b67344a018d69e263eb940c4347ad9ce19c4ddf729c388eab2cf9112841dd295d664bc607c582cfdeb10d2422e278fb90e686d1ca0d1d2784d95292f5c6dc9cafb635a9aeee2fe0758d5c81f876ff349b7125fec581a3be01f0e", 0x9b}, {&(0x7f00000037c0)="1705ffb6ff3c52a5880068b19ce0bf9520b6967bbdbe07dfdb60", 0x1a}], 0x8, &(0x7f0000003880)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000038c0)="bc027c1a89a6c4a79a748709e2483efdedc6af8f3a090898297200dd157ea6f9e48a75e2bfe20000d2ff08da82e1f002f85b3021db6aea90312f3b571cbd9db8f9c7bbb4f08f27fa94b45f34e3a5b3e05618008c814f0d8910026f6f441cb0210741685b79ed1233ce4ddbf0e752444455c8977d8ca034b6d375e706459aa18830f726bc8e88488fdda72956e8e928d35d0bd6e9d8ba2ef253cb191013aba2cb00b5ec0aaef4e33882a31e749be7e07d2bc21c319765e766a0ad5184e14c5c7f7141e8695529a2a8ddd20db23d0cfd9a50742e15ede6e9d84463195663fe97a9b318bd9416181731a22fd294f42825062ae8f8d8f0fd", 0xf6}, {&(0x7f00000039c0)="d1cd9fb9c377eda485f2492f589953676f6446adab75c55d1c588230f6c45c19a56a4f1f63480139441666b12fe75fe664d10bab37c25b178dfa2c5ea0b81dc29391836f8c521f6b4458fca8985aeb457fe45c33447bbed2eec67132b5cee9d9c0364742ea13bcb628", 0x69}], 0x2, &(0x7f0000003a80)=[@dstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x5}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x67, 0x3, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim, @ra={0x5, 0x2, 0x5}]}}}], 0x60}}, {{&(0x7f0000003b00)={0xa, 0x4e23, 0x0, @mcast2, 0x9166}, 0x1c, &(0x7f0000003c00)=[{&(0x7f0000003b40)="0ac4a199e8be1f7320d8af398b66518931a62c4765f16ea0668c5af28f6ba9da49dd57dfa579c76b00a73bddc281128980f7de25d33876b2e755b11b63b2137dde345a285b329eca8c25299d35033706365154", 0x53}, {&(0x7f0000003bc0)="27d408ab322cac1f23df350dd56448bf1cd287725fb5061c316ac8a0489a57c365752e4b4f7d334f635c7dae0cbb623c196324", 0x33}], 0x2, &(0x7f0000003c40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8000}}, @hopopts={{0x88, 0x29, 0x36, {0x32, 0xd, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x6, 0x9, [0xf4]}}, @generic={0x6, 0x4f, "17f75d685e60ca189080e7008366b8b143e7abbe0df89dbf3272207b84dfe66f2591c30c3799cbf52b1e482a2a37824eaea2fc3aabc7379d621b64eb52aebf4a8e821227d18957705d6c6d31b610eb"}, @jumbo={0xc2, 0x4, 0x80959f36}]}}}, @dstopts={{0x48, 0x29, 0x37, {0x2b, 0x5, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0xa, 0x5, [0x5, 0x3, 0xffffffffe0a55f1e, 0x7]}}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}}}], 0x108}}], 0x6, 0x8000)
sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000003fc0)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003f80)={&(0x7f0000003f40)={0x10, 0x3f2, 0x200, 0x70bd2a, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040014}, 0x48094) (async)
r10 = accept4$vsock_stream(r5, &(0x7f0000004000)={0x28, 0x0, 0x2711}, 0x10, 0x80800)
sendto(r10, &(0x7f0000004040)="087e0c4410deae86a0c91d3b827d3eb46e83332ae7088d41ba90236be2ddd937d91920f2005c6bece808d1995b702924592d4acabfc375", 0x37, 0x10, &(0x7f0000004080)=@hci={0x1f, 0x4, 0x4}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000004140)={&(0x7f0000004100)='kvm_fpu\x00', r7, 0x0, 0x81}, 0x18) (async)
socket$unix(0x1, 0x1, 0x0) (async)
nanosleep(&(0x7f0000004180)={0x0, 0x989680}, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000041c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)

77.173883ms ago: executing program 1 (id=8581):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket(0x1d, 0x2, 0x6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$alg(0x26, 0x5, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
write$cgroup_devices(r5, &(0x7f0000000840)=ANY=[], 0xffdd)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0xa3e, 0x1, 0x80, 0x80000001, 0x3, {0x16, 0x1, 0xe5b, 0x5, 0x9, 0x2}, {0x7, 0x0, 0xb3d, 0x0, 0xfffe, 0xfffff976}, 0x0, 0x200, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1ff, 0xa4, 0x7, 0x101, 0x7, 0x8, 0x3, 0x3, 0x0, 0x1, 0x1, 0x3932685, 0x4, 0x0, 0x5, 0x8, 0x0, 0x8, 0xfffffffd, 0x9, 0x0, 0x4, 0x1000, 0x8, 0x9, 0x66c, 0x3b8f5929, 0x3, 0x9, 0xa, 0x101, 0x3, 0x4, 0x8, 0xf0a, 0x800, 0x1, 0x1, 0x47905ebf, 0xfffffffe, 0x1, 0x1, 0xa, 0xf7f0, 0x3, 0x401, 0x7, 0xc, 0x8, 0xf, 0x7, 0xff0b882, 0x7ff, 0x55, 0xd, 0x2, 0xad, 0x2, 0x80000001, 0x0, 0x7fffffff, 0x6, 0x4, 0x2, 0x6c, 0x0, 0x5, 0x5, 0x57, 0x3, 0x14, 0x2d9, 0x0, 0x3, 0x0, 0x5, 0xab7, 0x9abb, 0x48, 0xfff, 0x8, 0x1, 0x4, 0x40, 0x8d23, 0xffff, 0x3, 0x31b, 0x8, 0x1, 0x9, 0x1, 0x5, 0x3, 0x7, 0x5, 0x8, 0x9, 0x53, 0xffffffff, 0x10000, 0x8, 0x7, 0x892, 0xb, 0x4bfbd968, 0x401, 0x2, 0x6, 0xa2c7, 0x3, 0xfffffffb, 0x16eae2cc, 0x3, 0x9, 0x3, 0x6, 0x4, 0x4, 0x0, 0x9, 0x7, 0x8, 0x1, 0x6, 0x10000, 0x6, 0x3, 0x6, 0xfffffffd, 0x0, 0x2000006, 0x4, 0x3, 0x2, 0xffffffee, 0x10001, 0xba87, 0x1000, 0xb, 0x4000000, 0x10001, 0x9, 0x4, 0x2, 0x8, 0x5, 0x5, 0xffffffc1, 0x200, 0x5, 0x80, 0x1800, 0x3ff, 0x7ff, 0xb245, 0x4, 0x5, 0x401, 0xb, 0x9, 0x4, 0x790, 0xb, 0x400, 0xedd1, 0x6, 0x1000, 0x8, 0x1ff, 0x4, 0xfffffffd, 0x0, 0x0, 0x7, 0x3, 0x5, 0x3, 0x6f2d, 0x3, 0x9, 0x6, 0x5, 0x40, 0x28, 0xd23b, 0x2, 0x5, 0x9, 0xd5, 0x905f, 0x2, 0x1, 0xffff, 0x8, 0x80, 0x6fd, 0x65dd, 0x8, 0x3272, 0x4, 0x497, 0x6, 0x7fffffff, 0x8, 0x3, 0x6, 0x101, 0xa, 0xfee6, 0xff, 0x7, 0x2, 0x7, 0x5406, 0x7, 0x1, 0x6, 0x0, 0x5, 0x2, 0x81, 0x80000000, 0x7, 0xf, 0x1000, 0x0, 0x75, 0x6, 0x9, 0x200, 0x4, 0xff, 0xe7, 0x40, 0x0, 0x401, 0x47ac2596, 0x39, 0xffffffff, 0x6, 0x1ff, 0x2, 0x2, 0x2, 0xffffe9e6, 0x3, 0x5, 0x8, 0x1, 0x3, 0xfffffffe, 0x3, 0xaf79, 0x101]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xfff, 0x8, 0x9, 0x4, 0x8000800, 0x3, 0x8, 0x5, 0x0, 0xfffffff7, 0x0, 0x6, 0x3, 0xfffffff9, 0xfffffffa, 0x8, 0x40, 0x2, 0xd, 0x6, 0x8, 0x1de, 0x0, 0x3, 0x2800, 0x4, 0xffffffff, 0x6, 0x6, 0x0, 0x2, 0x58f3, 0x10001, 0x6, 0x4, 0x5, 0x2, 0x6, 0x51ec, 0x4, 0x8, 0x15c, 0x2, 0x1ff, 0x2, 0xfffff58a, 0x10, 0xc, 0x9, 0x7, 0x2, 0x7, 0x6, 0x2, 0x2, 0x204, 0x942, 0x6, 0x400, 0x1, 0x3, 0x2, 0xfffffff7, 0x1, 0x8, 0x1, 0x3, 0xb33, 0xe, 0x7, 0x5, 0x6b, 0x1ff, 0x3, 0x6, 0x1, 0x1, 0xfffffe01, 0xd9, 0x9, 0x1, 0x7, 0x0, 0x8, 0x10001, 0xc, 0x3, 0xe, 0x1ff, 0x80, 0x401, 0x3, 0x7ae4e9d, 0x5, 0x12b0, 0x5, 0x0, 0x101, 0x8, 0xee3, 0x3, 0x7, 0x7, 0x6, 0x6, 0x2, 0x6, 0x5, 0xf, 0x4, 0x3, 0x7, 0x2, 0x3e1, 0x1, 0x10001, 0xffff, 0x10, 0x401, 0x3, 0xe7a1, 0x401, 0x7, 0x6, 0x57, 0x1, 0x3, 0x1000, 0x0, 0x28, 0xc6, 0x8, 0x6, 0x1, 0x9, 0x7, 0x0, 0x400000ae, 0x3a81, 0x1, 0x8, 0x9, 0x1, 0xfff, 0x3999, 0x0, 0x7, 0x14, 0x1, 0x5, 0xce, 0xf0000000, 0x5, 0x7, 0x7, 0x3, 0x6, 0x1, 0xb, 0x9, 0x7, 0x9, 0x5, 0x6, 0x2, 0x3, 0x0, 0x7, 0x7, 0x3, 0x7, 0x2, 0x8, 0x1, 0x3, 0x2, 0xb, 0x8, 0x5, 0x8000, 0x5, 0x6, 0x80000000, 0x96c0, 0xfffffeff, 0x9, 0x9, 0x80, 0xfffffffd, 0xc8, 0x2, 0x2, 0x81, 0x10001, 0xde8, 0x3ff, 0x4, 0x6, 0xd, 0x8, 0xa, 0x81, 0xde, 0x8, 0x2, 0x2, 0xa, 0x5, 0x9a62295, 0x8, 0x401, 0x7f, 0x8, 0x1, 0x4, 0x7b02, 0xffffffff, 0x80000001, 0x5, 0xf, 0x7, 0xffffffff, 0xa, 0x9, 0x2, 0xe, 0xd, 0xfffffff6, 0x4, 0x5, 0x804e, 0xeb, 0x800, 0xcb8, 0x6, 0x9, 0x86b2, 0x3ff, 0xfffffff8, 0x6, 0xf1e7, 0x8, 0x79d2, 0x4d4, 0x7, 0x2, 0x7, 0x7fffffff, 0x4, 0x7, 0x9, 0x7fff, 0x1, 0xa00, 0x4]}]}]}}]}, 0x87c}}, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000307139200000000000000000a001e040900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4094)

1.570411ms ago: executing program 0 (id=8582):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r2, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000006000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006003200000002000000ffffffff000000000000000008001900000000000a00"], 0xc0}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000040)='irq_handler_entry\x00', r3}, 0x18)
r4 = socket(0x21, 0x2, 0x10000000000002)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa}, @generic={0x65, 0x0, 0x0, 0x0, 0x3}, @initr0, @exit, @alu={0x4, 0x0, 0x4827170236d373bd, 0x3, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @loopback}}, 0x24)
sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r4, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0)

0s ago: executing program 1 (id=8583):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000e0000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57004000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)

kernel console output (not intermixed with test programs):

fter parsing attributes in process `syz.0.6125'.
[  380.721925][T24587] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6125'.
[  380.772584][T24591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6126'.
[  380.861054][T24599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6130'.
[  380.868196][T24599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6130'.
[  381.639747][ T5223] Bluetooth: hci1: command 0x0406 tx timeout
[  381.744744][T24613] netlink: 'syz.2.6134': attribute type 1 has an invalid length.
[  381.885425][T24630] IPv6: sit3: Disabled Multicast RS
[  381.888044][T24630] sit3: entered allmulticast mode
[  382.144550][T24646] delete_channel: no stack
[  383.088670][T24708] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.836659][T24741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.839771][T24741] syzkaller0: entered promiscuous mode
[  383.841603][T24741] syzkaller0: entered allmulticast mode
[  383.860192][T24741] tipc: Resetting bearer <eth:syzkaller0>
[  383.867387][T24740] tipc: Resetting bearer <eth:syzkaller0>
[  383.878491][T24740] tipc: Disabling bearer <eth:syzkaller0>
[  384.248716][T24772] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  384.434523][T24787] tipc: Resetting bearer <eth:syzkaller0>
[  384.803972][T24816] tap0: tun_chr_ioctl cmd 1074025676
[  384.806228][T24816] tap0: owner set to 0
[  384.937723][T24821] __nla_validate_parse: 17 callbacks suppressed
[  384.937745][T24821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6202'.
[  384.946005][T24821] netlink: 308 bytes leftover after parsing attributes in process `syz.2.6202'.
[  384.949803][T24821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6202'.
[  385.067715][T24827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6204'.
[  385.072000][T24827] netlink: 'syz.2.6204': attribute type 1 has an invalid length.
[  385.163475][T24838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6208'.
[  385.307489][T24851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6211'.
[  385.330182][ T5281] udevd[5281]: worker [6667] /devices/virtual/block/nbd1 timeout; kill it
[  385.337495][ T5281] udevd[5281]: seq 15282 '/devices/virtual/block/nbd1' killed
[  385.356646][T24853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6213'.
[  385.415401][T24860] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6215'.
[  385.445714][T24863] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6216'.
[  385.483170][T24868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6218'.
[  385.585267][T24875] netlink: 'syz.0.6221': attribute type 21 has an invalid length.
[  385.587626][T24875] netlink: 'syz.0.6221': attribute type 22 has an invalid length.
[  385.593106][T24875] netlink: 'syz.0.6221': attribute type 23 has an invalid length.
[  385.597092][T24875] netlink: 'syz.0.6221': attribute type 25 has an invalid length.
[  385.599789][T24875] netlink: 'syz.0.6221': attribute type 26 has an invalid length.
[  385.674639][T24880] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  385.678143][T24880] tipc: Resetting bearer <eth:syzkaller0>
[  385.717950][T24882] syzkaller1: entered promiscuous mode
[  385.719963][T24882] syzkaller1: entered allmulticast mode
[  387.177717][T24953] netlink: 'syz.1.6244': attribute type 1 has an invalid length.
[  387.267152][T24968] netlink: 'syz.2.6249': attribute type 1 has an invalid length.
[  387.278701][T24964] netlink: 'syz.0.6248': attribute type 16 has an invalid length.
[  387.281984][T24965] netlink: 'syz.0.6248': attribute type 16 has an invalid length.
[  387.345290][T24976] netlink: 'syz.2.6252': attribute type 3 has an invalid length.
[  387.352440][T24976] x_tables: duplicate underflow at hook 2
[  387.357410][T24977] netlink: 'syz.2.6252': attribute type 3 has an invalid length.
