last executing test programs:

39.75897193s ago: executing program 1 (id=9139):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000d100000000000000000000730141000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r3, &(0x7f0000000140)={0x1, @read_clock={{0x1407, 0x3}, {0xc9, 0x6}}}, 0x7)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000})

39.699190518s ago: executing program 1 (id=9142):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500000000fcdbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050006"], 0x48}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r2 = socket$inet(0x2, 0x1, 0x100)
setsockopt$sock_int(r2, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r3, 0x6, 0x6, 0x0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x40000)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$llc(0xffffffffffffffff, &(0x7f0000000280)="5455116b7cfec25bca775532009e241a46195ecc20207e53653855cc317dcbe04046087c90905bec65db453c53ab65c298185e494c0cd45533432b050a46be7645894872d37d75da7f2b5e873eb0deb6bc2d90f6440eda974d263591cbf2970ba65001b7048d93fda1ef42d59296dfcf959eaba25b9ea5da5dc050e746287fb3691c1efa11edf364feef463e1c685b9b163602eabad6e0bc2143b43fdebf6304927b9812", 0xa4, 0x0, 0x0, 0x0)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={<r8=>0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000400)={r8, 0x39, "b1c18f70612939ec9920b77781b7addc6bc7f2bbfb1cd5017f4a85f67b8abb3c66269c42d7a238cb802ff1c984d8d842d176fef210dee530c1"}, &(0x7f00000000c0)=0x41)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r9 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r9, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1}}}], 0x20}, 0x20002800)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f00000008c0)={0x0, r1}, 0x8)

39.616443562s ago: executing program 1 (id=9146):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000ff84100000fdffffff06000000000000009500008500000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22)

39.549193998s ago: executing program 1 (id=9147):
r0 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000440)=0x80, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={<r1=>0x0, 0xac}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000500)={r1, 0x0, 0x2, 0x4}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000300)={<r8=>r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x200005, 0x3, 0x8, 0x5, 0x3}, &(0x7f00000001c0)=0x98)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x3, 0x4, 0x400, 0x520, 0x0, 0x10, 0x3, r8}, 0x20)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000040000b6191dea0b64eff6f000300000008000200070000000600018000000000"], 0x24}}, 0x4040080)
r9 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
r10 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4)
r11 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r11, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x140, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x32}, @in=@dev, {}, {0x0, 0x8, 0x0, 0x8000}, {0x0, 0x4000000}, 0x0, 0x1000000, 0xa}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x40, "25cac521"}}]}, 0x140}}, 0x4000080)
sendmmsg(r11, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r11, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x1, 0x4, 0x4}, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000100), 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)

39.479308856s ago: executing program 2 (id=9149):
r0 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0xfff}, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)

39.418564415s ago: executing program 2 (id=9151):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @null, @remote, @null, @default, @null, @rose]}, &(0x7f0000000100)=0x48)
r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom}, [@default, @default, @default, @default, @default, @bcast]}, &(0x7f00000001c0)=0x48, 0xc00)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2}, [@exit, @ldst={0x3, 0x1, 0x3, 0x7, 0x5, 0x10, 0x11}, @alu={0x7, 0x1, 0xd, 0x6, 0x6, 0x40}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0x4, 0x0, 0xfff}, 0x10, 0x1fa63, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94)
r4 = accept4$inet6(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x1c, 0x0)
r5 = socket$isdn(0x22, 0x3, 0x3)
ppoll(&(0x7f0000000440)=[{r0, 0x4024}, {r1, 0x80}, {r2, 0x4200}, {r3, 0x9}, {r4, 0x5}, {r5, 0x111}], 0x6, &(0x7f0000000480), &(0x7f00000004c0)={[0x9]}, 0x8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0x88, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0x3a, 0x6, "6a7d63bf4f1e035f56b85aa3a14d687e6676e00258775c7a5e62ab0d61c2c5e4d7d5e1c7b5f157c9f7c81b6b84c68ac421f5d0938cfc"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x2a, 0x6, "b3d8f0fdce8167687730dba75cccb7cfb7eb93893f5f36bf6052897a76bd71b9aa9393da7263"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x4)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r7, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x10, 0x3e8, 0x200, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='mm_page_alloc_extfrag\x00', r2, 0x0, 0x4}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b40)={'erspan0\x00', &(0x7f0000000a40)={'sit0\x00', <r8=>0x0, 0x1, 0x40, 0x3, 0x5164, {{0x29, 0x4, 0x3, 0x7, 0xa4, 0x64, 0x0, 0xc, 0x29, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0x27, 0x1, 0x2, [{@local, 0x1}, {@rand_addr=0xfffffffa, 0x4}]}, @rr={0x7, 0x13, 0x95, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010102]}, @cipso={0x86, 0x3a, 0x0, [{0x2, 0x11, "5b51ce35c19679030c7004b686b967"}, {0x5, 0x8, "af1abb5d1d78"}, {0x7, 0x5, "cd7628"}, {0x4, 0xc, "88d4048979dc453d5bd8"}, {0x7, 0xa, "8b5a4d9bb75397ef"}]}, @timestamp_addr={0x44, 0x2c, 0x4d, 0x1, 0x4, [{@private=0xa010102, 0x7}, {@private=0xa010100, 0x1}, {@broadcast, 0x2}, {@multicast2, 0xff}, {@broadcast, 0x1ff}]}]}}}}})
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b80), 0x4)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x20, 0x16, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbc6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x8, 0xd, 0x9, 0x2, 0x400}, @ldst={0x1, 0x0, 0x1, 0xb, 0x0, 0x0, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x48}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='GPL\x00', 0x1, 0x8d, &(0x7f0000000980)=""/141, 0x40f00, 0x64, '\x00', r8, @fallback=0xe, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x5, 0x10, 0x3ff, 0x5}, 0x10, 0x0, r3, 0x0, &(0x7f0000000c80)=[r7, r0, r0, r10, r0, r0, r0, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94)
ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000d80)='sit0\x00')
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000dc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, r9, 0x4, 0x2, 0x1}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r4)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r11, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40400c4}, 0x80)
setsockopt$sock_void(r4, 0x1, 0x1b, 0x0, 0x0)
r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r12, 0x89e8)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000f80)={<r13=>r1})
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r13, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r14, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xaa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x81)
epoll_wait(0xffffffffffffffff, &(0x7f0000001100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x1)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r13, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x3c, r14, 0x222, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x14)

39.329000493s ago: executing program 2 (id=9153):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x4}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}]}, 0x44}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64)
r2 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x3, 'rose0\x00', {0x6d0}, 0xa8da})
write$tun(r0, &(0x7f0000000100)={@val={0x2000}, @void, @arp=@generic={0x301, 0xc, 0x6, 0x1, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, '}', @local, "a500475ad1b21d5b29"}}, 0x22)

39.127683325s ago: executing program 2 (id=9156):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1ac}}, 0x0)

38.958879322s ago: executing program 2 (id=9158):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000000000000001050000018000000000000400010000851000000000000000020000000000000000000100da00"], 0x0, 0x52, 0x0, 0x0, 0x1003}, 0x28)

38.888677778s ago: executing program 2 (id=9159):
r0 = socket(0x2a, 0x2, 0xffffffff)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004001)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000000d08000140000000000900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0xfffffffffffffd81, 0x4, 0x10}]}}]}, 0x40}}, 0x40808c4)
r3 = socket$netlink(0x10, 0x3, 0x0)
connect$netrom(r0, &(0x7f00000003c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000005c0)={&(0x7f0000000240), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r5, 0x2ac64f67218791bc, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x9, 0x2, @udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x4010)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
shutdown(0xffffffffffffffff, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3201, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6)
socket$packet(0x11, 0x3, 0x300)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r8, 0x89e2, 0x0)
close(r6)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000600)=0xfffffffffffffffe, 0x8)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4)
bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)

38.788918102s ago: executing program 32 (id=9159):
r0 = socket(0x2a, 0x2, 0xffffffff)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004001)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000000d08000140000000000900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0xfffffffffffffd81, 0x4, 0x10}]}}]}, 0x40}}, 0x40808c4)
r3 = socket$netlink(0x10, 0x3, 0x0)
connect$netrom(r0, &(0x7f00000003c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000005c0)={&(0x7f0000000240), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r5, 0x2ac64f67218791bc, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x9, 0x2, @udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x4010)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
shutdown(0xffffffffffffffff, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3201, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6)
socket$packet(0x11, 0x3, 0x300)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r8, 0x89e2, 0x0)
close(r6)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000600)=0xfffffffffffffffe, 0x8)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4)
bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)

38.364143225s ago: executing program 1 (id=9161):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000001c0)={0x3, 'vlan1\x00', {0x3}, 0x7})
accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8}, 0x8)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000240), 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
unshare(0x6060600)
bind$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, @any, 0x4}, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x24, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_TARGET={0x8, 0x1, 0x6}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x1ff}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, 0x0, &(0x7f0000000040))

38.121633138s ago: executing program 1 (id=9163):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x58}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x57}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x83}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

38.12070876s ago: executing program 33 (id=9163):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x58}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x57}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x83}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

2.886479919s ago: executing program 4 (id=9759):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0xc6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
close(r2)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0)
recvmmsg(r3, &(0x7f00000010c0)=[{{&(0x7f00000000c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/76, 0x4c}, {&(0x7f0000000740)=""/226, 0xe2}], 0x3, &(0x7f0000000940)=""/195, 0xc3}, 0x81}, {{&(0x7f0000000840)=@can, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000ac0)=""/254, 0xfe}, {&(0x7f0000000bc0)=""/68, 0x44}, {&(0x7f0000000c40)=""/65, 0x41}, {&(0x7f0000000600)=""/16, 0x10}, {&(0x7f0000000cc0)=""/79, 0x4f}, {&(0x7f0000000d40)=""/212, 0xd4}, {&(0x7f00000008c0)=""/30, 0x1e}], 0x7, &(0x7f0000001000)=""/148, 0x94}, 0x7}], 0x2, 0x12041, &(0x7f0000000e40)={0x0, 0x989680})
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337dfe5af64aaf38a0a2a57d54450e144eb17d7c96fccc09969631792fa5b33a39166c3df873d88513ae92b949075fa3162cb340980192f8f8b280fad677470571cfb012f48cf62cee3ede300e7c32309a4bc895bca066caa478f206421e348", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000e80)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055b0e2843cb487ed4657c459c397cd02eb261fc7d521b1f2e95c3ce17726db0d3236a6d3b52d3f066554d84292329c8a6f034ff8d85d61dcf7ae508c5925903fb1feb7d07fe481313ad476131cf19514d6c77835e9cf82df2f153d9b82985da3e260fc6942d183b2958886a77e1f2726097d1888a25bee0fdec661520a057f8559f17e462bdf938f7f2303447bfaa744d3891372a825c63e83ff21654af922eaac39ab491cec071d31eebd6526d7a8ddd052d30beb5f20e8db56", 0xda}], 0x1}}], 0x2, 0x0)
sendto$inet(r1, &(0x7f0000000340)="1786e839ca0eef50b92e2d4c2fdab4259701c0c55524077767b87b2febb1e41d725b8ddfcebcec070657382ca9c1e35b6869f8db0ab0d9f11496b198cd3e9ab292465dd6d06ff67d35b5163252d5a27875b174ae6327eac99ec17c8edc805330931743322650219f82996f74c045b5815501a50d386a13cbfa08ae3ffd673091ad3e9f83bea2c609d59e9fc4934e59c6f6cd6a4c45f8be3843fb4c0fd76b00df0e6b82a4248b2a43fa584f7d4fcb58d9715dc392b3de7b590a4577e85497d757641b1b130eec7250bcd2363f7e0ea8f186734690c6757b47", 0xd8, 0x10008095, 0x0, 0x0)

2.079515891s ago: executing program 0 (id=9779):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x101001, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="007bd47342"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000036090100fffffff8950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x41, &(0x7f0000000cc0)=""/4096, 0x41100, 0x20}, 0x94)
poll(&(0x7f0000000480)=[{r0}, {r0, 0x2000}, {r0}, {r0}, {r0, 0x800a}, {r0, 0x80}, {r0, 0x4210}, {r0, 0x1142}, {r0}, {r1, 0x3040}], 0xa, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0)
close(r4)
listen(r3, 0xfff)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="5c104000003d00006c3524ac84d25ccd9dbf6a8e5c517d81856148d4d71af04c03"], 0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400003000f0800014000000000340005800c0001007061796c6f61640024000280080004400000001c08000340000000b9080001400000000a08000240200000020900010073797a30000000000900020073797a32"], 0xc0}}, 0x0)
getpeername(r3, &(0x7f0000000140)=@caif=@util, &(0x7f00000000c0)=0x6a)
accept(r3, 0xfffffffffffffffd, &(0x7f0000000680))

1.995971469s ago: executing program 4 (id=9781):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040000003f000000080003006ba0ebb6fd80947845d44065c5c293de0c4ca7f7580faec3fcd9554562144872afa1bad6a90d138917da0ef9e0ca94e26bd76e72ec7563f92de57b2676c6854a16ba1d27eb602cf2a0676f7085e9b071ce4c5f919a9fbd348c1eaa2f584b2b700c76f8ba88dbbf3b0d5abc17b004659211f426f8367ce69707d2ece96b7118b0f70f4d16d4f8346046b826a03f87b704ea876271543754b8402ba2facff3ac53fbf6408f95e84cf6056eeba093c738988d242ca7003a0064f66c958743c548bfe83bc691aedf662e7b1aa2625c501d0e81db0f8bc37bfee3eb3e7592eefc5b92a16eb529fd44f9fc5f2e4d9e13790a1fd00a06a983644b13e1b6e08ebaf1ccf7b24e3babb593ceed8acc6f3fef1919dc46a9f7b31e0c7f7a4642a50d12c2bc1b5434a55bcefb3f0f8690369bda29e30f2a", @ANYRES32=r1, @ANYBLOB="0c005e800800050043000000"], 0x28}}, 0x0) (async)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
accept4(r3, &(0x7f0000000000)=@generic, &(0x7f00000000c0)=0x80, 0x80800)

1.895043022s ago: executing program 4 (id=9783):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="180800001c00000020000000000000f7490000006d00000095f9f526dc2cf2cc271c6b43511e31351ef5931505c4767a9a23450ebb9d6f33d290854f183e28622fd63698262a23d18fbf213121cc2f43ad90696a14e8600f0018c212f672651ce2583079ada31c36b7c7effaf8fabf9c4e9be5f42edaa66e3ed3c66341bc20557cba5c2b52a726d08a585adaa59e7d14a3814279136ec0b65ee1d66fd1617206b41f0ad1f9c8847932bc407bcad35532bff490f3fe3e286ba8de696af24ce5448a7e57d2fbf51fcf2f20c489954a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x53, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff91}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff5}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xb}, @alu={0x7, 0x1, 0xa, 0x1, 0x6, 0x6, 0xe0c0fe56f49b783a}, @generic={0x3f, 0x9, 0xf, 0x0, 0x258721de}]}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x8f, &(0x7f0000000380)=""/143, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x3, 0x2, 0xb, 0x7}, {0x3, 0x3, 0x4, 0xb}, {0x2, 0x5, 0x3, 0x1}], 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='timer_expire_entry\x00', r0}, 0x18)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x7, 0xe, 0x9, 0x0, 0x1, 0x8, 0xa7, 0x4, 0x5, 0xf1, 0xb, 0x7, 0x0, 0x7}, 0xe)
poll(&(0x7f0000000080)=[{r2, 0x46a8}], 0x1, 0x400)
shutdown(r2, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8004"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0)
socket(0x2b, 0x1, 0xfffffffc)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000008000090300000000000000000a0000000000af5c6b1b6e7a8298ae2a55d37d46"], 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="38000000031401002abd70f651dbdf250900020073797a31000000000800bfede13341007369770014003300626f6e64300000000000000000000000445ef8439bfc677e21757b8fb4fe57d2691ca4beb3a4ec16ca0e130277aaa7192b392fcdc06146227065691cc954ccddf8"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r8, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
listen(r1, 0x1007)

1.214205156s ago: executing program 0 (id=9785):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x1000)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0)
mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x50}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)

1.144167244s ago: executing program 0 (id=9786):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0xfffffffd)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x59, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f00000000c0))

