last executing test programs:

1.201750995s ago: executing program 2 (id=5406):
socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x0, 0x0, 0x2a0, 0xffffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x0, 'netdevsim0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x2}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}, [@common=@inet=@recent1={{}, {0x60, 0x3, 0x1, 0x1, 'syz0\x00', 0x9, [0xffffff00, 0xff, 0x0, 0xff]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{}, {0x3, 0xe8}}, @common=@unspec=@addrtype1={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x2000}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffffd8)
r0 = socket$inet6(0xa, 0x80001, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0xbc, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x8c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x6f63fe4a4d3f2aa0}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x6, 0x100}}, @TCA_NETEM_LOSS={0x58, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x4, 0x2, 0x7ffffffd, 0x5ba4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x744e, 0x9, 0x0, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x2, 0x10000, 0xfffffffc}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3ff, 0x9c20, 0x7, 0x200}}]}]}}}]}, 0xbc}}, 0x0)
shutdown(r1, 0x2)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x4e22, 0x0, @mcast2}}, {{0xa, 0xfffd, 0x0, @empty}}}, 0x108)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000780)=0x587, 0x4)
pipe(&(0x7f00000004c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x38, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000800}, 0x94)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24)
sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r5, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
recvmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x2)
socket$nl_route(0x10, 0x3, 0x0)

1.122538118s ago: executing program 0 (id=5408):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="681d", 0x2}], 0x1}}], 0x1, 0x40060)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf251b0000004808009a000000000008009a00010000001ebd7bfca931e4809152053b7291e0d95217711c2150fe709ef213af401a2675a9c66113505991cb87c7115d09b69bf20bb7ff1c52225daf85246c55a9dcc88743ec48652e3da09949ecba8dd957d77faa9d54bcac80caeab2a731ccab60868ca1ddc11bc9a31e67005fd400d4876bceb9e79b001f78232238ad5ccc87211ad4abc8469e75884900f49a3c003f6bca462bb5a7e425b176d334f3b1"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc1)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
socket$kcm(0xa, 0x2, 0x88)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0)
close(r2)

513.100321ms ago: executing program 1 (id=5409):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffff800016adffff}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)="802e", 0x2)
setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x4, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00', <r3=>0x0})
socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="08001f0005000000050011000100"], 0x70}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="08001f0005000000050011000100"], 0x70}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)

442.780817ms ago: executing program 1 (id=5410):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000280)={<r2=>0x0, 0x9}, &(0x7f0000000340)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000480)={0x4, 0x8208, 0xbda1, 0xc5e, r2}, &(0x7f0000000500)=0x10)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @multicast2, 0x0, 0x8, [@remote, @multicast1, @local, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast2, @local]}, 0x30)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)}, 0x0)
unshare(0x28040680)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
select(0x40, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x81, 0x80, 0xd0f3, 0xe5d5, 0x9}, 0x0, &(0x7f0000000140)={0x69f, 0xfffffffffffffffc, 0x3ff, 0x2, 0x7ff, 0xc1, 0x101, 0x8001}, &(0x7f0000000200))
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x41)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104008000"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="274d107749f17dff"], 0x48}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x188, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xa2, 0x6, "fb810356c2d81b3380688f887a737d4f202067cd3aa730fb6bfec3c893affdda22c9850d0a858ed3b010fc37ff6b1150353ff4b2bd5b57567759155871ffed6f011bd465d87dce560047c9d948fd02daa5a282a425d5730a89b170499f48c4436841066ea2f755bfd1938497619a06b112462c36a2e67ee3b0197d1d5d2c15b052057a2f8b0dc131ae280e1db2852b414a89cd5d62cd950106ddef89a79b"}, @NFTA_TABLE_USERDATA={0x36, 0x6, "67d950826c4a01967762842bc44310675e99b8531ccfcf118630a0920ba1e2f0324cefb8cd71a06ba359e5a6243c84d3b339"}, @NFTA_TABLE_USERDATA={0x89, 0x6, "462b7535b9e22f71b844f4a80b3e70e44084d5bb661c2d92b7501637703ea75df419d2c54ab2a622d47cb2decf0553d0097c7b819f03d5310d6f5a0aa1a709d6a262ab7c88fe165d2d745c662d782ccfc6d3a5e67518cfc0546d46cc3c3d69e66b53944dc84ca5e51b9e7ef52a52596a91c81a284c0aa1b0020bd86d991721ca450da6f15a"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x24, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000009}, 0x400801a)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000030601010000000000000000090000000500010095ef0000a584d0b45cc1646034649661fa96b70963f3621417e9869db66e3700e94c4194"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

349.831008ms ago: executing program 1 (id=5411):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$kcm(0xa, 0x922000000003, 0x11)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'})
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$kcm(0x2d, 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
unshare(0x2a020480)
r5 = socket(0xa, 0x3, 0x3a)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2711, @hyper}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES16, @ANYRESDEC], 0x38}}, 0x0)
write$cgroup_pid(r2, &(0x7f0000000280)=r4, 0x12)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r3)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="fba70000e80000867f0004"], 0x14}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r9, &(0x7f00000002c0)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000040)="8ece37b4e2d66e5245eb5b9b5d371c", 0xf}], 0x2)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r8}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, [0x0, 0xff, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00, 0xffffff00], 'virt_wifi0\x00', 'veth0_to_batadv\x00', {}, {}, 0x62, 0x3, 0x3, 0x30}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x40, 0x8, 0x530, 'syz1\x00', 'syz1\x00', {0x2}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0x0, 0xffffffff, 0xff], [0x0, 0x0, 0xff, 0xff000000], 'syz_tun\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x7, 0xa, 0x5e}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@srh={{0x30}, {0x2e, 0xc, 0x8, 0x4, 0xe, 0x1000, 0xc1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338)

348.719748ms ago: executing program 2 (id=5412):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x60}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x28, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffff800}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4011}, 0x48001)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14)
sendmsg$can_raw(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x1d, r4}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=@canfd={{0x4, 0x1, 0x0, 0x1}, 0x3f, 0x1, 0x0, 0x0, "742d7b80434bdc381f23cb35daaa4c121fbe96a8d6fc1a8fe40c1f88e7887af480dd652d0089979bd9ea73becb8c50f3eba8135a937bfa518c26d178ffc221a7"}, 0x48}}, 0x40)
socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f00000003c0)={0x0, 0x2, 0x8})
r5 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x100000)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000440)=0x531, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=@ipv4_newroute={0xe4, 0x18, 0x400, 0x70bd27, 0x25dfdbfd, {0x2, 0x10, 0x20, 0x9, 0xfd, 0x3, 0xff, 0x9, 0x800}, [@RTA_PRIORITY={0x8, 0x6, 0x8}, @RTA_METRICS={0xc0, 0x8, 0x0, 0x1, "8a55ebd494c240ca81c67b824b618f60ec4ba3f6b51bf7a0717de24c4ad66738bd8a0b7868a4b49626c362a2fb5a9141493d92a683fd874118c28c34f418e30e2a75b53350e3d4d8d9e7cc32606ae703100c65657f700ea039c280815f671f4fbf3f633fc919e10d0f20f091e871f0ff1aa10ee7a1daf42e6c13623853c225d4a34755b01c96423623f840453b88f93a3164c343ad8ea079111c0fd8f7e1c2156570c2a6b65f6374eceba8040ea3a6d362375737ecacb3f92ef749b3"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x8000800)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0xf, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x40000)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000780)={0x0, 0x8, 0x9, 0x4, 0x7, 0x40}, &(0x7f00000007c0)=0x14)
r8 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000800), 0x0)
getsockopt$packet_int(r8, 0x107, 0xb, &(0x7f0000000840), &(0x7f0000000880)=0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000900)={'wlan0\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000940)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xfffffffd, 0x2e}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x60}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000a80)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xcc}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x7, @mcast2, 0x10001}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x91, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xe0000}], 0xa4)
getsockopt$sock_buf(r9, 0x1, 0x3b, &(0x7f0000000b40)=""/163, &(0x7f0000000c00)=0xa3)
listen(r3, 0x2b)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0xc8, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}]}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffff001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x270ad708}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa5b}]}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe4}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

272.585621ms ago: executing program 2 (id=5413):
r0 = socket$igmp6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01170000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000030900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000005140000001100010000000000000000000000000a"], 0xd8}}, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000004c0)=0x9, 0x4)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, &(0x7f0000000040))
sendmmsg$inet(r3, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000700)="b5", 0x1}], 0x1}}], 0x3, 0x1005)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYRES32=r5], 0x54}}, 0x0)

272.290031ms ago: executing program 0 (id=5414):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, @in=@empty, 0x4e23, 0x4000, 0x0, 0x7, 0xa, 0x0, 0x30, 0x0, 0x0, 0xee01}, {0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1bd}, {0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x3}, 0xfffbffff, 0x0, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x0, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, 0xe8)
sendmmsg$inet6(r1, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0xf7ffff7f00000000)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000030428bd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a30030f553c9fc15a50000002000"], 0x20}}, 0x0)

212.685088ms ago: executing program 0 (id=5415):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x50, 0x0, &(0x7f0000000100))
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4, 0x1000000}, 0x20)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$caif_stream(0x25, 0x1, 0x5)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$CAIFSO_LINK_SELECT(r7, 0x116, 0x7f, &(0x7f0000000240)=0x4, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x750, 0x1b0, 0x0, 0x290, 0x290, 0x0, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
close(r10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000180)={'wg1\x00'})
r11 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r11, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r11, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r12, 0x20, &(0x7f0000000100)={0x0, 0x0, <r13=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r13, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)

210.41779ms ago: executing program 2 (id=5416):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0xfffffffffffffef4}, 0x1, 0x0, 0x0, 0x4000880}, 0x10)

210.009419ms ago: executing program 1 (id=5417):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000480)={0x4bb, {{0xa, 0x4e23, 0x200, @loopback, 0x7}}, {{0xa, 0x4e22, 0x5, @private2, 0x1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
close(r0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
socket$inet(0x2, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000e6fcffffffffffff0095000085bb000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=<r4=>0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x44, r7, 0x1, 0x470bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="08ffb41619b5"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x20000880)
socket(0x1, 0xa, 0x8)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000604000000000000000100000500002000000000000300000000000000000000000000000901"], 0x0, 0x4a, 0x0, 0x1}, 0x28)
ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)

209.342027ms ago: executing program 0 (id=5418):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="021900000800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
close(r2)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000000000003000000005f00000000000ebe047e8a4fc06e9eab0b6844c401ad008919bd9aac69d0be7c8a6a3ab91a592c6013a437c886daf3f1217a8ab54c60c51f393426bd9a341a5548f0acb4b62f2638b8f3b343f6d88870435623329de534e543a09bac39f68dbbdd24db70042574b374cad8ac3313fd236b3dddeb6afeb738e55a6a7368"], 0x0, 0x1b, 0x0, 0x1}, 0x28)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800)
socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000002340)={0x0, 0xb, 0x0, [0x3, 0x9, 0x1b2, 0x6, 0x9f], [0x4, 0x3f, 0x2, 0x5c2, 0xfc00000000000000, 0x6, 0x6, 0x1, 0x2, 0x8, 0x7ff, 0x1, 0x101, 0x1c92, 0x4, 0x3aef, 0x3, 0x1000000000004, 0xe2a, 0x9, 0x4, 0x100000000, 0x5cae, 0x3, 0xffffffff, 0x9, 0x42000000, 0x4, 0x4, 0x5, 0xffffffffffffffe2, 0x8, 0x4, 0x8000000000000000, 0x1, 0x3, 0xff, 0xfffffffffffffffa, 0xd, 0xffff, 0x5, 0xa, 0x1, 0x7, 0x81, 0x3, 0x4, 0xa74, 0xb, 0xe, 0x7d90, 0x1, 0x9, 0x2, 0x5, 0x8, 0x7, 0xfffffffffffffff7, 0x200, 0x2, 0x9, 0x67, 0x200, 0x6, 0x5, 0xfffffffffffffb49, 0xdf, 0x8d, 0x100000001, 0x5, 0xfb, 0x514, 0xfffffffffffffffa, 0x984, 0x100, 0x6, 0x80000001, 0x6, 0x6, 0x5, 0x74, 0xfffffffffffffffc, 0xff, 0x2, 0xe06, 0x2, 0x6, 0x2de, 0xf, 0x4, 0xd12, 0x8, 0x4, 0x9, 0x7, 0xb, 0x1b7a, 0x5, 0x4, 0x3, 0x2, 0x101, 0xffffffff80000001, 0x100, 0xa, 0x7fffffff, 0x7, 0x4, 0x7, 0x8, 0xb547, 0xfffffffffffffffa, 0xfa, 0x3, 0x4, 0xd, 0x8, 0x2de, 0x5, 0x7ff, 0x8000000000000001]})
ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000002780)={0x0, 0x8, 0x3ee})
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r7], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)

103.103035ms ago: executing program 0 (id=5419):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa04, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec00000021000100fcffffff000000000a010101000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000009c0011000000739d2b2784a30000000000000000ffffac1414a2ff0100000000000000000000000000010a010102000000000000000000000011fc0200000000000000003300000000003c"], 0xec}}, 0x0)

102.794171ms ago: executing program 2 (id=5420):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x27, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0}, 0x40)
socket$inet_sctp(0x2, 0x0, 0x84)