[  388.640345][T25031] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  388.718152][T25035] bridge12: port 1(veth0_to_bond) entered blocking state
[  388.721220][T25035] bridge12: port 1(veth0_to_bond) entered disabled state
[  388.724194][T25035] veth0_to_bond: entered allmulticast mode
[  388.728118][T25035] veth0_to_bond: entered promiscuous mode
[  388.750791][T25035] vlan0: entered allmulticast mode
[  388.752884][T25035] veth1: entered allmulticast mode
[  388.755232][T25035] bridge12: port 2(vlan0) entered blocking state
[  388.757980][T25035] bridge12: port 2(vlan0) entered disabled state
[  388.762039][T25035] vlan0: entered promiscuous mode
[  388.975371][T25055] netlink: 'syz.0.6278': attribute type 1 has an invalid length.
[  389.005446][T25055] 8021q: adding VLAN 0 to HW filter on device bond30
[  389.008958][T25055] bond29: (slave bond30): making interface the new active one
[  389.011827][T25055] bond29: (slave bond30): Enslaving as an active interface with an up link
[  389.018382][T25055] 8021q: adding VLAN 0 to HW filter on device bond29
[  389.893513][T25071] netlink: 'syz.0.6284': attribute type 21 has an invalid length.
[  389.896556][T25071] netlink: 'syz.0.6284': attribute type 22 has an invalid length.
[  389.899185][T25071] netlink: 'syz.0.6284': attribute type 23 has an invalid length.
[  389.948970][T25078] __nla_validate_parse: 28 callbacks suppressed
[  389.949004][T25078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6287'.
[  390.012925][T25080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6288'.
[  390.078760][T25085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6287'.
[  390.210752][T25087] sctp: [Deprecated]: syz.0.6289 (pid 25087) Use of int in max_burst socket option.
[  390.210752][T25087] Use struct sctp_assoc_value instead
[  390.216543][T25087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6289'.
[  390.219807][T25087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6289'.
[  390.260746][T25089] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6290'.
[  390.364815][T25096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6292'.
[  390.467562][T25102] : entered promiscuous mode
[  390.510894][T25107] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6295'.
[  390.585231][T25114] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6297'.
[  390.643899][T25118] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.647068][T25119] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6299'.
[  390.653858][T25118] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.656322][T25118] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.659053][T25118] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.760879][T25124] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  391.413660][T25143] vlan6: entered promiscuous mode
[  391.415351][T25143] vlan5: entered promiscuous mode
[  391.807679][T25163] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  391.812690][T25163] xt_socket: unknown flags 0xd0
[  392.342944][T25206] validate_nla: 4 callbacks suppressed
[  392.342957][T25206] netlink: 'syz.1.6325': attribute type 13 has an invalid length.
[  392.347021][T25206] netlink: 'syz.1.6325': attribute type 17 has an invalid length.
[  392.350077][T25206] lo: left promiscuous mode
[  392.356222][T25206] tunl0: left promiscuous mode
[  392.360183][T25206] gre0: left promiscuous mode
[  392.362297][T25206] gretap0: left promiscuous mode
[  392.368618][T25206] gretap0: refused to change device tx_queue_len
[  392.373672][T25206] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  392.475349][T25226] netlink: 'syz.0.6332': attribute type 16 has an invalid length.
[  392.477822][T25226] netlink: 'syz.0.6332': attribute type 17 has an invalid length.
[  392.501924][T25226] tipc: Resetting bearer <eth:syzkaller0>
[  392.566994][T25240] syz_tun: entered promiscuous mode
[  392.568597][T25240] syz_tun: entered allmulticast mode
[  393.175434][T25313] pim6reg9: entered allmulticast mode
[  393.183002][T25313] netlink: 'syz.2.6358': attribute type 4 has an invalid length.
[  393.295693][T25327] netlink: 'syz.2.6365': attribute type 5 has an invalid length.
[  393.298900][T25327] netlink: 'syz.2.6365': attribute type 6 has an invalid length.
[  393.304669][T25329] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  393.329537][T25331] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  393.546126][T25352] xt_CT: No such helper "syz0"
[  393.553338][T25358] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  393.715026][T25371] netlink: 'syz.0.6377': attribute type 10 has an invalid length.
[  393.768592][T25368] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  393.771852][T25368] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  393.774845][T25368] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  393.777970][T25368] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  393.843012][T25369] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  393.845509][T25369] tipc: Bearer <udp:s>: trying with adjusted priority
[  393.849963][T25369] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  394.514147][T25397] batman_adv: batadv0: Adding interface: dummy0
[  394.516424][T25397] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  394.836381][T25406] openvswitch: netlink: Flow actions attr not present in new flow.
[  394.842250][T25407] netlink: 'syz.2.6388': attribute type 2 has an invalid length.
[  394.842737][T25409] netlink: 'syz.2.6388': attribute type 2 has an invalid length.
[  394.983130][T25423] __nla_validate_parse: 25 callbacks suppressed
[  394.983148][T25423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6394'.
[  394.989453][T25423] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.6394'.
[  394.992891][T25423] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  395.114959][T25427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6396'.
[  395.336387][T25434] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6397'.
[  395.491283][T25440] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6399'.
[  395.654583][T25455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6404'.
[  395.703030][T25461] syzkaller1: tun_chr_ioctl cmd 1074025673
[  395.705617][T25462] syzkaller1: tun_chr_ioctl cmd 1074025672
[  395.707409][T25462] syzkaller1: ignored: set checksum disabled
[  395.824942][T25470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6409'.
[  395.849861][T25470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6409'.
[  395.954317][T25475] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6411'.
[  396.109761][T25482] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6412'.
[  396.527158][T25523] batadv_slave_1: entered promiscuous mode
[  396.531261][T25523] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  396.534423][T25523] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  396.756588][T25531] netlink: 'syz.0.6428': attribute type 11 has an invalid length.
[  396.980577][T25538] openvswitch: netlink: Key type 30 is not supported
[  397.259449][   T11] block nbd3: Possible stuck request ffff888020520000: control (read@0,1024B). Runtime 120 seconds
[  397.263043][   T11] block nbd3: Possible stuck request ffff888020520200: control (read@1024,1024B). Runtime 120 seconds
[  397.266552][   T11] block nbd3: Possible stuck request ffff888020520400: control (read@2048,1024B). Runtime 120 seconds
[  397.270729][   T11] block nbd3: Possible stuck request ffff888020520600: control (read@3072,1024B). Runtime 120 seconds
[  397.315159][T25562] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  397.326591][T25562] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  397.336029][T25562] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  397.343139][T25562] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  397.356402][T25562] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  397.635463][T25585] validate_nla: 4 callbacks suppressed
[  397.635476][T25585] netlink: 'syz.0.6446': attribute type 1 has an invalid length.
[  397.892972][T25594] sctp: [Deprecated]: syz.0.6449 (pid 25594) Use of struct sctp_assoc_value in delayed_ack socket option.
[  397.892972][T25594] Use struct sctp_sack_info instead
[  398.520863][   T11] block nbd0: Possible stuck request ffff888020410000: control (read@0,1024B). Runtime 210 seconds
[  398.524154][   T11] block nbd0: Possible stuck request ffff888020410200: control (read@1024,1024B). Runtime 210 seconds
[  398.527580][   T11] block nbd0: Possible stuck request ffff888020410400: control (read@2048,1024B). Runtime 210 seconds
[  398.530979][   T11] block nbd0: Possible stuck request ffff888020410600: control (read@3072,1024B). Runtime 210 seconds
[  398.684052][T25662] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  398.688382][T25661] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  398.893352][T25683] 8021q: VLANs not supported on ip_vti0
[  398.999887][ T5223] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  399.297820][T25711] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  399.413836][T25724] netlink: 'syz.1.6478': attribute type 3 has an invalid length.
[  399.425974][T25726] netlink: 'syz.0.6479': attribute type 10 has an invalid length.
[  399.628328][T14128] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  399.774220][T25759] netlink: 'syz.0.6489': attribute type 1 has an invalid length.
[  399.776830][T25761] netlink: 'syz.0.6489': attribute type 1 has an invalid length.
[  400.347526][T25765] __nla_validate_parse: 25 callbacks suppressed
[  400.347540][T25765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6491'.
[  400.404066][T25772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6493'.
[  400.441939][T25772] syzkaller1: entered promiscuous mode
[  400.443618][T25772] syzkaller1: entered allmulticast mode
[  400.469430][T25776] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  400.473681][T25776] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  400.565513][T25788] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6497'.
[  400.599164][T25792] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6498'.
[  400.622860][T25794] netlink: 'syz.2.6499': attribute type 1 has an invalid length.
[  400.625265][T25794] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6499'.
[  400.627851][T25794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6499'.
[  400.866201][T25807] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6503'.
[  400.869153][T25807] hsr_slave_0: left promiscuous mode
[  400.874296][T25807] hsr_slave_1: left promiscuous mode
[  401.586282][T25823] ip6t_srh: unknown srh match flags  4000
[  401.588564][T25823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6506'.
[  401.594142][T25823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6506'.
[  401.657083][T25828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6508'.
[  401.886826][T25846] netlink: 'syz.2.6515': attribute type 1 has an invalid length.
[  401.891330][T25854] netlink: 'syz.1.6514': attribute type 10 has an invalid length.
[  401.893700][T25854] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  401.899514][T25855] netlink: 'syz.1.6514': attribute type 10 has an invalid length.
[  401.901868][T25855] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  401.944941][T25846] 8021q: adding VLAN 0 to HW filter on device bond17
[  401.957209][T25861] netlink: 'syz.0.6518': attribute type 1 has an invalid length.
[  401.972452][T25861] bond32: entered promiscuous mode
[  401.975315][T25861] bond32: entered allmulticast mode
[  402.053132][T25873] bridge13: the hash_elasticity option has been deprecated and is always 16
[  402.057853][T25873] bond32: (slave bridge13): making interface the new active one
[  402.067317][T25873] bridge13: entered promiscuous mode
[  402.072567][T25873] bridge13: entered allmulticast mode
[  402.077238][T25873] bond32: (slave bridge13): Enslaving as an active interface with an up link
[  402.181784][T25885] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  403.642315][T25977] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  403.673149][T25977] validate_nla: 1 callbacks suppressed
[  403.673161][T25977] netlink: 'syz.1.6550': attribute type 3 has an invalid length.
[  403.682183][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.682779][T25977] netlink: 'syz.1.6550': attribute type 2 has an invalid length.
[  403.683810][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.687745][T25977] netlink: 'syz.1.6550': attribute type 2 has an invalid length.
[  403.692431][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.694101][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.695735][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.697374][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.699017][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.700930][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.702569][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.704191][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.705848][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.707465][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.709098][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.711054][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.712706][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.714315][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.715910][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.717556][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.719215][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.721025][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.723370][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.735167][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.736922][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.738604][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.740582][T25983] tun1: tun_chr_ioctl cmd 1074025681
[  403.742328][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.744658][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.746383][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.748029][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.750780][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.752413][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.754054][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.755690][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.757356][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.758992][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.761408][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.763084][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.764704][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.766342][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.767992][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.770352][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.772182][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.773900][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.775636][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.777421][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.779227][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.781060][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.782800][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.784535][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.786316][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.788083][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.789847][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.791624][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.793452][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.795248][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.797032][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.798728][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.800560][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.802300][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.804067][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.805798][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.807560][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.809428][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.811211][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.813174][T25987] tun1: tun_chr_ioctl cmd 1074025673
[  403.935223][T25991] geneve0: left promiscuous mode
[  403.940685][T25991] team0: Port device geneve0 removed
[  403.946169][T25991] bond0: left promiscuous mode
[  403.949979][T25992] netlink: 'syz.2.6556': attribute type 1 has an invalid length.
[  403.950484][T25991] team0: Port device bond0 removed
[  403.954976][T25991] bond9: (slave veth71): Releasing active interface
[  403.958152][T25991] bond14: (slave bridge9): Releasing active interface
[  403.964635][T25991] bond15: (slave batadv2): Releasing active interface
[  403.966757][T25991] bond15: (slave batadv2): the permanent HWaddr of slave - 46:13:ee:6b:40:78 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  403.971956][T25991] bond15: (slave batadv3): making interface the new active one
[  403.975768][T25991] bond15: (slave batadv3): Releasing active interface
[  403.978762][T25991] batman_adv: batadv0: Removing interface: dummy0
[  403.982221][T25991] bond17: (slave batadv4): Releasing active interface
[  403.984975][T25991] vlan4: left allmulticast mode
[  403.987227][T25991] veth0: left allmulticast mode
[  403.988837][T25991] vlan4: left promiscuous mode
[  403.991048][T25991] veth0: left promiscuous mode
[  403.994041][T25991] bridge0: port 1(vlan4) entered disabled state
[  404.043659][T25991] ip_vti0: left promiscuous mode
[  404.050029][T25991] ip6_vti0: left promiscuous mode
[  404.052436][T25991] sit0: left promiscuous mode
[  404.072483][T25991] ip6tnl0: left promiscuous mode
[  404.077315][T25991] ip6gre0: left promiscuous mode
[  404.079952][T25991] ip6gretap0: left promiscuous mode
[  404.082560][T25991] team0: left promiscuous mode
[  404.084466][T25991] 8021q: adding VLAN 0 to HW filter on device team0
[  404.087992][T25991] nlmon0: left promiscuous mode
[  404.092459][T25991] caif0: left promiscuous mode
[  404.094049][T25991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  404.266534][T26015] syzkaller0: entered allmulticast mode
[  404.283981][T26016] netlink: 'syz.1.6562': attribute type 2 has an invalid length.
[  404.578184][T26035] netlink: 'syz.2.6567': attribute type 12 has an invalid length.
[  405.748537][T26042] __nla_validate_parse: 22 callbacks suppressed
[  405.748550][T26042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6569'.
[  405.754302][T26046] netlink: 'syz.0.6570': attribute type 2 has an invalid length.
[  405.756706][T26046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6570'.
[  405.765343][T26042] netlink: 'syz.2.6569': attribute type 12 has an invalid length.
[  405.765962][T26046] netlink: 'syz.0.6570': attribute type 12 has an invalid length.
[  405.769089][T26042] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6569'.
[  405.770508][T26046] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.6570'.
[  405.820055][T26048] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6571'.
[  405.861148][T26053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6573'.
[  405.906679][T26053] bridge21: port 1(veth29) entered blocking state
[  405.911325][T26053] bridge21: port 1(veth29) entered disabled state
[  405.913470][T26053] veth29: entered allmulticast mode
[  405.916036][T26053] veth29: entered promiscuous mode
[  405.964420][T26053] wg1: entered promiscuous mode
[  405.966351][T26053] wg1: entered allmulticast mode
[  406.057489][T26076] macsec0: entered promiscuous mode
[  406.082233][T26076] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  406.084728][T26076] macsec0: left promiscuous mode
[  406.086268][T26076] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  406.875341][T26085] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6584'.
[  406.975832][T26093] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6587'.
[  407.056090][T26102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6590'.
[  407.076243][T26104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6590'.
[  407.188651][T26110] netlink: 'syz.1.6593': attribute type 10 has an invalid length.
[  407.279437][T26123] xt_hashlimit: size too large, truncated to 1048576
[  407.281808][T26123] xt_hashlimit: overflow, try lower: 3/0
[  408.425572][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.428036][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.478727][T26171] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  408.484222][T26171] team0: Device ipvlan1 is already an upper device of the team interface
[  409.078527][T26233] x_tables: unsorted entry at hook 1
[  409.328076][T26247] xt_hashlimit: size too large, truncated to 1048576
[  409.404136][   T11] block nbd1: Possible stuck request ffff888020440000: control (read@0,1024B). Runtime 210 seconds
[  409.407370][   T11] block nbd1: Possible stuck request ffff888020440200: control (read@1024,1024B). Runtime 210 seconds
[  409.410665][   T11] block nbd1: Possible stuck request ffff888020440400: control (read@2048,1024B). Runtime 210 seconds
[  409.413990][   T11] block nbd1: Possible stuck request ffff888020440600: control (read@3072,1024B). Runtime 210 seconds
[  409.476604][T26253] validate_nla: 4 callbacks suppressed
[  409.476617][T26253] netlink: 'syz.0.6635': attribute type 4 has an invalid length.