1.07519893s ago: executing program 0 (id=9787):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x17c, 0x17c, 0x6, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x7b, 0x0, 0x52, 0x2}, @var={0x4, 0x0, 0x0, 0xe, 0x2}, @enum={0x4, 0x4, 0x0, 0x6, 0x4, [{0xa, 0x1}, {0x10, 0x9}, {0xa, 0x7}, {0xe, 0x9}]}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x2, 0x9}, @volatile={0xe, 0x0, 0x0, 0x9, 0x4}, @struct={0x3, 0x9, 0x0, 0x4, 0x1, 0x3, [{0x9, 0x1, 0x7f}, {0x4, 0x1, 0x9}, {0xc, 0x3, 0x8}, {0xd, 0x4, 0x8}, {0x3, 0x1, 0x2}, {0x4, 0x2, 0x7}, {0xa, 0x4, 0xe}, {0x9, 0x1, 0xc}, {0xa, 0x5}]}, @enum64={0x6, 0x5, 0x0, 0x13, 0x1, 0x5, [{0x9, 0x9, 0x3}, {0x4, 0x8, 0x1}, {0x3, 0x3, 0xfba}, {0xb, 0xd7, 0x6}, {0xa, 0x1, 0x2d7a}]}, @fwd={0x1}, @volatile={0xd}, @union={0x5, 0x4, 0x0, 0x5, 0x1, 0xffffaf87, [{0x5, 0x5, 0x7}, {0x10, 0x3, 0x1}, {0x10, 0x5, 0x8}, {0xe, 0x0, 0x9}]}]}, {0x0, [0x0, 0x2e, 0x30, 0x0]}}, &(0x7f0000000680)=""/223, 0x19a, 0xdf, 0x0, 0xa09, 0x10000}, 0x28)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x8000, 0x2}, 0x50)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x3, [@union={0x8, 0x8, 0x0, 0x5, 0x1, 0x3, [{0x1, 0x4, 0xd}, {0xd, 0x4, 0x2}, {0xb, 0x0, 0xff}, {0xe, 0x2, 0x2}, {0xd, 0x5, 0x6}, {0x10, 0x5}, {0xa, 0x4, 0x40}, {0x0, 0x3, 0x4}]}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x3a, 0x0, 0x2, 0x2}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x5f]}}, &(0x7f0000000380)=""/204, 0xa3, 0xcc, 0x0, 0x4, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1000004, 0x8, 0xb, 0x0, r1, 0x1, '\x00', 0x0, r2, 0x0, 0x3}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000180001022cbd7000000000000a001400fe04ff06"], 0x1c}}, 0x0)
unshare(0x22020400)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x20044040)
r5 = socket(0x1d, 0x2, 0x7)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x6b, 0x8, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)

1.013509825s ago: executing program 0 (id=9788):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8, 0x3, 0xfffffff7}]}}}]}, 0x44}}, 0x28000000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='/', 0x1}, {&(0x7f00000000c0)="8ddb4a27d5", 0x5}], 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40404}, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x30d26732fe5b7335, 0x100408)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x8, 0x5})
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337dfe5af64aaf38a0a2a57d54450e144eb17d7c96fccc09969631792fa5b33a39166c3df873d88513ae92b949075fa3162cb340980192f8f8b280fad677470571cfb012f48cf62cee3ede300e7c32309a4bc895bca066caa478f206421e348", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000e80)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055b0e2843cb487ed4657c459c397cd02eb261fc7d521b1f2e95c3ce17726db0d3236a6d3b52d3f066554d84292329c8a6f034ff8d85d61dcf7ae508c5925903fb1feb7d07fe481313ad476131cf19514d6c77835e9cf82df2f153d9b82985da3e260fc6942d183b2958886a77e1f2726097d1888a25bee0fdec661520a057f8559f17e462bdf938f7f2303447bfaa744d3891372a825c63e83ff21654af922eaac39ab491cec071d31eebd6526d7a8ddd052d30beb5f20e8db56", 0xda}], 0x1}}], 0x2, 0x0)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.012957857s ago: executing program 4 (id=9789):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x2000c800)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
unshare(0x6020480)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, r4, 0x20}, 0x38)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = socket(0xa, 0x3, 0x3)
setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000440)=ANY=[@ANYBLOB="0000042965"], 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000740)='syzkaller\x00', 0x20001, 0x0, 0x0, 0x41100, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffea5}, 0x94)

905.049105ms ago: executing program 4 (id=9790):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337dfe5af64aaf38a0a2a57d54450e144eb17d7c96fccc09969631792fa5b33a39166c3df873d88513ae92b949075fa3162cb340980192f8f8b280fad677470571cfb012f48cf62cee3ede300e7c32309a4bc895bca066caa478f206421e348", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000e80)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055b0e2843cb487ed4657c459c397cd02eb261fc7d521b1f2e95c3ce17726db0d3236a6d3b52d3f066554d84292329c8a6f034ff8d85d61dcf7ae508c5925903fb1feb7d07fe481313ad476131cf19514d6c77835e9cf82df2f153d9b82985da3e260fc6942d183b2958886a77e1f2726097d1888a25bee0fdec661520a057f8559f17e462bdf938f7f2303447bfaa744d3891372a825c63e83ff21654af922eaac39ab491cec071d31eebd6526d7a8ddd052d30beb5f20e8db56", 0xda}], 0x1}}], 0x2, 0x0)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

464.855728ms ago: executing program 3 (id=9791):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001400019b0001dcdf2502400800000000", @ANYRES32=0x0], 0x18}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1, 0x4, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10000}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_MODE={0xa, 0x2, {0x4}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x2000c800)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180)=0x100c80, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000f40)=""/4096, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x4)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @jmp={0x5, 0x1, 0x7, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x76, &(0x7f0000000380)=""/118, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xf, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x1, r6], &(0x7f0000000640), 0x10, 0x51df}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000740)=r7, 0x4)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmsg(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="89", 0x1}], 0x1}, 0x40000)
close(0x3)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r9, 0x11, 0x68, &(0x7f0000000080), 0x4)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

464.510732ms ago: executing program 3 (id=9792):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000ff84100000fdffffff060000000000000095000090ffffffff"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22)

384.771688ms ago: executing program 3 (id=9793):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x18}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d)
ioctl$SIOCSIFHWADDR(r3, 0x401c5820, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x14, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x30004000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES8=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20040004}, 0x0)
connect$pppoe(r0, 0x0, 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000002ff000005001600890000004849ac"], 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000380))
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r8, @ANYBLOB], 0x34}}, 0x20000000)

304.816042ms ago: executing program 3 (id=9794):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_audit(0x10, 0x3, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, 0x0, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
socket(0x1000000000000010, 0x80802, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00))
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x10000004, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='rcu_utilization\x00', r1}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x3, 0x5)
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
socket$inet6(0xa, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

255.345875ms ago: executing program 3 (id=9795):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = accept(r0, 0x0, &(0x7f0000000040))
sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x2, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c1}, 0x2004c010) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047ce4ff07004280040008000c00018006000600800a0000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)

254.820734ms ago: executing program 3 (id=9796):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00'}, 0x90)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0xfd45}}, 0x0)
write$nci(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x200080c1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c0017800800018004000600"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
close(0x3)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=<r9=>0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r11, &(0x7f0000000000), 0x2a979d)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r13}, 0x10)
r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f00000002c0)={'veth0_vlan\x00'})
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r14, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0)
listen(0xffffffffffffffff, 0x80)

104.91974ms ago: executing program 0 (id=9797):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1ac}}, 0x0)

0s ago: executing program 4 (id=9798):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, 0x1406, 0x100, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x4000090)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000004)

kernel console output (not intermixed with test programs):