12.6102ms ago: executing program 0 (id=5421):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r1 = socket$l2tp(0x2, 0x2, 0x73)
recvfrom$l2tp(r1, &(0x7f0000000300)=""/65, 0x41, 0x20, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050219000000000000000000000105000100070000000900020073797a30000000000c0007800800080000000000050005"], 0x50}}, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="50020000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c802400e73608000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b"], 0x250}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', <r4=>0x0}) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'gretap0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=<r10=>0x0) (async)
r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=<r12=>0x0)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13)
sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r14, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}}, 0x0) (async)
sendmsg$NFC_CMD_START_POLL(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r14, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async)
sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r9, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x40) (async)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000001f40), &(0x7f00000000c0)=0x8)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, <r16=>0x0}, &(0x7f00000004c0)=0xc)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@can_newroute={0x2b0, 0x18, 0x4, 0x70bd27, 0x25dfdbfb, {0x1d, 0x1, 0x5}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_CS_CRC8={0x11e, 0x6, {0x50, 0x44, 0x3, 0x9, 0x4, "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", 0x3, "30b8057b71266cdd03164d85b77b8fb3bb5b7aa1"}}, @CGW_MOD_UID={0x8, 0xe, r15}, @CGW_CS_CRC8={0x11e, 0x6, {0x74, 0xb, 0x9, 0x2, 0x1, "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", 0x1, "990f7165e3ae0c51bc1563eddff93f99dc870ca3"}}, @CGW_MOD_AND={0x15, 0x1, {{{0x0, 0x0, 0x1}, 0x1, 0x3, 0x0, 0x0, "ce71aefb6f4cc848"}, 0x6}}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x1}, {0x1ff, 0x1, 0x1}}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "a4f8394961b82b2f"}, 0x1}}, @CGW_MOD_UID={0x8, 0xe, r16}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x44000}, 0x10)

11.650669ms ago: executing program 1 (id=5422):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac8180"], 0xfe33)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10)
sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb00000000"}}}}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x9)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000000000000000000100", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000b00000000000500090001000000"], 0x44}}, 0x0)

11.361147ms ago: executing program 2 (id=5423):
r0 = socket$unix(0x1, 0x1, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00', <r2=>0x0})
socket$netlink(0x10, 0x3, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x1000, 0x7e, &(0x7f0000001180)="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", &(0x7f0000000100)=""/126, 0x8001, 0x0, 0x26, 0x1000, &(0x7f0000000180)="9bba23d6429411f55412abb9de450ccd95f50ed797a42df342e007524f0ad6aa24906af8d117", &(0x7f0000002180)="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", 0x4, 0x0, 0x8}, 0x50)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0)

0s ago: executing program 1 (id=5424):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x30000000)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
recvmmsg$unix(r0, &(0x7f0000008e00)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000300)}, {&(0x7f0000000340)=""/97, 0x61}, {&(0x7f00000003c0)=""/105, 0x69}, {&(0x7f0000000440)=""/140, 0x8c}], 0x4}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000002800)=[{&(0x7f0000000680)=""/167, 0xa7}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/155, 0x9b}], 0x5}}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002880)=""/196, 0xc4}, {&(0x7f0000002980)=""/160, 0xa0}, {&(0x7f0000002a40)=""/143, 0x8f}, {&(0x7f0000002b00)=""/193, 0xc1}], 0x4, &(0x7f0000002c40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000004000)=[{&(0x7f0000002d80)=""/180, 0xb4}, {&(0x7f0000002e40)=""/146, 0x92}, {&(0x7f0000002f00)=""/23, 0x17}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/167, 0xa7}], 0x5, &(0x7f0000004080)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000004100), 0x6e, &(0x7f0000004480)=[{&(0x7f0000004180)=""/189, 0xbd}, {&(0x7f0000004240)=""/225, 0xe1}, {&(0x7f0000004340)=""/80, 0x50}, {&(0x7f00000043c0)=""/112, 0x70}, {&(0x7f0000004440)=""/23, 0x17}], 0x5, &(0x7f0000004500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000004600), 0x6e, &(0x7f0000004740)=[{&(0x7f0000004680)=""/23, 0x17}, {&(0x7f00000046c0)=""/127, 0x7f}], 0x2, &(0x7f0000004780)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}, {{0x0, 0x0, &(0x7f0000004c00)=[{&(0x7f00000048c0)=""/98, 0x62}, {&(0x7f0000004940)=""/88, 0x58}, {&(0x7f00000049c0)=""/88, 0x58}, {&(0x7f0000004a40)=""/76, 0x4c}, {&(0x7f0000004ac0)=""/40, 0x28}, {&(0x7f0000004b00)=""/2, 0x2}, {&(0x7f0000004b40)=""/192, 0xc0}], 0x7, &(0x7f0000004c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000004d80), 0x6e, &(0x7f0000006240)=[{&(0x7f0000004e00)=""/86, 0x56}, {&(0x7f0000004e80)=""/216, 0xd8}, {&(0x7f0000004f80)=""/68, 0x44}, {&(0x7f0000005000)=""/145, 0x91}, {&(0x7f00000050c0)=""/187, 0xbb}, {&(0x7f0000005180)=""/102, 0x66}, {&(0x7f0000005200)=""/34, 0x22}, {&(0x7f0000005240)=""/4096, 0x1000}], 0x8, &(0x7f00000062c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000006400), 0x6e, &(0x7f0000006600)=[{&(0x7f0000006480)=""/151, 0x97}, {&(0x7f0000006540)=""/154, 0x9a}], 0x2, &(0x7f0000006640)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f00000066c0)=@abs, 0x6e, &(0x7f0000008c40)=[{&(0x7f0000006740)=""/4096, 0x1000}, {&(0x7f0000007740)=""/177, 0xb1}, {&(0x7f0000007800)=""/189, 0xbd}, {&(0x7f00000078c0)=""/176, 0xb0}, {&(0x7f0000007980)=""/55, 0x37}, {&(0x7f00000079c0)=""/235, 0xeb}, {&(0x7f0000007ac0)=""/74, 0x4a}, {&(0x7f0000007b40)=""/4096, 0x1000}, {&(0x7f0000008b40)=""/248, 0xf8}], 0x9, &(0x7f0000008d00)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}], 0xa, 0x100, &(0x7f0000009080)={0x0, 0x989680})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8fbad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x48}}, 0x8000)

kernel console output (not intermixed with test programs):