[  409.849041][T26264] dvmrp0: left allmulticast mode
[  409.850829][T26264] pimreg: left allmulticast mode
[  409.990009][T26276] xt_TCPMSS: Only works on TCP SYN packets
[  410.190791][T26305] netlink: 'syz.1.6652': attribute type 2 has an invalid length.
[  410.236201][T26309] netlink: 'syz.1.6654': attribute type 9 has an invalid length.
[  410.634342][T26335] netlink: 'syz.2.6660': attribute type 11 has an invalid length.
[  411.123365][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.125822][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.133378][T26341] __nla_validate_parse: 21 callbacks suppressed
[  411.133412][T26341] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6662'.
[  411.246246][T26348] bridge0: failed insert local address into bridge forwarding table
[  411.249167][T26348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6665'.
[  411.417993][T26353] team0: Mode changed to "broadcast"
[  411.421356][T26353] vlan0: entered promiscuous mode
[  411.423025][T26353] gretap0: entered promiscuous mode
[  411.424734][T26353] vlan0: left allmulticast mode
[  411.426279][T26353] gretap0: left allmulticast mode
[  411.437256][T26353] team0: Port device vlan0 added
[  411.571771][T26364] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6670'.
[  411.593822][T26365] syzkaller1: entered promiscuous mode
[  411.595550][T26365] syzkaller1: entered allmulticast mode
[  411.607588][T26367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6671'.
[  411.612906][T26367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6671'.
[  411.769667][T26375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6673'.
[  412.013138][T26395] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6680'.
[  412.020356][T26395] xt_cgroup: xt_cgroup: no path or classid specified
[  412.491040][T26424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6686'.
[  412.495084][T26424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6686'.
[  412.521021][T26424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6686'.
[  412.607218][T26436] 8021q: adding VLAN 0 to HW filter on device bond20
[  413.073744][ T5862] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  413.203379][T26501] xt_bpf: check failed: parse error
[  415.052012][T26561] netlink: 'syz.0.6727': attribute type 3 has an invalid length.
[  415.057255][T26561] x_tables: duplicate underflow at hook 1
[  415.214872][T26578] netlink: 'syz.0.6733': attribute type 58 has an invalid length.
[  415.444750][T26602] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  415.448797][T26602] --map-set only usable from mangle table
[  415.455111][T26603] --map-set only usable from mangle table
[  415.653268][T26614] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  415.657150][T26614] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  415.664345][T26614] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  415.987282][T26641] netlink: 'syz.0.6752': attribute type 1 has an invalid length.
[  416.257390][T26656] lo speed is unknown, defaulting to 1000
[  416.258042][T26655] rdma_rxe: rxe_newlink: failed to add lo
[  416.264333][T26656] lo speed is unknown, defaulting to 1000
[  416.266698][T26656] lo speed is unknown, defaulting to 1000
[  416.420294][T26656] infiniband syz0: set active
[  416.423035][ T5896] lo speed is unknown, defaulting to 1000
[  416.424957][T26656] infiniband syz0: added lo
[  416.427822][T26656] syz0: rxe_create_cq: returned err = -12
[  416.429876][T26656] infiniband syz0: Couldn't create ib_mad CQ
[  416.431828][T26656] infiniband syz0: Couldn't open port 1
[  416.454694][T26656] RDS/IB: syz0: added
[  416.456083][T26656] smc: adding ib device syz0 with port count 1
[  416.457949][T26656] smc:    ib device syz0 port 1 has pnetid 
[  416.463093][ T5896] lo speed is unknown, defaulting to 1000
[  416.465568][T26656] lo speed is unknown, defaulting to 1000
[  416.563271][T26656] lo speed is unknown, defaulting to 1000
[  416.660722][T26656] lo speed is unknown, defaulting to 1000
[  416.837305][T26665] __nla_validate_parse: 55 callbacks suppressed
[  416.837319][T26665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6759'.
[  416.972685][T26679] netlink: 'syz.1.6763': attribute type 1 has an invalid length.
[  416.975156][T26679] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6763'.
[  417.232166][T26697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6770'.
[  417.243103][T26697] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  417.437731][T26708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6774'.
[  417.467875][T26711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  417.685677][T26723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6778'.
[  417.753213][T26728] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6779'.
[  417.756151][T26728] netlink: 15 bytes leftover after parsing attributes in process `syz.0.6779'.
[  417.759019][T26728] netlink: 'syz.0.6779': attribute type 4 has an invalid length.
[  417.778815][T26723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6778'.
[  417.843551][T26741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6782'.
[  417.872437][T26736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6781'.
[  417.950918][T26750] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.955367][T26750] syzkaller0: entered promiscuous mode
[  417.957149][T26750] syzkaller0: entered allmulticast mode
[  418.000777][T26750] tipc: Resetting bearer <eth:syzkaller0>
[  418.012808][T26749] tipc: Resetting bearer <eth:syzkaller0>
[  418.045476][T26749] tipc: Disabling bearer <eth:syzkaller0>
[  418.092634][T26746] lo speed is unknown, defaulting to 1000
[  418.166732][T26760] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  418.169610][T26760] syzkaller0: entered promiscuous mode
[  418.177390][T26760] syzkaller0: entered allmulticast mode
[  418.183437][T26760] tipc: Resetting bearer <eth:syzkaller0>
[  418.199248][T26759] tipc: Resetting bearer <eth:syzkaller0>
[  418.222898][T26759] tipc: Disabling bearer <eth:syzkaller0>
[  418.527446][T26770] IPVS: set_ctl: invalid protocol: 29 172.20.20.24:20002
[  418.703524][T26790] xt_hashlimit: size too large, truncated to 1048576
[  418.706381][T26789] No such timeout policy "syz0"
[  418.707407][T26791] xt_hashlimit: size too large, truncated to 1048576
[  418.933953][T26801] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  418.936637][T26801] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  419.175321][T26823] tipc: Resetting bearer <eth:gre0>
[  419.192132][T26823] tipc: Resetting bearer <eth:gre0>
[  419.246012][T26823] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.248622][T26823] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.252072][T26823] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.254625][T26823] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.349198][T26831] vti0: entered promiscuous mode
[  419.456408][T26841] netlink: 'syz.1.6815': attribute type 178 has an invalid length.
[  419.523334][T26851] can: request_module (can-proto-5) failed.
[  419.545822][T26851] can: request_module (can-proto-5) failed.
[  419.547926][ T5883] lo speed is unknown, defaulting to 1000
[  419.571885][T26851] can: request_module (can-proto-5) failed.
[  419.594821][T26851] can: request_module (can-proto-5) failed.
[  419.624781][T26851] can: request_module (can-proto-5) failed.
[  419.650511][T26851] can: request_module (can-proto-5) failed.
[  419.672698][T26851] can: request_module (can-proto-5) failed.
[  419.702185][T26851] can: request_module (can-proto-5) failed.
[  419.725616][T26851] can: request_module (can-proto-5) failed.
[  419.748585][T26851] can: request_module (can-proto-5) failed.
[  419.762265][T26881] netlink: 'syz.2.6822': attribute type 10 has an invalid length.
[  420.459456][T26929] netlink: 'syz.0.6828': attribute type 1 has an invalid length.
[  420.748557][T26964] netlink: 'syz.2.6839': attribute type 1 has an invalid length.
[  420.807216][T26964] team0: Port device geneve0 removed
[  420.809909][T26964] bond0: (slave gretap3): Releasing active interface
[  420.813956][T26964] bond9: (slave bridge11): Releasing active interface
[  420.816943][T26964] batman_adv: batadv0: Removing interface: ip6gretap1
[  420.821473][T26964] team0: Port device batadv1 removed
[  420.823907][T26964] bond10: (slave bridge12): Releasing active interface
[  420.827384][T26964] bond12: (slave veth11): Releasing active interface
[  420.830972][T26964] bond14: (slave bridge17): Releasing active interface
[  420.833253][T26964] bridge17: left promiscuous mode
[  420.835046][T26964] bridge17: left allmulticast mode
[  420.841431][T26964] team0: Port device batadv2 removed
[  420.843435][T26964] veth29: left allmulticast mode
[  420.845107][T26964] veth29: left promiscuous mode
[  420.846859][T26964] bridge21: port 1(veth29) entered disabled state
[  421.015922][T26972] netlink: 'syz.2.6842': attribute type 5 has an invalid length.
[  421.024005][T26972] bridge19: entered promiscuous mode
[  421.025922][T26972] bridge19: entered allmulticast mode
[  421.218856][T26985] netlink: 'syz.2.6846': attribute type 1 has an invalid length.
[  421.221449][T26985] netlink: 'syz.2.6846': attribute type 2 has an invalid length.
[  421.276940][T26987] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  421.280248][T26987] CPU: 0 UID: 0 PID: 26987 Comm: syz.0.6847 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  421.280262][T26987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  421.280270][T26987] Call Trace:
[  421.280274][T26987]  <TASK>
[  421.280280][T26987]  dump_stack_lvl+0x189/0x250
[  421.280301][T26987]  ? __pfx_dump_stack_lvl+0x10/0x10
[  421.280312][T26987]  ? __pfx__printk+0x10/0x10
[  421.280327][T26987]  ? kernfs_path_from_node+0x2c/0x260
[  421.280337][T26987]  ? kernfs_path_from_node+0x2c/0x260
[  421.280344][T26987]  ? kernfs_path_from_node+0x2c/0x260
[  421.280353][T26987]  ? kernfs_path_from_node+0x22c/0x260
[  421.280361][T26987]  ? kernfs_path_from_node+0x2c/0x260
[  421.280370][T26987]  sysfs_warn_dup+0x8e/0xa0
[  421.280384][T26987]  sysfs_do_create_link_sd+0xc0/0x110
[  421.280393][T26987]  device_add_class_symlinks+0x1cf/0x240
[  421.280408][T26987]  device_add+0x475/0xb50
[  421.280422][T26987]  wiphy_register+0x199a/0x26b0
[  421.280443][T26987]  ? __pfx_wiphy_register+0x10/0x10
[  421.280453][T26987]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  421.280468][T26987]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  421.280482][T26987]  ieee80211_register_hw+0x33e1/0x4120
[  421.280503][T26987]  ? ieee80211_register_hw+0x14d1/0x4120
[  421.280520][T26987]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  421.280534][T26987]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  421.280558][T26987]  ? __hrtimer_setup+0x187/0x210
[  421.280570][T26987]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  421.280589][T26987]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  421.280617][T26987]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  421.280653][T26987]  ? trace_kmalloc+0x1f/0xd0
[  421.280668][T26987]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  421.280681][T26987]  ? kstrndup+0xbf/0x160
[  421.280697][T26987]  hwsim_new_radio_nl+0xea4/0x1b10
[  421.280712][T26987]  ? __pfx___nla_validate_parse+0x10/0x10
[  421.280731][T26987]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  421.280749][T26987]  ? __nla_parse+0x40/0x60
[  421.280761][T26987]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  421.280775][T26987]  genl_family_rcv_msg_doit+0x215/0x300
[  421.280787][T26987]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  421.280803][T26987]  ? bpf_lsm_capable+0x9/0x20
[  421.280814][T26987]  ? security_capable+0x7e/0x2e0
[  421.280827][T26987]  genl_rcv_msg+0x60e/0x790
[  421.280839][T26987]  ? __pfx_genl_rcv_msg+0x10/0x10
[  421.280847][T26987]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  421.280866][T26987]  netlink_rcv_skb+0x208/0x470
[  421.280878][T26987]  ? __pfx_genl_rcv_msg+0x10/0x10
[  421.280887][T26987]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  421.280907][T26987]  ? down_read+0x1ad/0x2e0
[  421.280918][T26987]  genl_rcv+0x28/0x40
[  421.280925][T26987]  netlink_unicast+0x75c/0x8e0
[  421.280941][T26987]  netlink_sendmsg+0x805/0xb30
[  421.280957][T26987]  ? __pfx_netlink_sendmsg+0x10/0x10
[  421.280971][T26987]  ? aa_sock_msg_perm+0x94/0x160
[  421.280981][T26987]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  421.280990][T26987]  ? __pfx_netlink_sendmsg+0x10/0x10
[  421.281002][T26987]  __sock_sendmsg+0x21c/0x270
[  421.281014][T26987]  ____sys_sendmsg+0x505/0x830
[  421.281030][T26987]  ? __pfx_____sys_sendmsg+0x10/0x10
[  421.281047][T26987]  ? import_iovec+0x74/0xa0
[  421.281060][T26987]  ___sys_sendmsg+0x21f/0x2a0
[  421.281074][T26987]  ? __pfx____sys_sendmsg+0x10/0x10
[  421.281105][T26987]  ? __fget_files+0x2a/0x420
[  421.281113][T26987]  ? __fget_files+0x3a0/0x420
[  421.281126][T26987]  __x64_sys_sendmsg+0x19b/0x260
[  421.281139][T26987]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  421.281157][T26987]  ? rcu_is_watching+0x15/0xb0
[  421.281170][T26987]  ? do_syscall_64+0xbe/0x3b0
[  421.281182][T26987]  do_syscall_64+0xfa/0x3b0
[  421.281191][T26987]  ? lockdep_hardirqs_on+0x9c/0x150
[  421.281199][T26987]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.281207][T26987]  ? exc_page_fault+0x9f/0xf0
[  421.281217][T26987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.281225][T26987] RIP: 0033:0x7f7abb58e9a9
[  421.281235][T26987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  421.281243][T26987] RSP: 002b:00007f7abc4d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  421.281253][T26987] RAX: ffffffffffffffda RBX: 00007f7abb7b5fa0 RCX: 00007f7abb58e9a9
[  421.281260][T26987] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  421.281266][T26987] RBP: 00007f7abb610d69 R08: 0000000000000000 R09: 0000000000000000
[  421.281272][T26987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  421.281278][T26987] R13: 0000000000000000 R14: 00007f7abb7b5fa0 R15: 00007ffe26bd95c8
[  421.281294][T26987]  </TASK>
[  421.488160][T26995] _Z`Ԁ@: entered promiscuous mode
[  421.749952][T27019] netlink: 'syz.1.6857': attribute type 1 has an invalid length.
[  421.794274][T27023] netlink: 'syz.2.6860': attribute type 22 has an invalid length.
[  421.843952][T27029] __nla_validate_parse: 19 callbacks suppressed
[  421.843964][T27029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6862'.
[  421.861202][T27029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6862'.
[  421.875005][T27038] openvswitch: netlink: IP tunnel TTL not specified.
[  421.922380][T27040] netlink: 'syz.2.6867': attribute type 2 has an invalid length.
[  422.062449][T27050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6870'.
[  422.083982][T27052] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  422.147756][T27055] netlink: 'syz.2.6871': attribute type 1 has an invalid length.
[  422.156894][T27055] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6871'.
[  422.179214][T27055] syzkaller0: mtu less than device minimum
[  422.215244][T27047] lo speed is unknown, defaulting to 1000
[  422.236478][T27060] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6873'.
[  422.258471][T27051] tipc: Disabling bearer <eth:syzkaller0>
[  422.403641][T27069] xt_CT: You must specify a L4 protocol and not use inversions on it
[  422.568402][T27091] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  422.573416][T27091] netlink: 'syz.2.6880': attribute type 7 has an invalid length.
[  422.577356][T27090] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6884'.
[  422.583385][T27091] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6880'.
[  422.631452][T27091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6880'.
[  422.634250][T27091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6880'.
[  422.649169][T27091] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6880'.