n invalid length.
[  496.200448][T29955] netlink: 'syz.0.7254': attribute type 29 has an invalid length.
[  496.203327][T29955] netlink: 'syz.0.7254': attribute type 29 has an invalid length.
[  496.206112][T29955] netlink: 'syz.0.7254': attribute type 29 has an invalid length.
[  496.209363][T29955] netlink: 'syz.0.7254': attribute type 29 has an invalid length.
[  496.217346][T29955] netlink: 'syz.0.7254': attribute type 29 has an invalid length.
[  496.220808][T29955] netlink: 'syz.0.7254': attribute type 29 has an invalid length.
[  496.224026][T29955] netlink: 'syz.0.7254': attribute type 29 has an invalid length.
[  496.227369][T29955] netlink: 'syz.0.7254': attribute type 29 has an invalid length.
[  496.424935][T29958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7255'.
[  496.511713][T29965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7257'.
[  496.619862][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 128 seconds
[  496.624143][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 128 seconds
[  496.628493][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 128 seconds
[  496.636298][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 128 seconds
[  496.648575][T29976] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  496.807936][T29993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7267'.
[  496.893691][T30000] wg1 speed is unknown, defaulting to 1000
[  496.898982][T30000] lo speed is unknown, defaulting to 1000
[  496.956842][T30006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7271'.
[  496.998763][T30009] netlink: 3282 bytes leftover after parsing attributes in process `syz.1.7272'.
[  497.091834][T30011] geneve4: entered allmulticast mode
[  497.095373][ T5865] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  497.098657][ T5865] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  497.112648][ T5865] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  497.116401][ T5865] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  497.377475][T30027] tun0: tun_chr_ioctl cmd 1074025672
[  497.380265][T30027] tun0: ignored: set checksum disabled
[  497.454264][T30033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7280'.
[  497.486933][T30040] batadv_slave_1: entered promiscuous mode
[  497.490893][T30039] batadv_slave_1: left promiscuous mode
[  497.657333][T30048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7285'.
[  497.802990][T30053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7286'.
[  497.885427][T30061] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7289'.
[  499.351847][T30152] wg1 speed is unknown, defaulting to 1000
[  499.356652][T30152] lo speed is unknown, defaulting to 1000
[  499.458806][T30152] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  499.517275][T30160] tipc: Resetting bearer <eth:syzkaller0>
[  499.567177][T30159] tipc: Resetting bearer <eth:syzkaller0>
[  500.372246][   T69] tipc: Resetting bearer <eth:syzkaller0>
[  500.652521][T30210] validate_nla: 62 callbacks suppressed
[  500.652541][T30210] netlink: 'syz.1.7331': attribute type 3 has an invalid length.
[  501.033770][T30219] netlink: 'syz.0.7334': attribute type 21 has an invalid length.
[  501.040041][T30219] netlink: 'syz.0.7334': attribute type 5 has an invalid length.
[  501.087847][T30221] ip6gretap4: entered promiscuous mode
[  501.189340][T30229] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  501.280497][T30238] __nla_validate_parse: 15 callbacks suppressed
[  501.280511][T30238] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7341'.
[  501.290912][T30234] wg1 speed is unknown, defaulting to 1000
[  501.294898][T30234] lo speed is unknown, defaulting to 1000
[  501.576633][T30262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7348'.
[  501.580836][T30262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7348'.
[  501.662009][T30268] tipc: Resetting bearer <eth:syzkaller0>
[  501.673711][T30268] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  501.680424][T30268] tipc: Resetting bearer <eth:syzkaller0>
[  501.836716][T30287] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  501.842853][T30287] netlink: 'syz.2.7355': attribute type 9 has an invalid length.
[  501.848229][T30287] netlink: 147436 bytes leftover after parsing attributes in process `syz.2.7355'.
[  501.956182][T30293] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7357'.
[  502.090103][T30299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7360'.
[  502.102080][T30299] netlink: 'syz.1.7360': attribute type 1 has an invalid length.
[  502.221651][T30312] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  502.278873][T30317] netlink: 'syz.1.7365': attribute type 2 has an invalid length.
[  502.370565][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 132 seconds
[  502.374494][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 132 seconds
[  502.378335][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 132 seconds
[  502.385792][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 132 seconds
[  502.435049][T30325] netlink: 'syz.1.7367': attribute type 32 has an invalid length.
[  502.453954][   T32] tipc: Resetting bearer <eth:syzkaller0>
[  502.665508][T30334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7368'.
[  503.025796][T30356] netlink: zone id is out of range
[  503.037739][T30356] netlink: zone id is out of range
[  503.046573][T30356] netlink: zone id is out of range
[  503.048956][T30356] netlink: zone id is out of range
[  503.053738][T30356] netlink: zone id is out of range
[  503.055786][T30356] netlink: zone id is out of range
[  503.057795][T30356] netlink: zone id is out of range
[  503.061785][T30356] netlink: zone id is out of range
[  503.066191][T30356] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  503.261371][T30369] netlink: 'syz.2.7379': attribute type 21 has an invalid length.
[  503.266447][T30369] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7379'.
[  503.276003][T30371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7380'.
[  503.282379][T30369] netlink: 'syz.2.7379': attribute type 5 has an invalid length.
[  503.285492][T30369] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7379'.
[  503.836453][T30428] netlink: 'syz.2.7400': attribute type 21 has an invalid length.
[  503.922890][T30439] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR
[  504.175469][T30463] nbd: must specify at least one socket
[  504.412608][T30483] macvlan5: entered allmulticast mode
[  504.415192][T30483] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  504.747565][T30498] net_ratelimit: 169 callbacks suppressed
[  504.747588][T30498] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  505.671203][T30560] : entered promiscuous mode
[  505.812889][T30569] tipc: Resetting bearer <eth:syzkaller0>
[  506.642806][T30594] __nla_validate_parse: 9 callbacks suppressed
[  506.642825][T30594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7446'.
[  506.909234][T30609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7451'.
[  507.184546][T30633] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7458'.
[  507.240871][T30640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  507.246898][ T5875] lo speed is unknown, defaulting to 1000
[  507.249423][ T5875] syz2: Port: 1 Link DOWN
[  507.371317][T30645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7462'.
[  507.439063][T30652] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  507.546234][T30656] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7464'.
[  508.085616][T30683] validate_nla: 3 callbacks suppressed
[  508.085630][T30683] netlink: 'syz.2.7470': attribute type 1 has an invalid length.
[  508.118641][T30683] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7470'.
[  508.130798][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 136 seconds
[  508.135535][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 136 seconds
[  508.140030][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 136 seconds
[  508.144316][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 136 seconds
[  508.148474][T30685] netlink: 'syz.1.7473': attribute type 32 has an invalid length.
[  508.416416][T30698] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7475'.
[  508.433778][T30700] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7475'.
[  508.524098][T30703] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  508.874941][T30716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7480'.
[  508.878548][T30716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7480'.
[  508.896095][T30716] netlink: 'syz.1.7480': attribute type 3 has an invalid length.
[  509.236590][T30744] netlink: 'syz.0.7489': attribute type 46 has an invalid length.
[  509.270828][T30746] bridge0: port 1(batadv4) entered blocking state
[  509.278811][T30746] bridge0: port 1(batadv4) entered disabled state
[  509.289057][T30746] batadv4: entered allmulticast mode
[  509.292967][T30746] batadv4: entered promiscuous mode
[  509.557333][T30759] wg1 speed is unknown, defaulting to 1000
[  509.583973][T30759] lo speed is unknown, defaulting to 1000
[  509.724026][T30777] netlink: 'syz.0.7499': attribute type 32 has an invalid length.
[  509.777254][ T5855] batman_adv: batadv4: IGMP Querier appeared
[  509.780169][ T5855] batman_adv: batadv4: MLD Querier appeared
[  509.946708][T30793] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  509.950554][T30793] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  510.239069][T30813] wg1 speed is unknown, defaulting to 1000
[  510.250466][T30813] lo speed is unknown, defaulting to 1000
[  510.757754][T30821] netlink: 'syz.1.7509': attribute type 32 has an invalid length.
[  510.870289][T30828] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  511.222708][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.227613][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.462394][T30863] netlink: 'syz.2.7521': attribute type 21 has an invalid length.
[  512.137552][T30896] __nla_validate_parse: 8 callbacks suppressed
[  512.137575][T30896] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.7528'.
[  512.525237][T30908] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7532'.
[  512.768971][T30925] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  512.920751][T30934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7539'.
[  512.994571][T30939] tipc: Resetting bearer <eth:syzkaller0>
[  513.015045][T30938] tipc: Resetting bearer <eth:syzkaller0>
[  513.557881][T30952] wg1 speed is unknown, defaulting to 1000
[  513.563831][T30952] lo speed is unknown, defaulting to 1000
[  513.574534][T30954] netlink: 'syz.1.7546': attribute type 32 has an invalid length.
[  513.634038][T30952] netlink: 'syz.0.7545': attribute type 21 has an invalid length.
[  513.637328][T30952] netlink: 'syz.0.7545': attribute type 6 has an invalid length.
[  513.640858][T30952] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7545'.
[  513.645185][T30952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7545'.
[  513.703230][T30956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7545'.
[  513.904582][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 140 seconds
[  513.909410][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 140 seconds
[  513.914200][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 140 seconds
[  513.918624][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 140 seconds
[  514.068013][T12889] tipc: Resetting bearer <eth:syzkaller0>
[  514.144794][T30979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7552'.
[  514.839474][T31004] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7559'.
[  514.975417][T31010] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  515.315125][T31040] bpq0: left promiscuous mode
[  515.369403][T31047] tipc: Resetting bearer <eth:syzkaller0>
[  515.524286][T31052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7572'.
[  515.528134][T31052] openvswitch: netlink: EtherType 0 is less than min 600
[  515.587796][T31057] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  515.621991][T31057] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7574'.
[  515.625684][T31057] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  516.126083][T31084] netlink: 'syz.1.7583': attribute type 1 has an invalid length.
[  516.175724][T31091] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  516.210217][T24111] page_pool_release_retry() stalled pool shutdown: id 56, 2176 inflight 120 sec
[  516.453677][T31110] netlink: 'syz.1.7589': attribute type 3 has an invalid length.
[  516.528871][T31115] netlink: 'syz.1.7591': attribute type 3 has an invalid length.
[  516.544023][T31115] netlink: 'syz.1.7591': attribute type 1 has an invalid length.
[  516.546923][T31115] NCSI netlink: No device for ifindex 0
[  517.059860][T31148] nbd1: detected capacity change from 0 to 127
[  517.064309][T31152] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  517.066003][   T56] block nbd1: Receive control failed (result -104)
[  517.149057][T31156] __nla_validate_parse: 11 callbacks suppressed
[  517.149077][T31156] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7607'.
[  517.156567][T31156] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7607'.
[  517.542275][T31174] netlink: 'syz.0.7615': attribute type 2 has an invalid length.
[  517.545752][T31174] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7615'.
[  517.629523][T31181] netlink: 'syz.1.7618': attribute type 32 has an invalid length.
[  517.906390][T31214] netlink: 320 bytes leftover after parsing attributes in process `syz.1.7622'.
[  518.008033][T31223] netlink: 'syz.2.7624': attribute type 3 has an invalid length.
[  518.210704][ T5232] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  518.216544][T24213] Bluetooth: hci2: command 0x0406 tx timeout
[  518.256163][T31245] tipc: Resetting bearer <eth:syzkaller0>
[  518.305845][T31243] tipc: Resetting bearer <eth:syzkaller0>
[  518.539329][T31262] netlink: 25 bytes leftover after parsing attributes in process `syz.1.7634'.
[  518.593767][T31269] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7636'.
[  518.634499][T31272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7637'.
[  518.941630][T31296] wg1 speed is unknown, defaulting to 1000
[  518.945263][T31296] lo speed is unknown, defaulting to 1000
[  519.163715][T31305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  519.171802][T31305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7645'.
[  519.252248][T31104] tipc: Resetting bearer <eth:syzkaller0>
[  519.495084][T31310] tipc: Resetting bearer <eth:syzkaller0>
[  519.518153][T31310] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7646'.
[  519.614789][T31309] tipc: Resetting bearer <eth:syzkaller0>
[  519.645282][T31314] bond0: Device is already in use.
[  519.649942][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 144 seconds
[  519.653966][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 144 seconds
[  519.658139][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 144 seconds
[  519.662436][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 144 seconds
[  519.738253][T31296] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  519.770320][T31316] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.7648'.
[  519.799965][T31318] netlink: 'syz.0.7649': attribute type 32 has an invalid length.
[  520.054876][T31331] openvswitch: netlink: Key type 161 is out of range max 32
[  520.277386][T31347] netlink: 'syz.0.7659': attribute type 1 has an invalid length.
[  520.366034][T31347] 8021q: adding VLAN 0 to HW filter on device bond30
[  520.378209][   T25] block nbd1: Connection timed out, retrying (0/1 alive)
[  520.381675][   T25] block nbd1: Connection timed out, retrying (0/1 alive)
[  520.384514][   T25] block nbd1: Connection timed out, retrying (0/1 alive)
[  520.387387][   T25] block nbd1: Connection timed out, retrying (0/1 alive)
[  520.392121][   T25] block nbd1: Dead connection, failed to find a fallback
[  520.395212][   T25] block nbd1: shutting down sockets
[  520.397499][   T25] blk_print_req_error: 138 callbacks suppressed
[  520.397512][   T25] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  520.402118][T31356] netlink: 'syz.2.7662': attribute type 32 has an invalid length.
[  520.405039][   T25] buffer_io_error: 138 callbacks suppressed
[  520.405051][   T25] Buffer I/O error on dev nbd1, logical block 3, async page read
[  520.413043][   T25] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  520.416676][   T25] Buffer I/O error on dev nbd1, logical block 2, async page read
[  520.419920][   T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  520.423530][   T25] Buffer I/O error on dev nbd1, logical block 1, async page read
[  520.426834][   T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  520.430479][   T25] Buffer I/O error on dev nbd1, logical block 0, async page read
[  520.440982][T21030] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  520.451372][T21030] Buffer I/O error on dev nbd1, logical block 0, async page read
[  520.454683][T21030] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  520.458360][T21030] Buffer I/O error on dev nbd1, logical block 1, async page read
[  520.463598][T12871] tipc: Resetting bearer <eth:syzkaller0>
[  520.467129][T21030] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  520.472612][T21030] Buffer I/O error on dev nbd1, logical block 2, async page read
[  520.475804][T21030] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  520.479390][T21030] Buffer I/O error on dev nbd1, logical block 3, async page read
[  520.485746][T21030] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  520.488595][T21030] Buffer I/O error on dev nbd1, logical block 0, async page read
[  520.492232][T21030] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  520.495213][T21030] Buffer I/O error on dev nbd1, logical block 1, async page read
[  520.498128][T31347] vlan0: entered allmulticast mode
[  520.499282][T21030] ldm_validate_partition_table(): Disk read failed.
[  520.500641][T31347] veth1: entered allmulticast mode
[  520.503281][T21030] Dev nbd1: unable to read RDB block 0
[  520.505757][T31347] bond30: (slave vlan0): Opening slave failed
[  520.508941][T21030]  nbd1: unable to read partition table
[  520.522364][T21030] ldm_validate_partition_table(): Disk read failed.
[  520.526031][T21030] Dev nbd1: unable to read RDB block 0
[  520.528997][T21030]  nbd1: unable to read partition table
[  520.846393][T31385] netlink: 'syz.1.7668': attribute type 10 has an invalid length.
[  520.954046][T31395] netlink: 'syz.2.7673': attribute type 32 has an invalid length.
[  521.230608][T31415] tipc: Resetting bearer <eth:syzkaller0>
[  521.235902][T31415] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  521.268290][T31415] tipc: Resetting bearer <eth:syzkaller0>
[  521.284549][T31419] netlink: 'syz.1.7677': attribute type 1 has an invalid length.
[  521.287728][T31419] netlink: 'syz.1.7677': attribute type 2 has an invalid length.
[  521.292236][T31419] netlink: 'syz.1.7677': attribute type 1 has an invalid length.
[  521.301289][T31419] xt_socket: unknown flags 0x50
[  521.372935][T31105] tipc: Resetting bearer <eth:syzkaller0>
[  521.603006][T31447] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  522.335134][T31499] netlink: 'syz.0.7702': attribute type 1 has an invalid length.
[  522.341809][T31499] netlink: 'syz.0.7702': attribute type 2 has an invalid length.
[  522.347761][T31499] __nla_validate_parse: 7 callbacks suppressed
[  522.347774][T31499] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7702'.
[  522.464079][T31505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7704'.
[  522.622977][T31516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7707'.
[  522.626309][T31516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7707'.
[  522.635095][T31516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7707'.
[  522.641478][T31516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7707'.
[  522.807714][T31523] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  522.811775][T31522] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  522.952628][T31530] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7713'.
[  523.025395][T31534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7714'.
[  523.197893][T31546] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7717'.
[  523.317358][T31559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7718'.
[  523.434246][T31577] tipc: Resetting bearer <eth:syzkaller0>
[  523.463783][T31576] tipc: Resetting bearer <eth:syzkaller0>
[  523.574643][T31585] wg1 speed is unknown, defaulting to 1000
[  523.578234][T31585] lo speed is unknown, defaulting to 1000
[  523.619462][T31588] openvswitch: netlink: Multiple metadata blocks provided
[  524.464045][ T4937] tipc: Resetting bearer <eth:syzkaller0>
[  524.486660][T31645] sch_tbf: burst 127 is lower than device syzkaller0 mtu (299) !
[  525.414888][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 148 seconds
[  525.418962][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 148 seconds
[  525.423469][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 148 seconds
[  525.427759][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 148 seconds
[  525.563153][T31693] tipc: Resetting bearer <eth:syzkaller0>