multicast mode
[  340.055479][T18983] netlink: 'syz.0.3458': attribute type 4 has an invalid length.
[  340.060600][T18983] netlink: 'syz.0.3458': attribute type 9 has an invalid length.
[  340.063355][T18983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3458'.
[  340.074825][T18983] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3458'.
[  340.372686][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3462'.
[  340.376469][T19002] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3462'.
[  340.968971][T19012] __nla_validate_parse: 4 callbacks suppressed
[  340.968981][T19012] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3465'.
[  341.027712][T19016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3466'.
[  341.297977][T19029] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3469'.
[  341.311111][ T5839] Bluetooth: hci1: command tx timeout
[  341.423524][T19042] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3472'.
[  341.521887][T19049] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3476'.
[  341.532944][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'.
[  341.536941][T19052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3475'.
[  341.555697][T19052] team_slave_0: entered promiscuous mode
[  341.558334][T19052] team_slave_1: entered promiscuous mode
[  341.562743][T19052] macsec2: entered promiscuous mode
[  341.565885][T19052] team0: entered promiscuous mode
[  341.568393][T19052] macsec2: entered allmulticast mode
[  341.570302][T19052] team0: entered allmulticast mode
[  341.577093][T19052] team_slave_0: entered allmulticast mode
[  341.579820][T19052] team_slave_1: entered allmulticast mode
[  341.674403][T19064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3478'.
[  341.715137][T19064] tun0: tun_chr_ioctl cmd 1074025675
[  341.717427][T19064] tun0: persist enabled
[  341.720061][T19064] tun0: tun_chr_ioctl cmd 1074025675
[  341.725774][T19064] tun0: persist enabled
[  341.729291][T19064] tipc: Started in network mode
[  341.731782][T19064] tipc: Node identity ac1414aa, cluster identity 4711
[  341.735561][T19064] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  341.916675][T19086] bridge: RTM_NEWNEIGH with invalid ether address
[  341.920525][T19086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3483'.
[  341.988755][T19088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'.
[  342.000404][T19088] dummy0: entered promiscuous mode
[  342.007822][T19088] dummy0: left promiscuous mode
[  342.571954][T19121] netlink: 'syz.0.3494': attribute type 21 has an invalid length.
[  342.574720][T19121] netlink: 'syz.0.3494': attribute type 6 has an invalid length.
[  342.613830][T19123] netlink: 'syz.1.3495': attribute type 1 has an invalid length.
[  342.820618][T19151] x_tables: duplicate underflow at hook 1
[  342.830193][T19139] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.834790][T19139] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.006620][T19166] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  343.009348][T19166] tipc: Resetting bearer <eth:syzkaller0>
[  343.562355][T19139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  343.650369][T19181] erspan0: entered promiscuous mode
[  344.045085][T19212] netlink: 'syz.0.3517': attribute type 1 has an invalid length.
[  344.062494][T19212] macsec6: entered allmulticast mode
[  344.064277][T19212] macsec0: entered allmulticast mode
[  344.066063][T19212] veth1_macvtap: entered allmulticast mode
[  344.298485][T19236] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  344.313956][T19236] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  344.316753][T19236] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  344.319516][T19236] tipc: Resetting bearer <eth:syzkaller0>
[  344.499464][T19253] netlink: 'syz.2.3529': attribute type 1 has an invalid length.
[  344.646924][T19265] netlink: 'syz.2.3532': attribute type 13 has an invalid length.
[  344.684040][T19268] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  345.272782][T19336] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  345.296753][T19338] xt_l2tp: missing protocol rule (udp|l2tpip)
[  345.770191][T19358] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  345.780596][T19358] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  346.065722][T19379] __nla_validate_parse: 69 callbacks suppressed
[  346.065739][T19379] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3560'.
[  346.209388][T11854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.213770][T11854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.274995][T19383] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.3561'.
[  346.274995][T19382] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.3561'.
[  346.303690][T19386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3562'.
[  346.455446][T19400] dvmrp1: tun_chr_ioctl cmd 1074025677
[  346.457598][T19400] dvmrp1: linktype set to 2
[  346.489859][T19403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3565'.
[  346.599798][T19409] syz.2.3568: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  346.607407][T19409] CPU: 0 UID: 0 PID: 19409 Comm: syz.2.3568 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  346.607425][T19409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  346.607433][T19409] Call Trace:
[  346.607438][T19409]  <TASK>
[  346.607444][T19409]  dump_stack_lvl+0x189/0x250
[  346.607466][T19409]  ? __pfx_dump_stack_lvl+0x10/0x10
[  346.607481][T19409]  ? __pfx__printk+0x10/0x10
[  346.607498][T19409]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  346.607514][T19409]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  346.607533][T19409]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  346.607551][T19409]  warn_alloc+0x214/0x310
[  346.607568][T19409]  ? __pfx_warn_alloc+0x10/0x10
[  346.607586][T19409]  ? __get_vm_area_node+0x28f/0x300
[  346.607604][T19409]  ? translate_table+0x19b/0x2040
[  346.607631][T19409]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  346.607670][T19409]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  346.607692][T19409]  ? rcu_is_watching+0x15/0xb0
[  346.607708][T19409]  ? translate_table+0x19b/0x2040
[  346.607724][T19409]  ? translate_table+0x19b/0x2040
[  346.607738][T19409]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  346.607755][T19409]  ? translate_table+0x19b/0x2040
[  346.607770][T19409]  ? xt_alloc_table_info+0x3b/0xa0
[  346.607787][T19409]  translate_table+0x19b/0x2040
[  346.607812][T19409]  ? __lock_acquire+0xab9/0xd20
[  346.607829][T19409]  ? __pfx_translate_table+0x10/0x10
[  346.607847][T19409]  ? __might_fault+0xb0/0x130
[  346.607875][T19409]  ? _copy_from_user+0x94/0xb0
[  346.607895][T19409]  do_ip6t_set_ctl+0x970/0xce0
[  346.607917][T19409]  ? rcu_is_watching+0x15/0xb0
[  346.607930][T19409]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  346.607986][T19409]  ? __pfx___mutex_lock+0x10/0x10
[  346.608001][T19409]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  346.608013][T19409]  ? aa_sk_perm+0x81e/0x950
[  346.608035][T19409]  ? __pfx_aa_sk_perm+0x10/0x10
[  346.608056][T19409]  nf_setsockopt+0x26f/0x290
[  346.608074][T19409]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  346.608090][T19409]  do_sock_setsockopt+0x17c/0x1b0
[  346.608110][T19409]  __x64_sys_setsockopt+0x13f/0x1b0
[  346.608131][T19409]  do_syscall_64+0xfa/0x3b0
[  346.608143][T19409]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.608154][T19409]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.608166][T19409]  ? exc_page_fault+0x9f/0xf0
[  346.608179][T19409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.608190][T19409] RIP: 0033:0x7fe896d8e9a9
[  346.608203][T19409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  346.608213][T19409] RSP: 002b:00007fe897c7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  346.608226][T19409] RAX: ffffffffffffffda RBX: 00007fe896fb5fa0 RCX: 00007fe896d8e9a9
[  346.608234][T19409] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  346.608241][T19409] RBP: 00007fe896e10d69 R08: 00000000000002c8 R09: 0000000000000000
[  346.608248][T19409] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000
[  346.608256][T19409] R13: 0000000000000000 R14: 00007fe896fb5fa0 R15: 00007ffcc8e776b8
[  346.608276][T19409]  </TASK>
[  346.608280][T19409] Mem-Info:
[  346.698212][T19415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3571'.
[  346.711645][T19409] active_anon:13788 inactive_anon:0 isolated_anon:0
[  346.711645][T19409]  active_file:1116 inactive_file:38323 isolated_file:0
[  346.711645][T19409]  unevictable:1768 dirty:94 writeback:0
[  346.711645][T19409]  slab_reclaimable:11240 slab_unreclaimable:92394
[  346.711645][T19409]  mapped:18187 shmem:2449 pagetables:1092
[  346.711645][T19409]  sec_pagetables:0 bounce:0
[  346.711645][T19409]  kernel_misc_reclaimable:0
[  346.711645][T19409]  free:249139 free_pcp:15944 free_cma:0
[  346.766975][T19409] Node 0 active_anon:35448kB inactive_anon:0kB active_file:3048kB inactive_file:148492kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:10040kB dirty:172kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7312kB pagetables:1956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  346.783405][T19409] Node 1 active_anon:19772kB inactive_anon:0kB active_file:1416kB inactive_file:4800kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:62776kB dirty:204kB writeback:0kB shmem:4936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6088kB pagetables:2480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  346.797251][T19409] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  346.811389][T19409] lowmem_reserve[]: 0 812 812 812 812
[  346.813794][T19409] Node 0 DMA32 free:251272kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35448kB inactive_anon:0kB active_file:3048kB inactive_file:148492kB unevictable:3536kB writepending:172kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:30272kB local_pcp:15232kB free_cma:0kB
[  346.827358][T19409] lowmem_reserve[]: 0 0 0 0 0
[  346.829485][T19409] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  346.843301][T19409] lowmem_reserve[]: 0 0 854 854 854
[  346.845588][T19409] Node 1 Normal free:270128kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19772kB inactive_anon:0kB active_file:1416kB inactive_file:4800kB unevictable:3536kB writepending:204kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:36060kB local_pcp:20016kB free_cma:0kB
[  346.859249][T19409] lowmem_reserve[]: 0 0 0 0 0
[  346.862175][T19409] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  346.867512][T19409] Node 0 DMA32: 1880*4kB (UME) 995*8kB (UME) 775*16kB (UME) 72*32kB (UM) 239*64kB (UME) 132*128kB (UM) 76*256kB (UM) 21*512kB (UME) 9*1024kB (UE) 3*2048kB (U) 35*4096kB (UM) = 251304kB
[  346.875125][T19409] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  346.886972][T19409] Node 1 Normal: 0*4kB 0*8kB 3*16kB (UME) 2*32kB (ME) 43*64kB (UE) 42*128kB (UME) 19*256kB (M) 6*512kB (ME) 18*1024kB (UM) 3*2048kB (UM) 56*4096kB (UM) = 270128kB
[  346.893770][T19409] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  346.898375][T19409] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  346.902594][T19409] 41888 total pagecache pages
[  346.904834][T19425] netlink: 'syz.0.3571': attribute type 2 has an invalid length.
[  346.911398][T19409] 0 pages in swap cache
[  346.913221][T19409] Free swap  = 124996kB
[  346.914994][T19409] Total swap = 124996kB
[  346.916791][T19409] 786301 pages RAM
[  346.918408][T19409] 0 pages HighMem/MovableOnly
[  346.920420][T19409] 241056 pages reserved
[  346.924792][T19409] 0 pages cma reserved
[  346.934597][T19425] : entered promiscuous mode
[  346.973881][T19427] IPVS: set_ctl: invalid protocol: 12 10.1.1.2:20000
[  346.979575][T19427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3573'.
[  347.346534][T19451] netlink: 'syz.1.3578': attribute type 9 has an invalid length.
[  347.520276][T19451] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  347.706059][T19473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3584'.
[  347.716203][T19476] raw_sendmsg: syz.2.3585 forgot to set AF_INET. Fix it!
[  347.878375][T19489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3588'.
[  347.890177][T19493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3589'.
[  348.151387][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  348.174333][T19514] macsec6: entered promiscuous mode
[  348.176997][T19514] bridge0: entered promiscuous mode
[  348.182460][T19514] bridge0: port 1(macsec6) entered blocking state
[  348.185337][T19514] bridge0: port 1(macsec6) entered disabled state
[  348.188208][T19514] macsec6: entered allmulticast mode
[  348.192277][T19514] bridge0: entered allmulticast mode
[  348.195260][T19514] macsec6: left allmulticast mode
[  348.197084][T19514] bridge0: left allmulticast mode
[  348.200119][T19514] bridge0: left promiscuous mode
[  348.309064][T19521] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.312700][T19521] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.316422][T19521] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.320047][T19521] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.327968][T19521] geneve0: entered promiscuous mode
[  348.398338][T19525] macsec17: entered promiscuous mode
[  348.400690][T19525] bridge0: entered promiscuous mode
[  348.404442][T19525] bridge0: port 1(macsec17) entered blocking state
[  348.407385][T19525] bridge0: port 1(macsec17) entered disabled state
[  348.410531][T19525] macsec17: entered allmulticast mode
[  348.413087][T19525] bridge0: entered allmulticast mode
[  348.419061][T19525] macsec17: left allmulticast mode
[  348.421899][T19525] bridge0: left allmulticast mode
[  348.426416][T19525] bridge0: left promiscuous mode
[  348.984470][T19536] netlink: 'syz.1.3601': attribute type 30 has an invalid length.
[  349.133979][T19553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.137480][T19553] syzkaller0: entered promiscuous mode
[  349.147428][T19553] syzkaller0: entered allmulticast mode
[  349.172852][T19553] tipc: Resetting bearer <eth:syzkaller0>
[  349.196994][T19555] tipc: Resetting bearer <eth:syzkaller0>
[  349.212379][T19555] tipc: Disabling bearer <eth:syzkaller0>
[  349.293487][T19566] can: request_module (can-proto-0) failed.
[  349.500677][T19583] netlink: 'syz.1.3611': attribute type 4 has an invalid length.
[  349.873317][T19594] bridge: RTM_NEWNEIGH with invalid ether address
[  349.983491][T19598] netlink: 'syz.1.3616': attribute type 1 has an invalid length.
[  350.210539][T19610] "syz.0.3617" (19610) uses obsolete ecb(arc4) skcipher
[  350.235348][T19617] bond11: (slave ip6gretap2): Releasing active interface
[  350.239186][T19617] bond0: (slave bond12): Releasing active interface
[  350.247298][T19617] team0: Port device bridge14 removed
[  350.902469][T19650] ipt_REJECT: ECHOREPLY no longer supported.
[  351.078465][T19659] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  351.088576][T19659] __nla_validate_parse: 80 callbacks suppressed
[  351.088587][T19659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3632'.
[  351.094359][T19659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3632'.
[  351.102226][T19659] tipc: Resetting bearer <eth:syzkaller0>
[  351.113422][T19659] bond19: (slave bond20): Releasing backup interface
[  351.149423][T19659] bond21: (slave bridge17): Releasing active interface
[  351.156698][T19659] bridge17: left promiscuous mode
[  351.159006][T19659] bridge17: left allmulticast mode
[  351.237213][T19659] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  351.241609][T19659] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  351.575529][T19663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3633'.
[  351.687011][T19671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3635'.
[  351.691230][T19671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3635'.
[  351.942006][T19674] xt_CT: You must specify a L4 protocol and not use inversions on it
[  352.170152][T19680] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003
[  352.277863][T19696] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode
[  352.280788][T19696] macsec9: entered promiscuous mode
[  352.284112][T19696] macsec9: entered allmulticast mode
[  352.286404][T19696] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode
[  352.446638][T11850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.449313][T11850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.464581][T19712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3645'.
[  352.468650][T19712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3645'.
[  352.698232][T19728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3649'.
[  352.709332][T19724] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3648'.
[  352.717400][T19728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3649'.
[  354.032118][ T1118] block nbd0: Possible stuck request ffff888022828000: control (read@0,1024B). Runtime 210 seconds
[  354.036766][ T1118] block nbd0: Possible stuck request ffff888022828200: control (read@1024,1024B). Runtime 210 seconds
[  354.041747][ T1118] block nbd0: Possible stuck request ffff888022828400: control (read@2048,1024B). Runtime 210 seconds