[  423.355374][T27140] pim6reg1: entered allmulticast mode
[  423.565536][   T33] audit: type=1804 audit(1752892554.907:12): pid=27167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6906" name="/newroot/2345/cgroup.controllers" dev="tmpfs" ino=11944 res=1 errno=0
[  423.574238][   T33] audit: type=1800 audit(1752892554.917:13): pid=27167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6906" name="cgroup.controllers" dev="tmpfs" ino=11944 res=0 errno=0
[  423.865025][T27182] veth0_to_bond: left allmulticast mode
[  423.866931][T27182] veth0_to_bond: left promiscuous mode
[  423.868882][T27182] bridge12: port 1(veth0_to_bond) entered disabled state
[  423.876966][T27182] bond0: (slave bond27): Releasing backup interface
[  423.880824][T27182] vlan0: left promiscuous mode
[  423.882650][T27182] bridge12: port 2(vlan0) entered disabled state
[  423.887178][T27182] bond29: (slave bond30): Releasing backup interface
[  423.894831][T27182] bond32: (slave bridge13): Releasing active interface
[  423.897487][T27182] bridge13: left promiscuous mode
[  423.899131][T27182] bridge13: left allmulticast mode
[  423.922054][T27182] syz_tun: left promiscuous mode
[  423.923644][T27182] syz_tun: left allmulticast mode
[  423.926941][T27182] 8021q: adding VLAN 0 to HW filter on device bond0
[  423.930394][T27182] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  423.950071][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  423.991498][T22169] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  424.365014][T27191] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  424.367440][T27193] SET target dimension over the limit!
[  424.604638][T27218] tun0: tun_chr_ioctl cmd 2147767507
[  424.606574][T27218] tun0: tun_chr_ioctl cmd 1074025675
[  424.608244][T27218] tun0: persist enabled
[  424.759698][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  425.134829][ T5862] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  425.137626][ T5862] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  425.473045][T27272] vti1: entered promiscuous mode
[  425.474637][T27272] vti1: entered allmulticast mode
[  425.519100][T27278] IPVS: length: 8 != 446622349272
[  425.555876][T27280] tipc: Resetting bearer <eth:gre0>
[  425.640189][T27278] x_tables: duplicate underflow at hook 1
[  425.808060][T27285] validate_nla: 3 callbacks suppressed
[  425.808073][T27285] netlink: 'syz.1.6947': attribute type 10 has an invalid length.
[  425.880389][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  425.885317][T27296] dvmrp1: entered allmulticast mode
[  425.887765][T27295] dvmrp0: left allmulticast mode
[  425.892308][T27295] dvmrp1: left allmulticast mode
[  426.850596][T27360] dvmrp0: entered allmulticast mode
[  426.942910][T27362] __nla_validate_parse: 18 callbacks suppressed
[  426.942927][T27362] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6972'.
[  426.958111][T27362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6972'.
[  427.342150][   T11] block nbd3: Possible stuck request ffff888020520000: control (read@0,1024B). Runtime 150 seconds
[  427.349357][   T11] block nbd3: Possible stuck request ffff888020520200: control (read@1024,1024B). Runtime 150 seconds
[  427.353330][   T11] block nbd3: Possible stuck request ffff888020520400: control (read@2048,1024B). Runtime 150 seconds
[  427.356770][   T11] block nbd3: Possible stuck request ffff888020520600: control (read@3072,1024B). Runtime 150 seconds
[  427.393021][T27382] xt_l2tp: v2 tid > 0xffff: 4294967295
[  427.655438][T27414] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6985'.
[  427.660206][T27414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6985'.
[  427.794475][T27428] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6986'.
[  427.802043][T27428] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6986'.
[  427.805231][T27428] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6986'.
[  427.847814][T27433] netlink: 'syz.2.6987': attribute type 11 has an invalid length.
[  427.998061][T27448] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6989'.
[  428.209621][T27469] netlink: 'syz.2.6994': attribute type 9 has an invalid length.
[  428.226819][T27469] syzkaller1: entered promiscuous mode
[  428.228511][T27469] syzkaller1: entered allmulticast mode
[  428.601271][   T11] block nbd0: Possible stuck request ffff888020410000: control (read@0,1024B). Runtime 240 seconds
[  428.604547][   T11] block nbd0: Possible stuck request ffff888020410200: control (read@1024,1024B). Runtime 240 seconds
[  428.607844][   T11] block nbd0: Possible stuck request ffff888020410400: control (read@2048,1024B). Runtime 240 seconds
[  428.611221][   T11] block nbd0: Possible stuck request ffff888020410600: control (read@3072,1024B). Runtime 240 seconds
[  428.777597][T27518] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  428.783798][T27518] syzkaller0: entered promiscuous mode
[  428.785710][T27518] syzkaller0: entered allmulticast mode
[  428.928629][T27525] can_create: 23 callbacks suppressed
[  428.928642][T27525] can: request_module (can-proto-0) failed.
[  429.079484][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  429.206672][T27552] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7017'.
[  429.296853][T27559] netlink: 'syz.2.7019': attribute type 5 has an invalid length.
[  429.300286][T27559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7019'.
[  429.526886][T27573] lo speed is unknown, defaulting to 1000
[  429.550580][T27513] tipc: Resetting bearer <eth:syzkaller0>
[  429.567394][T27513] tipc: Disabling bearer <eth:syzkaller0>
[  429.840678][T27593] delete_channel: no stack
[  429.932536][T27593] syzkaller0: create flow: hash 672622929 index 1
[  430.065508][T27591] syzkaller0: delete flow: hash 672622929 index 1
[  431.272721][T27631] netlink: 'syz.0.7039': attribute type 10 has an invalid length.
[  431.465063][T27628] lo speed is unknown, defaulting to 1000
[  431.505480][T27656] 8021q: VLANs not supported on gre0
[  431.820648][T27677] bridge16: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  431.969934][T27677] __nla_validate_parse: 4 callbacks suppressed
[  431.969947][T27677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7055'.
[  432.106681][T27695] syzkaller0: entered allmulticast mode
[  432.357568][T27703] syzkaller0: entered promiscuous mode
[  432.369564][T27703] syzkaller0: entered allmulticast mode
[  432.445564][T27699] openvswitch: netlink: Actions may not be safe on all matching packets
[  433.628040][T27698] lo speed is unknown, defaulting to 1000
[  433.728500][T27720] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  433.732769][T27718] netlink: 'syz.2.7068': attribute type 58 has an invalid length.
[  433.735081][T27718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7068'.
[  433.774028][T27722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7070'.
[  434.022946][T27736] netlink: 'syz.2.7075': attribute type 1 has an invalid length.
[  434.025332][T27736] netlink: 'syz.2.7075': attribute type 1 has an invalid length.
[  434.386238][T27750] raw_sendmsg: syz.0.7078 forgot to set AF_INET. Fix it!
[  434.426274][T27753] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7079'.
[  434.914391][T27767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7084'.
[  434.997291][T27775] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  435.010194][T27775] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  435.093204][T27781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7089'.
[  435.144510][T27775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7088'.
[  435.567452][T27816] sit0: Master is either lo or non-ether device
[  435.625679][T27837] tunl0: entered promiscuous mode
[  435.632160][T27837] netlink: 'syz.1.7106': attribute type 4 has an invalid length.
[  435.634828][T27837] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7106'.
[  435.790661][T27852] block nbd2: server does not support multiple connections per device.
[  435.793416][T27852] block nbd2: shutting down sockets
[  435.799784][T25380] Bluetooth: hci0: command tx timeout
[  435.869652][T27865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7114'.
[  435.897319][T27870] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7115'.
[  436.772589][T27914] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  436.775145][T27914] syzkaller0: entered promiscuous mode
[  436.777655][T27914] syzkaller0: entered allmulticast mode
[  436.807637][T27914] tipc: Resetting bearer <eth:syzkaller0>
[  436.813731][T27912] tipc: Resetting bearer <eth:syzkaller0>
[  436.826863][T27915] netlink: 'syz.0.7128': attribute type 20 has an invalid length.
[  436.830654][T27912] tipc: Disabling bearer <eth:syzkaller0>
[  437.014602][T27942] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  437.017138][T27942] syzkaller0: entered promiscuous mode
[  437.018873][T27942] syzkaller0: entered allmulticast mode
[  437.052819][T27942] tipc: Resetting bearer <eth:syzkaller0>
[  437.059039][T27945] __nla_validate_parse: 8 callbacks suppressed
[  437.059052][T27945] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7137'.
[  437.065099][T27945] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7137'.
[  437.073390][T27940] tipc: Resetting bearer <eth:syzkaller0>
[  437.086598][T27940] tipc: Disabling bearer <eth:syzkaller0>
[  437.092297][T27945] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7137'.
[  437.096132][T27945] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7137'.
[  437.148089][T27952] syzkaller0: entered promiscuous mode
[  437.156320][T27952] syzkaller0: entered allmulticast mode
[  437.215955][T27962] netlink: 'syz.0.7142': attribute type 15 has an invalid length.
[  437.314419][T27970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7145'.
[  437.319799][T27970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7145'.
[  437.357064][T27970] syzkaller0: entered promiscuous mode
[  437.358772][T27970] syzkaller0: entered allmulticast mode
[  437.561496][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  437.571452][T27983] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7147'.
[  438.744259][T27991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7150'.
[  438.777897][T27997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7151'.
[  438.803824][T28000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.855053][T28006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7154'.
[  438.867565][T28008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  439.058655][T28028] netdevsim0: entered allmulticast mode
[  439.061348][T28028] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  439.157683][T28037] netlink: 'syz.0.7165': attribute type 4 has an invalid length.
[  439.174096][T28037] netlink: 'syz.0.7165': attribute type 4 has an invalid length.
[  439.195022][T28039] lo: entered promiscuous mode
[  439.197803][T28039] gre0: entered promiscuous mode
[  439.202585][T28039] ip_vti0: entered promiscuous mode
[  439.204580][T28039] ip6_vti0: entered promiscuous mode
[  439.206514][T28039] sit0: entered promiscuous mode
[  439.208405][T28039] ip6tnl0: entered promiscuous mode
[  439.211489][T28039] ip6gre0: entered promiscuous mode
[  439.213413][T28039] ip6gretap0: entered promiscuous mode
[  439.215663][T28039] team0: entered promiscuous mode
[  439.217747][T28039] nlmon0: entered promiscuous mode
[  439.222508][T28039] caif0: entered promiscuous mode
[  439.224185][T28039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  439.335524][T28047] netlink: 'syz.1.7169': attribute type 4 has an invalid length.
[  439.388906][T28049] netlink: 'syz.0.7170': attribute type 12 has an invalid length.
[  439.480524][   T11] block nbd1: Possible stuck request ffff888020440000: control (read@0,1024B). Runtime 240 seconds
[  439.484872][   T11] block nbd1: Possible stuck request ffff888020440200: control (read@1024,1024B). Runtime 240 seconds
[  439.489095][   T11] block nbd1: Possible stuck request ffff888020440400: control (read@2048,1024B). Runtime 240 seconds
[  439.493589][   T11] block nbd1: Possible stuck request ffff888020440600: control (read@3072,1024B). Runtime 240 seconds
[  439.687181][T28070] syzkaller0: entered promiscuous mode
[  439.695326][T28070] syzkaller0: entered allmulticast mode
[  439.701615][T28069] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  439.722296][T28069] tipc: Resetting bearer <eth:syzkaller0>
[  439.743591][T28069] tipc: Disabling bearer <eth:syzkaller0>
[  439.860577][T28088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  439.943300][T28098] netlink: 'syz.2.7185': attribute type 1 has an invalid length.
[  439.964041][T28098] 8021q: adding VLAN 0 to HW filter on device bond21
[  440.214484][T28119] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  440.380483][T28125] netlink: 'syz.2.7194': attribute type 21 has an invalid length.
[  440.383048][T28125] IPv6: NLM_F_CREATE should be specified when creating new route
[  440.385569][T28125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  440.387797][T28125] IPv6: NLM_F_CREATE should be set when creating new route
[  440.389986][T28125] IPv6: NLM_F_CREATE should be set when creating new route
[  440.392152][T28125] IPv6: NLM_F_CREATE should be set when creating new route
[  440.479024][T28132] xt_nfacct: accounting object `syz1' does not exists
[  440.519259][T28135] netlink: 'syz.2.7198': attribute type 4 has an invalid length.
[  440.828551][T28168] netlink: 'syz.1.7206': attribute type 10 has an invalid length.
[  440.933675][T28181] openvswitch: netlink: Missing valid actions attribute.
[  440.936378][T28181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  440.944293][T28181] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  440.948533][T28181] syzkaller0: entered promiscuous mode
[  440.950711][T28181] syzkaller0: entered allmulticast mode
[  441.000379][T28180] tipc: Resetting bearer <eth:syzkaller0>
[  441.018408][T28180] tipc: Disabling bearer <eth:syzkaller0>
[  441.131326][T28200] syzkaller1: entered promiscuous mode
[  441.133227][T28200] syzkaller1: entered allmulticast mode
[  441.224080][T28198] lo speed is unknown, defaulting to 1000
[  441.273622][T28203] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  441.944727][T28223] xt_l2tp: v2 doesn't support IP mode
[  442.391821][T28270] __nla_validate_parse: 22 callbacks suppressed
[  442.391834][T28270] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7241'.
[  442.651537][T28297] IPv6: Can't replace route, no match found
[  443.201413][T28302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7253'.
[  443.204191][T28302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7253'.
[  443.338118][T28304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7254'.
[  443.358621][T28304] bridge17: entered promiscuous mode
[  443.361467][T28304] bridge17: entered allmulticast mode
[  443.396589][T28314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7256'.
[  443.538179][T28328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7261'.
[  443.615481][T28339] validate_nla: 1 callbacks suppressed
[  443.615496][T28339] netlink: 'syz.2.7263': attribute type 6 has an invalid length.
[  443.622384][T28339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7263'.
[  443.625981][T28339] netlink: 'syz.2.7263': attribute type 6 has an invalid length.
[  443.628392][T28339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7263'.
[  443.632531][T28339] netlink: 'syz.2.7263': attribute type 6 has an invalid length.
[  443.637659][T28339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7263'.
[  443.640820][T28339] netlink: 'syz.2.7263': attribute type 6 has an invalid length.
[  443.646253][T28339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7263'.
[  443.652837][T28339] netlink: 'syz.2.7263': attribute type 6 has an invalid length.
[  443.656583][T28339] netlink: 'syz.2.7263': attribute type 6 has an invalid length.
[  443.661487][T28339] netlink: 'syz.2.7263': attribute type 6 has an invalid length.
[  443.664477][T28339] netlink: 'syz.2.7263': attribute type 6 has an invalid length.
[  443.667350][T28339] netlink: 'syz.2.7263': attribute type 6 has an invalid length.
[  443.677307][T28339] netlink: 'syz.2.7263': attribute type 6 has an invalid length.
[  443.744378][T28350] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  443.883120][T28365] netem: incorrect gi model size
[  443.885032][T28365] netem: change failed
[  444.004896][T28380] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 56255 - 0
[  444.007389][T28380] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 56255 - 0
[  444.022561][T28380] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 56255 - 0
[  444.025229][T28380] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 56255 - 0
[  444.027822][T28380] geneve5: entered promiscuous mode
[  444.031806][T28380] geneve5: entered allmulticast mode
[  444.119541][T28389] delete_channel: no stack
[  444.150004][T28388] No such timeout policy "syz0"
[  444.178850][T28390] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  444.679438][ T5223] Bluetooth: hci2: command 0x0419 tx timeout
[  444.995994][T28412] sctp: [Deprecated]: syz.1.7287 (pid 28412) Use of int in max_burst socket option.