[  525.570445][T31693] syzkaller0: left promiscuous mode
[  525.572883][T31693] syzkaller0: left allmulticast mode
[  525.604919][T31691] tipc: Resetting bearer <eth:syzkaller0>
[  525.676175][T31699] validate_nla: 6 callbacks suppressed
[  525.676193][T31699] netlink: 'syz.2.7759': attribute type 32 has an invalid length.
[  526.133995][T31736] netlink: 'syz.0.7770': attribute type 1 has an invalid length.
[  526.136522][T31736] netlink: 'syz.0.7770': attribute type 1 has an invalid length.
[  526.142346][T31740] netlink: 'syz.2.7771': attribute type 3 has an invalid length.
[  526.145112][T31740] netlink: 'syz.2.7771': attribute type 1 has an invalid length.
[  526.149317][T31740] NCSI netlink: No device for ifindex 0
[  526.541375][ T4937] tipc: Resetting bearer <eth:syzkaller0>
[  526.773187][T31790] sctp: [Deprecated]: syz.2.7785 (pid 31790) Use of int in maxseg socket option.
[  526.773187][T31790] Use struct sctp_assoc_value instead
[  526.779532][ T5855] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  526.867654][T31797] tipc: Resetting bearer <eth:syzkaller0>
[  527.606237][T31797] tipc: Resetting bearer <eth:syzkaller0>
[  527.618850][T31809] __nla_validate_parse: 20 callbacks suppressed
[  527.618870][T31809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7790'.
[  527.625942][T31808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7790'.
[  527.647742][ T4937] tipc: Resetting bearer <eth:syzkaller0>
[  527.671682][T31812] netlink: 'syz.1.7791': attribute type 32 has an invalid length.
[  527.840857][T31835] syzkaller0: mtu less than device minimum
[  528.073879][T31854] vlan0: entered allmulticast mode
[  528.075647][T31854] syz_tun: entered allmulticast mode
[  528.214561][T31860] syzkaller1: entered promiscuous mode
[  528.216688][T31860] syzkaller1: entered allmulticast mode
[  528.240087][T31860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7806'.
[  528.298086][T31864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7808'.
[  528.304543][T31864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7808'.
[  528.335762][T31864] bridge0: port 2(vlan0) entered blocking state
[  528.338556][T31864] bridge0: port 2(vlan0) entered disabled state
[  528.343818][T31864] vlan0: entered allmulticast mode
[  528.345952][T31864] bridge0: entered allmulticast mode
[  528.351996][T31864] vlan0: left allmulticast mode
[  528.354032][T31864] bridge0: left allmulticast mode
[  528.389550][T31872] netlink: 'syz.2.7809': attribute type 1 has an invalid length.
[  528.406210][T31869] 8021q: adding VLAN 0 to HW filter on device bond32
[  528.418907][T31869] bond0: (slave bond32): Enslaving as an active interface with a down link
[  528.497548][T31872] 8021q: adding VLAN 0 to HW filter on device bond24
[  528.502200][T31873] 8021q: adding VLAN 0 to HW filter on device bond28
[  528.532086][T31875] 8021q: adding VLAN 0 to HW filter on device bond24
[  528.535282][T31875] bond24: (slave vxcan1): The slave device specified does not support setting the MAC address
[  528.545067][T31875] bond24: (slave vxcan1): Error -95 calling set_mac_address
[  528.573579][T31878] syzkaller0: entered promiscuous mode
[  528.575804][T31878] syzkaller0: entered allmulticast mode
[  528.578324][T31878] tipc: Resetting bearer <eth:syzkaller0>
[  528.581657][T31878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7810'.
[  528.585312][T31878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7810'.
[  528.588524][T31878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7810'.
[  528.787286][T31894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7816'.
[  528.792005][T31894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7816'.
[  528.794979][T31894] netlink: 'syz.1.7816': attribute type 19 has an invalid length.
[  528.798203][T31894] netlink: 'syz.1.7816': attribute type 19 has an invalid length.
[  529.712161][T31903] bond0: Device is already in use.
[  529.857198][T31915] tipc: Resetting bearer <eth:syzkaller0>
[  529.881381][T31915] policy can only be matched on NF_INET_PRE_ROUTING
[  529.881405][T31915] unable to load match
[  529.889482][T31914] tipc: Resetting bearer <eth:syzkaller0>
[  529.895188][T31918] netlink: 'syz.2.7824': attribute type 11 has an invalid length.
[  530.935863][T12871] tipc: Resetting bearer <eth:syzkaller0>
[  530.982047][T31953] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  530.997309][T31953] validate_nla: 1 callbacks suppressed
[  530.997326][T31953] netlink: 'syz.2.7837': attribute type 1 has an invalid length.
[  531.008108][T31955] nbd: couldn't find a device at index 65546
[  531.069416][T31957] netlink: 'syz.2.7839': attribute type 1 has an invalid length.
[  531.130940][T31961] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  531.180528][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 152 seconds
[  531.185006][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 152 seconds
[  531.189372][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 152 seconds
[  531.193907][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 152 seconds
[  531.693631][T32006] netlink: 'syz.1.7856': attribute type 3 has an invalid length.
[  531.734009][T32014] netlink: 'syz.1.7859': attribute type 32 has an invalid length.
[  532.649380][T32041] __nla_validate_parse: 13 callbacks suppressed
[  532.649399][T32041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7866'.
[  532.685369][T32041] bond33: entered promiscuous mode
[  532.690088][T32041] 8021q: adding VLAN 0 to HW filter on device bond33
[  532.794169][T32041] bond33 (unregistering): Released all slaves
[  532.875665][T32056] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  532.887096][T32058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7870'.
[  532.998272][T32072] netlink: 'syz.2.7874': attribute type 1 has an invalid length.
[  533.044488][T32078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7876'.
[  533.047359][T32078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7876'.
[  533.056466][T32078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7876'.
[  533.895244][T32105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7884'.
[  534.003773][T32113] batadv_slave_1: entered promiscuous mode
[  534.007565][T32110] batadv_slave_1: left promiscuous mode
[  534.057632][T32119] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7889'.
[  534.060211][T32117] netlink: 'syz.0.7888': attribute type 32 has an invalid length.
[  534.085353][T32119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7889'.
[  534.104630][T32124] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7889'.
[  534.207713][T32134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  534.308276][T32145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7897'.
[  534.401244][T32153] batadv_slave_1: entered promiscuous mode
[  534.405901][T32152] batadv_slave_1: left promiscuous mode
[  534.463839][T32157] syzkaller1: entered allmulticast mode
[  534.521555][T32162] netlink: 'syz.0.7903': attribute type 32 has an invalid length.
[  534.851373][T32184] netlink: 'syz.1.7907': attribute type 1 has an invalid length.
[  534.906694][T32191] netlink: 'syz.1.7911': attribute type 32 has an invalid length.
[  535.101566][T32213] tipc: Resetting bearer <eth:syzkaller0>
[  535.122802][T32213] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  535.183451][T32212] tipc: Resetting bearer <eth:syzkaller0>
[  535.756431][T32260] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  535.761013][T32263] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  535.799178][T32268] netlink: 'syz.1.7934': attribute type 32 has an invalid length.
[  536.146662][ T4937] tipc: Resetting bearer <eth:syzkaller0>
[  536.862488][T32344] validate_nla: 1 callbacks suppressed
[  536.862507][T32344] netlink: 'syz.1.7961': attribute type 32 has an invalid length.
[  536.915280][T32348] tipc: Resetting bearer <eth:syzkaller0>
[  536.919400][T32349] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  536.923896][T32349] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  536.930712][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 156 seconds
[  536.934462][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 156 seconds
[  536.938119][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 156 seconds
[  536.942643][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 156 seconds
[  536.947177][T32349] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  536.974954][T32350] tipc: Resetting bearer <eth:syzkaller0>
[  537.018058][T32360] netlink: 'syz.2.7964': attribute type 2 has an invalid length.
[  537.151173][T12871] tipc: Resetting bearer <eth:syzkaller0>
[  537.279742][T32386] netlink: 'syz.0.7973': attribute type 32 has an invalid length.
[  537.596496][T32425] 0{X: entered promiscuous mode
[  537.606551][T32423] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  537.610965][T32423] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  537.614540][T32425] 1{X: renamed from 30{X
[  537.617503][T32425] 1{X: left promiscuous mode
[  537.619099][T32425] 1{X: entered allmulticast mode
[  537.622472][T32425] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  537.822932][T32438] netlink: 'syz.1.7992': attribute type 32 has an invalid length.
[  537.868641][T32442] bond0: Device is already in use.
[  538.088490][T32462] netlink: 'syz.1.7998': attribute type 21 has an invalid length.
[  538.307954][T32470] netlink: 'syz.1.8001': attribute type 32 has an invalid length.
[  538.705290][T32501] __nla_validate_parse: 12 callbacks suppressed
[  538.705309][T32501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8010'.
[  538.758233][T32506] netlink: 'syz.2.8013': attribute type 32 has an invalid length.
[  539.028899][T32527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8018'.
[  539.201467][T32539] wg1 speed is unknown, defaulting to 1000
[  539.206486][T32539] lo speed is unknown, defaulting to 1000
[  539.777312][T32558] netlink: 'syz.0.8028': attribute type 32 has an invalid length.
[  539.984900][T32569] netlink: 124 bytes leftover after parsing attributes in process `syz.1.8030'.
[  540.292683][T32588] netlink: 'syz.1.8035': attribute type 32 has an invalid length.
[  540.483978][T32600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8037'.
[  540.629492][T32611] netlink: 'syz.0.8041': attribute type 9 has an invalid length.
[  540.763329][T32621] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  540.766020][T32621] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  540.768800][T32621] tipc: Resetting bearer <eth:syzkaller0>
[  541.005952][T32633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8047'.
[  541.009336][T32633] netlink: 120 bytes leftover after parsing attributes in process `syz.2.8047'.
[  541.087959][T32647] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8050'.
[  541.097655][T32647] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8050'.
[  541.219131][T32655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8053'.
[  541.490737][T32680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8059'.
[  541.539533][T32682] smc: net device bond0 erased user defined pnetid SYZ2
[  541.638344][T32685] delete_channel: no stack
[  542.209280][T32746] validate_nla: 5 callbacks suppressed
[  542.209295][T32746] netlink: 'syz.1.8076': attribute type 32 has an invalid length.
[  542.393542][ T8897] tipc: Subscription rejected, illegal request
[  542.405007][  T300] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  542.556108][  T317] netlink: 'syz.1.8084': attribute type 1 has an invalid length.
[  542.579546][  T317] 8021q: adding VLAN 0 to HW filter on device bond33
[  542.602600][  T317] veth17: entered promiscuous mode
[  542.607106][  T317] bond33: (slave veth17): Enslaving as an active interface with a down link
[  542.624062][  T317] erspan0: entered allmulticast mode
[  542.701880][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 160 seconds
[  542.706705][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 160 seconds
[  542.711452][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 160 seconds
[  542.716756][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 160 seconds
[  542.745724][  T333] netlink: 'syz.0.8087': attribute type 4 has an invalid length.
[  543.169326][  T364] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  543.173647][  T364] rdma_rxe: rxe_newlink: failed to add ipvlan1
[  543.536779][  T382] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  543.817082][  T411] netlink: 'syz.1.8112': attribute type 32 has an invalid length.
[  544.030142][  T428] netlink: 'syz.1.8115': attribute type 15 has an invalid length.
[  544.157589][  T442] netlink: 'syz.0.8122': attribute type 32 has an invalid length.
[  544.644893][  T483] netlink: 'syz.1.8132': attribute type 32 has an invalid length.
[  544.785956][  T493] __nla_validate_parse: 46 callbacks suppressed
[  544.785976][  T493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8134'.
[  544.792619][  T493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8134'.
[  544.829410][  T502] macsec0: entered allmulticast mode
[  544.932272][  T511] lo: entered allmulticast mode
[  544.934523][  T511] lo: left allmulticast mode
[  545.075721][  T519] netlink: 'syz.1.8142': attribute type 32 has an invalid length.
[  545.290439][  T535] netlink: 'syz.0.8145': attribute type 13 has an invalid length.
[  545.293595][  T535] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.8145'.
[  545.465156][  T548] netlink: 'syz.0.8150': attribute type 32 has an invalid length.
[  545.561232][  T557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8151'.
[  546.108647][  T595] openvswitch: netlink: IPv4 tun info is not correct
[  546.159550][  T600] syzkaller1: entered promiscuous mode
[  546.164062][  T600] syzkaller1: entered allmulticast mode
[  546.185760][  T601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8163'.
[  546.376859][  T609] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  546.757830][  T631] IPv6: NLM_F_CREATE should be specified when creating new route
[  547.190472][  T642] netlink: 184 bytes leftover after parsing attributes in process `syz.1.8175'.
[  547.302907][  T644] validate_nla: 5 callbacks suppressed
[  547.302923][  T644] netlink: 'syz.1.8176': attribute type 32 has an invalid length.
[  547.865593][  T657] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8178'.
[  547.885288][  T657] tipc: Resetting bearer <eth:syzkaller0>
[  547.887240][  T657] tipc: Resetting bearer <eth:syzkaller0>
[  547.901974][  T657] tipc: Resetting bearer <eth:syzkaller0>
[  547.904096][  T663] unknown channel width for channel at 909000KHz?
[  547.906197][  T663] unknown channel width for channel at 909000KHz?
[  547.974404][  T666] netlink: 'syz.0.8182': attribute type 1 has an invalid length.
[  547.977064][  T666] netlink: 208 bytes leftover after parsing attributes in process `syz.0.8182'.
[  547.981640][  T666] netlink: 'syz.0.8182': attribute type 1 has an invalid length.
[  547.981762][  T656] tipc: Resetting bearer <eth:syzkaller0>
[  547.984354][  T666] netlink: 'syz.0.8182': attribute type 2 has an invalid length.
[  548.018355][  T671] netlink: 'syz.0.8184': attribute type 32 has an invalid length.
[  548.056859][  T675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8185'.
[  548.129516][  T684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8186'.
[  548.450476][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 164 seconds
[  548.454928][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 164 seconds
[  548.459319][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 164 seconds
[  548.464834][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 164 seconds
[  548.469456][  T714] netlink: 'syz.1.8194': attribute type 32 has an invalid length.
[  548.634553][  T725] sctp: [Deprecated]: syz.0.8196 (pid 725) Use of int in max_burst socket option deprecated.
[  548.634553][  T725] Use struct sctp_assoc_value instead
[  548.842368][  T754] netlink: 'syz.2.8204': attribute type 32 has an invalid length.
[  548.936163][T31105] tipc: Resetting bearer <eth:syzkaller0>
[  549.017749][  T761] 8021q: adding VLAN 0 to HW filter on device bond34
[  549.025448][  T761] bond0: (slave bond34): Enslaving as an active interface with a down link
[  549.143879][  T777] wg1 speed is unknown, defaulting to 1000
[  549.147823][  T777] lo speed is unknown, defaulting to 1000
[  549.210759][  T782] netlink: 'syz.2.8210': attribute type 3 has an invalid length.
[  549.378028][  T806] netlink: 'syz.1.8214': attribute type 32 has an invalid length.
[  549.845571][  T837] netlink: 'syz.1.8221': attribute type 4 has an invalid length.
[  549.853670][ T5875] lo speed is unknown, defaulting to 1000
[  549.856195][ T5875] syz2: Port: 1 Link ACTIVE
[  549.890224][ T5232] Bluetooth: hci2: command 0x0406 tx timeout
[  550.194549][  T848] __nla_validate_parse: 3 callbacks suppressed
[  550.194563][  T848] netlink: 41 bytes leftover after parsing attributes in process `syz.0.8223'.
[  550.206919][  T852] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8224'.
[  550.257594][  T855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8225'.
[  550.541841][  T875] wg1 speed is unknown, defaulting to 1000
[  550.545357][  T875] lo speed is unknown, defaulting to 1000
[  550.841989][  T890] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8231'.
[  550.947708][  T908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8233'.
[  551.008249][  T914] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8236'.
[  551.016799][  T913] pim6reg1: entered promiscuous mode
[  551.018573][  T913] pim6reg1: entered allmulticast mode
[  551.324934][  T953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8243'.
[  551.352925][  T953] syzkaller1: entered promiscuous mode
[  551.355124][  T953] syzkaller1: entered allmulticast mode
[  551.390658][  T956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8244'.
[  551.483564][  T962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8247'.
[  551.486430][  T962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8247'.
[  552.083764][ T1013] tipc: Resetting bearer <eth:syzkaller0>
[  553.810695][ T1017] pim6reg1: entered promiscuous mode
[  553.819959][ T1017] pim6reg1: entered allmulticast mode
[  553.998619][ T1042] wg1 speed is unknown, defaulting to 1000
[  554.014742][ T1042] lo speed is unknown, defaulting to 1000
[  554.074782][ T1052] validate_nla: 8 callbacks suppressed
[  554.074801][ T1052] netlink: 'syz.0.8262': attribute type 32 has an invalid length.
[  554.169518][ T1057] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  554.226743][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 168 seconds
[  554.232520][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 168 seconds
[  554.237061][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 168 seconds
[  554.241813][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 168 seconds
[  554.718781][ T1104] netlink: 'syz.1.8272': attribute type 32 has an invalid length.
[  555.321966][ T1132] x9: renamed from bridge_slave_0
[  555.382033][ T1132] netlink: 'syz.2.8280': attribute type 5 has an invalid length.
[  555.395414][ T1131] netlink: 'syz.2.8280': attribute type 12 has an invalid length.
[  555.637814][ T1145] netlink: 'syz.2.8284': attribute type 32 has an invalid length.
[  555.955501][ T1170] __nla_validate_parse: 14 callbacks suppressed
[  555.955512][ T1170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8289'.
[  555.965457][ T1170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8289'.
[  556.135101][ T1182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8291'.
[  556.137824][ T1182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8291'.
[  556.257912][ T1193] netlink: 'syz.2.8295': attribute type 29 has an invalid length.
[  556.262910][ T1193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8295'.
[  556.301064][ T1195] netlink: 'syz.1.8296': attribute type 32 has an invalid length.
[  556.796451][ T1241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8309'.
[  556.868153][ T1244] netlink: 'syz.0.8310': attribute type 32 has an invalid length.
[  557.224835][ T1279] netlink: 'syz.0.8315': attribute type 1 has an invalid length.
[  557.265172][ T1279] 8021q: adding VLAN 0 to HW filter on device bond33
[  557.275431][ T1288] netlink: set zone limit has 8 unknown bytes
[  557.802843][ T1317] netlink: 'syz.2.8322': attribute type 32 has an invalid length.
[  557.838226][ T1320] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8323'.
[  557.963329][ T1330] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  557.967206][ T1330] sch_tbf: burst 127 is lower than device syzkaller0 mtu (299) !
[  558.155809][ T1341] 8021q: adding VLAN 0 to HW filter on device bond34
[  558.166226][ T1343] bond34: (slave geneve5): making interface the new active one
[  558.174134][ T1343] bond34: (slave geneve5): Enslaving as an active interface with an up link
[  558.754083][ T1401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8345'.
[  559.184318][ T1437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8354'.
[  559.188231][ T1437] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  559.285517][ T1440] sctp: [Deprecated]: syz.0.8355 (pid 1440) Use of struct sctp_assoc_value in delayed_ack socket option.