[  354.046422][ T1118] block nbd0: Possible stuck request ffff888022828600: control (read@3072,1024B). Runtime 210 seconds
[  355.546057][T19729] IPv6: sit4: Disabled Multicast RS
[  355.854901][T19757] netlink: 'syz.0.3655': attribute type 1 has an invalid length.
[  355.858726][T19757] netlink: 'syz.0.3655': attribute type 4 has an invalid length.
[  356.120125][T19774] __nla_validate_parse: 3 callbacks suppressed
[  356.120135][T19774] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.3662'.
[  356.127031][T19774] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.3662'.
[  356.131370][T19774] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.3662'.
[  356.134797][T19774] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.3662'.
[  356.138318][T19774] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.3662'.
[  356.143174][T19774] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.3662'.
[  356.147000][T19774] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.3662'.
[  356.150614][T19774] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.3662'.
[  356.156172][T19774] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.3662'.
[  356.159987][T19774] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.3662'.
[  356.171721][T19774] x_tables: ip_tables: osf match: only valid for protocol 6
[  356.179297][T19773] bridge0: port 1(vlan0) entered blocking state
[  356.181761][T19773] bridge0: port 1(vlan0) entered disabled state
[  356.184174][T19773] vlan0: entered allmulticast mode
[  356.186152][T19773] bond0: entered allmulticast mode
[  356.189650][T19773] vlan0: entered promiscuous mode
[  356.191593][T19773] bond0: entered promiscuous mode
[  356.362325][T19786] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  356.365240][T19786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.369184][T19786] netlink: 'syz.1.3666': attribute type 39 has an invalid length.
[  356.397551][T19788] xt_nat: multiple ranges no longer supported
[  356.440224][T19788] xt_nat: multiple ranges no longer supported
[  356.526607][T19795] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.237480][T19827] only policy match revision 0 supported
[  357.237496][T19827] unable to load match
[  357.436223][T19847] netlink: 'syz.0.3682': attribute type 1 has an invalid length.
[  357.469366][T19847] bond1: (slave gretap1): making interface the new active one
[  357.472476][T19847] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  357.590326][T19862] xt_hashlimit: size too large, truncated to 1048576
[  357.612748][T19863] netlink: 'syz.2.3687': attribute type 4 has an invalid length.
[  357.809760][T19876] macsec6: entered promiscuous mode
[  357.813218][T19876] bridge0: entered promiscuous mode
[  357.816240][T19876] bridge0: port 2(macsec6) entered blocking state
[  357.819232][T19876] bridge0: port 2(macsec6) entered disabled state
[  357.827904][T19876] macsec6: entered allmulticast mode
[  357.829954][T19876] bridge0: entered allmulticast mode
[  357.837688][T19876] macsec6: left allmulticast mode
[  357.850795][T19876] bridge0: left allmulticast mode
[  357.855586][T19876] bridge0: left promiscuous mode
[  357.884864][T19887] sctp: [Deprecated]: syz.2.3692 (pid 19887) Use of int in max_burst socket option.
[  357.884864][T19887] Use struct sctp_assoc_value instead
[  358.000015][T19891] netlink: 'syz.0.3693': attribute type 10 has an invalid length.
[  358.004142][T19891] veth0_vlan: entered allmulticast mode
[  358.016388][T19891] bridge0: port 3(veth0_vlan) entered blocking state
[  358.019239][T19891] bridge0: port 3(veth0_vlan) entered disabled state
[  358.032721][T19891] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  358.074052][T19897] netlink: 'syz.0.3695': attribute type 1 has an invalid length.
[  358.092545][T19897] 8021q: adding VLAN 0 to HW filter on device bond2
[  358.108348][T19897] vlan2: entered promiscuous mode
[  358.108552][T19900] netlink: 'syz.1.3694': attribute type 11 has an invalid length.
[  358.110692][T19897] bond2: entered promiscuous mode
[  358.116763][T19897] vlan2: entered allmulticast mode
[  358.119109][T19897] bond2: entered allmulticast mode
[  358.119836][T19900] netlink: 'syz.1.3694': attribute type 4 has an invalid length.
[  358.127464][T19894] netlink: 'syz.1.3694': attribute type 1 has an invalid length.
[  358.134674][T19897] bond2: (slave gretap2): making interface the new active one
[  358.137948][T19897] gretap2: entered promiscuous mode
[  358.140262][T19897] gretap2: entered allmulticast mode
[  358.144883][T19897] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  358.250218][T19914] netlink: 'syz.0.3698': attribute type 1 has an invalid length.
[  358.278011][T19914] 8021q: adding VLAN 0 to HW filter on device bond3
[  358.302462][T19914] bond3: (slave veth3): Enslaving as an active interface with a down link
[  358.316276][T19914] vlan3: entered allmulticast mode
[  358.318687][T19914] veth1: entered allmulticast mode
[  358.322138][T19914] veth1: entered promiscuous mode
[  358.324862][T19914] veth1: left promiscuous mode
[  358.328133][T19914] bond3: (slave vlan3): making interface the new active one
[  358.332073][T19914] veth1: entered promiscuous mode
[  358.334893][T19914] vlan3: entered promiscuous mode
[  358.337400][T19914] bond3: (slave vlan3): Enslaving as an active interface with an up link
[  358.542553][T19930] ip6gre1: entered allmulticast mode
[  359.024096][T19956] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  359.027198][T19956] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  359.029921][T19956] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  359.033699][T19956] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  359.038998][T19956] bond23: (slave geneve3): making interface the new active one
[  359.044866][T19956] bond23: (slave geneve3): Enslaving as an active interface with an up link
[  359.058468][T19956] 8021q: adding VLAN 0 to HW filter on device bond23
[  359.130296][T19961] : entered promiscuous mode
[  359.180103][T19971] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  359.185675][T19972] x_tables: duplicate underflow at hook 1
[  359.431182][T19997] macsec10: entered promiscuous mode
[  359.432949][T19997] macsec10: entered allmulticast mode
[  359.686752][T20019] xt_CT: No such helper "snmp"
[  359.891845][T20037] vxcan3: entered promiscuous mode
[  359.894861][T20037] vxcan3: entered allmulticast mode
[  360.087807][T20056] x_tables: ip_tables: ah match: only valid for protocol 51
[  360.407088][T20080] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  360.465181][T20080] batman_adv: batadv0: Removing interface: batadv_slave_0
[  361.280133][T20141] __nla_validate_parse: 111 callbacks suppressed
[  361.280147][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3761'.
[  361.300756][T20143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3762'.
[  361.344101][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3761'.
[  361.388898][T20150] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3764'.
[  361.441329][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3764'.
[  361.448020][T20156] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  361.451999][T20156] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  361.455727][T20156] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  361.459675][T20156] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  361.503478][T20152] netlink: 532 bytes leftover after parsing attributes in process `syz.1.3765'.
[  361.643583][T20170] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3770'.
[  361.646756][T20170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3770'.
[  361.650225][T20170] validate_nla: 5 callbacks suppressed
[  361.650233][T20170] netlink: 'syz.2.3770': attribute type 9 has an invalid length.
[  361.657665][T20170] netlink: 'syz.2.3770': attribute type 6 has an invalid length.
[  361.705535][T20176] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3772'.
[  361.708940][T20178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3772'.
[  361.767715][T20182] netlink: 'syz.1.3773': attribute type 8 has an invalid length.
[  361.776363][T20183] pim6reg1: entered promiscuous mode
[  361.778166][T20183] pim6reg1: entered allmulticast mode
[  362.056371][ T5662] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  362.059174][ T5662] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  362.093052][ T5880] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  362.641566][ T5880] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  362.672707][T20262] netlink: 'syz.0.3790': attribute type 1 has an invalid length.
[  362.731329][ T5880] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  362.862194][T20273] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  362.864891][T20273] openvswitch: netlink: Duplicate key (type 0).
[  362.953095][T20280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  363.063326][T20296] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  363.274240][T20313] x_tables: duplicate underflow at hook 3
[  363.682371][T20346] xt_CT: You must specify a L4 protocol and not use inversions on it
[  363.686059][T20347] xt_CT: You must specify a L4 protocol and not use inversions on it
[  364.032934][T20372] tipc: Resetting bearer <eth:syzkaller0>
[  364.041771][T20372] bond23: (slave geneve3): Releasing active interface
[  364.047255][T20372] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  364.061546][T20372] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  364.071156][T20372] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  364.074560][T20372] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  364.087346][T20374] netlink: 'syz.1.3825': attribute type 4 has an invalid length.
[  364.097644][T20372] netlink: 'syz.2.3824': attribute type 10 has an invalid length.
[  364.111091][T20372] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  364.257439][T20389] tun0: tun_chr_ioctl cmd 2148553947
[  364.262086][T20392] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  364.267440][T20392] openvswitch: netlink: Message has 1 unknown bytes.
[  364.569131][T20415] macsec17: entered allmulticast mode
[  364.573586][T20415] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  364.749570][T20428] netlink: 'syz.0.3840': attribute type 11 has an invalid length.
[  364.754548][T20430] netlink: 'syz.0.3840': attribute type 11 has an invalid length.
[  364.849868][T20440] netlink: 'syz.2.3843': attribute type 13 has an invalid length.
[  364.852636][T20440] netlink: 'syz.2.3843': attribute type 17 has an invalid length.
[  364.868533][T20440] gre0: left allmulticast mode
[  364.886069][T20440] ip6gretap0: left promiscuous mode
[  364.891118][T20440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  365.098682][T20456] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.103587][T20456] syzkaller0: entered promiscuous mode
[  365.105480][T20456] syzkaller0: entered allmulticast mode
[  365.113860][T20456] tipc: Resetting bearer <eth:syzkaller0>
[  365.118184][T20455] tipc: Resetting bearer <eth:syzkaller0>
[  365.129532][T20455] tipc: Disabling bearer <eth:syzkaller0>
[  365.197710][T20460] tun1: tun_chr_ioctl cmd 1074025677
[  365.200059][T20460] tun1: linktype set to 804
[  365.386965][T20478] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  365.417388][T20480] macsec0: left allmulticast mode
[  365.605005][T20485] openvswitch: netlink: Message has 4784 unknown bytes.
[  365.611123][T20485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  365.679679][T20493] IPv6: NLM_F_REPLACE set, but no existing node found!
[  365.711110][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  365.799158][T20488] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.904257][T20488] veth1_macvtap: left allmulticast mode
[  365.912817][T20488] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  365.916503][T20488] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  365.920429][T20488] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  365.925069][T20488] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  365.959993][T20488] team0: left allmulticast mode
[  365.962001][T20488] team_slave_0: left allmulticast mode
[  365.963911][T20488] team_slave_1: left allmulticast mode
[  365.965775][T20488] team0: left promiscuous mode
[  365.967457][T20488] team_slave_0: left promiscuous mode
[  365.969551][T20488] team_slave_1: left promiscuous mode
[  365.982688][T20488] macsec0: left allmulticast mode
[  365.987873][T20488] mac80211_hwsim hwsim60 wlan0: left allmulticast mode
[  366.238231][T20500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.241797][T20500] syzkaller0: entered promiscuous mode
[  366.244283][T20500] syzkaller0: entered allmulticast mode
[  366.266293][T20500] tipc: Resetting bearer <eth:syzkaller0>
[  366.272963][T20499] tipc: Resetting bearer <eth:syzkaller0>
[  366.322466][T20499] tipc: Disabling bearer <eth:syzkaller0>
[  366.407358][T20509] __nla_validate_parse: 110 callbacks suppressed
[  366.407372][T20509] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3862'.
[  366.429543][T20509] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3862'.
[  366.440424][T20509] wg2: entered promiscuous mode
[  366.443063][T20509] wg2: entered allmulticast mode
[  366.556825][T20519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3866'.
[  366.569532][T20519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3866'.
[  366.573924][T20519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3866'.
[  366.577288][T20519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3866'.
[  366.580477][T20519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3866'.
[  366.584409][T20519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3866'.
[  366.587909][T20519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3866'.
[  366.591879][T20519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3866'.
[  368.079341][T20590] xt_hashlimit: size too large, truncated to 1048576
[  368.192079][T20594] macsec6: entered promiscuous mode
[  368.193966][T20594] bridge0: entered promiscuous mode
[  368.196295][T20594] bridge0: port 2(macsec6) entered blocking state
[  368.198661][T20594] bridge0: port 2(macsec6) entered disabled state
[  368.201749][T20594] macsec6: entered allmulticast mode
[  368.203608][T20594] bridge0: entered allmulticast mode
[  368.207197][T20594] macsec6: left allmulticast mode
[  368.209030][T20594] bridge0: left allmulticast mode
[  368.212768][T20594] bridge0: left promiscuous mode
[  368.566647][T20610] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  368.652836][T20617] macsec6: entered promiscuous mode
[  368.655101][T20617] macsec6: entered allmulticast mode
[  368.657293][T20617] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  368.696518][T20620] validate_nla: 5 callbacks suppressed
[  368.696532][T20620] netlink: 'syz.2.3892': attribute type 9 has an invalid length.
[  368.705478][T20624] x_tables: duplicate underflow at hook 2
[  368.846818][T20635] netlink: 'syz.0.3895': attribute type 3 has an invalid length.
[  369.022875][T20651] netlink: 'syz.0.3900': attribute type 39 has an invalid length.
[  369.068073][T20655] bond0: option miimon: invalid value (18446744073709551615)
[  369.070496][T20655] bond0: option miimon: allowed values 0 - 2147483647
[  369.281200][T20677] netlink: 'syz.0.3909': attribute type 2 has an invalid length.
[  369.284577][T20678] netlink: 'syz.0.3909': attribute type 2 has an invalid length.
[  369.349178][   T33] audit: type=1800 audit(1753123948.977:6): pid=20687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3911" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=6636 res=0 errno=0
[  369.374172][T20687] macsec8: entered promiscuous mode
[  369.376454][T20687] bridge0: entered promiscuous mode
[  369.379493][T20687] bridge0: port 2(macsec8) entered blocking state
[  369.383904][T20687] bridge0: port 2(macsec8) entered disabled state
[  369.387344][T20687] macsec8: entered allmulticast mode
[  369.389642][T20687] bridge0: entered allmulticast mode
[  369.396929][T20687] macsec8: left allmulticast mode
[  369.399327][T20687] bridge0: left allmulticast mode
[  369.405833][T20687] bridge0: left promiscuous mode
[  369.406380][T20689] netlink: zone id is out of range
[  369.411801][T20689] netlink: get zone limit has 8 unknown bytes
[  369.550763][T20694] lo speed is unknown, defaulting to 1000
[  369.575189][T20694] lo speed is unknown, defaulting to 1000
[  369.578210][T20694] lo speed is unknown, defaulting to 1000
[  369.646844][T20697] 8021q: adding VLAN 0 to HW filter on device team0
[  369.666492][T20697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  369.689347][T20697] netlink: 'syz.1.3915': attribute type 1 has an invalid length.
[  369.833221][T20694] infiniband syz0: set active
[  369.835046][ T5880] lo speed is unknown, defaulting to 1000
[  369.837006][T20694] infiniband syz0: added lo
[  369.868180][T20694] RDS/IB: syz0: added
[  369.877753][T20694] smc: adding ib device syz0 with port count 1
[  369.880351][T20694] smc:    ib device syz0 port 1 has pnetid 
[  369.883219][ T5880] lo speed is unknown, defaulting to 1000