[  444.995994][T28412] Use struct sctp_assoc_value instead
[  445.043083][T28416] 0: renamed from hsr_slave_1
[  445.047071][T28416] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  445.085640][T28422] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20002
[  445.123861][T28425] veth0_vlan: left allmulticast mode
[  445.365915][T28466] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20005
[  445.414521][T28468] bridge19: port 1(veth21) entered blocking state
[  445.418608][T28468] bridge19: port 1(veth21) entered disabled state
[  445.420963][T28468] veth21: entered allmulticast mode
[  445.423568][T28468] veth21: entered promiscuous mode
[  445.442928][T28468] bridge19: port 2(veth0_to_bond) entered blocking state
[  445.445491][T28468] bridge19: port 2(veth0_to_bond) entered disabled state
[  445.447923][T28468] veth0_to_bond: entered allmulticast mode
[  445.453468][T28468] veth0_to_bond: entered promiscuous mode
[  445.887098][T28499] : renamed from vlan0
[  446.486243][T28567] x_tables: duplicate underflow at hook 1
[  446.735018][T28583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  446.824741][T28590] openvswitch: netlink: IP tunnel dst address not specified
[  446.838404][T28576] lo speed is unknown, defaulting to 1000
[  446.910151][T28592] block nbd2: shutting down sockets
[  447.105318][T28604] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  447.444415][T28623] __nla_validate_parse: 91 callbacks suppressed
[  447.444428][T28623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7356'.
[  447.620049][T28633] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  447.623771][T28633] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  447.627009][T28633] bond0: (slave ipvlan1): Error -95 calling set_mac_address
[  448.557399][T28679] syzkaller1: entered promiscuous mode
[  448.559154][T28679] syzkaller1: entered allmulticast mode
[  448.595267][T28683] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  448.600071][T28683] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  448.603961][T28683] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  448.746086][T28705] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7381'.
[  448.826387][T28716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7380'.
[  448.962511][T28725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7383'.
[  449.263122][T28733] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7386'.
[  449.395605][T28742] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  449.429721][T28745] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  449.440296][T28745] validate_nla: 73 callbacks suppressed
[  449.440312][T28745] netlink: 'syz.0.7391': attribute type 58 has an invalid length.
[  449.444803][T28745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7391'.
[  449.708409][T28759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7394'.
[  449.713204][T28759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7394'.
[  449.864759][T28771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  449.867763][T28771] syzkaller0: entered promiscuous mode
[  449.874837][T28771] syzkaller0: entered allmulticast mode
[  449.882597][T28771] tipc: Resetting bearer <eth:syzkaller0>
[  449.888144][T28770] tipc: Resetting bearer <eth:syzkaller0>
[  449.914860][T28779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7396'.
[  449.920775][T28770] tipc: Disabling bearer <eth:syzkaller0>
[  450.153417][T28803] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  450.183058][T28807] netlink: 'syz.1.7403': attribute type 21 has an invalid length.
[  450.185451][T28807] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7403'.
[  450.307293][T28825] netlink: 'syz.2.7407': attribute type 1 has an invalid length.
[  450.324372][T28827] ipt_ECN: cannot use operation on non-tcp rule
[  450.342903][T28825] bond22: entered promiscuous mode
[  450.344798][T28825] 8021q: adding VLAN 0 to HW filter on device bond22
[  450.370205][T28825] batadv0: entered promiscuous mode
[  450.371827][T28825] batadv0: entered allmulticast mode
[  450.374615][T28825] 8021q: adding VLAN 0 to HW filter on device batadv0
[  450.379155][T28825] bond22: (slave batadv0): making interface the new active one
[  450.385040][T28825] bond22: (slave batadv0): Enslaving as an active interface with an up link
[  450.840130][ T5223] Bluetooth: hci2: command 0x0419 tx timeout
[  450.922361][T28876] netlink: 'syz.2.7423': attribute type 3 has an invalid length.
[  450.975268][T28883] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  451.076560][T28891] can: request_module (can-proto-5) failed.
[  452.095525][T28993] openvswitch: netlink: EtherType 10 is less than min 600
[  452.101336][T28993] netlink: 'syz.1.7458': attribute type 9 has an invalid length.
[  452.104903][T28995] netlink: 'syz.0.7459': attribute type 2 has an invalid length.
[  452.107149][T28995] netlink: 'syz.0.7459': attribute type 1 has an invalid length.
[  452.174175][T29001] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  452.394179][T29033] bridge20: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  452.452096][T29037] xt_l2tp: v2 sid > 0xffff: 4294901760
[  452.552534][T29046] ip6t_srh: unknown srh match flags  4000
[  452.555936][T29046] netlink: 'syz.0.7474': attribute type 1 has an invalid length.
[  452.558205][T29046] __nla_validate_parse: 46 callbacks suppressed
[  452.558212][T29046] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7474'.
[  452.568747][T29046] NCSI netlink: No device for ifindex 0
[  452.572902][T29046] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  452.763242][T29066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7481'.
[  452.767522][T29066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7481'.
[  452.842399][T29074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7483'.
[  452.919427][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  452.952102][T29074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7483'.
[  453.323952][T29130] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  453.326360][T29130] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  453.328692][T29130] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  453.331203][T29130] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  453.448926][T29143] netlink: 'syz.1.7503': attribute type 1 has an invalid length.
[  453.468565][T29143] 8021q: adding VLAN 0 to HW filter on device bond22
[  453.485097][T29143] 8021q: adding VLAN 0 to HW filter on device bond22
[  453.487582][T29143] bond22: (slave vxcan5): The slave device specified does not support setting the MAC address
[  453.492611][T29143] bond22: (slave vxcan5): Error -95 calling set_mac_address
[  453.633095][T29154] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7506'.
[  453.688276][T29155] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7506'.
[  453.694686][T29154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7506'.
[  453.740870][T29157] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  453.791579][T29161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7509'.
[  453.795882][T29161] xt_TCPMSS: Only works on TCP SYN packets
[  453.830924][T29166] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  453.972493][T29171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7512'.
[  454.556870][T29209] netlink: 'syz.2.7522': attribute type 13 has an invalid length.
[  454.580564][T29209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  454.733574][T29212] lo speed is unknown, defaulting to 1000
[  455.599600][T29227] sctp: [Deprecated]: syz.1.7526 (pid 29227) Use of struct sctp_assoc_value in delayed_ack socket option.
[  455.599600][T29227] Use struct sctp_sack_info instead
[  455.691641][T29240] openvswitch: netlink: Flow key attr not present in new flow.
[  456.185132][T29256] ipvlan1: entered promiscuous mode
[  456.642929][T29303] netlink: 'syz.2.7548': attribute type 10 has an invalid length.
[  457.120811][T29349] netlink: 'syz.2.7571': attribute type 178 has an invalid length.
[  457.126002][T29349] can: request_module (can-proto-0) failed.
[  457.402736][   T11] block nbd3: Possible stuck request ffff888020520000: control (read@0,1024B). Runtime 180 seconds
[  457.407078][   T11] block nbd3: Possible stuck request ffff888020520200: control (read@1024,1024B). Runtime 180 seconds
[  457.410801][   T11] block nbd3: Possible stuck request ffff888020520400: control (read@2048,1024B). Runtime 180 seconds
[  457.414372][   T11] block nbd3: Possible stuck request ffff888020520600: control (read@3072,1024B). Runtime 180 seconds
[  457.956239][T29386] netlink: 'syz.1.7583': attribute type 3 has an invalid length.
[  457.958632][T29386] __nla_validate_parse: 21 callbacks suppressed
[  457.958639][T29386] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7583'.
[  457.977034][T29386] !: renamed from dummy0
[  457.985757][T29384] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  458.125729][T29405] pim6reg1: entered promiscuous mode
[  458.127503][T29405] pim6reg1: entered allmulticast mode
[  458.185531][T29408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7586'.
[  458.188342][T29408] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7586'.
[  458.191758][T29408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7586'.
[  458.291911][T29419] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7589'.
[  458.442513][T29437] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7595'.
[  458.474919][T29440] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.7596'.
[  458.539041][T29451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7599'.
[  458.581066][T29456] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7601'.
[  458.682236][   T11] block nbd0: Possible stuck request ffff888020410000: control (read@0,1024B). Runtime 270 seconds
[  458.685496][   T11] block nbd0: Possible stuck request ffff888020410200: control (read@1024,1024B). Runtime 270 seconds
[  458.688649][   T11] block nbd0: Possible stuck request ffff888020410400: control (read@2048,1024B). Runtime 270 seconds
[  458.692049][   T11] block nbd0: Possible stuck request ffff888020410600: control (read@3072,1024B). Runtime 270 seconds
[  458.706306][T29471] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7605'.
[  458.765402][T29483] netlink: 'syz.1.7610': attribute type 3 has an invalid length.
[  459.052185][T29528] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  459.054954][T29528] tipc: Disabling bearer <udp:syz2>
[  459.693882][T29587] bond23: entered promiscuous mode
[  459.697065][T29587] 8021q: adding VLAN 0 to HW filter on device bond23
[  459.826300][T29587] bond23 (unregistering): Released all slaves
[  459.982879][T29612] netlink: 'syz.2.7636': attribute type 11 has an invalid length.
[  459.985189][T29610] netlink: 'syz.0.7637': attribute type 1 has an invalid length.
[  459.987912][T29610] netlink: 'syz.0.7637': attribute type 3 has an invalid length.
[  460.140153][T29610] lo speed is unknown, defaulting to 1000
[  460.463671][T29628] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  460.737060][T29650] netlink: 'syz.1.7650': attribute type 32 has an invalid length.
[  460.746183][T29650] netlink: 'syz.1.7650': attribute type 32 has an invalid length.
[  461.027409][T29680] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.046617][T29680] netlink: 'syz.2.7658': attribute type 32 has an invalid length.
[  461.049220][T29680] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  461.302489][T29693] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  461.305074][T29693] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  461.307561][T29693] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  461.313388][T29693] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  461.346919][T29695] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  461.351284][T29695] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  461.382129][T29697] netlink: 'syz.2.7664': attribute type 4 has an invalid length.
[  461.436503][T29703] netlink: 'syz.2.7666': attribute type 11 has an invalid length.
[  461.439072][T29703] netlink: 'syz.2.7666': attribute type 4 has an invalid length.
[  461.556918][   T33] audit: type=1804 audit(1752892592.897:14): pid=29709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7669" name="/newroot/2463/cgroup.controllers" dev="tmpfs" ino=12552 res=1 errno=0
[  461.564215][   T33] audit: type=1800 audit(1752892592.897:15): pid=29709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7669" name="cgroup.controllers" dev="tmpfs" ino=12552 res=0 errno=0
[  461.809853][ T5862] nci: nci_rsp_packet: unknown rsp opcode 0x204
[  461.845374][T29742] openvswitch: netlink: nsh attr 0 has unexpected len 145 expected 0
[  461.847802][T29742] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  461.861105][T29745] x_tables: duplicate underflow at hook 2
[  461.923943][T29748] netlink: 'syz.1.7681': attribute type 4 has an invalid length.
[  461.999394][    C0] af_packet: tpacket_rcv: packet too big, clamped from 12 to 4294967272. macoff=96
[  462.969220][T29800] __nla_validate_parse: 66 callbacks suppressed
[  462.969234][T29800] netlink: 212 bytes leftover after parsing attributes in process `syz.0.7695'.
[  463.197042][T29815] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  463.200079][T29815] syzkaller0: entered promiscuous mode
[  463.201895][T29815] syzkaller0: entered allmulticast mode
[  463.251722][T29819] netlink: 'syz.1.7704': attribute type 4 has an invalid length.
[  463.260041][ T5863] lo speed is unknown, defaulting to 1000
[  463.263209][ T5863] syz0: Port: 1 Link DOWN
[  463.265466][ T5863] lo speed is unknown, defaulting to 1000
[  463.294142][T29822] x_tables: duplicate underflow at hook 3
[  463.297308][T29822] "syz.1.7705" (29822) uses obsolete ecb(arc4) skcipher
[  463.378677][T29824] netlink: 'syz.1.7706': attribute type 1 has an invalid length.
[  463.778558][T29827] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7707'.
[  463.982210][T29850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7712'.
[  463.988954][T29850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7712'.
[  464.149038][T29857] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7716'.
[  464.302911][T29870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7721'.
[  464.333593][T29870] 8021q: adding VLAN 0 to HW filter on device bond23
[  464.376510][T29870] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7721'.
[  464.440896][T29880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7724'.
[  464.495023][T29882] 8021q: adding VLAN 0 to HW filter on device bond24
[  464.497593][T29882] bridge0: port 1(bond24) entered blocking state
[  464.503123][T29882] bridge0: port 1(bond24) entered disabled state
[  464.505240][T29882] bond24: entered allmulticast mode
[  464.508155][T29882] bond24: entered promiscuous mode
[  464.510837][T29882] bridge0: port 1(bond24) entered blocking state
[  464.513081][T29882] bridge0: port 1(bond24) entered forwarding state
[  464.588852][T29894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7729'.
[  464.844131][T29906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7733'.
[  464.847019][T29906] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  464.854539][T29906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  464.911711][T10518] bridge0: port 1(bond24) entered disabled state
[  465.750173][T29936] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  465.761496][T29936] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  466.160450][T29990] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  466.163494][T29990] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  466.517279][T30025] validate_nla: 2 callbacks suppressed
[  466.517291][T30025] netlink: 'syz.2.7772': attribute type 1 has an invalid length.
[  466.577940][T30025] 8021q: adding VLAN 0 to HW filter on device bond24
[  466.632761][T30029] 8021q: adding VLAN 0 to HW filter on device bond24
[  466.636548][T30029] bond24: (slave vxcan1): The slave device specified does not support setting the MAC address
[  466.639472][T30032] netlink: 'syz.0.7774': attribute type 32 has an invalid length.
[  466.642814][T30029] bond24: (slave vxcan1): Error -95 calling set_mac_address
[  466.751061][T30043] 8021q: VLANs not supported on gre0
[  466.858269][T30052] syzkaller1: entered promiscuous mode
[  466.860958][T30052] syzkaller1: entered allmulticast mode
[  467.425239][T30095] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  467.653189][T30108] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  467.681880][T30110] delete_channel: no stack
[  467.895874][T30116] syzkaller1: entered promiscuous mode
[  467.897658][T30116] syzkaller1: entered allmulticast mode
[  468.414641][T30162] __nla_validate_parse: 18 callbacks suppressed
[  468.414654][T30162] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7812'.
[  468.634450][T30182] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7817'.
[  468.642322][T30182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7817'.
[  468.881507][T30207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7823'.
[  468.896038][T30207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7823'.
[  468.978955][T30212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7825'.