[  559.285517][ T1440] Use struct sctp_sack_info instead
[  559.299760][ T1440] validate_nla: 4 callbacks suppressed
[  559.299775][ T1440] netlink: 'syz.0.8355': attribute type 2 has an invalid length.
[  559.323264][ T1441] wg1 speed is unknown, defaulting to 1000
[  559.327384][ T1441] lo speed is unknown, defaulting to 1000
[  559.606995][ T1449] netlink: 'syz.2.8358': attribute type 32 has an invalid length.
[  559.668525][ T1454] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  559.934115][ T1466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8359'.
[  559.970531][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 172 seconds
[  559.975092][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 172 seconds
[  559.979604][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 172 seconds
[  559.989102][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 172 seconds
[  559.993823][ T8898] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  559.996656][ T8898] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  560.005291][ T8898] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  560.009378][ T8898] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  560.760977][ T1489] netlink: 'syz.0.8366': attribute type 32 has an invalid length.
[  560.818893][ T1493] netlink: 'syz.2.8367': attribute type 11 has an invalid length.
[  561.101228][ T1509] __nla_validate_parse: 2 callbacks suppressed
[  561.101247][ T1509] netlink: 17 bytes leftover after parsing attributes in process `syz.2.8369'.
[  561.273910][ T1517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8373'.
[  561.383855][ T1520] tipc: Resetting bearer <eth:syzkaller0>
[  561.423734][ T1522] IPVS: length: 209 != 249953352888
[  561.424014][ T1519] tipc: Resetting bearer <eth:syzkaller0>
[  561.533292][ T1528] netlink: 'syz.1.8378': attribute type 32 has an invalid length.
[  561.746286][ T1537] tap0: tun_chr_ioctl cmd 1074025678
[  561.748771][ T1537] tap0: group set to 0
[  561.780717][ T1541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8379'.
[  561.784771][ T1541] netlink: 15 bytes leftover after parsing attributes in process `syz.0.8379'.
[  562.016987][ T1555] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8387'.
[  562.021372][ T1556] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8387'.
[  562.147252][T12870] tipc: Resetting bearer <eth:syzkaller0>
[  562.209363][ T1569] netlink: 'syz.2.8392': attribute type 32 has an invalid length.
[  562.854810][ T1615] netlink: 'syz.2.8404': attribute type 32 has an invalid length.
[  563.203276][ T1637] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8408'.
[  563.208609][ T1637] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8408'.
[  563.213132][ T1638] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8408'.
[  563.450224][ T1650] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  563.453999][ T1650] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  563.500852][ T1657] netlink: 'syz.0.8412': attribute type 1 has an invalid length.
[  563.585123][ T1661] netlink: 'syz.2.8416': attribute type 32 has an invalid length.
[  564.268144][ T1702] netlink: 'syz.0.8426': attribute type 32 has an invalid length.
[  564.513098][ T1717] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.8431'.
[  564.776296][ T1731] netlink: 'syz.1.8435': attribute type 3 has an invalid length.
[  564.779896][ T1731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  564.942732][ T1735] netlink: 'syz.1.8438': attribute type 32 has an invalid length.
[  565.454329][ T1765] netlink: 'syz.0.8445': attribute type 25 has an invalid length.
[  565.559602][ T1772] netlink: 'syz.1.8448': attribute type 32 has an invalid length.
[  565.738362][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 176 seconds
[  565.743926][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 176 seconds
[  565.747536][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 176 seconds
[  565.751174][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 176 seconds
[  565.929626][ T1793] tipc: Resetting bearer <eth:syzkaller0>
[  566.051748][   T51] wg1 speed is unknown, defaulting to 1000
[  566.054166][   T51] syz0: Port: 1 Link DOWN
[  566.056792][ T8898] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  566.068368][ T8898] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  566.073517][ T8898] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  566.081601][ T8898] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  566.115398][ T1809] tipc: Resetting bearer <eth:syzkaller0>
[  566.126737][ T1811] netlink: 'syz.0.8460': attribute type 32 has an invalid length.
[  566.136069][ T1809] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  566.147212][ T1808] tipc: Resetting bearer <eth:syzkaller0>
[  566.234672][T31105] tipc: Resetting bearer <eth:syzkaller0>
[  566.478899][ T1829] __nla_validate_parse: 3 callbacks suppressed
[  566.478912][ T1829] netlink: 732 bytes leftover after parsing attributes in process `syz.0.8465'.
[  566.485355][ T1829] netlink: 732 bytes leftover after parsing attributes in process `syz.0.8465'.
[  566.554241][ T1832] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8466'.
[  566.567686][ T1832] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8466'.
[  566.573835][ T1832] netlink: 'syz.2.8466': attribute type 6 has an invalid length.
[  566.576989][ T1832] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8466'.
[  566.605613][ T1832] wg1 speed is unknown, defaulting to 1000
[  566.609482][ T1832] lo speed is unknown, defaulting to 1000
[  566.704555][ T1832] netlink: 'syz.2.8466': attribute type 1 has an invalid length.
[  566.709798][ T1832] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.8466'.
[  566.715613][ T1841] bond25: (slave bridge15): Releasing active interface
[  566.720369][ T1841] batadv4: left allmulticast mode
[  566.722543][ T1841] batadv4: left promiscuous mode
[  566.724917][ T1841] bridge0: port 1(batadv4) entered disabled state
[  566.767160][ T1841] bond34: (slave geneve5): Releasing active interface
[  566.802351][ T1841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8469'.
[  566.878667][ T1844] netlink: 'syz.2.8470': attribute type 32 has an invalid length.
[  566.996345][ T1855] tipc: Resetting bearer <eth:syzkaller0>
[  567.041881][ T1855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8473'.
[  567.123602][ T1854] tipc: Resetting bearer <eth:syzkaller0>
[  567.189409][ T1866] netlink: 'syz.2.8475': attribute type 1 has an invalid length.
[  567.270480][T12871] tipc: Resetting bearer <eth:syzkaller0>
[  567.284448][ T1870] 8021q: adding VLAN 0 to HW filter on device bond0
[  567.296719][ T1870] bond0: (slave rose0): Enslaving as an active interface with an up link
[  567.574653][ T1877] netlink: 'syz.1.8482': attribute type 32 has an invalid length.
[  567.718863][ T1886] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8483'.
[  567.925560][ T1892] wg1 speed is unknown, defaulting to 1000
[  567.929545][ T1892] lo speed is unknown, defaulting to 1000
[  568.367161][ T1918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8491'.
[  568.373531][ T1918] sch_tbf: burst 240 is lower than device syzkaller0 mtu (299) !
[  568.762822][ T1939] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  569.145324][ T1962] tun0: tun_chr_ioctl cmd 1074025675
[  569.147465][ T1962] tun0: persist enabled
[  569.149576][ T1962] tun0: tun_chr_ioctl cmd 1074025675
[  569.157052][ T1962] tun0: persist disabled
[  569.246676][ T1964] tipc: Resetting bearer <eth:syzkaller0>
[  569.257387][ T1964] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  569.281877][ T1964] sch_tbf: burst 12 is lower than device syzkaller0 mtu (313) !
[  569.319334][ T1965] tipc: Resetting bearer <eth:syzkaller0>
[  569.444383][ T1975] macsec3: entered promiscuous mode
[  569.453360][ T1975] macsec3: entered allmulticast mode
[  569.700027][ T1993] veth19: entered promiscuous mode
[  570.106812][ T2025] validate_nla: 5 callbacks suppressed
[  570.106827][ T2025] netlink: 'syz.0.8520': attribute type 32 has an invalid length.
[  570.298197][ T2039] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  570.301506][ T2039] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  570.305281][ T2039] tipc: Resetting bearer <eth:syzkaller0>
[  570.377229][T12879] tipc: Resetting bearer <eth:syzkaller0>
[  570.596759][ T2051] netlink: 'syz.0.8530': attribute type 32 has an invalid length.
[  570.915178][ T2072] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  571.055160][ T2079] tipc: Resetting bearer <eth:syzkaller0>
[  571.087412][ T2080] tipc: Resetting bearer <eth:syzkaller0>
[  571.218153][ T2093] netlink: 'syz.1.8540': attribute type 32 has an invalid length.
[  571.385313][T12871] tipc: Resetting bearer <eth:syzkaller0>
[  571.490098][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 180 seconds
[  571.494315][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 180 seconds
[  571.498554][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 180 seconds
[  571.503125][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 180 seconds
[  571.686436][ T2121] netlink: 'syz.2.8548': attribute type 32 has an invalid length.
[  571.727361][ T2125] can: request_module (can-proto-0) failed.
[  571.854693][ T2135] __nla_validate_parse: 12 callbacks suppressed
[  571.854738][ T2135] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8551'.
[  571.944202][ T2142] netlink: zone id is out of range
[  571.946568][ T2143] netlink: zone id is out of range
[  571.948751][ T2142] netlink: zone id is out of range
[  571.951314][ T2143] netlink: zone id is out of range
[  571.953500][ T2142] netlink: zone id is out of range
[  571.955718][ T2143] netlink: zone id is out of range
[  571.957920][ T2142] netlink: zone id is out of range
[  571.957923][ T2145] netlink: 732 bytes leftover after parsing attributes in process `syz.0.8554'.
[  571.960479][ T2143] netlink: zone id is out of range
[  571.960491][ T2143] netlink: zone id is out of range
[  571.969103][ T2145] netlink: 732 bytes leftover after parsing attributes in process `syz.0.8554'.
[  572.002307][ T2145] pimreg: entered allmulticast mode
[  572.006421][ T2145] pimreg: left allmulticast mode
[  572.120797][ T2154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8557'.
[  572.194427][ T2160] netlink: 'syz.0.8559': attribute type 1 has an invalid length.
[  572.197272][ T2160] netlink: 236 bytes leftover after parsing attributes in process `syz.0.8559'.
[  572.211518][ T2162] netlink: 'syz.2.8560': attribute type 32 has an invalid length.
[  572.247397][ T2165] netlink: 'syz.0.8561': attribute type 10 has an invalid length.
[  572.251780][ T2165] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8561'.
[  572.255618][ T2165] dummy0: entered promiscuous mode
[  572.257828][ T2165] dummy0: entered allmulticast mode
[  572.458775][ T2179] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8565'.
[  572.793963][ T2198] netlink: 'syz.1.8572': attribute type 32 has an invalid length.
[  572.870236][ T2208] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8573'.
[  572.975247][ T2215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8575'.
[  573.126856][ T2223] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8577'.
[  573.145856][ T2224] netlink: 'syz.1.8575': attribute type 10 has an invalid length.
[  573.390318][ T2241] netlink: 'syz.1.8582': attribute type 32 has an invalid length.
[  573.667987][ T2276] bond0: peer notification delay (198) is not a multiple of miimon (100), value rounded to 100 ms
[  573.675886][ T2277] bond0: peer notification delay (198) is not a multiple of miimon (100), value rounded to 100 ms
[  573.930352][ T2292] wg1 speed is unknown, defaulting to 1000
[  573.934796][ T2292] lo speed is unknown, defaulting to 1000
[  574.689473][ T2374] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  574.694295][ T2374] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  574.824211][ T2386] syzkaller1: entered promiscuous mode
[  574.825990][ T2386] syzkaller1: entered allmulticast mode
[  575.033798][ T2404] wg1 speed is unknown, defaulting to 1000
[  575.046145][ T2404] lo speed is unknown, defaulting to 1000
[  575.135717][ T2409] validate_nla: 10 callbacks suppressed
[  575.135736][ T2409] netlink: 'syz.1.8626': attribute type 32 has an invalid length.
[  575.647382][ T2440] netlink: 'syz.0.8636': attribute type 32 has an invalid length.
[  575.917673][ T2471] netlink: 'syz.1.8644': attribute type 3 has an invalid length.
[  576.384583][ T2499] netlink: 'syz.2.8652': attribute type 32 has an invalid length.
[  576.404866][ T2504] net_ratelimit: 337 callbacks suppressed
[  576.404880][ T2504] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  576.449176][ T2509] netlink: 'syz.1.8654': attribute type 10 has an invalid length.
[  576.459146][ T2508] netlink: 'syz.1.8654': attribute type 10 has an invalid length.
[  576.532408][ T5902] page_pool_release_retry() stalled pool shutdown: id 56, 2176 inflight 180 sec
[  576.675357][ T2539] veth0: entered promiscuous mode
[  576.687714][ T2539] veth0 (unregistering): left promiscuous mode
[  576.722325][ T2541] tipc: Resetting bearer <eth:syzkaller0>
[  576.758392][ T2540] tipc: Resetting bearer <eth:syzkaller0>
[  576.818799][ T2556] tipc: Resetting bearer <eth:syzkaller0>
[  576.827896][ T2555] tipc: Resetting bearer <eth:syzkaller0>
[  576.908715][ T2567] tipc: Resetting bearer <eth:syzkaller0>
[  576.915729][ T2567] netlink: 'syz.1.8667': attribute type 21 has an invalid length.
[  576.918858][ T2568] netlink: 'syz.1.8667': attribute type 21 has an invalid length.
[  576.923764][ T2567] __nla_validate_parse: 19 callbacks suppressed
[  576.923775][ T2567] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8667'.
[  576.928829][ T2568] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8667'.
[  576.932850][ T2566] tipc: Resetting bearer <eth:syzkaller0>
[  577.036644][ T2577] netlink: 'syz.1.8670': attribute type 32 has an invalid length.
[  577.256701][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 184 seconds
[  577.261091][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 184 seconds
[  577.264637][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 184 seconds
[  577.268188][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 184 seconds
[  577.553612][ T2589] netlink: 'syz.1.8672': attribute type 1 has an invalid length.
[  577.556812][ T2589] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8672'.
[  577.753762][T12870] tipc: Resetting bearer <eth:syzkaller0>
[  578.077595][ T2648] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  578.168329][ T2660] tipc: Resetting bearer <eth:syzkaller0>
[  578.180057][ T2663] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  578.188218][ T2665] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  578.218615][ T2663] tipc: Resetting bearer <eth:syzkaller0>
[  578.305538][ T2673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8691'.
[  578.403260][ T2679] 8021q: adding VLAN 0 to HW filter on device bond28
[  578.425493][ T2675] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8692'.
[  578.762349][T12879] tipc: Resetting bearer <eth:syzkaller0>
[  579.588702][ T2764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8713'.
[  579.693049][ T2775] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8714'.
[  580.344784][ T2804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8721'.
[  580.351746][ T2804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8721'.
[  580.498125][ T2817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8723'.
[  580.584393][ T2820] validate_nla: 6 callbacks suppressed
[  580.584413][ T2820] netlink: 'syz.0.8724': attribute type 32 has an invalid length.
[  580.863127][ T2845] bond0: Device is already in use.
[  581.205330][ T2878] netlink: 'syz.0.8736': attribute type 32 has an invalid length.
[  581.837061][ T2915] tipc: Resetting bearer <eth:syzkaller0>
[  581.845398][ T2914] tipc: Resetting bearer <eth:syzkaller0>
[  581.852234][T12870] tipc: Resetting bearer <eth:syzkaller0>
[  581.862170][ T2923] netlink: 'syz.0.8744': attribute type 32 has an invalid length.
[  582.043252][ T2946] __nla_validate_parse: 2 callbacks suppressed
[  582.043267][ T2946] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8749'.
[  582.099308][ T2952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8749'.
[  582.107344][ T2952] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  582.177168][ T2954] wg1 speed is unknown, defaulting to 1000
[  582.185004][ T2954] lo speed is unknown, defaulting to 1000
[  582.306332][ T2974] netlink: 'syz.0.8757': attribute type 3 has an invalid length.
[  582.359925][ T2983] netlink: 'syz.1.8758': attribute type 32 has an invalid length.
[  582.431822][ T2978] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8759'.
[  582.436529][ T2978] tc_dump_action: action bad kind
[  582.450350][ T2978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8759'.
[  582.846245][ T3020] bridge32: the hash_elasticity option has been deprecated and is always 16
[  582.850502][ T3020] bridge32: entered allmulticast mode
[  582.897905][ T3028] netlink: 'syz.2.8772': attribute type 32 has an invalid length.
[  582.967869][ T3031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8773'.
[  583.020583][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 188 seconds
[  583.026505][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 188 seconds
[  583.031568][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 188 seconds
[  583.035551][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 188 seconds
[  583.165492][ T3052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8774'.
[  583.272002][ T3054] wg1 speed is unknown, defaulting to 1000
[  583.277067][ T3054] lo speed is unknown, defaulting to 1000
[  583.336606][ T3058] wg1 speed is unknown, defaulting to 1000
[  583.343774][ T3058] lo speed is unknown, defaulting to 1000
[  583.607360][ T3066] netlink: 'syz.2.8778': attribute type 10 has an invalid length.
[  583.841418][ T3075] netlink: 'syz.2.8783': attribute type 32 has an invalid length.
[  586.105105][ T3098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8790'.
[  586.105796][ T3096] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8789'.
[  586.117176][ T3096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8789'.
[  586.226682][ T3109] netlink: 'syz.1.8794': attribute type 32 has an invalid length.
[  586.283108][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  586.287970][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  586.295117][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  586.298559][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  586.517183][ T3139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8802'.
[  586.654771][ T3143] wg1 speed is unknown, defaulting to 1000
[  586.661231][ T3143] lo speed is unknown, defaulting to 1000
[  586.707417][ T3159] netlink: 'syz.1.8810': attribute type 32 has an invalid length.
[  586.979275][ T3189] netlink: 'syz.0.8817': attribute type 1 has an invalid length.
[  587.000577][ T3189] bond35: entered promiscuous mode
[  587.002578][ T3189] 8021q: adding VLAN 0 to HW filter on device bond35
[  587.028926][ T3189] 8021q: adding VLAN 0 to HW filter on device bond35
[  587.039096][ T3189] bond35: (slave wireguard0): The slave device specified does not support setting the MAC address
[  587.047510][ T3189] bond35: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  587.057549][ T3189] bond35: (slave wireguard0): making interface the new active one
[  587.063764][ T3200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  587.064654][ T3189] wireguard0: entered promiscuous mode
[  587.066074][ T3200] IPv6: NLM_F_CREATE should be set when creating new route
[  587.070045][ T3200] IPv6: NLM_F_CREATE should be set when creating new route
[  587.072798][ T3189] bond35: (slave wireguard0): Enslaving as an active interface with an up link
[  587.075863][ T3200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  587.082771][ T3200] bond35: (slave wireguard1): The slave device specified does not support setting the MAC address
[  587.089512][ T3200] bond35: (slave wireguard1): Enslaving as a backup interface with an up link
[  587.115614][ T3201] sctp: [Deprecated]: syz.1.8821 (pid 3201) Use of int in max_burst socket option.
[  587.115614][ T3201] Use struct sctp_assoc_value instead
[  587.197705][ T3206] __nla_validate_parse: 1 callbacks suppressed
[  587.197728][ T3206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8823'.
[  587.217932][ T3208] netlink: 'syz.0.8824': attribute type 32 has an invalid length.
[  587.586522][ T3241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8836'.
[  587.590883][ T3242] netlink: 236 bytes leftover after parsing attributes in process `syz.1.8837'.
[  587.594488][ T3242] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8837'.
[  587.615281][ T3244] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8838'.
[  587.695527][ T3252] netlink: 'syz.2.8840': attribute type 32 has an invalid length.
[  587.705889][ T3255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8841'.
[  587.973138][ T3281] C: entered allmulticast mode
[  587.975327][ T3281] C: left allmulticast mode
[  588.203052][ T3295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8851'.