[  369.887671][T20694] lo speed is unknown, defaulting to 1000
[  370.060587][T20694] lo speed is unknown, defaulting to 1000
[  370.197233][T20694] lo speed is unknown, defaulting to 1000
[  370.291765][T20724] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  370.294965][T20724] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  370.369784][T20694] lo speed is unknown, defaulting to 1000
[  370.392036][T20727] macsec11: entered promiscuous mode
[  370.393945][T20727] ip6gretap0: entered promiscuous mode
[  370.395900][T20727] macsec11: entered allmulticast mode
[  370.397821][T20727] ip6gretap0: entered allmulticast mode
[  371.067344][T20776] macvlan0: entered promiscuous mode
[  371.069307][T20776] netlink: 'syz.0.3939': attribute type 1 has an invalid length.
[  371.072250][T20776] netlink: 'syz.0.3939': attribute type 2 has an invalid length.
[  371.164050][T20784] netlink: 'syz.1.3941': attribute type 3 has an invalid length.
[  371.170998][T20784] netlink: 'syz.1.3941': attribute type 2 has an invalid length.
[  371.409736][T20814] macsec8: entered promiscuous mode
[  371.411721][T20814] bridge0: entered promiscuous mode
[  371.413915][T20814] bridge0: port 2(macsec8) entered blocking state
[  371.416158][T20814] bridge0: port 2(macsec8) entered disabled state
[  371.418744][T20814] macsec8: entered allmulticast mode
[  371.420618][T20814] bridge0: entered allmulticast mode
[  371.425484][T20814] macsec8: left allmulticast mode
[  371.427619][T20814] bridge0: left allmulticast mode
[  371.430509][T20814] bridge0: left promiscuous mode
[  372.312340][T20836] __nla_validate_parse: 87 callbacks suppressed
[  372.312351][T20836] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3954'.
[  372.340741][T20840] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3955'.
[  372.350491][T20840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3955'.
[  372.355680][T20842] macsec8: entered promiscuous mode
[  372.358498][T20842] macsec8: entered allmulticast mode
[  372.496930][T20851] openvswitch: netlink: Flow actions attr not present in new flow.
[  372.791829][T20872] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3966'.
[  372.853010][T20880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3969'.
[  373.148141][T20899] netlink: del zone limit has 4 unknown bytes
[  373.200262][T20905] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3976'.
[  373.214629][T20908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3977'.
[  373.214673][T20907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3977'.
[  373.218683][T20908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3977'.
[  373.228947][T20907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3977'.
[  373.232956][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  373.686584][T20945] xt_hashlimit: invalid rate
[  373.868375][T20955] validate_nla: 3 callbacks suppressed
[  373.868385][T20955] netlink: 'syz.0.3991': attribute type 159 has an invalid length.
[  374.254741][T20977] netlink: 'syz.0.3997': attribute type 4 has an invalid length.
[  374.313710][T20979] netlink: 'syz.1.3999': attribute type 1 has an invalid length.
[  374.422120][T20986] netlink: 'syz.1.4002': attribute type 1 has an invalid length.
[  374.591856][   T54] Bluetooth: hci1: command tx timeout
[  374.620419][T21003] vlan0: left allmulticast mode
[  374.622176][T21003] bond0: left allmulticast mode
[  374.623925][T21003] vlan0: left promiscuous mode
[  374.625572][T21003] bond0: left promiscuous mode
[  374.641138][T21003] bridge0: port 1(vlan0) entered disabled state
[  375.340412][T21013] syz_tun: entered allmulticast mode
[  375.353590][T21013] dvmrp8: entered allmulticast mode
[  375.357690][T21012] syz_tun: left allmulticast mode
[  376.758972][T21092] lo speed is unknown, defaulting to 1000
[  377.626242][T21115] syzkaller1: entered promiscuous mode
[  377.628777][T21115] syzkaller1: entered allmulticast mode
[  377.638232][T21115] IPv6: sit5: Disabled Multicast RS
[  377.856557][T21121] __nla_validate_parse: 191 callbacks suppressed
[  377.856574][T21121] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4039'.
[  377.934434][T21134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4041'.
[  377.951205][ T5839] Bluetooth: hci1: command 0x0405 tx timeout
[  378.177191][T21144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4044'.
[  378.177257][T21149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4044'.
[  378.322777][T21157] xt_CT: No such helper "pptp"
[  378.388506][T21164] --map-set only usable from mangle table
[  379.179772][T21174] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4049'.
[  379.194903][T21176] netlink: 39 bytes leftover after parsing attributes in process `syz.0.4050'.
[  379.255666][T21182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4053'.
[  379.294331][T21188] netlink: 'syz.0.4054': attribute type 13 has an invalid length.
[  379.296996][T21188] netlink: 'syz.0.4054': attribute type 17 has an invalid length.
[  379.309185][T21188] erspan0: left promiscuous mode
[  379.330411][T21188] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.334495][T21188] 8021q: adding VLAN 0 to HW filter on device team0
[  379.341318][T21188] 8021q: adding VLAN 0 to HW filter on device batadv0
[  379.383430][T21188] veth1_to_batadv: entered promiscuous mode
[  379.388490][T21188] batman_adv: batadv0: Interface activated: batadv_slave_1
[  379.399191][T21188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  379.403875][T21188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  379.419868][T21188] veth1_vlan: left promiscuous mode
[  379.423606][T21188] veth0_vlan: left promiscuous mode
[  379.425795][T21188] veth0_vlan: left allmulticast mode
[  379.429561][T21188] veth0_vlan: entered promiscuous mode
[  379.439488][T21188] veth1_vlan: entered promiscuous mode
[  379.442549][T21188] macvlan0: left promiscuous mode
[  379.450974][T21188] veth1_macvtap: left promiscuous mode
[  379.455051][T21188] veth0_macvtap: left promiscuous mode
[  379.458473][T21188] veth0_macvtap: entered promiscuous mode
[  379.466206][T21188] veth1_macvtap: entered promiscuous mode
[  379.469774][T21198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4057'.
[  379.470004][T21188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  379.477514][T21188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.483512][T21188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  379.487085][T21188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  379.495835][T21203] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4054'.
[  379.497747][T21188] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  379.507019][T21188] mac80211_hwsim hwsim60 wlan0: left promiscuous mode
[  379.512664][T21188] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  379.516178][T21188] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  379.519440][T21188] macsec1: left promiscuous mode
[  379.522192][T21188] macsec1: left allmulticast mode
[  379.524289][T21188] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  379.529055][T21188] team_slave_0: entered promiscuous mode
[  379.531878][T21188] team_slave_1: entered promiscuous mode
[  379.534365][T21188] team0: entered allmulticast mode
[  379.536476][T21188] team_slave_0: entered allmulticast mode
[  379.539063][T21188] team_slave_1: entered allmulticast mode
[  379.541968][T21188] team0: entered promiscuous mode
[  379.544341][T21188] macsec2: left promiscuous mode
[  379.549191][T21188] team0: left promiscuous mode
[  379.553553][T21188] macsec2: left allmulticast mode
[  379.555689][T21188] team0: left allmulticast mode
[  379.558204][T21188] team_slave_0: left allmulticast mode
[  379.560773][T21188] team_slave_1: left allmulticast mode
[  379.572386][T21188] batadv0: entered promiscuous mode
[  379.575886][T21188] erspan0: entered promiscuous mode
[  379.578649][T21188] macsec0: entered allmulticast mode
[  379.580451][T21188] veth1_macvtap: entered allmulticast mode
[  379.584247][T21188] macsec6: left allmulticast mode
[  379.585967][T21188] macsec0: left allmulticast mode
[  379.587565][T21188] veth1_macvtap: left allmulticast mode
[  379.590153][T21188] dummy0: entered promiscuous mode
[  379.593887][T21188] veth1_to_hsr: entered promiscuous mode
[  379.596571][T21188] bridge0: entered promiscuous mode
[  379.629829][T21188] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode
[  379.633101][T21188] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode
[  379.636298][T21188] macsec9: left promiscuous mode
[  379.638540][T21188] macsec9: left allmulticast mode
[  379.640311][T21188] mac80211_hwsim hwsim60 wlan0: left allmulticast mode
[  379.647003][T21188] 8021q: adding VLAN 0 to HW filter on device bond1
[  379.657287][T21188] 8021q: adding VLAN 0 to HW filter on device bond2
[  379.660811][T21188] vlan2: left promiscuous mode
[  379.662745][T21188] bond2: left promiscuous mode
[  379.664256][T21188] gretap2: left promiscuous mode
[  379.666162][T21188] vlan2: left allmulticast mode
[  379.668157][T21188] bond2: left allmulticast mode
[  379.669945][T21188] gretap2: left allmulticast mode
[  379.676317][T21188] 8021q: adding VLAN 0 to HW filter on device bond3
[  379.681085][T21188] vlan3: left allmulticast mode
[  379.682663][T21188] veth1: left allmulticast mode
[  379.684635][T21188] ip6gre1: left allmulticast mode
[  379.686870][T21188] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  379.689347][T21188] macsec10: left promiscuous mode
[  379.691355][T21188] macsec10: left allmulticast mode
[  379.692994][T21188] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  379.697630][T21188] vxcan3: left promiscuous mode
[  379.699216][T21188] vxcan3: left allmulticast mode
[  379.702071][T21188] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  379.704782][T21188] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  379.707458][T21188] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  379.710270][T21188] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  379.716211][T21188] macsec11: left promiscuous mode
[  379.718038][T21188] macsec11: left allmulticast mode
[  379.719789][T21188] ip6gretap0: left allmulticast mode
[  379.723411][T21189] lo speed is unknown, defaulting to 1000
[  379.727956][T11854] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.730284][T11854] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.734008][T11854] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.736402][T11854] bridge0: port 2(bridge_slave_1) entered forwarding state
[  379.829720][ T5662] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  379.897285][T21195] lo speed is unknown, defaulting to 1000
[  380.138113][T21227] netlink: 'syz.2.4061': attribute type 2 has an invalid length.
[  380.140613][T21227] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.4061'.
[  380.392673][T21239] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  380.399408][ T5880] lo speed is unknown, defaulting to 1000
[  380.403448][ T5880] syz0: Port: 1 Link DOWN
[  380.405332][ T5880] lo speed is unknown, defaulting to 1000
[  380.626469][T21188] syz.0.4054 (21188) used greatest stack depth: 18944 bytes left
[  380.963164][T21281] bridge0: port 3(erspan0) entered blocking state
[  380.966368][T21281] bridge0: port 3(erspan0) entered disabled state
[  380.969156][T21281] erspan0: entered allmulticast mode
[  380.975519][T21281] erspan0: left allmulticast mode
[  380.978357][T21280] bridge0: port 3(erspan0) entered blocking state
[  380.982539][T21280] bridge0: port 3(erspan0) entered disabled state
[  380.988202][T21280] erspan0: entered allmulticast mode
[  380.992466][T21280] erspan0: left allmulticast mode
[  381.239480][T21299] macsec13: entered promiscuous mode
[  381.241816][T21299] macsec13: entered allmulticast mode
[  381.243871][T21299] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode
[  382.205185][T21323] bridge0: port 1(gretap0) entered blocking state
[  382.207864][T21323] bridge0: port 1(gretap0) entered disabled state
[  382.210309][T21323] gretap0: entered allmulticast mode
[  382.213437][T21323] gretap0: left allmulticast mode
[  382.316723][T21337] netlink: 'syz.0.4091': attribute type 1 has an invalid length.
[  382.389709][T21347] netlink: 'syz.0.4095': attribute type 21 has an invalid length.
[  382.394716][T21347] geneve1: entered promiscuous mode
[  382.396471][T21347] geneve1: entered allmulticast mode
[  382.595102][T21371] team0: entered promiscuous mode
[  382.597121][T21371] team0: entered allmulticast mode
[  382.856971][T21394] lo speed is unknown, defaulting to 1000
[  382.865277][T21396] openvswitch: netlink: IPv4 tunnel dst address is zero
[  383.043883][T21402] lo speed is unknown, defaulting to 1000
[  383.053410][ T5860] vlan3: left promiscuous mode
[  383.403741][T21416] netlink: 'syz.0.4111': attribute type 13 has an invalid length.
[  383.560746][T21416] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.563526][T21416] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.585256][T21416] team_slave_0: left promiscuous mode
[  383.587972][T21416] team_slave_1: left promiscuous mode
[  383.684152][T21416] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  383.804298][T21416] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  383.807578][T21416] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  383.810666][T21416] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  383.814669][T21416] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  383.827306][T21428] __nla_validate_parse: 22 callbacks suppressed
[  383.827322][T21428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4114'.
[  383.878653][T21429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4114'.
[  383.988919][T21431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4114'.
[  384.014192][T21416] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  384.017498][T21416] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  384.021060][T21416] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  384.024739][T21416] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  384.043703][T21416] mac80211_hwsim hwsim60 wlan0: left allmulticast mode
[  384.115135][ T1118] block nbd0: Possible stuck request ffff888022828000: control (read@0,1024B). Runtime 240 seconds
[  384.119058][ T1118] block nbd0: Possible stuck request ffff888022828200: control (read@1024,1024B). Runtime 240 seconds
[  384.122746][ T1118] block nbd0: Possible stuck request ffff888022828400: control (read@2048,1024B). Runtime 240 seconds
[  384.126722][ T1118] block nbd0: Possible stuck request ffff888022828600: control (read@3072,1024B). Runtime 240 seconds
[  384.229656][T21445] bridge0: entered promiscuous mode
[  384.233251][T21445] macsec24: entered promiscuous mode
[  384.236610][T21445] bridge0: port 1(macsec24) entered blocking state
[  384.239215][T21445] bridge0: port 1(macsec24) entered disabled state
[  384.242658][T21445] macsec24: entered allmulticast mode
[  384.245118][T21445] bridge0: entered allmulticast mode
[  384.248286][T21445] macsec24: left allmulticast mode
[  384.250136][T21445] bridge0: left allmulticast mode
[  384.254510][T21445] bridge0: left promiscuous mode
[  384.552054][T21467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4123'.
[  384.566099][T21459] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4123'.
[  384.612384][T21471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4125'.
[  384.612637][T21472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4125'.
[  384.618539][T21472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4125'.
[  384.663840][T21477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4127'.
[  384.757806][T21488] vxcan1: entered allmulticast mode
[  384.762064][T21477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4127'.
[  384.765795][T21477] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  384.773855][T21482] macsec18: entered promiscuous mode
[  384.775866][T21482] macsec18: entered allmulticast mode
[  385.195577][T21530] lo speed is unknown, defaulting to 1000
[  385.331488][T21537] veth11: entered promiscuous mode
[  388.601190][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  409.407047][T21556] __nla_validate_parse: 2 callbacks suppressed
[  409.407057][T21556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4147'.
[  409.418176][T21559] netlink: 'syz.1.4148': attribute type 13 has an invalid length.
[  409.421795][T21559] netlink: 'syz.1.4148': attribute type 17 has an invalid length.
[  409.452703][T21559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  409.461278][ T5880] lo speed is unknown, defaulting to 1000
[  409.469062][ T5880] syz0: Port: 1 Link ACTIVE
[  409.472938][ T5880] lo speed is unknown, defaulting to 1000
[  409.620226][T21557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4149'.
[  409.660402][T21579] mac80211_hwsim hwsim62 wlan1: entered allmulticast mode
[  409.690744][T21579] netlink: 'syz.1.4153': attribute type 10 has an invalid length.
[  409.712712][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  409.758468][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4156'.