[  468.985299][T30210] GUP no longer grows the stack in syz.2.7824 (30210): 200000006000-20000000a000 (200000005000)
[  468.988722][T30210] CPU: 0 UID: 0 PID: 30210 Comm: syz.2.7824 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  468.988736][T30210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  468.988742][T30210] Call Trace:
[  468.988747][T30210]  <TASK>
[  468.988752][T30210]  dump_stack_lvl+0x189/0x250
[  468.988772][T30210]  ? __pfx_dump_stack_lvl+0x10/0x10
[  468.988783][T30210]  ? __pfx__printk+0x10/0x10
[  468.988795][T30210]  ? find_vma+0xe7/0x160
[  468.988816][T30210]  __get_user_pages+0x2a60/0x30b0
[  468.988858][T30210]  ? __pfx___get_user_pages+0x10/0x10
[  468.988870][T30210]  ? __gup_longterm_locked+0xbf7/0x15b0
[  468.988882][T30210]  ? down_read_killable+0x1d1/0x350
[  468.988893][T30210]  ? try_get_folio+0x633/0x660
[  468.988906][T30210]  __gup_longterm_locked+0xd66/0x15b0
[  468.988920][T30210]  ? try_grab_folio_fast+0x1be/0x4f0
[  468.988938][T30210]  ? gup_fast_fallback+0x1afc/0x2260
[  468.988951][T30210]  gup_fast_fallback+0x1cd4/0x2260
[  468.988988][T30210]  ? __pfx_gup_fast_fallback+0x10/0x10
[  468.988998][T30210]  ? trace_contention_end+0x39/0x120
[  468.989012][T30210]  ? __mutex_lock+0x330/0xe80
[  468.989023][T30210]  ? futex_unqueue+0x22/0x240
[  468.989036][T30210]  ? futex_unqueue+0x22/0x240
[  468.989045][T30210]  ? futex_unqueue+0x22/0x240
[  468.989077][T30210]  ? is_valid_gup_args+0x11f/0x200
[  468.989089][T30210]  ? get_user_pages_fast+0x4d/0xb0
[  468.989103][T30210]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  468.989120][T30210]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  468.989127][T30210]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  468.989141][T30210]  ? wait_for_space+0x24d/0x2d0
[  468.989158][T30210]  iov_iter_get_pages2+0x5e/0xa0
[  468.989172][T30210]  __se_sys_vmsplice+0x548/0x10d0
[  468.989194][T30210]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  468.989206][T30210]  ? __pfx_futex_wait+0x10/0x10
[  468.989221][T30210]  ? __lock_acquire+0xab9/0xd20
[  468.989246][T30210]  ? do_pipe2+0xf7/0x170
[  468.989256][T30210]  ? rcu_is_watching+0x15/0xb0
[  468.989268][T30210]  ? do_syscall_64+0xbe/0x3b0
[  468.989295][T30210]  do_syscall_64+0xfa/0x3b0
[  468.989305][T30210]  ? lockdep_hardirqs_on+0x9c/0x150
[  468.989314][T30210]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.989323][T30210]  ? exc_page_fault+0x9f/0xf0
[  468.989333][T30210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.989343][T30210] RIP: 0033:0x7eff9c38e9a9
[  468.989353][T30210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  468.989361][T30210] RSP: 002b:00007eff9a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  468.989373][T30210] RAX: ffffffffffffffda RBX: 00007eff9c5b5fa0 RCX: 00007eff9c38e9a9
[  468.989380][T30210] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e
[  468.989386][T30210] RBP: 00007eff9c410d69 R08: 0000000000000000 R09: 0000000000000000
[  468.989391][T30210] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  468.989397][T30210] R13: 0000000000000000 R14: 00007eff9c5b5fa0 R15: 00007fff5edaae98
[  468.989412][T30210]  </TASK>
[  469.134689][T30212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7825'.
[  469.137646][T30212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7825'.
[  469.147803][T30212] netlink: 'syz.0.7825': attribute type 18 has an invalid length.
[  469.317257][T30230] netlink: 'syz.2.7828': attribute type 1 has an invalid length.
[  469.348407][T30230] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  469.610024][   T11] block nbd1: Possible stuck request ffff888020440000: control (read@0,1024B). Runtime 270 seconds
[  469.613299][   T11] block nbd1: Possible stuck request ffff888020440200: control (read@1024,1024B). Runtime 270 seconds
[  469.616571][   T11] block nbd1: Possible stuck request ffff888020440400: control (read@2048,1024B). Runtime 270 seconds
[  469.620313][   T11] block nbd1: Possible stuck request ffff888020440600: control (read@3072,1024B). Runtime 270 seconds
[  469.745140][T30247] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7834'.
[  469.755822][T30247] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  469.825426][T30259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7837'.
[  469.982444][T30272] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  469.986030][T30274] nft_compat: unsupported protocol 0
[  469.988694][T30274] erspan0: hsr_addr_subst_dest: Unknown node
[  469.989249][T30275] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  469.991113][T30274] batadv_slave_1: hsr_addr_subst_dest: Unknown node
[  470.249096][T30295] 8021q: adding VLAN 0 to HW filter on device bond19
[  470.277144][T30295] bond19: (slave macvlan1): Enslaving as a backup interface with a down link
[  470.332061][T30295] team0: Port device vlan0 removed
[  470.342681][T30295] bond24: left allmulticast mode
[  470.348565][T30295] bond24: left promiscuous mode
[  470.354153][T30295] bridge0: port 1(bond24) entered disabled state
[  470.371704][T30295] bond19: (slave macvlan1): Releasing backup interface
[  470.401385][T30295] pim6reg1: entered promiscuous mode
[  470.403346][T30295] pim6reg1: entered allmulticast mode
[  470.656355][T30328] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  470.660071][T30328] tipc: Resetting bearer <eth:syzkaller0>
[  470.905386][T30328] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  471.692030][T30418] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  471.699093][T30418] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 56255 - 0
[  471.765612][T30418] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  471.768773][T30418] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 56255 - 0
[  471.814182][T30418] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  471.817562][T30418] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 56255 - 0
[  471.872713][T30418] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  471.876014][T30418] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 56255 - 0
[  471.888369][T30423] lo speed is unknown, defaulting to 1000
[  471.936819][T30418] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  471.943219][T30418] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 56255 - 0
[  471.958753][T30418] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  471.962484][T30418] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 56255 - 0
[  471.967422][T30426] syzkaller1: entered promiscuous mode
[  471.969232][T30426] syzkaller1: entered allmulticast mode
[  472.006378][T30418] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  472.009055][T30418] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 56255 - 0
[  472.021189][T30418] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  472.023777][T30418] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 56255 - 0
[  472.190578][T30438] bridge15: entered promiscuous mode
[  472.192567][T30438] bridge15: entered allmulticast mode
[  472.257327][T30441] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  472.463772][T30461] netlink: 'syz.0.7895': attribute type 1 has an invalid length.
[  473.106788][T30483] x_tables: duplicate underflow at hook 2
[  473.535607][T30509] __nla_validate_parse: 18 callbacks suppressed
[  473.535620][T30509] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7909'.
[  473.856460][T30519] tipc: New replicast peer: 255.255.255.255
[  473.859099][T30519] tipc: Enabled bearer <udp:syz2>, priority 10
[  473.873493][T30519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7912'.
[  474.582959][T30528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7914'.
[  474.585760][T30528] openvswitch: netlink: Flow actions attr not present in new flow.
[  474.748763][T30540] mac80211_hwsim hwsim2 ": renamed from wlan0 (while UP)
[  474.837384][T30548] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7920'.
[  474.840756][T30548] 1: renamed from c0
[  474.843732][T30548] 1: entered allmulticast mode
[  474.845744][T30548] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check.
[  475.027701][T30557] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7923'.
[  475.286463][T30566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7923'.
[  475.605408][T30568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7924'.
[  475.667040][ T5281] udevd[5281]: worker [5843] /devices/virtual/block/nbd3 timeout; kill it
[  475.671136][ T5281] udevd[5281]: seq 17552 '/devices/virtual/block/nbd3' killed
[  475.671978][T30568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7924'.
[  475.908674][T30581] can: request_module (can-proto-3) failed.
[  476.203329][T30584] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  476.635290][T30590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7929'.
[  476.676348][T30592] netlink: 212 bytes leftover after parsing attributes in process `syz.1.7930'.
[  476.931084][T30615] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  476.937561][T30615] 8021q: VLANs not supported on xfrm0
[  477.171487][T30619] lo speed is unknown, defaulting to 1000
[  477.253901][T30630] netlink: 'syz.2.7942': attribute type 1 has an invalid length.
[  477.714450][T30655] sctp: [Deprecated]: syz.1.7949 (pid 30655) Use of int in maxseg socket option.
[  477.714450][T30655] Use struct sctp_assoc_value instead
[  477.799731][ T5223] Bluetooth: hci2: command 0x0419 tx timeout
[  478.076482][T30675] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  478.437966][T30693] 8021q: adding VLAN 0 to HW filter on device bond26
[  478.455252][T30693] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  478.458926][T30693] bond26: (slave macvlan0): Enslaving as a backup interface with a down link
[  478.468527][T30693] tipc: Resetting bearer <eth:syzkaller0>
[  478.471463][T30693] bond22: (slave batadv0): Releasing active interface
[  478.478984][T30693] bond26: (slave macvlan0): Releasing backup interface
[  478.626365][T30700] delete_channel: no stack
[  478.637811][T30700] ip6_vti0: left promiscuous mode
[  478.643283][T30700] __nla_validate_parse: 12 callbacks suppressed
[  478.643293][T30700] netlink: 136 bytes leftover after parsing attributes in process `syz.1.7964'.
[  478.647917][T30700] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  478.758472][T30715] netlink: 'syz.2.7970': attribute type 16 has an invalid length.
[  478.761246][T30715] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.7970'.
[  478.764794][T30715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7970'.
[  478.913353][T30728] sctp: [Deprecated]: syz.2.7973 (pid 30728) Use of int in maxseg socket option.
[  478.913353][T30728] Use struct sctp_assoc_value instead
[  478.947374][T30735] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7975'.
[  479.039026][T30744] rdma_rxe: rxe_newlink: failed to add veth1_to_bond
[  479.081825][T30747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7980'.
[  479.102331][T30749] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7981'.
[  479.109949][T30753] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7983'.
[  479.198681][T30765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7985'.
[  479.198681][T30762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7985'.
[  479.255248][T30774] netlink: 'syz.2.7989': attribute type 4 has an invalid length.
[  479.258909][T30772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7988'.
[  479.265638][T30774] netlink: 'syz.2.7989': attribute type 4 has an invalid length.
[  479.274168][T30774] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  479.304772][T30776] bridge0: port 1(vlan4) entered blocking state
[  479.306876][T30776] bridge0: port 1(vlan4) entered disabled state
[  479.310069][T30776] vlan4: entered allmulticast mode
[  479.311669][T30776] bond0: entered allmulticast mode
[  479.317567][T30776] vlan4: entered promiscuous mode
[  479.319062][T30776] bond0: entered promiscuous mode
[  479.350570][T30782] IPVS: Unknown mcast interface: syz_tun
[  479.352736][T30782] IPVS: Unknown mcast interface: syz_tun
[  479.554520][T30797] netlink: 'syz.1.7997': attribute type 15 has an invalid length.
[  479.743766][T30813] 8021q: adding VLAN 0 to HW filter on device bond33
[  479.753948][T30813] veth0_to_bond: left allmulticast mode
[  479.755907][T30813] veth0_to_bond: left promiscuous mode
[  479.758610][T30813] bridge19: port 2(veth0_to_bond) entered disabled state
[  479.775008][T30813] veth21: left allmulticast mode
[  479.776615][T30813] veth21: left promiscuous mode
[  479.778273][T30813] bridge19: port 1(veth21) entered disabled state
[  479.780702][T18750] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  479.788369][T30813] vlan4: left allmulticast mode
[  479.792598][T30813] bond0: left allmulticast mode
[  479.794487][T30813] vlan4: left promiscuous mode
[  479.796220][T30813] bond0: left promiscuous mode
[  479.798046][T30813] bridge0: port 1(vlan4) entered disabled state
[  479.817955][T30813] pim6reg1: entered promiscuous mode
[  479.821196][T30813] pim6reg1: entered allmulticast mode
[  479.898714][T30825] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  480.103603][T30839] bond_slave_1: mtu greater than device maximum
[  480.200722][T30841] netlink: 'syz.0.8013': attribute type 1 has an invalid length.
[  480.203880][T30841] netlink: 'syz.0.8013': attribute type 1 has an invalid length.
[  480.260570][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  480.264173][T30847] dvmrp0: entered allmulticast mode
[  480.585247][T30870] 8021q: adding VLAN 0 to HW filter on device bond34
[  480.719926][T30874] bond33: option mode: unable to set because the bond device is up
[  480.733911][T30874] pim6reg1: entered promiscuous mode
[  480.735627][T30874] pim6reg1: entered allmulticast mode
[  480.750713][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  480.839724][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  480.852137][T30883] netlink: 'syz.0.8023': attribute type 11 has an invalid length.
[  481.138538][T30918] xt_hashlimit: size too large, truncated to 1048576
[  481.336480][T30933] tc_dump_action: action bad kind
[  483.693536][T30993] __nla_validate_parse: 42 callbacks suppressed
[  483.693547][T30993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8056'.
[  483.760171][T30997] bridge23: entered allmulticast mode
[  483.765713][T30997] netlink: 284 bytes leftover after parsing attributes in process `syz.2.8057'.
[  483.797023][T31001] netlink: 'syz.2.8058': attribute type 21 has an invalid length.
[  483.800956][T31001] netlink: 'syz.2.8058': attribute type 22 has an invalid length.
[  483.803578][T31001] netlink: 'syz.2.8058': attribute type 23 has an invalid length.
[  483.806009][T31001] netlink: 'syz.2.8058': attribute type 25 has an invalid length.
[  483.808462][T31001] netlink: 'syz.2.8058': attribute type 26 has an invalid length.
[  483.814469][T31001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8058'.
[  483.856336][T31005] openvswitch: netlink: IP tunnel dst address not specified
[  483.891224][T31005] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8059'.
[  483.894097][T31005] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8059'.
[  483.896784][T31005] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  483.937663][T31007] netlink: 'syz.2.8060': attribute type 1 has an invalid length.
[  483.997334][T31008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8060'.
[  484.001302][T31008] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  484.003618][T31008] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  484.006020][T31008] tipc: Resetting bearer <eth:syzkaller0>
[  484.079752][T31012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8061'.
[  484.158750][T31019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8063'.
[  484.159270][T31020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8063'.
[  484.197021][T31024] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.8064'.
[  484.201186][T31024] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  484.204356][T31024] openvswitch: netlink: Duplicate key (type 0).
[  484.358851][T31037] bond19: option mode: unable to set because the bond device is up
[  484.375200][T31037] bond19: (slave macvlan3): Enslaving as a backup interface with a down link
[  484.387113][T31037] bond19: (slave macvlan3): Releasing backup interface
[  484.401826][T31037] pim6reg1: entered promiscuous mode
[  484.403510][T31037] pim6reg1: entered allmulticast mode
[  484.490744][T31049] syzkaller1: entered promiscuous mode
[  484.492557][T31049] syzkaller1: entered allmulticast mode
[  484.500534][T31049] xt_policy: output policy not valid in PREROUTING and INPUT
[  484.650544][T31062] netlink: 'syz.1.8074': attribute type 4 has an invalid length.
[  484.910972][T31068] bond26: option mode: unable to set because the bond device is up
[  484.916297][T31068] tipc: Resetting bearer <eth:syzkaller0>
[  484.919576][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  484.936729][T31071] netlink: 'syz.1.8078': attribute type 1 has an invalid length.
[  484.989724][T31068] pim6reg1: entered promiscuous mode
[  484.991382][T31068] pim6reg1: entered allmulticast mode
[  485.184079][T31067] lo speed is unknown, defaulting to 1000
[  485.790263][T31102] netlink: 'syz.0.8088': attribute type 9 has an invalid length.
[  485.854086][T31105] netlink: 'syz.2.8089': attribute type 1 has an invalid length.
[  486.014670][T31117] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1294) !
[  486.156144][T31127] tipc: Resetting bearer <eth:syzkaller0>
[  486.288610][T31137] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  486.306009][T31137] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  486.325679][T31137] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  486.333680][T31137] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  486.339857][T31137] tipc: Resetting bearer <eth:syzkaller0>
[  486.368867][T31145] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  486.533253][T31166] bond27: (slave ip6gretap4): Enslaving as a backup interface with an up link
[  486.538947][T31166] tipc: Resetting bearer <eth:syzkaller0>
[  486.551692][T31166] bond27: (slave ip6gretap4): Releasing backup interface
[  486.674840][T31184] bond33: option mode: unable to set because the bond device is up
[  486.692434][T31184] pim6reg1: entered promiscuous mode
[  486.694347][T31184] pim6reg1: entered allmulticast mode
[  486.712361][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  486.957886][T31218] IPVS: Unknown mcast interface: vcan0
[  487.047864][T31226] bond33: option mode: unable to set because the bond device is up
[  487.077411][T31226] pim6reg1: entered promiscuous mode
[  487.079066][T31226] pim6reg1: entered allmulticast mode
[  487.082996][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  487.209154][T31250] xt_hashlimit: size too large, truncated to 1048576
[  487.223794][T31251] SET target dimension over the limit!