[  588.287725][ T3301] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  588.292269][ T3302] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  588.296742][ T3303] netlink: 'syz.2.8854': attribute type 32 has an invalid length.
[  588.534744][ T3322] netlink: 208 bytes leftover after parsing attributes in process `syz.0.8856'.
[  588.600531][ T3325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8857'.
[  588.604280][ T3325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8857'.
[  588.607999][ T3325] netlink: 'syz.1.8857': attribute type 19 has an invalid length.
[  588.613839][ T3325] netlink: 'syz.1.8857': attribute type 19 has an invalid length.
[  588.771612][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 192 seconds
[  588.775777][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 192 seconds
[  588.779829][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 192 seconds
[  588.782462][ T3342] bridge29: entered promiscuous mode
[  588.783279][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 192 seconds
[  588.785087][ T3342] bridge29: entered allmulticast mode
[  588.817251][ T3346] netlink: 'syz.1.8866': attribute type 32 has an invalid length.
[  589.077790][ T3375] netem: incorrect gi model size
[  589.081366][ T3375] netem: change failed
[  589.088693][ T3377] sctp: [Deprecated]: syz.0.8874 (pid 3377) Use of int in maxseg socket option.
[  589.088693][ T3377] Use struct sctp_assoc_value instead
[  589.178756][ T3388] tipc: Resetting bearer <eth:syzkaller0>
[  589.187359][ T3387] tipc: Resetting bearer <eth:syzkaller0>
[  589.232045][ T3397] netlink: 'syz.1.8880': attribute type 32 has an invalid length.
[  589.496721][ T3420] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  589.692874][ T3436] tipc: Enabled bearer <ib:caif0>, priority 14
[  589.696216][ T3436] sit0: entered promiscuous mode
[  589.764176][ T3443] bridge33: entered promiscuous mode
[  589.768315][ T3443] bridge33: entered allmulticast mode
[  589.793020][T31105] tipc: Resetting bearer <eth:syzkaller0>
[  590.563015][ T3520] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004
[  590.565101][ T3523] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004
[  590.806424][ T3545] wg1 speed is unknown, defaulting to 1000
[  590.811263][ T3545] lo speed is unknown, defaulting to 1000
[  590.897879][ T3545] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20004
[  590.998327][ T3561] sctp: [Deprecated]: syz.1.8924 (pid 3561) Use of struct sctp_assoc_value in delayed_ack socket option.
[  590.998327][ T3561] Use struct sctp_sack_info instead
[  591.409359][ T3599] validate_nla: 10 callbacks suppressed
[  591.409377][ T3599] netlink: 'syz.2.8933': attribute type 1 has an invalid length.
[  591.518327][ T3602] wg1 speed is unknown, defaulting to 1000
[  591.530287][ T3602] lo speed is unknown, defaulting to 1000
[  591.550963][ T3606] sctp: [Deprecated]: syz.1.8935 (pid 3606) Use of int in max_burst socket option.
[  591.550963][ T3606] Use struct sctp_assoc_value instead
[  591.560432][ T3605] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  591.844503][ T3625] tipc: Resetting bearer <eth:syzkaller0>
[  591.846693][ T3627] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  591.867673][ T3627] tipc: Resetting bearer <eth:syzkaller0>
[  591.913621][ T3630] netlink: 'syz.2.8942': attribute type 32 has an invalid length.
[  591.934901][   T33] audit: type=1804 audit(1755309100.006:12): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8943" name="/newroot/2923/cgroup.controllers" dev="tmpfs" ino=14952 res=1 errno=0
[  591.957548][   T33] audit: type=1800 audit(1755309100.036:13): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8943" name="cgroup.controllers" dev="tmpfs" ino=14952 res=0 errno=0
[  591.975149][   T33] audit: type=1800 audit(1755309100.036:14): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8943" name="cgroup.controllers" dev="tmpfs" ino=14952 res=0 errno=0
[  592.329929][ T3653] __nla_validate_parse: 16 callbacks suppressed
[  592.329943][ T3653] netlink: 136 bytes leftover after parsing attributes in process `syz.0.8947'.
[  592.745056][ T3673] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8951'.
[  592.796694][ T3680] netlink: 'syz.0.8954': attribute type 32 has an invalid length.
[  592.805027][ T3683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8953'.
[  592.826215][ T3681] bond36: entered promiscuous mode
[  592.828225][ T3681] 8021q: adding VLAN 0 to HW filter on device bond36
[  592.831506][ T3681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8953'.
[  592.834495][ T3684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8953'.
[  592.859900][T31105] tipc: Resetting bearer <eth:syzkaller0>
[  593.032866][ T3698] Unsupported ieee802154 address type: 0
[  593.225359][ T3715] veth21: entered promiscuous mode
[  593.327346][ T3718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8965'.
[  593.331164][ T3718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8965'.
[  594.085421][ T3730] netlink: 'syz.1.8968': attribute type 32 has an invalid length.
[  594.166735][ T3737] netlink: 'syz.2.8969': attribute type 1 has an invalid length.
[  594.342541][ T3750] team0: Device ipvlan0 is already an upper device of the team interface
[  594.385131][ T3751] wg1 speed is unknown, defaulting to 1000
[  594.390953][ T3751] lo speed is unknown, defaulting to 1000
[  594.521952][ T3758] netlink: 'syz.1.8977': attribute type 25 has an invalid length.
[  594.530026][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 196 seconds
[  594.534424][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 196 seconds
[  594.538674][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 196 seconds
[  594.544292][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 196 seconds
[  594.675849][ T3766] netlink: 'syz.1.8981': attribute type 32 has an invalid length.
[  594.841825][ T3775] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8982'.
[  594.890946][ T3781] tipc: Resetting bearer <eth:syzkaller0>
[  594.895539][ T3780] tipc: Resetting bearer <eth:syzkaller0>
[  595.118045][ T3799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8992'.
[  595.143891][ T3801] netlink: 'syz.0.8991': attribute type 32 has an invalid length.
[  595.209008][ T3806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8992'.
[  595.424152][ T3827] netlink: 'syz.2.8998': attribute type 1 has an invalid length.
[  595.432679][ T3826] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  595.432807][ T3827] netlink: 'syz.2.8998': attribute type 1 has an invalid length.
[  595.471004][ T3832] pim6reg1: entered promiscuous mode
[  595.472770][ T3832] pim6reg1: entered allmulticast mode
[  595.562337][ T3836] wg1 speed is unknown, defaulting to 1000
[  595.567886][ T3836] lo speed is unknown, defaulting to 1000
[  595.982360][   T69] tipc: Resetting bearer <eth:syzkaller0>
[  596.342697][ T3856] tipc: Resetting bearer <eth:syzkaller0>
[  596.448879][ T3858] tipc: Resetting bearer <eth:syzkaller0>
[  596.496123][ T3871] netlink: zone id is out of range
[  596.498021][ T3871] netlink: zone id is out of range
[  596.500493][ T3871] netlink: zone id is out of range
[  596.504247][ T3871] netlink: zone id is out of range
[  596.519851][ T3871] netlink: zone id is out of range
[  596.522025][ T3871] netlink: zone id is out of range
[  596.524478][ T3871] netlink: zone id is out of range
[  596.526537][ T3871] netlink: zone id is out of range
[  596.577362][ T3868] validate_nla: 1 callbacks suppressed
[  596.577378][ T3868] netlink: 'syz.2.9008': attribute type 12 has an invalid length.
[  596.587573][ T3871] net_ratelimit: 15 callbacks suppressed
[  596.587587][ T3871] netlink: set zone limit has 4 unknown bytes
[  596.589742][ T3868] netlink: 'syz.2.9008': attribute type 11 has an invalid length.
[  596.619403][ T3873] netlink: del zone limit has 4 unknown bytes
[  596.622092][ T3878] netlink: 'syz.1.9012': attribute type 32 has an invalid length.
[  596.786536][ T3890] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  596.882326][ T3906] ipvlan0: entered promiscuous mode
[  596.885309][ T3906] bridge0: port 1(ipvlan0) entered blocking state
[  596.887660][ T3906] bridge0: port 1(ipvlan0) entered disabled state
[  596.895100][ T3906] ipvlan0: entered allmulticast mode
[  596.897741][ T3906] bridge0: entered allmulticast mode
[  596.901135][ T3906] ipvlan0: left allmulticast mode
[  596.902681][ T3906] bridge0: left allmulticast mode
[  596.943142][ T3911] netlink: 'syz.0.9021': attribute type 1 has an invalid length.
[  597.019520][T12870] tipc: Resetting bearer <eth:syzkaller0>
[  597.030681][ T3920] netlink: 'syz.2.9024': attribute type 32 has an invalid length.
[  597.341075][ T3944] __nla_validate_parse: 7 callbacks suppressed
[  597.341089][ T3944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9030'.
[  597.476861][ T3956] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9034'.
[  597.508525][ T3967] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9037'.
[  597.668112][ T3978] netlink: 'syz.2.9041': attribute type 32 has an invalid length.
[  597.994921][ T3999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9047'.
[  597.999430][ T3999] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  598.442441][ T4008] tipc: Resetting bearer <eth:syzkaller0>
[  598.503672][ T4008] tipc: Resetting bearer <eth:syzkaller0>
[  598.537994][ T4017] netlink: 'syz.1.9052': attribute type 32 has an invalid length.
[  598.721025][ T4039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9056'.
[  598.725869][ T4038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9056'.
[  598.826818][ T4039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9056'.
[  598.982406][ T4058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9060'.
[  599.054692][T31105] tipc: Resetting bearer <eth:syzkaller0>
[  599.139417][ T4076] netlink: 'syz.1.9066': attribute type 32 has an invalid length.
[  599.308857][ T4092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9069'.
[  599.324597][ T4092] netlink: 'syz.2.9069': attribute type 3 has an invalid length.
[  599.328032][ T4092] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9069'.
[  599.451483][ T4109] netlink: 'syz.2.9075': attribute type 5 has an invalid length.
[  599.813047][ T4150] batadv0: entered allmulticast mode
[  599.815807][ T4150] 8021q: adding VLAN 0 to HW filter on device batadv0
[  599.844978][ T4150] wg1 speed is unknown, defaulting to 1000
[  599.848803][ T4150] lo speed is unknown, defaulting to 1000
[  599.933765][ T4160] wg1 speed is unknown, defaulting to 1000
[  599.945393][ T4160] lo speed is unknown, defaulting to 1000
[  600.095350][ T4173] wg1 speed is unknown, defaulting to 1000
[  600.099131][ T4173] lo speed is unknown, defaulting to 1000
[  600.292375][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 200 seconds
[  600.295939][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 200 seconds
[  600.299478][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 200 seconds
[  600.303548][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 200 seconds
[  600.999243][ T4221] openvswitch: netlink: Flow key attr not present in new flow.
[  601.049512][ T4227] bridge0: port 1(veth0_to_bridge) entered blocking state
[  601.055503][ T4227] bridge0: port 1(veth0_to_bridge) entered disabled state
[  601.057850][ T4227] veth0_to_bridge: entered allmulticast mode
[  601.063973][ T4227] veth0_to_bridge: entered promiscuous mode
[  601.283796][ T4261] tipc: Resetting bearer <eth:syzkaller0>
[  601.301099][ T4261] bond22: (slave bridge30): Releasing active interface
[  601.629388][ T4301] 8021q: VLANs not supported on wg0
[  601.675668][ T4305] syzkaller1: entered promiscuous mode
[  601.677777][ T4305] syzkaller1: entered allmulticast mode
[  601.681354][ T4304] validate_nla: 5 callbacks suppressed
[  601.681365][ T4304] netlink: 'syz.2.9128': attribute type 32 has an invalid length.
[  601.805522][ T4317] netlink: 'syz.1.9131': attribute type 5 has an invalid length.
[  601.914574][ T4332] netlink: 'syz.1.9137': attribute type 9 has an invalid length.
[  601.926691][ T4328] syzkaller1: entered promiscuous mode
[  601.929118][ T4328] syzkaller1: entered allmulticast mode
[  602.049499][ T4347] dvmrp1: entered allmulticast mode
[  602.058446][ T4351] netlink: 'syz.2.9144': attribute type 32 has an invalid length.
[  602.070282][ T8898] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  602.076308][ T8898] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  602.083592][ T8898] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  602.086211][ T8898] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  602.275444][ T4372] pim6reg: left allmulticast mode
[  602.601791][ T4398] netlink: 'syz.2.9156': attribute type 32 has an invalid length.
[  602.641251][ T4402] __nla_validate_parse: 11 callbacks suppressed
[  602.641269][ T4402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9157'.
[  603.656849][ T4422] netlink: 'syz.0.9164': attribute type 32 has an invalid length.
[  603.807308][T24213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  603.812167][T24213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  603.815134][T24213] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  603.817925][T24213] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  603.820537][T24213] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  603.858388][ T4428] wg1 speed is unknown, defaulting to 1000
[  603.866827][ T4428] lo speed is unknown, defaulting to 1000
[  603.985058][ T4428] chnl_net:caif_netlink_parms(): no params data found
[  604.009925][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  604.014571][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  604.017860][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  604.022411][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  604.025097][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  604.117000][ T4443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9167'.
[  604.118393][ T4435] wg1 speed is unknown, defaulting to 1000
[  604.127851][ T4443] pim6reg: entered allmulticast mode
[  604.138143][ T4443] pim6reg: left allmulticast mode
[  604.196278][ T4435] lo speed is unknown, defaulting to 1000
[  604.197153][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.201896][ T4428] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.211449][ T4428] bridge_slave_0: entered allmulticast mode
[  604.215521][ T4428] bridge_slave_0: entered promiscuous mode
[  604.223597][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.227609][ T4428] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.231650][ T4428] bridge_slave_1: entered allmulticast mode
[  604.235646][ T4428] bridge_slave_1: entered promiscuous mode
[  604.315748][ T4428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  604.330953][ T4428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  604.383447][ T4428] team0: Port device team_slave_0 added
[  604.396693][ T4428] team0: Port device team_slave_1 added
[  604.434802][ T4446] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9168'.
[  604.459591][ T4428] batman_adv: batadv0: Adding interface: batadv_slave_0
[  604.462901][ T4428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  604.472408][ T4428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  604.490521][ T4428] batman_adv: batadv0: Adding interface: batadv_slave_1
[  604.493202][ T4428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  604.502889][ T4428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  604.591450][ T4428] hsr_slave_0: entered promiscuous mode
[  604.597063][ T4428] hsr_slave_1: entered promiscuous mode
[  604.653518][ T4435] chnl_net:caif_netlink_parms(): no params data found
[  604.776623][ T4435] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.779019][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.781939][ T4435] bridge_slave_0: entered allmulticast mode
[  604.784809][ T4435] bridge_slave_0: entered promiscuous mode
[  604.795364][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.797720][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.802516][ T4435] bridge_slave_1: entered allmulticast mode
[  604.805374][ T4435] bridge_slave_1: entered promiscuous mode
[  604.848186][ T4435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  604.854210][ T4435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  604.902481][ T4435] team0: Port device team_slave_0 added
[  604.906203][ T4435] team0: Port device team_slave_1 added
[  604.945606][ T4435] batman_adv: batadv0: Adding interface: batadv_slave_0
[  604.947826][ T4435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  604.956129][ T4435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  604.975094][ T4435] batman_adv: batadv0: Adding interface: batadv_slave_1
[  604.977917][ T4435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  604.986932][ T4435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  604.994483][ T4428] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  605.006971][ T4428] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  605.037545][ T4428] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  605.057818][ T4428] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  605.068552][ T4435] hsr_slave_0: entered promiscuous mode
[  605.071979][ T4435] hsr_slave_1: entered promiscuous mode
[  605.074231][ T4435] debugfs: 'hsr0' already exists in 'hsr'
[  605.076067][ T4435] Cannot create hsr debugfs directory
[  605.299450][ T4435] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  605.314578][ T4435] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  605.333780][ T4428] 8021q: adding VLAN 0 to HW filter on device bond0
[  605.336145][ T4435] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  605.346361][ T4435] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  605.394860][ T4428] 8021q: adding VLAN 0 to HW filter on device team0
[  605.403740][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  605.406036][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  605.437975][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.441026][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  605.556758][ T4435] 8021q: adding VLAN 0 to HW filter on device bond0
[  605.581069][ T4435] 8021q: adding VLAN 0 to HW filter on device team0
[  605.587704][T12879] bridge0: port 1(bridge_slave_0) entered blocking state
[  605.590131][T12879] bridge0: port 1(bridge_slave_0) entered forwarding state
[  605.618299][T12879] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.620745][T12879] bridge0: port 2(bridge_slave_1) entered forwarding state
[  605.755039][ T4428] 8021q: adding VLAN 0 to HW filter on device batadv0
[  605.788229][ T4435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  605.817990][ T4428] veth0_vlan: entered promiscuous mode
[  605.835929][ T4428] veth1_vlan: entered promiscuous mode
[  605.863248][ T4428] veth0_macvtap: entered promiscuous mode
[  605.869533][ T4428] veth1_macvtap: entered promiscuous mode
[  605.888221][ T4428] batman_adv: batadv0: Interface activated: batadv_slave_0
[  605.891455][ T5232] Bluetooth: hci0: command tx timeout
[  605.899547][ T4428] batman_adv: batadv0: Interface activated: batadv_slave_1
[  605.919103][ T8898] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  605.923616][ T8898] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  605.928634][ T8898] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  605.940241][ T8898] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  606.041690][T12871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  606.045746][T12871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.049626][ T4435] veth0_vlan: entered promiscuous mode
[  606.053129][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 204 seconds
[  606.056425][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 204 seconds
[  606.060158][ T5232] Bluetooth: hci2: command tx timeout
[  606.062755][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 204 seconds
[  606.066066][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 204 seconds
[  606.087904][ T4435] veth1_vlan: entered promiscuous mode
[  606.114911][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  606.118059][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.127870][ T4435] veth0_macvtap: entered promiscuous mode
[  606.136309][ T4435] veth1_macvtap: entered promiscuous mode
[  606.154607][ T4435] batman_adv: batadv0: Interface activated: batadv_slave_0
[  606.168881][ T4435] batman_adv: batadv0: Interface activated: batadv_slave_1
[  606.187193][ T5865] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  606.191342][ T5865] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  606.194750][ T5865] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  606.203830][ T5865] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  606.365713][T31105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  606.368959][T31105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.464899][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  606.468293][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.568569][ T4496] netlink: 'syz.0.9171': attribute type 32 has an invalid length.
[  606.706014][ T4511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9165'.