[  409.775337][T21590] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  409.807153][T21593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4158'.
[  409.938444][T21606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4161'.
[  409.946033][T21607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4161'.
[  409.948590][T21609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4162'.
[  409.952433][T21609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4162'.
[  409.984057][T21611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4163'.
[  409.989114][T21611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4163'.
[  410.141281][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  410.667672][T21638] SET target dimension over the limit!
[  410.744562][T21642] xt_hashlimit: size too large, truncated to 1048576
[  411.888150][T21682] 8021q: adding VLAN 0 to HW filter on device bond24
[  412.075834][T21688] netlink: 'syz.2.4185': attribute type 6 has an invalid length.
[  412.079304][T21688] netlink: 'syz.2.4185': attribute type 6 has an invalid length.
[  412.292093][T21700] RDS: rds_bind could not find a transport for ::ffff:172.20.20.25, load rds_tcp or rds_rdma?
[  412.367663][T21704] lo speed is unknown, defaulting to 1000
[  412.607282][T21706] lo speed is unknown, defaulting to 1000
[  412.737164][T21717] bridge_slave_0: left allmulticast mode
[  412.739741][T21717] bridge_slave_0: left promiscuous mode
[  412.743706][T21717] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.749162][T21717] bridge_slave_1: left allmulticast mode
[  412.761657][T21717] bridge_slave_1: left promiscuous mode
[  412.763753][T21717] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.815649][T21717] bond0: (slave bond_slave_0): Releasing backup interface
[  412.820536][T21717] bond0: (slave bond_slave_1): Releasing backup interface
[  412.827236][T21717] team0: Port device team_slave_0 removed
[  412.832370][T21717] team0: Port device team_slave_1 removed
[  412.834974][T21717] batman_adv: batadv0: Removing interface: batadv_slave_1
[  412.838534][T21717] bond1: (slave gretap1): Releasing active interface
[  412.843424][T21717] bond2: (slave gretap2): Releasing active interface
[  412.848847][T21717] bond3: (slave veth3): Releasing active interface
[  412.851746][T21717] bond3: (slave veth3): the permanent HWaddr of slave - 7a:44:4b:6f:1a:76 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  412.857290][T21717] vlan3: entered promiscuous mode
[  412.860331][T21717] bond3: (slave vlan3): Releasing active interface
[  412.863412][T21717] vlan3: left promiscuous mode
[  412.976675][T21717] team0: Mode changed to "activebackup"
[  414.104290][T21781] lo speed is unknown, defaulting to 1000
[  414.147136][T21792] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) !
[  414.201932][ T1118] block nbd0: Possible stuck request ffff888022828000: control (read@0,1024B). Runtime 270 seconds
[  414.205669][ T1118] block nbd0: Possible stuck request ffff888022828200: control (read@1024,1024B). Runtime 270 seconds
[  414.209133][ T1118] block nbd0: Possible stuck request ffff888022828400: control (read@2048,1024B). Runtime 270 seconds
[  414.213656][ T1118] block nbd0: Possible stuck request ffff888022828600: control (read@3072,1024B). Runtime 270 seconds
[  414.263851][T21794] netlink: 'syz.1.4208': attribute type 1 has an invalid length.
[  414.374909][T21799] ipt_REJECT: TCP_RESET invalid for non-tcp
[  414.487140][T21807] sctp: [Deprecated]: syz.1.4212 (pid 21807) Use of int in max_burst socket option.
[  414.487140][T21807] Use struct sctp_assoc_value instead
[  414.637129][T21816] __nla_validate_parse: 13 callbacks suppressed
[  414.637142][T21816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4215'.
[  414.734188][T21827] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  414.835543][T21837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4219'.
[  414.974892][T21843] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4221'.
[  414.982593][T21843] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  414.986424][T21843] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  414.990247][T21843] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  414.995834][T21843] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  415.000638][T21843] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4221'.
[  415.004486][T21843] tipc: Resetting bearer <eth:geneve1>
[  415.008217][T21845] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4222'.
[  415.019797][T21845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4222'.
[  415.111971][T21854] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4226'.
[  415.251629][T21857] netlink: 'syz.2.4227': attribute type 13 has an invalid length.
[  415.255147][T21857] netlink: 'syz.2.4227': attribute type 17 has an invalid length.
[  415.265973][T21857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  415.299842][T21857] lo speed is unknown, defaulting to 1000
[  415.602678][T21861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4228'.
[  415.652775][ T5880] IPVS: starting estimator thread 0...
[  415.741155][T21864] IPVS: using max 53 ests per chain, 127200 per kthread
[  416.233119][T21874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4231'.
[  416.653161][T21905] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4239'.
[  416.664288][T21905] pimreg: entered allmulticast mode
[  416.665733][T21906] netlink: 'syz.0.4236': attribute type 13 has an invalid length.
[  416.668540][T21906] netlink: 'syz.0.4236': attribute type 17 has an invalid length.
[  416.681665][T21906] gretap0: entered promiscuous mode
[  416.690224][T21906] erspan0: left promiscuous mode
[  416.708824][T21906] ip6gretap0: left promiscuous mode
[  416.717604][T21906] bridge0: left promiscuous mode
[  416.722035][T21906] 8021q: adding VLAN 0 to HW filter on device bond0
[  416.726106][T21906] 8021q: adding VLAN 0 to HW filter on device team0
[  416.728750][T21906] dummy0: left promiscuous mode
[  416.732924][T21906] batadv0: left promiscuous mode
[  416.735772][T21906] 8021q: adding VLAN 0 to HW filter on device batadv0
[  416.740471][T21906] veth1: left promiscuous mode
[  416.763893][T21906] veth1_to_batadv: left promiscuous mode
[  416.772166][T21906] veth1_to_hsr: left promiscuous mode
[  416.776238][T21906] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  416.780837][T21906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  416.795073][T21906] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  416.807024][T21906] veth1_vlan: left promiscuous mode
[  416.809917][T21915] netlink: 'syz.2.4240': attribute type 1 has an invalid length.
[  416.813117][T21906] veth0_vlan: left promiscuous mode
[  416.815834][T21906] veth0_vlan: entered promiscuous mode
[  416.821487][T21906] veth1_vlan: entered promiscuous mode
[  416.828716][T21906] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  416.832890][T21906] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  416.836610][T21906] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  416.840278][T21906] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.844192][T21906] geneve1: left promiscuous mode
[  416.846332][T21906] geneve1: left allmulticast mode
[  416.856012][T21906] mac80211_hwsim hwsim60 wlan0: left promiscuous mode
[  416.863857][T21906] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  416.883468][T21906] batadv0: entered promiscuous mode
[  416.886416][T21906] erspan0: entered promiscuous mode
[  416.889387][T21906] dummy0: entered promiscuous mode
[  416.892464][T21906] veth1_to_hsr: entered promiscuous mode
[  416.895567][T21906] bridge0: entered promiscuous mode
[  416.948883][T21906] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode
[  416.952327][T21906] 8021q: adding VLAN 0 to HW filter on device bond1
[  416.961082][T21906] 8021q: adding VLAN 0 to HW filter on device bond2
[  416.969314][T21906] 8021q: adding VLAN 0 to HW filter on device bond3
[  416.975251][T21906] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  416.978062][T21906] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  416.980790][T21906] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  416.983605][T21906] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  416.987345][T21906] ip6gretap0: entered promiscuous mode
[  416.989604][T21906] veth1_to_batadv: entered promiscuous mode
[  416.992436][T21906] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode
[  416.994874][T21906] macsec13: left promiscuous mode
[  416.996709][T21906] macsec13: left allmulticast mode
[  416.998315][T21906] mac80211_hwsim hwsim60 wlan0: left allmulticast mode
[  417.002082][T21906] veth0: entered promiscuous mode
[  417.058590][T21915] 8021q: adding VLAN 0 to HW filter on device bond25
[  417.078614][T21912] bond25: (slave veth11): Enslaving as an active interface with a down link
[  417.086264][T21917] vlan1: entered allmulticast mode
[  417.088146][T21917] veth1: entered allmulticast mode
[  417.565433][T21941] netlink: 'syz.1.4245': attribute type 10 has an invalid length.
[  417.631499][T21945] netlink: 'syz.1.4247': attribute type 1 has an invalid length.
[  417.734551][T21949] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  418.224960][T21998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  418.237275][T21998] syzkaller0: entered promiscuous mode
[  418.239151][T21998] syzkaller0: entered allmulticast mode
[  418.256047][T21998] tipc: Resetting bearer <eth:syzkaller0>
[  418.264592][T21997] tipc: Resetting bearer <eth:syzkaller0>
[  418.300465][T21997] tipc: Disabling bearer <eth:syzkaller0>
[  418.503242][T22028] macsec24: entered promiscuous mode
[  418.505148][T22028] macsec24: entered allmulticast mode
[  418.732385][T22053] lo speed is unknown, defaulting to 1000
[  418.878840][T22059] lo speed is unknown, defaulting to 1000
[  419.026906][T22069] lo speed is unknown, defaulting to 1000
[  419.642298][T22090] pim6reg1: entered promiscuous mode
[  419.644164][T22090] pim6reg1: entered allmulticast mode
[  419.776328][T22092] __nla_validate_parse: 17 callbacks suppressed
[  419.776345][T22092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4285'.
[  419.783324][T22092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4285'.
[  419.867854][T22092] lo speed is unknown, defaulting to 1000
[  419.961130][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  420.121212][T22095] netlink: 'syz.0.4286': attribute type 2 has an invalid length.
[  420.146646][T22095] k*]: entered promiscuous mode
[  420.249586][T22105] macsec19: entered promiscuous mode
[  420.258359][T22105] macsec19: entered allmulticast mode
[  420.278629][T22108] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4288'.
[  420.345447][T22113] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4290'.
[  420.477932][T22121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4294'.
[  420.775812][T22141] netlink: 'syz.2.4301': attribute type 16 has an invalid length.
[  420.779105][T22141] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4301'.
[  420.842590][T22148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4302'.
[  420.894225][T22155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4305'.
[  420.913709][T22155] 8021q: adding VLAN 0 to HW filter on device bond26
[  420.928941][T22157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4304'.
[  420.934048][T22157] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4304'.
[  421.409797][T22183] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  421.409855][T22182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  421.633424][T22192] sit1: entered allmulticast mode
[  421.877957][T22211] x_tables: unsorted underflow at hook 3
[  422.150457][T22237] lo speed is unknown, defaulting to 1000
[  422.584821][T22276] can: request_module (can-proto-0) failed.
[  422.798887][T22290] syzkaller0: entered allmulticast mode
[  422.966485][T22296] netem: unknown loss type 13
[  423.074331][T22308] macsec25: entered promiscuous mode
[  423.076782][T22308] macsec25: entered allmulticast mode
[  423.305843][T22333] netlink: 'syz.1.4350': attribute type 7 has an invalid length.
[  423.404341][T22346] vxcan1: entered allmulticast mode
[  423.734666][T22349] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.738182][T22349] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.743183][T22349] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.747028][T22349] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.840542][T22349] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  423.843818][T22349] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  423.846715][T22349] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  423.849860][T22349] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  424.053290][T22381] sctp: [Deprecated]: syz.0.4363 (pid 22381) Use of int in max_burst socket option deprecated.
[  424.053290][T22381] Use struct sctp_assoc_value instead
[  424.184731][T22393] mac80211_hwsim hwsim61 wlan1: entered allmulticast mode
[  424.481578][T22418] netlink: 'syz.2.4373': attribute type 1 has an invalid length.
[  424.486062][T22418] netlink: 'syz.2.4373': attribute type 4 has an invalid length.
[  424.601472][T22431] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  424.604519][T22431] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  425.020027][T22466] __nla_validate_parse: 32 callbacks suppressed
[  425.020041][T22466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4389'.
[  425.163715][T22480] syzkaller0: entered promiscuous mode
[  425.166165][T22480] syzkaller0: entered allmulticast mode
[  425.221842][T22487] netlink: 'syz.1.4392': attribute type 64 has an invalid length.
[  425.222947][T22482] netlink: 'syz.1.4392': attribute type 64 has an invalid length.
[  425.290433][T22493] netlink: 'syz.2.4394': attribute type 2 has an invalid length.
[  425.299049][T22493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4394'.
[  425.354771][T22495] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4395'.
[  425.358846][T22495] netem: unknown loss type 13
[  425.366613][T22502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  425.565499][T22523] netlink: 'syz.2.4403': attribute type 4 has an invalid length.
[  425.579648][T22523] netlink: 'syz.2.4403': attribute type 4 has an invalid length.
[  425.617459][T22529] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  425.672315][T22536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4407'.
[  425.677693][T22536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4407'.
[  425.684630][T22537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4405'.
[  425.690032][T22537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4405'.
[  425.789011][T22539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4408'.
[  425.801119][T22539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4408'.
[  425.986793][T22552] pim6reg: entered allmulticast mode
[  425.989485][T22545] xt_hashlimit: size too large, truncated to 1048576
[  425.999670][T22552] pim6reg: left allmulticast mode
[  426.040188][T22559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4410'.
[  426.082543][T22568] pim6reg0: tun_chr_ioctl cmd 1074025694
[  426.209519][T22575] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  426.447162][T22592] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  426.453734][T22592] macvlan0: entered promiscuous mode
[  426.456289][T22592] macvlan0: entered allmulticast mode
[  426.458099][T22592] veth1_vlan: entered allmulticast mode
[  426.602858][T22591] tipc: Disabling bearer <eth:syzkaller0>
[  426.685548][T22600] netlink: 'syz.0.4427': attribute type 3 has an invalid length.
[  427.090022][T22622] syz0: rxe_newlink: already configured on lo
[  427.138866][T22625] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  427.450145][T22656] netlink: 'syz.2.4440': attribute type 1 has an invalid length.
[  427.463284][T22656] workqueue: Failed to create a rescuer kthread for wq "bond27": -EINTR
[  427.605551][T22669] xt_TPROXY: Can be used only with -p tcp or -p udp
[  427.839317][T22686] netlink: 'syz.2.4449': attribute type 6 has an invalid length.
[  427.859535][T22686] erspan1: entered promiscuous mode
[  427.862751][T22686] erspan1: entered allmulticast mode
[  427.869818][T22688] netlink: 'syz.2.4449': attribute type 6 has an invalid length.
[  428.309280][T22718] veth1_vlan: left allmulticast mode
[  428.312375][T22718] macvlan0: left promiscuous mode
[  428.314683][T22718] macvlan0: left allmulticast mode
[  428.322535][T22718] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  428.325405][T22718] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  428.331448][T22718] mac80211_hwsim hwsim61 wlan1: left allmulticast mode
[  428.336169][T22718] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  428.343320][T22719] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  428.441807][T22735] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  428.683446][T22760] netlink: 'syz.1.4464': attribute type 6 has an invalid length.
[  429.084840][T22786] netlink: 'syz.1.4472': attribute type 9 has an invalid length.
[  429.146307][T22788] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  429.473455][T22804] syzkaller1: entered promiscuous mode