[  487.449890][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  487.502007][   T11] block nbd3: Possible stuck request ffff888020520000: control (read@0,1024B). Runtime 210 seconds
[  487.511209][   T11] block nbd3: Possible stuck request ffff888020520200: control (read@1024,1024B). Runtime 210 seconds
[  487.515481][   T11] block nbd3: Possible stuck request ffff888020520400: control (read@2048,1024B). Runtime 210 seconds
[  487.521787][   T11] block nbd3: Possible stuck request ffff888020520600: control (read@3072,1024B). Runtime 210 seconds
[  487.844494][T31312] 8021q: adding VLAN 0 to HW filter on device bond25
[  488.306083][T31340] Unknown options in mask 700
[  488.460967][T31344] lo speed is unknown, defaulting to 1000
[  488.640904][T31348] veth30: entered allmulticast mode
[  488.772459][T31351] xt_CT: You must specify a L4 protocol and not use inversions on it
[  488.778820][   T11] block nbd0: Possible stuck request ffff888020410000: control (read@0,1024B). Runtime 300 seconds
[  488.782369][   T11] block nbd0: Possible stuck request ffff888020410200: control (read@1024,1024B). Runtime 300 seconds
[  488.786033][   T11] block nbd0: Possible stuck request ffff888020410400: control (read@2048,1024B). Runtime 300 seconds
[  488.792319][   T11] block nbd0: Possible stuck request ffff888020410600: control (read@3072,1024B). Runtime 300 seconds
[  489.022795][T31361] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  489.026197][T31361] __nla_validate_parse: 29 callbacks suppressed
[  489.026207][T31361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8163'.
[  489.041659][T31361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8163'.
[  489.064624][T31363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8164'.
[  489.094157][T31363] team1: entered promiscuous mode
[  489.096342][T31363] team1: entered allmulticast mode
[  489.295932][T31390] sctp: [Deprecated]: syz.2.8170 (pid 31390) Use of struct sctp_assoc_value in delayed_ack socket option.
[  489.295932][T31390] Use struct sctp_sack_info instead
[  489.315214][T31390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8170'.
[  489.407963][T31396] netlink: 3672 bytes leftover after parsing attributes in process `syz.1.8173'.
[  489.414811][T31396] lo: left promiscuous mode
[  489.417105][T31396] tunl0: left promiscuous mode
[  489.420446][T31396] gre0: left promiscuous mode
[  489.437402][T31396] ip_vti0: left promiscuous mode
[  489.441803][T31396] sit0: left promiscuous mode
[  489.453363][T31396] ip6tnl0: left promiscuous mode
[  489.462334][T31396] ip6gre0: left promiscuous mode
[  489.467568][T31396] ip6gretap0: left promiscuous mode
[  489.485575][T31396] team0: left promiscuous mode
[  489.493870][T31396] nlmon0: left promiscuous mode
[  489.497313][T31396] caif0: left promiscuous mode
[  489.499261][T31396] veth1: left promiscuous mode
[  489.501026][T31396] wg1: left promiscuous mode
[  489.502993][T31396] bridge_slave_0: left promiscuous mode
[  489.506393][T31396] veth1_to_team: left allmulticast mode
[  489.511400][T31396] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  489.513883][T31396] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  489.516337][T31396] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  489.518781][T31396] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  489.529086][T31396] D: left promiscuous mode
[  489.531290][T31396] D: left allmulticast mode
[  489.533043][T31396] macvlan2: left promiscuous mode
[  489.534672][T31396] macvlan2: left allmulticast mode
[  489.537192][T31396] bond5: left promiscuous mode
[  489.538750][T31396] bond5: left allmulticast mode
[  489.543626][T31396] ip6gre1: left allmulticast mode
[  489.545736][T31396] veth3: left allmulticast mode
[  489.547455][T31396] veth5: left allmulticast mode
[  489.549154][T31396] veth7: left allmulticast mode
[  489.550938][T31396] veth9: left allmulticast mode
[  489.552627][T31396] veth11: left allmulticast mode
[  489.554362][T31396] veth13: left allmulticast mode
[  489.556089][T31396] veth15: left allmulticast mode
[  489.557798][T31396] veth17: left allmulticast mode
[  489.562732][T31396] veth19: left allmulticast mode
[  489.564551][T31396] veth21: left allmulticast mode
[  489.566246][T31396] veth23: left allmulticast mode
[  489.567936][T31396] veth25: left allmulticast mode
[  489.569720][T31396] veth27: left allmulticast mode
[  489.571459][T31396] veth29: left allmulticast mode
[  489.573203][T31396] veth31: left allmulticast mode
[  489.574935][T31396] veth33: left allmulticast mode
[  489.576715][T31396] veth35: left allmulticast mode
[  489.578418][T31396] veth37: left allmulticast mode
[  489.584092][T31396] veth39: left allmulticast mode
[  489.585979][T31396] veth41: left allmulticast mode
[  489.587708][T31396] veth43: left allmulticast mode
[  489.589490][T31396] veth45: left allmulticast mode
[  489.591187][T31396] veth47: left allmulticast mode
[  489.592962][T31396] veth49: left allmulticast mode
[  489.594685][T31396] veth51: left allmulticast mode
[  489.596420][T31396] veth53: left allmulticast mode
[  489.598193][T31396] veth55: left allmulticast mode
[  489.603000][T31396] veth57: left allmulticast mode
[  489.604749][T31396] veth59: left allmulticast mode
[  489.606551][T31396] veth61: left allmulticast mode
[  489.608233][T31396] veth63: left allmulticast mode
[  489.610358][T31396] veth65: left allmulticast mode
[  489.612083][T31396] veth67: left allmulticast mode
[  489.613969][T31396] bridge5: left allmulticast mode
[  489.617530][T31396] bridge6: left promiscuous mode
[  489.619038][T31396] bridge6: left allmulticast mode
[  489.624486][T31396] netdevsim0: left allmulticast mode
[  489.627536][T31396] macsec1: left promiscuous mode
[  489.629031][T31396] macsec1: left allmulticast mode
[  489.631173][T31396] gretap4: left promiscuous mode
[  489.632659][T31396] gretap4: left allmulticast mode
[  489.634832][T31396] bond13: left promiscuous mode
[  489.637166][T31396] bond13: left allmulticast mode
[  489.639578][T31396] bond15: left promiscuous mode
[  489.641142][T31396] batadv2: left promiscuous mode
[  489.642689][T31396] batadv2: left allmulticast mode
[  489.644312][T31396] batadv3: left promiscuous mode
[  489.645871][T31396] batadv3: left allmulticast mode
[  489.648039][T31396] gtp1: left promiscuous mode
[  489.655446][T31396] gtp1: left allmulticast mode
[  489.657494][T31396] bond17: left promiscuous mode
[  489.659204][T31396] batadv4: left promiscuous mode
[  489.661270][T31396] batadv4: left allmulticast mode
[  489.664105][T31396] vlan0: left promiscuous mode
[  489.665565][T31396] gretap0: left promiscuous mode
[  489.667141][T31396] vlan3: left allmulticast mode
[  489.684423][T31396] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 56255 - 0
[  489.687662][T31396] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 56255 - 0
[  489.690516][T31396] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 56255 - 0
[  489.693064][T31396] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 56255 - 0
[  489.695806][T31396] geneve5: left promiscuous mode
[  489.697301][T31396] geneve5: left allmulticast mode
[  489.702107][T31396] tipc: Resetting bearer <eth:syzkaller0>
[  489.704621][T31396] syzkaller0: left promiscuous mode
[  489.706190][T31396] syzkaller0: left allmulticast mode
[  489.726861][T31396] bridge15: left promiscuous mode
[  489.728418][T31396] bridge15: left allmulticast mode
[  489.742645][T31396] team1: left promiscuous mode
[  489.744195][T31396] team1: left allmulticast mode
[  489.749115][T31399] gre19: entered promiscuous mode
[  489.782482][T31404] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  489.869442][T31409] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8176'.
[  489.919502][T31414] validate_nla: 11 callbacks suppressed
[  489.919513][T31414] netlink: 'syz.0.8178': attribute type 6 has an invalid length.
[  489.924022][T31414] netlink: 'syz.0.8178': attribute type 7 has an invalid length.
[  489.926400][T31414] netlink: 'syz.0.8178': attribute type 8 has an invalid length.
[  489.928809][T31414] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8178'.
[  490.053306][T31425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8181'.
[  490.115096][T31430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8182'.
[  490.117933][T31430] vlan0: entered promiscuous mode
[  490.119903][T31430] gretap0: entered promiscuous mode
[  490.150971][T31433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8183'.
[  490.331103][T31445] bridge0: entered allmulticast mode
[  490.586455][T31459] netlink: 'syz.1.8192': attribute type 1 has an invalid length.
[  490.607775][T31459] 8021q: adding VLAN 0 to HW filter on device bond26
[  490.618771][T31459] ipvlan1: entered allmulticast mode
[  490.620653][T31459] bond26: entered allmulticast mode
[  490.623538][T31459] netlink: 'syz.1.8192': attribute type 1 has an invalid length.
[  490.633036][T31459] bond26: (slave gretap5): making interface the new active one
[  490.635464][T31459] gretap5: entered allmulticast mode
[  490.638800][T31459] bond26: (slave gretap5): Enslaving as an active interface with an up link
[  490.669936][T31465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  490.896832][T31491] xt_time: unknown flags 0x4
[  490.971210][T31499] 8021q: adding VLAN 0 to HW filter on device bond19
[  490.976141][T31499] bond26: (slave gretap5): Releasing active interface
[  490.978246][T31499] gretap5: left allmulticast mode
[  491.011206][T31499] pim6reg1: entered promiscuous mode
[  491.012862][T31499] pim6reg1: entered allmulticast mode
[  491.098829][T31514] batadv2: entered promiscuous mode
[  491.100575][T31514] batadv2: entered allmulticast mode
[  491.319126][T31544] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  491.359829][T31540] pim6reg1: entered promiscuous mode
[  491.361507][T31540] pim6reg1: entered allmulticast mode
[  491.371147][T18750] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  491.599904][T31547] lo speed is unknown, defaulting to 1000
[  491.630896][T18750] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  491.754776][T31555] lo speed is unknown, defaulting to 1000
[  491.776014][T31570] netlink: 'syz.0.8230': attribute type 3 has an invalid length.
[  491.786868][T31570] netlink: 'syz.0.8230': attribute type 12 has an invalid length.
[  492.773211][T31618] netlink: 'syz.1.8242': attribute type 12 has an invalid length.
[  492.798289][T31618] macvlan4: entered allmulticast mode
[  492.800504][T31618] gretap0: entered allmulticast mode
[  492.804317][T31618] gretap0: left allmulticast mode
[  492.955660][T31640] bond19: (slave macvlan4): Enslaving as a backup interface with a down link
[  492.965929][T31640] bond19: (slave macvlan4): Releasing backup interface
[  492.979035][T31640] pim6reg1: entered promiscuous mode
[  492.980837][T31640] pim6reg1: entered allmulticast mode
[  493.170693][T31659] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  493.220905][T31659] IPv6: sit3: Disabled Multicast RS
[  493.265151][T31671] 8021q: VLANs not supported on gre0
[  493.330745][T31675] 8021q: adding VLAN 0 to HW filter on device bond27
[  493.340186][T31675] bond19: (slave macvlan5): Enslaving as a backup interface with a down link
[  493.345561][T31675] bond19: (slave macvlan5): Releasing backup interface
[  493.358446][T31675] pim6reg1: entered promiscuous mode
[  493.363682][T31675] pim6reg1: entered allmulticast mode
[  493.365483][T31678] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  493.576776][T31702] netlink: 'syz.2.8267': attribute type 12 has an invalid length.
[  493.584486][T31702] netlink: 'syz.2.8267': attribute type 11 has an invalid length.
[  493.786489][T31721] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  493.803085][T31727] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  493.805959][T31727] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  493.927439][T31740] : entered promiscuous mode
[  493.947950][T31737] x_tables: duplicate underflow at hook 2
[  494.056306][T31757] __nla_validate_parse: 36 callbacks suppressed
[  494.056320][T31757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8284'.
[  494.065844][T31759] sctp: [Deprecated]: syz.1.8285 (pid 31759) Use of int in max_burst socket option.
[  494.065844][T31759] Use struct sctp_assoc_value instead
[  494.143883][T31764] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8286'.
[  494.194213][T31769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8288'.
[  494.418900][T31791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8296'.
[  494.425632][T31791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8296'.
[  494.545115][T31801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8299'.
[  494.555051][T31801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8299'.
[  494.627108][T31805] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8301'.
[  494.703866][T31811] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8304'.
[  494.738555][T31813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8305'.
[  494.785003][T31819] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  494.801562][T31820] 8021q: adding VLAN 0 to HW filter on device bond36
[  494.811276][T31820] bond0: (slave bond36): Enslaving as an active interface with a down link
[  495.081863][T31850] macsec2: entered promiscuous mode
[  495.084762][T31850] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode
[  495.091145][T31850] macsec2: entered allmulticast mode
[  495.095143][T31850] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode
[  495.523350][T31899] validate_nla: 5 callbacks suppressed
[  495.523363][T31899] netlink: 'syz.1.8331': attribute type 5 has an invalid length.
[  495.533207][T31899] bridge18: entered promiscuous mode
[  495.534960][T31899] bridge18: entered allmulticast mode
[  496.116453][T31916] x_tables: unsorted underflow at hook 4
[  496.166536][T31927] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[  496.196231][T31925] can: request_module (can-proto-0) failed.
[  496.206703][T31932] netlink: 'syz.2.8341': attribute type 1 has an invalid length.
[  496.211264][T31932] netlink: 'syz.2.8341': attribute type 8 has an invalid length.
[  496.479408][T31965] syzkaller0: left promiscuous mode
[  496.488930][T31965] syzkaller0: left allmulticast mode
[  496.773014][T31989] nbd2: detected capacity change from 0 to 63
[  496.780933][ T6629] block nbd2: Receive control failed (result -104)
[  496.792679][T31999] netlink: 'syz.0.8361': attribute type 11 has an invalid length.
[  496.883819][T32007] 8021q: VLANs not supported on wg1
[  497.083166][T32025] can: request_module (can-proto-0) failed.
[  497.617484][T32033] ip6gre5: entered allmulticast mode
[  498.210051][T32056] xt_time: unknown flags 0x4
[  498.251267][T32058] netlink: 'syz.0.8380': attribute type 32 has an invalid length.
[  498.253884][T32058] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  498.615700][T32090] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  498.654542][T32093] netlink: 'syz.0.8391': attribute type 1 has an invalid length.
[  498.674118][T32093] 8021q: adding VLAN 0 to HW filter on device bond37
[  498.721641][T32098] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  498.824756][T32105] netlink: 'syz.2.8395': attribute type 5 has an invalid length.
[  498.885481][T32112] netlink: 'syz.1.8397': attribute type 1 has an invalid length.
[  498.893334][T32112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  498.904933][T32112] netlink: 'syz.1.8397': attribute type 10 has an invalid length.
[  498.908489][T32112] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  498.911436][T32112] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  498.913998][T32112] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  498.916458][T32112] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  498.922696][T32112] team0: Port device geneve0 added
[  498.928910][T32115] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  499.061707][T32131] bond33: option mode: unable to set because the bond device is up
[  499.072493][T32131] bond0: (slave bond36): Releasing backup interface
[  499.091900][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  499.124812][T32131] pim6reg1: entered promiscuous mode
[  499.126428][T32131] pim6reg1: entered allmulticast mode
[  499.146523][T32137] __nla_validate_parse: 25 callbacks suppressed
[  499.146536][T32137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8407'.
[  499.180186][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  499.371216][T32171] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  499.385735][T32171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8415'.