[  606.775589][ T4516] netlink: 'syz.3.9176': attribute type 1 has an invalid length.
[  606.778947][ T4516] netlink: 228 bytes leftover after parsing attributes in process `syz.3.9176'.
[  606.784765][ T4516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9176'.
[  607.796795][ T4548] wg1 speed is unknown, defaulting to 1000
[  607.807813][ T4548] lo speed is unknown, defaulting to 1000
[  607.954238][ T4562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9188'.
[  607.970531][ T5232] Bluetooth: hci0: command tx timeout
[  608.130949][ T5232] Bluetooth: hci2: command tx timeout
[  608.329154][ T4570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9193'.
[  608.335170][ T4570] openvswitch: netlink: Missing key (keys=40, expected=100)
[  608.473802][ T4584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9200'.
[  608.626690][ T4594] netlink: 'syz.4.9203': attribute type 29 has an invalid length.
[  608.836567][    T9] IPVS: starting estimator thread 0...
[  608.858534][ T4619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9207'.
[  608.862125][ T4613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9207'.
[  608.897138][ T4621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9209'.
[  608.922974][ T4617] IPVS: using max 63 ests per chain, 151200 per kthread
[  609.164726][ T4639] netlink: 'syz.0.9216': attribute type 32 has an invalid length.
[  609.219089][ T4644] netlink: 'syz.3.9218': attribute type 1 has an invalid length.
[  609.407164][ T4658] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9222'.
[  609.526587][ T4668] netlink: 'syz.4.9225': attribute type 1 has an invalid length.
[  609.579563][ T4674] netlink: 'syz.3.9227': attribute type 1 has an invalid length.
[  609.677312][ T4681] netlink: 'syz.3.9230': attribute type 32 has an invalid length.
[  609.862505][ T4698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9234'.
[  609.867976][ T4698] netlink: 'syz.4.9234': attribute type 9 has an invalid length.
[  609.875449][ T4698] netlink: 'syz.4.9234': attribute type 7 has an invalid length.
[  609.878227][ T4698] netlink: 'syz.4.9234': attribute type 8 has an invalid length.
[  609.963024][ T4702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9237'.
[  610.053325][ T5232] Bluetooth: hci0: command tx timeout
[  610.075563][ T4716] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  610.126421][ T4721] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9240'.
[  610.218481][ T5232] Bluetooth: hci2: command tx timeout
[  610.797236][ T4771] Bluetooth: MGMT ver 1.23
[  611.485145][ T4806] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  611.500378][ T4806] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.503762][ T4806] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.813697][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 208 seconds
[  611.817164][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 208 seconds
[  611.822129][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 208 seconds
[  611.825577][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 208 seconds
[  611.856053][ T4820] validate_nla: 6 callbacks suppressed
[  611.856072][ T4820] netlink: 'syz.3.9275': attribute type 32 has an invalid length.
[  611.964585][ T4823] netlink: 'syz.4.9276': attribute type 1 has an invalid length.
[  612.072675][ T4826] bond1: (slave gretap1): making interface the new active one
[  612.077592][ T4826] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  612.118600][ T4826] syz.4.9276 (4826) used greatest stack depth: 18736 bytes left
[  612.134287][ T5232] Bluetooth: hci0: command tx timeout
[  612.284592][ T4840] Bluetooth: MGMT ver 1.23
[  612.290845][ T5232] Bluetooth: hci2: command tx timeout
[  612.427796][ T4849] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  612.437328][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state
[  612.440615][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.721660][ T4864] netlink: 'syz.3.9288': attribute type 32 has an invalid length.
[  613.183340][ T4878] __nla_validate_parse: 22 callbacks suppressed
[  613.183356][ T4878] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9291'.
[  613.999604][ T4885] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  614.191182][ T4792] Set syz1 is full, maxelem 65536 reached
[  614.323244][ T4890] "syz.0.9294" (4890) uses obsolete ecb(arc4) skcipher
[  614.335945][ T4890] dummy0: left promiscuous mode
[  614.337961][ T4890] dummy0: left allmulticast mode
[  614.368573][ T4890] tipc: Resetting bearer <eth:syzkaller0>
[  614.395671][ T4890] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  614.398452][ T4890] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  614.416442][ T4890] veth15: left promiscuous mode
[  614.418651][ T4890] macvlan5: left promiscuous mode
[  614.422347][ T4890] bond26: left promiscuous mode
[  614.429523][ T4890] geneve4: left allmulticast mode
[  614.432381][ T4890] ip6gretap4: left promiscuous mode
[  614.449171][ T4890] bond35: left promiscuous mode
[  614.453227][ T4890] wireguard0: left promiscuous mode
[  614.469405][ T4890] bridge29: left promiscuous mode
[  614.472796][ T4890] bridge29: left allmulticast mode
[  614.489608][ T4893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9296'.
[  614.493846][ T4893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9296'.
[  614.497629][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  614.507562][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.511141][ T4895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9296'.
[  614.515748][ T4895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9296'.
[  614.519615][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  614.530117][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.540034][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  614.549795][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.556680][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  614.575677][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.623467][ T4901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9298'.
[  614.689009][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9301'.
[  614.756508][ T4912] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9302'.
[  614.797023][ T4912] wg1 speed is unknown, defaulting to 1000
[  614.802914][ T4912] lo speed is unknown, defaulting to 1000
[  615.056603][ T4927] wg1 speed is unknown, defaulting to 1000
[  615.063425][ T4927] lo speed is unknown, defaulting to 1000
[  615.097319][ T4932] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9309'.
[  615.574651][ T4949] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[  615.768698][ T4957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9316'.
[  616.008701][ T4969] netlink: 'syz.3.9321': attribute type 1 has an invalid length.
[  616.497854][ T5001] netlink: 'syz.0.9330': attribute type 32 has an invalid length.
[  617.571414][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 212 seconds
[  617.575712][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 212 seconds
[  617.580930][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 212 seconds
[  617.585352][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 212 seconds
[  617.832671][ T5039] syzkaller1: entered promiscuous mode
[  617.834916][ T5039] syzkaller1: entered allmulticast mode
[  617.844209][ T5039] team0: Device gtp0 is of different type
[  618.069264][ T5062] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  618.163809][ T5065] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  618.241371][ T5072] __nla_validate_parse: 9 callbacks suppressed
[  618.241392][ T5072] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9352'.
[  618.380164][ T5083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9354'.
[  618.483296][ T5097] ksmbd: Unknown IPC event: 3, ignore.
[  618.524579][ T5098] nbd: must specify a size in bytes for the device
[  618.528839][ T5102] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9361'.
[  618.584816][ T5106] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9362'.
[  618.587647][ T5106] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9362'.
[  618.676328][ T5115] syzkaller0: entered promiscuous mode
[  618.678179][ T5115] syzkaller0: entered allmulticast mode
[  619.091440][ T5143] netlink: 'syz.0.9374': attribute type 32 has an invalid length.
[  619.309316][ T5158] netlink: 'syz.0.9378': attribute type 7 has an invalid length.
[  619.315202][ T5158] netlink: 'syz.0.9378': attribute type 8 has an invalid length.
[  619.564698][ T5175] batman_adv: batadv0: Adding interface: ip6gretap5
[  619.567007][ T5175] batman_adv: batadv0: The MTU of interface ip6gretap5 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  619.597907][ T5169] netlink: 'syz.0.9382': attribute type 23 has an invalid length.
[  619.618172][ T5169] IPVS: set_ctl: invalid protocol: 60829 0.0.0.0:20000
[  619.632745][ T5175] batman_adv: batadv0: Interface activated: ip6gretap5
[  619.700020][ T5184] netlink: 'syz.3.9385': attribute type 32 has an invalid length.
[  620.048540][ T5209] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20004
[  620.127918][ T5228] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.9393'.
[  620.267520][ T5241] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  620.359222][ T5250] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  620.393217][ T5252] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  620.534036][ T5267] syzkaller1: entered promiscuous mode
[  620.537176][ T5267] syzkaller1: entered allmulticast mode
[  620.541822][ T5267] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9407'.
[  620.545356][ T5268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9406'.
[  620.783474][ T5267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  620.791831][ T5267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  620.798457][ T5267] bond0 (unregistering): Released all slaves
[  621.493579][ T5286] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  621.654608][ T5299] netlink: 124 bytes leftover after parsing attributes in process `syz.0.9415'.
[  621.906406][ T5306] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  622.062795][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9419'.
[  622.069191][ T5312] netlink: 'syz.3.9418': attribute type 13 has an invalid length.
[  622.074438][ T5312] netlink: 'syz.3.9418': attribute type 17 has an invalid length.
[  622.093785][ T5312] netlink: 'syz.3.9418': attribute type 10 has an invalid length.
[  622.126167][ T5321] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  622.137964][ T5312] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  622.147322][ T5312] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  622.471867][ T5346] netlink: 'syz.4.9429': attribute type 32 has an invalid length.
[  623.066012][ T5372] team0 (unregistering): Port device team_slave_0 removed
[  623.076773][ T5372] team0 (unregistering): Port device team_slave_1 removed
[  623.255572][ T5387] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  623.290253][ T5389] netlink: 'syz.3.9442': attribute type 32 has an invalid length.
[  623.322506][ T5390] syzkaller1: entered promiscuous mode
[  623.331204][ T5390] syzkaller1: entered allmulticast mode
[  623.331583][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 216 seconds
[  623.337576][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 216 seconds
[  623.342624][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 216 seconds
[  623.346978][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 216 seconds
[  623.436659][ T5865] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  623.439574][ T5865] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  623.444545][ T5865] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  623.450684][ T5865] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  623.609499][ T5414] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  623.705504][ T5418] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  623.885942][ T5430] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  623.895207][ T5254] IPVS: starting estimator thread 0...
[  623.903382][ T5431] ipvlan2: entered promiscuous mode
[  623.915971][ T5431] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  623.990974][ T5432] IPVS: using max 44 ests per chain, 105600 per kthread
[  624.154431][ T5448] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  624.176795][ T5450] __nla_validate_parse: 9 callbacks suppressed
[  624.176807][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9457'.
[  624.247654][ T5454] tap0: tun_chr_ioctl cmd 1074025676
[  624.257247][ T5454] tap0: owner set to 0
[  624.316186][ T5459] netlink: 424 bytes leftover after parsing attributes in process `syz.3.9461'.
[  624.322162][ T5459] netlink: 424 bytes leftover after parsing attributes in process `syz.3.9461'.
[  624.326163][ T5461] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  624.342812][ T5459] syzkaller1: entered promiscuous mode
[  624.344568][ T5459] syzkaller1: entered allmulticast mode
[  624.345245][ T5463] validate_nla: 4 callbacks suppressed
[  624.345255][ T5463] netlink: 'syz.0.9463': attribute type 32 has an invalid length.
[  624.348899][ T5459] tipc: Started in network mode
[  624.356526][ T5459] tipc: Node identity f6504c3fbc35, cluster identity 4711
[  624.358769][ T5459] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  624.365028][ T5459] syzkaller0: entered promiscuous mode
[  624.366765][ T5459] syzkaller0: entered allmulticast mode
[  624.438516][ T5458] tipc: Resetting bearer <eth:syzkaller0>
[  624.465576][ T5458] tipc: Disabling bearer <eth:syzkaller0>
[  624.479046][ T5472] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  624.556087][ T5479] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9467'.
[  624.595517][ T5482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9468'.
[  624.776069][ T5493] netlink: 'syz.4.9471': attribute type 11 has an invalid length.
[  625.439594][ T5486] Bluetooth: hci1: Opcode 0x080f failed: -4
[  625.477699][ T5495] netlink: 'syz.0.9472': attribute type 32 has an invalid length.
[  625.610845][ T5497] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  625.653788][ T5232] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  625.746253][ T5511] tipc: Started in network mode
[  625.755460][ T5511] tipc: Node identity 3a81c4cf8133, cluster identity 4711
[  625.763187][ T5511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  625.769363][ T5511] syzkaller0: entered promiscuous mode
[  625.775103][ T5511] syzkaller0: entered allmulticast mode
[  625.784288][ T5511] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  625.807071][ T5511] tipc: Resetting bearer <eth:syzkaller0>
[  625.834677][ T5517] netlink: 116 bytes leftover after parsing attributes in process `syz.0.9479'.
[  625.839572][ T5509] tipc: Resetting bearer <eth:syzkaller0>
[  625.863384][ T5509] tipc: Disabling bearer <eth:syzkaller0>
[  625.875657][ T5517] netlink: 'syz.0.9479': attribute type 1 has an invalid length.
[  625.878884][ T5517] netlink: 208 bytes leftover after parsing attributes in process `syz.0.9479'.
[  626.135885][ T5542] netlink: 'syz.3.9486': attribute type 1 has an invalid length.
[  626.150201][ T5541] netlink: 'syz.3.9486': attribute type 1 has an invalid length.
[  626.180990][ T5547] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  626.405741][ T5568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9492'.
[  626.409353][ T5568] netlink: 'syz.0.9492': attribute type 29 has an invalid length.
[  626.413002][ T5567] netlink: 'syz.4.9493': attribute type 1 has an invalid length.
[  626.425510][ T5568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9492'.
[  626.451534][ T5567] vlan2: entered allmulticast mode
[  626.453313][ T5567] bond0: entered allmulticast mode
[  626.616784][ T5232] Bluetooth: hci1: command 0x0401 tx timeout
[  626.714740][ T5604] netem: incorrect ge model size
[  626.716720][ T5604] netem: change failed
[  626.826931][ T5615] netlink: 'syz.0.9502': attribute type 32 has an invalid length.
[  626.835856][ T5617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9503'.
[  626.844812][ T5617] netlink: 'syz.4.9503': attribute type 83 has an invalid length.
[  626.847607][ T5617] netlink: 'syz.4.9503': attribute type 1 has an invalid length.
[  627.067180][ T5635] netlink: set zone limit has 8 unknown bytes
[  627.237397][ T5643] pim6reg: entered allmulticast mode
[  627.254081][ T5643] pim6reg: left allmulticast mode
[  627.397548][ T5650] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  627.456699][ T5653] netlink: 'syz.4.9513': attribute type 11 has an invalid length.
[  627.467127][ T5653] netlink: 'syz.4.9513': attribute type 11 has an invalid length.
[  627.486664][ T5656] netlink: 'syz.4.9513': attribute type 11 has an invalid length.
[  627.490366][ T5656] netlink: 'syz.4.9513': attribute type 11 has an invalid length.
[  627.878037][ T5677] netlink: 'syz.0.9518': attribute type 11 has an invalid length.
[  628.096140][ T5688] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  628.365951][ T5706] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  628.368614][ T5706] syzkaller0: entered promiscuous mode
[  628.371192][ T5706] syzkaller0: entered allmulticast mode
[  628.384528][ T5710] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  628.388069][ T5708] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component
[  628.403306][ T5706] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  628.417728][ T5706] tipc: Resetting bearer <eth:syzkaller0>
[  628.435249][ T5705] tipc: Resetting bearer <eth:syzkaller0>
[  628.453218][ T5311] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  628.471711][ T5705] tipc: Disabling bearer <eth:syzkaller0>
[  628.608777][ T5725] 8021q: adding VLAN 0 to HW filter on device bond2
[  629.070591][ T5773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  629.088393][ T5773] tipc: Disabling bearer <eth:syzkaller0>
[  629.090894][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 220 seconds
[  629.095724][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 220 seconds
[  629.103781][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 220 seconds
[  629.108230][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 220 seconds
[  629.119815][ T5775] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  629.235557][ T5781] __nla_validate_parse: 21 callbacks suppressed
[  629.235573][ T5781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9549'.
[  629.276569][ T5786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9550'.
[  629.307204][ T5789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9551'.
[  629.388454][ T5793] validate_nla: 7 callbacks suppressed
[  629.388478][ T5793] netlink: 'syz.0.9553': attribute type 32 has an invalid length.
[  629.447384][ T5797] sch_fq: defrate 0 ignored.
[  629.848939][ T5828] dummy0: mtu less than device minimum
[  629.895042][ T5834] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  629.933761][ T5837] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9569'.
[  629.936930][ T5837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9569'.
[  630.060828][ T5868] netlink: 'syz.4.9574': attribute type 1 has an invalid length.
[  630.083419][ T5868] bond3: entered promiscuous mode
[  630.087514][ T5868] 8021q: adding VLAN 0 to HW filter on device bond3
[  630.118151][ T5868] 8021q: adding VLAN 0 to HW filter on device bond3
[  630.121259][ T5868] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  630.124553][ T5868] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  630.130059][ T5868] bond3: (slave wireguard0): making interface the new active one
[  630.132564][ T5868] wireguard0: entered promiscuous mode
[  630.136203][ T5868] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[  630.139292][ T5877] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  630.160035][ T5868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  630.162562][ T5868] IPv6: NLM_F_CREATE should be set when creating new route
[  630.164887][ T5868] IPv6: NLM_F_CREATE should be set when creating new route
[  630.167631][ T5868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  630.331960][ T5903] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.9580'.
[  630.381591][ T5908] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  630.485363][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9584'.
[  630.488745][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9584'.
[  630.506370][ T8898] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  630.506542][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9584'.
[  630.513744][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9584'.
[  630.516660][ T8898] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  630.529117][ T8898] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  630.535241][ T8898] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  630.846170][ T5931] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  631.968676][ T5958] netlink: 'syz.3.9601': attribute type 23 has an invalid length.
[  632.033291][ T5981] netlink: 'syz.0.9607': attribute type 1 has an invalid length.
[  632.036527][ T5981] netlink: 'syz.0.9607': attribute type 1 has an invalid length.
[  632.131837][ T5993] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20131