[  429.475736][T22804] syzkaller1: entered allmulticast mode
[  429.529144][T22808] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  429.568883][T22810] netlink: 'syz.0.4479': attribute type 23 has an invalid length.
[  429.652746][T22817] syzkaller1: entered promiscuous mode
[  429.655119][T22817] syzkaller1: entered allmulticast mode
[  430.082131][T22860] __nla_validate_parse: 30 callbacks suppressed
[  430.082143][T22860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4492'.
[  430.087603][T22860] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  430.090141][T22860] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.623559][T22891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4496'.
[  430.674505][T22895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4497'.
[  430.682844][T22898] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.688724][T22899] netlink: 'syz.2.4498': attribute type 1 has an invalid length.
[  430.697300][T22899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4498'.
[  430.740212][T22902] pimreg: entered allmulticast mode
[  430.817232][T22906] pim6reg1: entered promiscuous mode
[  430.819523][T22906] pim6reg1: entered allmulticast mode
[  430.926265][T22914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4502'.
[  430.932002][T22914] netlink: 'syz.2.4502': attribute type 2 has an invalid length.
[  430.949902][T22910] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4502'.
[  430.954304][T22912] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4500'.
[  430.987001][T22912] 8021q: adding VLAN 0 to HW filter on device bond4
[  430.992267][T22912] team0: Port device bond4 added
[  431.099867][T22923] netlink: 'syz.2.4506': attribute type 14 has an invalid length.
[  431.131799][T22923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4506'.
[  431.151184][ T5839] Bluetooth: hci0: command tx timeout
[  431.172240][T22929] macsec26: entered promiscuous mode
[  431.174090][T22929] bridge0: entered promiscuous mode
[  431.177679][T22929] bridge0: port 1(macsec26) entered blocking state
[  431.180471][T22929] bridge0: port 1(macsec26) entered disabled state
[  431.183786][T22929] macsec26: entered allmulticast mode
[  431.186067][T22929] bridge0: entered allmulticast mode
[  431.190630][T22929] macsec26: left allmulticast mode
[  431.194668][T22929] bridge0: left allmulticast mode
[  431.198006][T22929] bridge0: left promiscuous mode
[  431.220112][   T12] nci: nci_rsp_packet: unknown rsp opcode 0x204
[  431.631170][ T5839] Bluetooth: hci2: command 0x0406 tx timeout
[  431.999369][T22953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4511'.
[  432.126519][T22964] mac80211_hwsim hwsim60 wlan0: left promiscuous mode
[  432.130268][T15419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.135656][T15419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.247768][T22969] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4516'.
[  432.416441][T22988] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  432.776681][T23013] 8021q: adding VLAN 0 to HW filter on device bond11
[  433.439046][T23044] team0: Port device bond4 removed
[  433.446904][T23044] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  433.502975][T23046] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3
[  433.509020][T23046] batman_adv: batadv0: Adding interface: ip6gretap3
[  433.515910][T23046] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  433.526327][T23046] batman_adv: batadv0: Interface activated: ip6gretap3
[  433.797792][T23068] macsec6: entered allmulticast mode
[  433.800308][T23068] macsec0: entered allmulticast mode
[  433.852890][T23077] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode
[  433.856107][T23077] macsec14: entered promiscuous mode
[  433.858598][T23077] macsec14: entered allmulticast mode
[  433.868136][T23077] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode
[  433.993272][T23096] pim6reg1: entered promiscuous mode
[  433.995555][T23096] pim6reg1: entered allmulticast mode
[  434.142706][T23104] syzkaller1: entered promiscuous mode
[  434.147056][T23104] syzkaller1: entered allmulticast mode
[  434.183126][T23107] netlink: 'syz.0.4552': attribute type 13 has an invalid length.
[  434.440176][T23119] xt_CT: You must specify a L4 protocol and not use inversions on it
[  434.605253][T23127] netlink: del zone limit has 4 unknown bytes
[  434.748600][T23140] lo speed is unknown, defaulting to 1000
[  434.974779][T23140] netlink: 'syz.2.4562': attribute type 13 has an invalid length.
[  435.206320][T23158] netdevsim netdevsim0 : renamed from netdevsim0
[  435.372852][T23167] lo speed is unknown, defaulting to 1000
[  435.657165][T23174] __nla_validate_parse: 29 callbacks suppressed
[  435.657176][T23174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4571'.
[  435.663706][T23174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4571'.
[  435.666711][T23174] netlink: 'syz.1.4571': attribute type 14 has an invalid length.
[  435.828082][T23184] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4572'.
[  435.999866][T23200] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4577'.
[  436.015681][T23200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4577'.
[  436.087268][T23208] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4581'.
[  436.317914][T23220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4586'.
[  436.327616][T23220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4586'.
[  436.416746][T23227] lo speed is unknown, defaulting to 1000
[  437.107517][T23271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4597'.
[  437.111683][T23271] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4597'.
[  437.117339][T23271] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  437.168723][T23280] veth4: entered allmulticast mode
[  437.295531][T23289] pimreg3: entered allmulticast mode
[  437.934704][T23340] tipc: Resetting bearer <eth:geneve1>
[  437.946824][T23340] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  437.964647][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  438.039208][T15418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.046997][T15418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.059074][T23344] sctp: [Deprecated]: syz.1.4618 (pid 23344) Use of int in maxseg socket option.
[  438.059074][T23344] Use struct sctp_assoc_value instead
[  438.483614][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  439.048755][T23399] x_tables: duplicate underflow at hook 1
[  439.058526][T23401] x_tables: duplicate underflow at hook 1
[  439.109696][T23404] openvswitch: netlink: Message has 4784 unknown bytes.
[  439.116815][T23404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  439.122637][T23404] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  440.275338][T23469] bridge21: entered promiscuous mode
[  440.277665][T23469] bridge21: entered allmulticast mode
[  440.300141][T23469] team0: Port device bridge21 added
[  440.342241][T23470] lo speed is unknown, defaulting to 1000
[  440.773235][T23499] __nla_validate_parse: 13 callbacks suppressed
[  440.773250][T23499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4659'.
[  440.781176][T23499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4659'.
[  440.910315][T23506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4660'.
[  440.975977][T23503] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4660'.
[  441.310061][T23520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4664'.
[  441.847859][T23529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4666'.
[  441.854008][T23529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4666'.
[  442.033873][T23546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4670'.
[  442.162221][T23551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4671'.
[  442.169520][T23551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4671'.
[  442.276697][T23555] lo: entered promiscuous mode
[  442.316212][T23555] lo: left promiscuous mode
[  442.340144][T23564] tipc: Enabling <ib:lo> not permitted
[  442.353107][T23564] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  442.490020][T23575] xt_CT: You must specify a L4 protocol and not use inversions on it
[  442.637583][T23577] xt_hashlimit: size too large, truncated to 1048576
[  443.071219][ T5839] Bluetooth: hci1: command 0x0405 tx timeout
[  443.443454][T23611] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20002
[  443.614083][T23621] netlink: 'syz.2.4687': attribute type 1 has an invalid length.
[  443.643400][T23621] 8021q: adding VLAN 0 to HW filter on device bond27
[  443.750214][T23631] 8021q: VLANs not supported on ip_vti0
[  443.755170][T23632] 8021q: VLANs not supported on ip_vti0
[  444.008036][T23646] netlink: 'syz.0.4695': attribute type 15 has an invalid length.
[  444.271439][ T1118] block nbd0: Possible stuck request ffff888022828000: control (read@0,1024B). Runtime 300 seconds
[  444.275115][ T1118] block nbd0: Possible stuck request ffff888022828200: control (read@1024,1024B). Runtime 300 seconds
[  444.278787][ T1118] block nbd0: Possible stuck request ffff888022828400: control (read@2048,1024B). Runtime 300 seconds
[  444.283959][ T1118] block nbd0: Possible stuck request ffff888022828600: control (read@3072,1024B). Runtime 300 seconds
[  444.329740][T23666] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  444.333718][T23666] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  444.337373][T23666] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  444.345636][T23666] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  444.450359][T23671] bpq0: entered promiscuous mode
[  444.456337][T23671] bpq0: entered allmulticast mode
[  444.459408][T23671] netlink: 'syz.2.4703': attribute type 1 has an invalid length.
[  445.127677][T23729] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  445.146682][T23731] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  445.181615][T23729] tipc: Resetting bearer <eth:syzkaller0>
[  445.226578][T23729] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  445.241473][T23729] mac80211_hwsim hwsim10 wlan0: left allmulticast mode
[  445.274175][T23729] batman_adv: batadv0: Interface deactivated: ip6gretap3
[  445.292943][T23729] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  445.296932][T23729] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  445.299901][T23729] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  445.303809][T23729] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  445.384232][T23741] netlink: zone id is out of range
[  445.386430][T23741] netlink: zone id is out of range
[  445.392663][T23741] netlink: zone id is out of range
[  445.397801][T23741] netlink: zone id is out of range
[  445.400029][T23741] netlink: zone id is out of range
[  445.402487][T23741] netlink: zone id is out of range
[  445.404639][T23741] netlink: zone id is out of range
[  445.406748][T23741] netlink: zone id is out of range
[  445.583824][T23764] SET target dimension over the limit!
[  445.877161][T23793] __nla_validate_parse: 20 callbacks suppressed
[  445.877175][T23793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4735'.
[  445.964336][T23797] syzkaller1: entered promiscuous mode
[  445.966730][T23797] syzkaller1: entered allmulticast mode
[  446.289717][T23815] netlink: 'syz.2.4742': attribute type 1 has an invalid length.
[  446.295449][T23815] workqueue: Failed to create a rescuer kthread for wq "bond28": -EINTR
[  446.616741][T23833] macsec26: entered promiscuous mode
[  446.625837][T23833] macsec26: entered allmulticast mode
[  446.668131][T23838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4749'.
[  446.743229][T23849] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4750'.
[  446.748234][T23849] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4750'.
[  446.759091][T23849] batadv0: entered promiscuous mode
[  446.761093][T23849] batadv0: entered allmulticast mode
[  446.838013][T23852] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4750'.
[  446.900786][T23857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4752'.
[  447.303715][T23885] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4760'.
[  447.373584][T23893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4762'.
[  447.537968][T23897] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4763'.
[  447.956439][T23905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4765'.
[  448.454816][T23948] macsec23: entered promiscuous mode
[  448.461457][T23948] bridge0: entered promiscuous mode
[  448.466578][T23948] bridge0: port 1(macsec23) entered blocking state
[  448.469793][T23948] bridge0: port 1(macsec23) entered disabled state
[  448.474577][T23948] macsec23: entered allmulticast mode
[  448.477088][T23948] bridge0: entered allmulticast mode
[  448.482030][T23948] macsec23: left allmulticast mode
[  448.484224][T23948] bridge0: left allmulticast mode
[  448.487551][T23948] bridge0: left promiscuous mode
[  448.650735][T23963] netlink: 'syz.1.4780': attribute type 1 has an invalid length.
[  448.715603][T23971] macsec27: entered promiscuous mode
[  448.717894][T23971] macsec27: entered allmulticast mode
[  449.385597][T24016] netlink: 'syz.0.4792': attribute type 4 has an invalid length.
[  449.390355][T24016] netlink: 'syz.0.4792': attribute type 4 has an invalid length.
[  449.500026][T24018] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  449.554690][T24020] netlink: 'syz.2.4794': attribute type 6 has an invalid length.
[  450.040714][T24039] tipc: Resetting bearer <eth:geneve1>
[  450.063792][T24039] team0: Port device bridge21 removed
[  450.081636][ T5880] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  450.190019][T24044] netlink: 'syz.1.4800': attribute type 10 has an invalid length.
[  450.502010][T24073] netlink: 'syz.2.4807': attribute type 13 has an invalid length.
[  450.505111][T24073] netlink: 'syz.2.4807': attribute type 17 has an invalid length.
[  450.551854][T24073] net_ratelimit: 77 callbacks suppressed
[  450.551859][T24073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  450.569909][T24078] macsec28: entered promiscuous mode
[  450.580256][T24078] macsec28: entered allmulticast mode
[  450.603656][T24073] lo speed is unknown, defaulting to 1000
[  450.832785][ T5880] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  450.899112][T24092] __nla_validate_parse: 18 callbacks suppressed
[  450.899121][T24092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4814'.
[  450.973496][T24101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4816'.
[  451.083086][T24108] macsec15: entered promiscuous mode
[  451.085044][T24108] macsec15: entered allmulticast mode
[  451.195271][T24116] netlink: 'syz.1.4822': attribute type 21 has an invalid length.
[  451.270784][T24121] lo speed is unknown, defaulting to 1000
[  451.559364][T24123] lo speed is unknown, defaulting to 1000
[  451.613282][T24148] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4828'.
[  451.923739][T24157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4829'.
[  451.927283][T24157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4829'.
[  451.951694][T24150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4829'.
[  452.365394][T24178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4836'.
[  452.408908][T24180] macsec23: entered promiscuous mode
[  452.410754][T24180] bridge0: entered promiscuous mode
[  452.414857][T24180] bridge0: port 1(macsec23) entered blocking state
[  452.417313][T24180] bridge0: port 1(macsec23) entered disabled state
[  452.419694][T24180] macsec23: entered allmulticast mode
[  452.431087][T24180] bridge0: entered allmulticast mode
[  452.434836][T24180] macsec23: left allmulticast mode
[  452.436664][T24180] bridge0: left allmulticast mode
[  452.441631][T24180] bridge0: left promiscuous mode
[  452.489127][T24183] netlink: 'syz.2.4837': attribute type 5 has an invalid length.
[  452.652476][T24195] netlink: 'syz.2.4841': attribute type 1 has an invalid length.
[  452.810413][T24214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4843'.
[  452.850578][T24213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4843'.
[  452.868560][T24218] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4845'.
[  453.099214][T24244] netlink: 'syz.2.4850': attribute type 11 has an invalid length.
[  453.385349][T24248] ipt_REJECT: TCP_RESET invalid for non-tcp
[  453.503118][T24266] xt_CT: You must specify a L4 protocol and not use inversions on it
[  453.639289][T24271] macsec23: entered promiscuous mode
[  453.647170][T24271] veth0_to_bond: entered promiscuous mode
[  453.649211][T24271] macsec23: entered allmulticast mode
[  453.943880][T24285] netlink: 'syz.0.4863': attribute type 10 has an invalid length.
[  454.056213][T24295] x_tables: unsorted underflow at hook 2
[  454.190493][T24302] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  454.194378][T24302] syzkaller0: entered promiscuous mode
[  454.196871][T24302] syzkaller0: entered allmulticast mode
[  454.229249][T24302] tipc: Resetting bearer <eth:syzkaller0>
[  454.240184][T24302] netlink: 'syz.0.4867': attribute type 1 has an invalid length.
[  454.312647][T24312] batadv_slave_1: entered promiscuous mode