[  499.412436][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  499.545397][T32189] xt_hashlimit: size too large, truncated to 1048576
[  499.579877][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  499.639858][   T11] block nbd1: Possible stuck request ffff888020440000: control (read@0,1024B). Runtime 300 seconds
[  499.643188][   T11] block nbd1: Possible stuck request ffff888020440200: control (read@1024,1024B). Runtime 300 seconds
[  499.646482][   T11] block nbd1: Possible stuck request ffff888020440400: control (read@2048,1024B). Runtime 300 seconds
[  499.650390][   T11] block nbd1: Possible stuck request ffff888020440600: control (read@3072,1024B). Runtime 300 seconds
[  499.655033][T32200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8420'.
[  499.724943][T32209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8422'.
[  499.730898][T32208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8423'.
[  499.859196][T32223] pim6reg0: tun_chr_ioctl cmd 1074025694
[  499.869629][T32230] pim6reg0: tun_chr_ioctl cmd 1074025694
[  499.988807][T32241] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  499.993343][T32241] tipc: Resetting bearer <eth:syzkaller0>
[  500.270785][T32253] bond26: option mode: unable to set because the bond device is up
[  500.278602][T32253] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  500.283237][T32253] bond26: (slave macvlan1): Enslaving as a backup interface with a down link
[  500.292047][T32253] pim6reg1: entered promiscuous mode
[  500.293757][T32253] pim6reg1: entered allmulticast mode
[  500.526222][T32265] netlink: 'syz.2.8441': attribute type 1 has an invalid length.
[  500.528594][T32265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8441'.
[  500.634901][T32271] bond33: option mode: unable to set because the bond device is up
[  500.651199][T32271] pim6reg1: entered promiscuous mode
[  500.652970][T32271] pim6reg1: entered allmulticast mode
[  500.736123][T32279] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  501.102663][T32308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8455'.
[  501.188250][T32315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8459'.
[  501.274243][T32318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8460'.
[  501.277121][T32318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8460'.
[  501.372398][T32321] netlink: 'syz.0.8460': attribute type 11 has an invalid length.
[  502.182860][T32346] bond33: option mode: unable to set because the bond device is up
[  502.223773][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  502.229681][T32355] netlink: 'syz.2.8471': attribute type 10 has an invalid length.
[  502.357410][T32344] lo speed is unknown, defaulting to 1000
[  502.402660][T32358] netlink: 'syz.2.8472': attribute type 2 has an invalid length.
[  502.729701][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  503.158230][T32393] lo speed is unknown, defaulting to 1000
[  503.596907][T32414] syzkaller1: entered promiscuous mode
[  503.599027][T32414] syzkaller1: entered allmulticast mode
[  503.603786][T32417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  503.770873][T32434] netlink: 'syz.0.8495': attribute type 2 has an invalid length.
[  503.773503][T32434] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  503.834781][T32437] dvmrp0: left allmulticast mode
[  503.914099][T32428] lo speed is unknown, defaulting to 1000
[  504.109530][   T33] audit: type=1800 audit(1752892635.447:16): pid=32444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8498" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=14654 res=0 errno=0
[  504.221577][T32451] __nla_validate_parse: 10 callbacks suppressed
[  504.221592][T32451] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8500'.
[  504.274388][T32453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8501'.
[  504.299445][T32454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8501'.
[  504.307226][T32453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8501'.
[  504.351281][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.354440][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.593099][T32471] ip6t_srh: unknown srh match flags  4000
[  504.882568][T32495] xt_ecn: cannot match TCP bits for non-tcp packets
[  504.917292][T32499] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8514'.
[  504.921803][T32493] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  504.926434][T32499] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  505.002861][T32505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8517'.
[  505.043816][T32510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8519'.
[  505.153107][T32521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8523'.
[  505.154824][T32524] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8524'.
[  505.191947][T32526] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8525'.
[  505.195641][T32526] : renamed from lo
[  505.251738][T32532] bridge0: port 1(veth0_to_bridge) entered blocking state
[  505.262596][T32532] bridge0: port 1(veth0_to_bridge) entered disabled state
[  505.269893][T32532] veth0_to_bridge: entered allmulticast mode
[  505.278883][T32532] veth0_to_bridge: entered promiscuous mode
[  505.295543][T32535] netlink: 'syz.2.8529': attribute type 1 has an invalid length.
[  505.326758][T32538] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[  505.544881][T32559] netlink: 'syz.2.8537': attribute type 3 has an invalid length.
[  506.140810][T32574] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  506.287804][T32597] netlink: 'syz.0.8545': attribute type 6 has an invalid length.
[  506.399018][T32602] netlink: 'syz.0.8547': attribute type 1 has an invalid length.
[  506.567576][T32609] netlink: 'syz.2.8549': attribute type 21 has an invalid length.
[  506.611766][T32611] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  506.706122][T32620] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  506.708637][T32620] tipc: Resetting bearer <eth:syzkaller0>
[  507.448468][T32683] bond33: option mode: unable to set because the bond device is up
[  507.469790][T32683] pim6reg1: entered promiscuous mode
[  507.471577][T32683] pim6reg1: entered allmulticast mode
[  507.487506][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  507.629113][T32702] syzkaller0: entered promiscuous mode
[  507.633106][T32702] syzkaller0: entered allmulticast mode
Connection to localhost closed by remote host.
[  507.727294][T32710] x_tables: duplicate underflow at hook 2
[  508.360875][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  517.560132][   T11] block nbd3: Possible stuck request ffff888020520000: control (read@0,1024B). Runtime 240 seconds
[  517.564394][   T11] block nbd3: Possible stuck request ffff888020520200: control (read@1024,1024B). Runtime 240 seconds
[  517.568574][   T11] block nbd3: Possible stuck request ffff888020520400: control (read@2048,1024B). Runtime 240 seconds
[  517.577450][   T11] block nbd3: Possible stuck request ffff888020520600: control (read@3072,1024B). Runtime 240 seconds
[  518.839680][   T11] block nbd0: Possible stuck request ffff888020410000: control (read@0,1024B). Runtime 330 seconds
[  518.842971][   T11] block nbd0: Possible stuck request ffff888020410200: control (read@1024,1024B). Runtime 330 seconds
[  518.846553][   T11] block nbd0: Possible stuck request ffff888020410400: control (read@2048,1024B). Runtime 330 seconds
[  518.851024][   T11] block nbd0: Possible stuck request ffff888020410600: control (read@3072,1024B). Runtime 330 seconds
[  519.479863][   T34] INFO: task udevd:5830 blocked for more than 143 seconds.
[  519.482068][   T34]       Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0
[  519.484541][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  519.487174][   T34] task:udevd           state:D stack:22632 pid:5830  tgid:5830  ppid:5281   task_flags:0x400140 flags:0x00004006
[  519.491330][   T34] Call Trace:
[  519.492391][   T34]  <TASK>
[  519.493323][   T34]  __schedule+0x16f5/0x4d00
[  519.494693][   T34]  ? schedule+0x165/0x360
[  519.495966][   T34]  ? __pfx___schedule+0x10/0x10
[  519.497473][   T34]  ? schedule+0x91/0x360
[  519.498780][   T34]  schedule+0x165/0x360
[  519.500155][   T34]  io_schedule+0x80/0xd0
[  519.501471][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  519.503104][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  519.504900][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  519.506614][   T34]  ? __filemap_get_folio+0x760/0xaf0
[  519.508254][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  519.510002][   T34]  do_read_cache_folio+0x1aa/0x590
[  519.511603][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  519.513325][   T34]  read_part_sector+0xb6/0x2b0
[  519.514827][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  519.516494][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  519.518186][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  519.520234][   T34]  bdev_disk_changed+0x75f/0x14b0
[  519.521780][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  519.523481][   T34]  ? wait_on_inode+0xc0/0x230
[  519.524935][   T34]  blkdev_get_whole+0x380/0x510
[  519.526459][   T34]  bdev_open+0x31e/0xd30
[  519.527802][   T34]  blkdev_open+0x3a8/0x510
[  519.529214][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  519.530866][   T34]  do_dentry_open+0xdf3/0x1970
[  519.532396][   T34]  vfs_open+0x3b/0x340
[  519.533664][   T34]  ? path_openat+0x2ecd/0x3830
[  519.535162][   T34]  path_openat+0x2ee5/0x3830
[  519.536608][   T34]  ? arch_stack_walk+0xfc/0x150
[  519.538113][   T34]  ? __pfx_path_openat+0x10/0x10
[  519.539767][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.541649][   T34]  do_filp_open+0x1fa/0x410
[  519.543037][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.544542][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  519.546085][   T34]  ? _raw_spin_unlock+0x28/0x50
[  519.547576][   T34]  ? alloc_fd+0x64c/0x6c0
[  519.548921][   T34]  do_sys_openat2+0x121/0x1c0
[  519.550608][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  519.552273][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  519.553782][   T34]  ? rcu_is_watching+0x15/0xb0
[  519.555239][   T34]  __x64_sys_openat+0x138/0x170
[  519.556741][   T34]  do_syscall_64+0xfa/0x3b0
[  519.558140][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.560406][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  519.562301][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.564045][   T34] RIP: 0033:0x7f9c28f999a4
[  519.565376][   T34] RSP: 002b:00007ffe330c6320 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  519.567888][   T34] RAX: ffffffffffffffda RBX: 000055f0abedeaa0 RCX: 00007f9c28f999a4
[  519.570419][   T34] RDX: 00000000000a0800 RSI: 000055f0abeb9a90 RDI: 00000000ffffff9c
[  519.572817][   T34] RBP: 000055f0abeb9a90 R08: 0000000000000001 R09: 7fffffffffffffff
[  519.575166][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  519.577501][   T34] R13: 000055f0abec1a60 R14: 0000000000000001 R15: 000055f0abeb0910
[  519.580400][   T34]  </TASK>
[  519.581450][   T34] 
[  519.581450][   T34] Showing all locks held in the system:
[  519.583801][   T34] 1 lock held by khungtaskd/34:
[  519.585314][   T34]  #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  519.588355][   T34] 2 locks held by getty/5659:
[  519.589993][   T34]  #0: ffff88810a6520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  519.592971][   T34]  #1: ffffc900029132f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  519.596035][   T34] 1 lock held by udevd/5830:
[  519.597456][   T34]  #0: ffff88802037c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  519.600452][   T34] 1 lock held by udevd/5843:
[  519.601861][   T34]  #0: ffff8880203e7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  519.604550][   T34] 1 lock held by udevd/6667:
[  519.605977][   T34]  #0: ffff888109820358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  519.608802][   T34] 1 lock held by udevd/17503:
[  519.610471][   T34]  #0: ffff8880203e3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  519.613331][   T34] 
[  519.614075][   T34] =============================================
[  519.614075][   T34] 
[  519.616557][   T34] NMI backtrace for cpu 0
[  519.616566][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  519.616576][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  519.616582][   T34] Call Trace:
[  519.616587][   T34]  <TASK>
[  519.616593][   T34]  dump_stack_lvl+0x189/0x250
[  519.616606][   T34]  ? __wake_up_klogd+0xd9/0x110
[  519.616620][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  519.616629][   T34]  ? __pfx__printk+0x10/0x10
[  519.616647][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  519.616662][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  519.616673][   T34]  ? _printk+0xcf/0x120
[  519.616685][   T34]  ? __pfx__printk+0x10/0x10
[  519.616697][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  519.616707][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  519.616720][   T34]  watchdog+0xfee/0x1030
[  519.616730][   T34]  ? watchdog+0x1de/0x1030
[  519.616741][   T34]  kthread+0x711/0x8a0
[  519.616756][   T34]  ? __pfx_watchdog+0x10/0x10
[  519.616763][   T34]  ? __pfx_kthread+0x10/0x10
[  519.616775][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  519.616789][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  519.616797][   T34]  ? __pfx_kthread+0x10/0x10
[  519.616809][   T34]  ret_from_fork+0x3fc/0x770
[  519.616820][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  519.616832][   T34]  ? __switch_to_asm+0x39/0x70
[  519.616842][   T34]  ? __switch_to_asm+0x33/0x70
[  519.616852][   T34]  ? __pfx_kthread+0x10/0x10
[  519.616863][   T34]  ret_from_fork_asm+0x1a/0x30
[  519.616881][   T34]  </TASK>
[  519.616884][   T34] Sending NMI from CPU 0 to CPUs 1:
[  519.664674][    C1] NMI backtrace for cpu 1
[  519.664689][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  519.664700][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  519.664706][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  519.664722][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 dd 1a 00 f3 0f 1e fa fb f4 <e9> c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  519.664730][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000286
[  519.664740][    C1] RAX: d5c9f5c9b638b300 RBX: ffffffff81976c78 RCX: d5c9f5c9b638b300
[  519.664749][    C1] RDX: 0000000000000001 RSI: ffffffff8d99603b RDI: ffffffff8be28c40
[  519.664758][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  519.664767][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa1d5f0
[  519.664776][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d4000
[  519.664783][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c26000(0000) knlGS:0000000000000000
[  519.664791][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  519.664800][    C1] CR2: 00007f6e61ae7d60 CR3: 000000000df38000 CR4: 00000000000006f0
[  519.664834][    C1] Call Trace:
[  519.664841][    C1]  <TASK>
[  519.664845][    C1]  default_idle+0x13/0x20
[  519.664863][    C1]  default_idle_call+0x74/0xb0
[  519.664878][    C1]  do_idle+0x1e8/0x510
[  519.664897][    C1]  ? __pfx_do_idle+0x10/0x10
[  519.664920][    C1]  cpu_startup_entry+0x44/0x60
[  519.664934][    C1]  start_secondary+0x101/0x110
[  519.664945][    C1]  common_startup_64+0x13e/0x147
[  519.664968][    C1]  </TASK>
[  519.665616][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  519.715740][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  519.719399][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  519.722349][   T34] Call Trace:
[  519.723396][   T34]  <TASK>
[  519.724317][   T34]  dump_stack_lvl+0x99/0x250
[  519.725749][   T34]  ? __asan_memcpy+0x40/0x70
[  519.727185][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  519.728798][   T34]  ? __pfx__printk+0x10/0x10
[  519.730234][   T34]  panic+0x2db/0x790
[  519.731474][   T34]  ? __pfx_panic+0x10/0x10
[  519.732847][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  519.734640][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  519.736289][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  519.738159][   T34]  watchdog+0x102d/0x1030
[  519.739505][   T34]  ? watchdog+0x1de/0x1030
[  519.740858][   T34]  kthread+0x711/0x8a0
[  519.742123][   T34]  ? __pfx_watchdog+0x10/0x10
[  519.743561][   T34]  ? __pfx_kthread+0x10/0x10
[  519.744986][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  519.746589][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  519.748190][   T34]  ? __pfx_kthread+0x10/0x10
[  519.749632][   T34]  ret_from_fork+0x3fc/0x770
[  519.751054][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  519.752651][   T34]  ? __switch_to_asm+0x39/0x70
[  519.754122][   T34]  ? __switch_to_asm+0x33/0x70
[  519.755586][   T34]  ? __pfx_kthread+0x10/0x10
[  519.757013][   T34]  ret_from_fork_asm+0x1a/0x30
[  519.758444][   T34]  </TASK>
[  519.759981][   T34] Kernel Offset: disabled
[  519.761341][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:37:29  Registers:
info registers vcpu 0

CPU#0
RAX=1a050f611f9c5a00 RBX=ffffffff81976c78 RCX=1a050f611f9c5a00 RDX=0000000000000001
RSI=ffffffff8d99603b RDI=ffffffff8be28c40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d5f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2b191b CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d5c9f5c9b638b300 RBX=ffffffff81976c78 RCX=d5c9f5c9b638b300 RDX=0000000000000001
RSI=ffffffff8d99603b RDI=ffffffff8be28c40 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1d5f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6e61ae7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000111 0000000070631c2d
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff00000000 XMM09=0000000000000111 000000007063742d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