[  632.189336][ T5999] netlink: 'syz.4.9611': attribute type 32 has an invalid length.
[  632.667410][ T6031] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 4, id = 0
[  632.851513][ T6042] netlink: 'syz.4.9621': attribute type 8 has an invalid length.
[  633.052466][ T6061] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  633.297556][ T6083] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  633.485998][ T6101] 8021q: adding VLAN 0 to HW filter on device bond28
[  633.679241][ T6121] netlink: 'syz.4.9645': attribute type 7 has an invalid length.
[  633.916149][ T6142] netlink: 'syz.4.9651': attribute type 8 has an invalid length.
[  634.203752][ T6161] batman_adv: batadv0: Interface deactivated: ip6gretap5
[  634.226408][ T5865] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  634.230371][ T5865] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  634.233431][ T5865] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  634.236609][ T5865] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  634.324124][ T6172] netlink: 'syz.3.9663': attribute type 32 has an invalid length.
[  634.547537][ T6187] __nla_validate_parse: 8 callbacks suppressed
[  634.547556][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9667'.
[  634.702830][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9673'.
[  634.723700][ T6200] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  634.727216][ T6200] syzkaller0: entered promiscuous mode
[  634.729499][ T6200] syzkaller0: entered allmulticast mode
[  634.772162][ T6200] tipc: Resetting bearer <eth:syzkaller0>
[  634.869233][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 224 seconds
[  634.874260][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 224 seconds
[  634.880612][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 224 seconds
[  634.884861][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 224 seconds
[  634.893749][ T6202] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002
[  634.914817][ T6200] tipc: Resetting bearer <eth:syzkaller0>
[  634.948628][ T6200] tipc: Disabling bearer <eth:syzkaller0>
[  634.997330][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9677'.
[  635.046026][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9677'.
[  635.073043][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9679'.
[  635.163484][ T6228] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  635.181351][ T6228] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  635.528720][ T6254] validate_nla: 2 callbacks suppressed
[  635.528734][ T6254] netlink: 'syz.0.9690': attribute type 3 has an invalid length.
[  635.551629][ T6261] netlink: 'syz.3.9691': attribute type 2 has an invalid length.
[  635.554645][ T6261] netlink: 'syz.3.9691': attribute type 1 has an invalid length.
[  635.759113][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9695'.
[  635.843315][ T6283] macvlan2: entered promiscuous mode
[  635.845627][ T6283] macvlan2: entered allmulticast mode
[  635.848859][ T6283] bond4: (slave macvlan2): Opening slave failed
[  636.002325][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9699'.
[  636.017225][ T6292] bridge_slave_1: left allmulticast mode
[  636.019568][ T6292] bridge_slave_1: left promiscuous mode
[  636.031341][ T6292] bridge0: port 2(bridge_slave_1) entered disabled state
[  636.056639][ T6292] bridge_slave_0: left allmulticast mode
[  636.058879][ T6292] bridge_slave_0: left promiscuous mode
[  636.071715][ T6292] bridge0: port 1(bridge_slave_0) entered disabled state
[  636.133146][ T5254] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  636.171378][ T6297] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  636.549316][ T6324] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  636.806633][ T6333] netlink: 'syz.4.9713': attribute type 32 has an invalid length.
[  636.930282][    T9] page_pool_release_retry() stalled pool shutdown: id 56, 2176 inflight 241 sec
[  637.257324][ T6367] netlink: 'syz.0.9721': attribute type 32 has an invalid length.
[  637.372643][ T6381] netlink: 'syz.4.9724': attribute type 1 has an invalid length.
[  637.375945][ T6381] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9724'.
[  637.506835][ T6393] netlink: 'syz.3.9728': attribute type 1 has an invalid length.
[  637.612758][ T6403] netlink: 'syz.3.9731': attribute type 1 has an invalid length.
[  637.615244][ T6403] netlink: 'syz.3.9731': attribute type 1 has an invalid length.
[  637.652498][ T6407] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9733'.
[  637.692259][ T6407] netlink: 'syz.4.9733': attribute type 2 has an invalid length.
[  637.702873][ T6407] k*]: entered promiscuous mode
[  637.733399][ T6407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  637.777449][ T6403] 8021q: adding VLAN 0 to HW filter on device bond1
[  637.823591][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9736'.
[  637.848309][ T6403] bond1: (slave wlan0): Enslaving as an active interface with a down link
[  637.863683][ T6403] vlan2: entered allmulticast mode
[  637.865507][ T6403] veth1: entered allmulticast mode
[  637.868243][ T6403] veth1: entered promiscuous mode
[  637.871765][ T6403] veth1: left promiscuous mode
[  637.875216][ T6403] bond1: (slave vlan2): making interface the new active one
[  637.878742][ T6403] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  637.886067][ T6403] veth1: entered promiscuous mode
[  637.888933][ T6403] vlan2: entered promiscuous mode
[  637.893066][ T6403] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  638.627295][ T6476] k*]: entered promiscuous mode
[  638.636704][ T6476] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  638.868452][ T6490] bond0: peer notification delay (198) is not a multiple of miimon (100), value rounded to 100 ms
[  638.879938][ T6490] bond0: entered promiscuous mode
[  638.882430][ T6490] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.888227][ T6488] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  638.907148][ T6487] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  640.014476][ T6566] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  640.621891][   T60] block nbd0: Possible stuck request ffff8880216c8000: control (read@0,1024B). Runtime 228 seconds
[  640.625300][   T60] block nbd0: Possible stuck request ffff8880216c8200: control (read@1024,1024B). Runtime 228 seconds
[  640.628678][   T60] block nbd0: Possible stuck request ffff8880216c8400: control (read@2048,1024B). Runtime 228 seconds
[  640.632548][   T60] block nbd0: Possible stuck request ffff8880216c8600: control (read@3072,1024B). Runtime 228 seconds
[  640.754645][ T6583] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  640.758195][ T6583] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  640.784440][ T6585] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  641.567129][ T8897] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  641.576131][ T6602] __nla_validate_parse: 8 callbacks suppressed
[  641.576152][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9796'.
[  641.582987][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9796'.
[  641.586350][ T6602] validate_nla: 4 callbacks suppressed
[  641.586362][ T6602] netlink: 'syz.3.9796': attribute type 7 has an invalid length.
[  641.597388][ T6602] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  641.643711][ T6608] netlink: 'syz.0.9797': attribute type 32 has an invalid length.
[  641.900233][   T35] INFO: task udevd:18895 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  641.913629][   T35]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
[  641.916959][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  641.929978][   T35] task:udevd           state:D stack:22632 pid:18895 tgid:18895 ppid:5293   task_flags:0x400140 flags:0x00004006
[  641.943829][   T35] Call Trace:
[  641.945402][   T35]  <TASK>
[  641.950289][   T35]  __schedule+0x1798/0x4cc0
[  641.952103][   T35]  ? __pfx___schedule+0x10/0x10
[  641.954041][   T35]  ? schedule+0x91/0x360
[  641.955564][   T35]  schedule+0x165/0x360
[  641.968387][   T35]  io_schedule+0x80/0xd0
[  641.974480][   T35]  folio_wait_bit_common+0x6b0/0xb90
[  641.982530][   T35]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  641.987495][   T35]  ? __pfx_wake_page_function+0x10/0x10
[  641.994083][   T35]  ? __filemap_get_folio+0x700/0xaf0
[  641.997038][   T35]  ? do_read_cache_folio+0x4e9/0x590
[  642.013228][   T35]  do_read_cache_folio+0x1aa/0x590
[  642.016144][   T35]  ? __pfx_blkdev_read_folio+0x10/0x10
[  642.022645][   T35]  read_part_sector+0xb6/0x2b0
[  642.024703][   T35]  adfspart_check_POWERTEC+0x8c/0xf30
[  642.030062][ T6602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  642.045008][   T35]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  642.047321][   T35]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  642.060411][   T35]  bdev_disk_changed+0x75f/0x14b0
[  642.062572][   T35]  ? __pfx_bdev_disk_changed+0x10/0x10
[  642.064756][   T35]  ? wait_on_inode+0xc0/0x230
[  642.066661][   T35]  blkdev_get_whole+0x380/0x510
[  642.068607][   T35]  bdev_open+0x31e/0xd30
[  642.090409][   T35]  blkdev_open+0x3a8/0x510
[  642.092320][   T35]  ? __pfx_blkdev_open+0x10/0x10
[  642.094305][   T35]  do_dentry_open+0x953/0x13f0
[  642.096269][   T35]  vfs_open+0x3b/0x340
[  642.097911][   T35]  ? path_openat+0x2ecd/0x3830
[  642.109965][   T35]  path_openat+0x2ee5/0x3830
[  642.111499][   T35]  ? arch_stack_walk+0xfc/0x150
[  642.113001][   T35]  ? stack_depot_save_flags+0x40/0x860
[  642.114684][   T35]  ? __pfx_path_openat+0x10/0x10
[  642.116242][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.118204][   T35]  do_filp_open+0x1fa/0x410
[  642.130060][   T35]  ? __lock_acquire+0xab9/0xd20
[  642.131733][   T35]  ? __pfx_do_filp_open+0x10/0x10
[  642.133410][   T35]  ? _raw_spin_unlock+0x28/0x50
[  642.135022][   T35]  ? alloc_fd+0x64c/0x6c0
[  642.136426][   T35]  do_sys_openat2+0x121/0x1c0
[  642.137969][   T35]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  642.150171][   T35]  ? __pfx_do_sys_openat2+0x10/0x10
[  642.151988][   T35]  ? rcu_is_watching+0x15/0xb0
[  642.153546][   T35]  __x64_sys_openat+0x138/0x170
[  642.155193][   T35]  do_syscall_64+0xfa/0x3b0
[  642.156684][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.158932][   T35]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  642.161454][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.163487][   T35] RIP: 0033:0x7f33f03169a4
[  642.165016][   T35] RSP: 002b:00007fffdbb2c1b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  642.167837][   T35] RAX: ffffffffffffffda RBX: 00005583d5c5d400 RCX: 00007f33f03169a4
[  642.170823][   T35] RDX: 00000000000a0800 RSI: 00005583d5c47f40 RDI: 00000000ffffff9c
[  642.173453][   T35] RBP: 00005583d5c47f40 R08: 0000000000000001 R09: 7fffffffffffffff
[  642.176122][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  642.178740][   T35] R13: 00005583d5c4cbd0 R14: 0000000000000001 R15: 00005583d5c36910
[  642.181582][   T35]  </TASK>
[  642.182669][   T35] 
[  642.182669][   T35] Showing all locks held in the system:
[  642.189135][   T35] 1 lock held by khungtaskd/35:
[  642.211467][   T35]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  642.215373][   T35] 3 locks held by kworker/1:3/5311:
[  642.217052][   T35]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  642.234779][   T35]  #1: ffffc90002a2fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  642.238803][   T35]  #2: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  642.250456][   T35] 2 locks held by getty/5671:
[  642.252368][   T35]  #0: ffff88810eb850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  642.255655][   T35]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  642.259258][   T35] 1 lock held by syz-executor/5836:
[  642.284102][   T35] 5 locks held by syz-executor/5843:
[  642.285825][   T35]  #0: ffff888024390dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  642.288934][   T35]  #1: ffff8880243900b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  642.300074][   T35]  #2: ffffffff8f69c988 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  642.303268][   T35]  #3: ffff888029695338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  642.306245][   T35]  #4: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  642.321109][   T35] 4 locks held by kworker/1:4/5875:
[  642.322862][   T35] 1 lock held by udevd/18895:
[  642.324689][   T35]  #0: ffff8880215b5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  642.327860][   T35] 1 lock held by syz.3.9796/6602:
[  642.340878][   T35] 1 lock held by syz.4.9798/6616:
[  642.352231][   T35] 
[  642.353285][   T35] =============================================
[  642.353285][   T35] 
[  642.356626][   T35] NMI backtrace for cpu 0
[  642.356643][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  642.356658][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  642.356666][   T35] Call Trace:
[  642.356675][   T35]  <TASK>
[  642.356683][   T35]  dump_stack_lvl+0x189/0x250
[  642.356713][   T35]  ? __pfx_dump_stack_lvl+0x10/0x10
[  642.356731][   T35]  ? __pfx__printk+0x10/0x10
[  642.356769][   T35]  nmi_cpu_backtrace+0x39e/0x3d0
[  642.356790][   T35]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  642.356805][   T35]  ? __pfx__printk+0x10/0x10
[  642.356824][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  642.356844][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  642.356861][   T35]  watchdog+0xf93/0xfe0
[  642.356885][   T35]  ? watchdog+0x1de/0xfe0
[  642.356907][   T35]  kthread+0x711/0x8a0
[  642.356927][   T35]  ? __pfx_watchdog+0x10/0x10
[  642.356943][   T35]  ? __pfx_kthread+0x10/0x10
[  642.356959][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  642.356977][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  642.356992][   T35]  ? __pfx_kthread+0x10/0x10
[  642.357009][   T35]  ret_from_fork+0x3fc/0x770
[  642.357025][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  642.357042][   T35]  ? __switch_to_asm+0x39/0x70
[  642.357057][   T35]  ? __switch_to_asm+0x33/0x70
[  642.357072][   T35]  ? __pfx_kthread+0x10/0x10
[  642.357087][   T35]  ret_from_fork_asm+0x1a/0x30
[  642.357115][   T35]  </TASK>
[  642.357122][   T35] Sending NMI from CPU 0 to CPUs 1:
[  642.420572][    C1] NMI backtrace for cpu 1
[  642.420593][    C1] CPU: 1 UID: 0 PID: 6602 Comm: syz.3.9796 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  642.420612][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  642.420621][    C1] RIP: 0010:check_preemption_disabled+0x5c/0x120
[  642.420650][    C1] Code: ce 26 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d e9 41 ca 02 00 cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 <f7> 04 24 00 02 00 00 74 c8 65 4c 8b 3c 25 08 40 a0 92 41 f6 47 2f
[  642.420662][    C1] RSP: 0018:ffffc9000403f780 EFLAGS: 00000046
[  642.420676][    C1] RAX: 0000000000000001 RBX: 00000000ffffffff RCX: 0000000080000000
[  642.420686][    C1] RDX: 0000000000000000 RSI: ffffffff8d9caa1f RDI: ffffffff8be33400
[  642.420696][    C1] RBP: 00000000ffffffff R08: ffff888136640003 R09: 1ffff11026cc8000
[  642.420706][    C1] R10: dffffc0000000000 R11: ffffed1026cc8001 R12: 0000000000000246
[  642.420715][    C1] R13: ffff888035661cc0 R14: ffffffff8e139fa0 R15: 1ffff11006bddcc5
[  642.420726][    C1] FS:  00007f77f9e7d6c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  642.420737][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  642.420746][    C1] CR2: 00007fff82b5bf58 CR3: 000000000df36000 CR4: 00000000000006f0
[  642.420779][    C1] Call Trace:
[  642.420785][    C1]  <TASK>
[  642.420794][    C1]  lock_is_held_type+0x79/0x190
[  642.420816][    C1]  __might_resched+0xf5/0x610
[  642.420858][    C1]  ? __pfx___might_resched+0x10/0x10
[  642.420873][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  642.420893][    C1]  ? __free_frozen_pages+0x691/0xd30
[  642.420923][    C1]  vfree+0x26d/0x400
[  642.420942][    C1]  ? __pfx_kcov_close+0x10/0x10
[  642.420961][    C1]  kcov_close+0x28/0x50
[  642.420975][    C1]  __fput+0x44c/0xa70
[  642.420994][    C1]  task_work_run+0x1d4/0x260
[  642.421009][    C1]  ? __pfx_task_work_run+0x10/0x10
[  642.421021][    C1]  ? kmem_cache_free+0x18f/0x400
[  642.421039][    C1]  do_exit+0x6b5/0x2300
[  642.421057][    C1]  ? do_raw_spin_lock+0x121/0x290
[  642.421072][    C1]  ? __pfx_do_exit+0x10/0x10
[  642.421086][    C1]  ? cgroup_freezing+0x20/0x350
[  642.421109][    C1]  do_group_exit+0x21c/0x2d0
[  642.421124][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  642.421140][    C1]  get_signal+0x1286/0x1340
[  642.421160][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  642.421179][    C1]  ? __x64_sys_sendmsg+0x230/0x260
[  642.421221][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  642.421247][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  642.421266][    C1]  exit_to_user_mode_loop+0x75/0x110
[  642.421283][    C1]  do_syscall_64+0x2bd/0x3b0
[  642.421300][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  642.421314][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.421328][    C1]  ? exc_page_fault+0x9f/0xf0
[  642.421344][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.421357][    C1] RIP: 0033:0x7f77f8f8ebe9
[  642.421368][    C1] Code: Unable to access opcode bytes at 0x7f77f8f8ebbf.
[  642.421375][    C1] RSP: 002b:00007f77f9e7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  642.421388][    C1] RAX: 000000000000001c RBX: 00007f77f91b5fa0 RCX: 00007f77f8f8ebe9
[  642.421397][    C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009
[  642.421405][    C1] RBP: 00007f77f9011e19 R08: 0000000000000000 R09: 0000000000000000
[  642.421413][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  642.421421][    C1] R13: 00007f77f91b6038 R14: 00007f77f91b5fa0 R15: 00007ffc7d3c48b8
[  642.421438][    C1]  </TASK>
[  642.429597][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  642.560253][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  642.564887][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  642.568769][   T35] Call Trace:
[  642.570082][   T35]  <TASK>
[  642.571294][   T35]  dump_stack_lvl+0x99/0x250
[  642.573158][   T35]  ? __asan_memcpy+0x40/0x70
[  642.575038][   T35]  ? __pfx_dump_stack_lvl+0x10/0x10
[  642.577081][   T35]  ? __pfx__printk+0x10/0x10
[  642.578944][   T35]  vpanic+0x281/0x750
[  642.580565][   T35]  ? __pfx_vpanic+0x10/0x10
[  642.582360][   T35]  ? preempt_schedule+0xae/0xc0
[  642.584312][   T35]  ? preempt_schedule_common+0x83/0xd0
[  642.586436][   T35]  panic+0xb9/0xc0
[  642.587927][   T35]  ? __pfx_panic+0x10/0x10
[  642.589747][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  642.591912][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  642.594409][   T35]  watchdog+0xfd2/0xfe0
[  642.596080][   T35]  ? watchdog+0x1de/0xfe0
[  642.597829][   T35]  kthread+0x711/0x8a0
[  642.599469][   T35]  ? __pfx_watchdog+0x10/0x10
[  642.601350][   T35]  ? __pfx_kthread+0x10/0x10
[  642.603237][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  642.605317][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  642.607305][   T35]  ? __pfx_kthread+0x10/0x10
[  642.609112][   T35]  ret_from_fork+0x3fc/0x770
[  642.610995][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  642.612951][   T35]  ? __switch_to_asm+0x39/0x70
[  642.614874][   T35]  ? __switch_to_asm+0x33/0x70
[  642.616799][   T35]  ? __pfx_kthread+0x10/0x10
[  642.618684][   T35]  ret_from_fork_asm+0x1a/0x30
[  642.620596][   T35]  </TASK>
[  642.622634][   T35] Kernel Offset: disabled
[  642.624397][   T35] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:52:30  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000008 RBX=ffff888020ee6180 RCX=1088e4a56d67b600 RDX=0000000000000000
RSI=ffffffff8e139ee0 RDI=ffff888020ee6180 RBP=00000000ffffffff RSP=ffffc900031ff2b0
R8 =0000000000000000 R9 =ffffffff822e4bbd R10=dffffc0000000000 R11=fffff9400019c169
R12=0000000000000246 R13=ffff888020ee5640 R14=ffffffff8e139ee0 R15=0000000000000002
RIP=ffffffff8b795e13 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555847b3500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fed4dce56c0 CR3=0000000028794000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbea0787498 00007fbea0787470 XMM03=00007fbea07874a8 00007fbea07874a0
XMM04=00007fbea12ed100 00007fbea0787460 XMM05=00007fbea0787478 00007fbea07874c0
XMM06=00007fbea07874b8 00007fbea07874b0 XMM07=00007fbea07874a8 00007fbea07874a0
XMM08=0000000000000000 00007fbea0612ee7 XMM09=0000000000000000 00007fbea0612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000080000001 RBX=ffffffffffffffff RCX=ffff888021fa8000 RDX=ffffffffffffffff
RSI=0000000000000003 RDI=ffff88805fffbb80 RBP=0000000000000003 RSP=ffffc9000307f068
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffffffff92a23cc0 R13=dffffc0000000000 R14=0000000000000003 R15=ffff88805fffbb80
RIP=ffffffff820255ee RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fda2f6e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fda2eb876c3 00007fda2eb876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0150100004800424 1000060101fe0008
XMM06=0004c80300080004 c0034086080004b8 XMM07=0300080004b00300 080004a80301a408
XMM08=0004a0030fffffff ffffff0404900300 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