[  454.349422][T24301] tipc: Resetting bearer <eth:syzkaller0>
[  454.373633][T24301] tipc: Disabling bearer <eth:syzkaller0>
[  454.517943][T24331] x_tables: duplicate underflow at hook 1
[  454.648629][T24344] netlink: 'syz.1.4877': attribute type 5 has an invalid length.
[  454.758598][T24350] netlink: 'syz.1.4882': attribute type 1 has an invalid length.
[  454.833927][T24350] veth13: entered promiscuous mode
[  454.844987][T24350] bond23: (slave veth13): Enslaving as a backup interface with a down link
[  454.873402][T24350] 8021q: adding VLAN 0 to HW filter on device bond23
[  455.285717][T24392] 8021q: VLANs not supported on ip6tnl0
[  455.354075][T24393] netlink: 'syz.0.4889': attribute type 14 has an invalid length.
[  455.458177][T24400] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  455.475526][T24400] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  455.481410][T24400] syzkaller0: entered promiscuous mode
[  455.484274][T24400] syzkaller0: entered allmulticast mode
[  455.503538][T24400] tipc: Resetting bearer <eth:syzkaller0>
[  455.509448][T24399] tipc: Resetting bearer <eth:syzkaller0>
[  455.522618][T24399] tipc: Disabling bearer <eth:syzkaller0>
[  455.802426][T24413] sch_fq: defrate 0 ignored.
[  455.950805][T24425] __nla_validate_parse: 16 callbacks suppressed
[  455.950821][T24425] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4898'.
[  455.959322][T24427] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4898'.
[  455.994132][T24432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4897'.
[  456.056422][T24434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4900'.
[  456.176368][T24440] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4902'.
[  456.353164][T24447] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  456.363881][T24447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4903'.
[  456.367529][T24447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4903'.
[  456.511669][T24467] macsec16: entered promiscuous mode
[  456.518639][T24467] macsec16: entered allmulticast mode
[  456.532332][T24470] macsec29: entered promiscuous mode
[  456.534384][T24470] macsec29: entered allmulticast mode
[  456.635028][T24475] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  456.638580][T24476] syzkaller0: entered promiscuous mode
[  456.640828][T24476] syzkaller0: entered allmulticast mode
[  456.646154][T24478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4911'.
[  456.651998][T24475] tipc: Resetting bearer <eth:syzkaller0>
[  456.654143][T24475] syzkaller0: tun_net_xmit 90
[  456.661382][T24474] tipc: Resetting bearer <eth:syzkaller0>
[  456.673263][T24474] tipc: Disabling bearer <eth:syzkaller0>
[  456.777219][T24483] macsec17: entered promiscuous mode
[  456.779230][T24483] macsec17: entered allmulticast mode
[  456.955977][T24496] macsec30: entered promiscuous mode
[  456.960158][T24496] bridge0: entered promiscuous mode
[  456.969001][T24496] bridge0: port 1(macsec30) entered blocking state
[  456.972223][T24496] bridge0: port 1(macsec30) entered disabled state
[  456.975207][T24496] macsec30: entered allmulticast mode
[  456.977817][T24496] bridge0: entered allmulticast mode
[  456.986141][T24496] macsec30: left allmulticast mode
[  456.990197][T24496] bridge0: left allmulticast mode
[  457.000272][T24496] bridge0: left promiscuous mode
[  457.058628][T24501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4919'.
[  457.394541][T24517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4925'.
[  457.574514][T24529] lo speed is unknown, defaulting to 1000
[  457.912626][T24541] netlink: 'syz.0.4930': attribute type 9 has an invalid length.
[  458.088000][T24557] x_tables: duplicate underflow at hook 1
[  458.120366][T24557] x_tables: duplicate underflow at hook 1
[  458.123534][T24557] x_tables: duplicate underflow at hook 1
[  458.125454][T24557] x_tables: duplicate underflow at hook 1
[  458.127314][T24557] x_tables: duplicate underflow at hook 1
[  458.129185][T24557] x_tables: duplicate underflow at hook 1
[  458.131312][T24557] x_tables: duplicate underflow at hook 1
[  458.133448][T24557] x_tables: duplicate underflow at hook 1
[  458.411921][T24583] netlink: 'syz.1.4936': attribute type 12 has an invalid length.
[  458.543105][T24583] netlink: 'syz.1.4936': attribute type 1 has an invalid length.
[  459.180276][T24632] netlink: 'syz.2.4943': attribute type 21 has an invalid length.
[  459.187075][T24632] netlink: 'syz.2.4943': attribute type 5 has an invalid length.
[  459.366787][T24642] syzkaller1: entered promiscuous mode
[  459.368727][T24642] syzkaller1: entered allmulticast mode
[  459.374635][T24642] xt_TCPMSS: Only works on TCP SYN packets
[  459.827516][T24652] 8021q: adding VLAN 0 to HW filter on device bond7
[  459.854618][T24652] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  459.859285][T24652] bond7: (slave macvlan1): Enslaving as a backup interface with a down link
[  459.871510][T24654] tipc: Resetting bearer <eth:geneve1>
[  459.878328][T24654] bond23: (slave veth13): Releasing backup interface
[  459.886543][T24654] bond7: (slave macvlan1): Releasing backup interface
[  459.912596][ T5880] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  460.182868][T24672] netlink: 'syz.0.4952': attribute type 5 has an invalid length.
[  460.188507][T24672] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  460.192079][T24672] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  460.194813][T24672] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  460.197555][T24672] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  460.200448][T24672] geneve0: entered promiscuous mode
[  460.203792][T24672] geneve0: entered allmulticast mode
[  460.698414][T24699] netlink: 'syz.2.4964': attribute type 21 has an invalid length.
[  460.701598][T24699] IPv6: NLM_F_CREATE should be specified when creating new route
[  460.704520][T24699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  460.707605][T24699] IPv6: NLM_F_CREATE should be set when creating new route
[  460.710819][T24699] IPv6: NLM_F_CREATE should be set when creating new route
[  460.714000][T24699] IPv6: NLM_F_CREATE should be set when creating new route
[  460.755846][ T5880] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  460.765561][T24696] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  460.871756][T24712] netlink: 'syz.2.4966': attribute type 21 has an invalid length.
[  461.259890][T24749] __nla_validate_parse: 21 callbacks suppressed
[  461.259906][T24749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4973'.
[  461.387399][T24766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4977'.
[  461.415669][T24759] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4976'.
[  461.484987][T24773] lo speed is unknown, defaulting to 1000
[  461.510579][T24776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4979'.
[  461.581870][T24777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4981'.
[  461.633543][T24778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4981'.
[  461.866841][T24785] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4983'.
[  461.876878][T24785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4983'.
[  462.203152][T24814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4990'.
[  462.206882][T24814] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4990'.
[  462.267784][T24818] netlink: 'syz.2.4991': attribute type 6 has an invalid length.
[  462.278765][T24818] sit0: entered promiscuous mode
[  462.295943][T24818] netlink: 'syz.2.4991': attribute type 1 has an invalid length.
[  462.519609][T24840] netlink: 'syz.0.4996': attribute type 1 has an invalid length.
[  462.557833][T24840] 8021q: adding VLAN 0 to HW filter on device bond6
[  462.623611][T24852] bond6: (slave batadv_slave_1): Enslaving as an active interface with a down link
[  462.836292][T24869] xfrm1: entered promiscuous mode
[  462.838542][T24869] xfrm1: entered allmulticast mode
[  462.919525][T24873] lo speed is unknown, defaulting to 1000
[  463.060861][T24895] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  463.067195][T24897] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  463.092140][T24891] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  463.095368][T24891] tipc: Resetting bearer <eth:syzkaller0>
[  463.110237][T24891] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig
[  463.577050][T24936] macsec19: entered allmulticast mode
[  463.690170][T24941] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  463.693746][T24941] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  463.815504][T24952] wireguard0: entered promiscuous mode
[  463.817551][T24952] wireguard0: entered allmulticast mode
[  464.024653][T24961] delete_channel: no stack
[  464.604041][T25004] netlink: 'syz.2.5036': attribute type 1 has an invalid length.
[  464.639024][T25004] 8021q: adding VLAN 0 to HW filter on device bond29
[  464.654787][T25004] bond29: (slave bridge25): making interface the new active one
[  464.658781][T25004] bond29: (slave bridge25): Enslaving as an active interface with an up link
[  464.676287][T25004] macvlan0: entered promiscuous mode
[  464.678439][T25004] macvlan0: entered allmulticast mode
[  464.682984][T25004] bond29: entered promiscuous mode
[  464.685037][T25004] bridge25: entered promiscuous mode
[  464.687592][T25004] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  464.690465][T25004] bond29: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  464.698561][T25004] bond29: left promiscuous mode
[  464.704307][T25004] bridge25: left promiscuous mode
[  464.833228][T25019] netlink: 'syz.1.5040': attribute type 21 has an invalid length.
[  464.837857][T25019] netlink: 'syz.1.5040': attribute type 3 has an invalid length.
[  465.044869][T25035] batman_adv: batadv0: Adding interface: ip6gretap2
[  465.047237][T25035] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  465.055934][T25035] batman_adv: batadv0: Interface activated: ip6gretap2
[  465.106884][T25050] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  465.163992][T25053] net veth1_virt_wifi : renamed from virt_wifi0
[  465.777698][T25073] netlink: 'syz.1.5054': attribute type 12 has an invalid length.
[  466.702319][T25109] IPVS: length: 209 != 24
[  466.714341][T25109] __nla_validate_parse: 101 callbacks suppressed
[  466.714359][T25109] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5064'.
[  466.769724][T25111] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  467.332328][T25141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5071'.
[  467.338053][T25141] hsr_slave_0: left promiscuous mode
[  467.417065][T25144] lo speed is unknown, defaulting to 1000
[  467.747248][T25161] netlink: 'syz.1.5074': attribute type 1 has an invalid length.
[  467.749981][T25161] netlink: 'syz.1.5074': attribute type 2 has an invalid length.
[  467.753977][T25161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5074'.
[  467.754001][T25163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5075'.
[  467.762685][T25161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5074'.
[  467.980386][T25171] macsec4: entered promiscuous mode
[  467.984096][T25171] bridge0: entered promiscuous mode
[  467.987301][T25171] bridge0: port 1(macsec4) entered blocking state
[  467.990101][T25171] bridge0: port 1(macsec4) entered disabled state
[  467.993761][T25171] macsec4: entered allmulticast mode
[  467.995967][T25171] bridge0: entered allmulticast mode
[  467.999027][T25171] macsec4: left allmulticast mode
[  468.001496][T25171] bridge0: left allmulticast mode
[  468.004256][T25171] bridge0: left promiscuous mode
[  468.028074][T25167] netlink: 'syz.1.5077': attribute type 4 has an invalid length.
[  468.036161][ T5880] lo speed is unknown, defaulting to 1000
[  468.039038][ T5880] syz0: Port: 1 Link DOWN
[  468.041071][ T5880] lo speed is unknown, defaulting to 1000
[  468.045714][T25167] netlink: 'syz.1.5077': attribute type 4 has an invalid length.
[  468.053295][ T5880] lo speed is unknown, defaulting to 1000
[  468.055936][ T5880] syz0: Port: 1 Link ACTIVE
[  468.057921][ T5880] lo speed is unknown, defaulting to 1000
[  468.188219][T25190] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5082'.
[  468.219865][T25192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5084'.
[  468.295804][T25189] nbd: must specify a size in bytes for the device
[  468.428706][T25208] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5087'.
[  468.535936][T25211] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  468.553443][T25211] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  468.651159][T25229] netlink: 'syz.2.5092': attribute type 1 has an invalid length.
[  468.689880][T25229] bond30: (slave vti1): The slave device specified does not support setting the MAC address
[  468.695814][T25229] bond30: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  468.702538][T25229] bond30: (slave vti1): making interface the new active one
[  468.706405][T25229] bond30: (slave vti1): Enslaving as an active interface with an up link
[  468.828842][T25240] netlink: 'syz.1.5094': attribute type 1 has an invalid length.
[  468.886960][T25244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5095'.
[  468.927092][T25251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5097'.
[  469.288555][T25282] lo speed is unknown, defaulting to 1000
[  469.453548][T25298] xt_addrtype: ipv6 does not support BROADCAST matching
[  469.456688][T25297] xt_addrtype: ipv6 does not support BROADCAST matching
[  469.943229][T25323] bond31: entered promiscuous mode
[  469.946195][T25323] 8021q: adding VLAN 0 to HW filter on device bond31
[  470.208138][T25343] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  470.216214][T25331] validate_nla: 1 callbacks suppressed
[  470.216231][T25331] netlink: 'syz.1.5119': attribute type 4 has an invalid length.
[  470.242360][T25345] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.246616][T25343] netlink: 'syz.0.5123': attribute type 11 has an invalid length.
[  470.276058][T25343] macsec21: entered promiscuous mode
[  470.278176][T25343] macsec21: entered allmulticast mode
[  470.452484][T25359] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  470.520275][T25366] lo speed is unknown, defaulting to 1000
[  470.652900][T25377] netlink: 'syz.2.5134': attribute type 1 has an invalid length.
[  470.716803][T25377] bond32: (slave bridge27): Enslaving as a backup interface with an up link
[  470.746232][T25371] sctp: [Deprecated]: syz.1.5131 (pid 25371) Use of int in max_burst socket option.
[  470.746232][T25371] Use struct sctp_assoc_value instead
[  470.768067][T25377] tipc: Resetting bearer <eth:syzkaller0>
[  470.779414][T25377] veth0_to_bond: left promiscuous mode
[  470.783171][T25371] netlink: 'syz.1.5131': attribute type 13 has an invalid length.
[  470.785835][T25371] netlink: 'syz.1.5131': attribute type 17 has an invalid length.
[  470.809685][T25371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  470.897879][T25384] tipc: Resetting bearer <eth:syzkaller0>
[  471.051019][T25391] netlink: 'syz.1.5137': attribute type 10 has an invalid length.
[  471.460303][T25396] netlink: 'syz.2.5139': attribute type 20 has an invalid length.
[  471.466157][T25396] netlink: 'syz.2.5139': attribute type 20 has an invalid length.
[  471.543282][T25403] netlink: 'syz.1.5142': attribute type 4 has an invalid length.
[  471.554157][ T5299] lo speed is unknown, defaulting to 1000
[  471.556951][ T5299] syz0: Port: 1 Link DOWN
[  471.558975][ T5299] lo speed is unknown, defaulting to 1000
[  471.590467][T25405] macsec22: entered promiscuous mode
[  471.600321][T25405] macsec22: entered allmulticast mode
[  471.635254][T25410] bridge0: port 1(veth0_to_bridge) entered blocking state
[  471.638603][T25410] bridge0: port 1(veth0_to_bridge) entered disabled state
[  471.649853][T25410] veth0_to_bridge: entered allmulticast mode
[  471.661166][T25410] veth0_to_bridge: entered promiscuous mode
[  471.809165][T25420] Bluetooth: hci1: Opcode 0x080f failed: -4
[  471.975298][T25437] __nla_validate_parse: 23 callbacks suppressed
[  471.975315][T25437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5150'.
[  471.986461][T25437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5150'.
[  472.183283][T25449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5154'.
[  472.186294][T25449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5154'.
[  472.204404][T25449] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  472.207226][T25449] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  472.210062][T25449] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  472.213239][T25449] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  472.255270][T25456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5156'.
[  472.258119][T25456] netlink: 'syz.0.5156': attribute type 15 has an invalid length.
[  472.261127][T25456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5156'.
[  472.388076][T25467] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5159'.
[  472.603826][T25480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5162'.
[  472.693991][T25494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5162'.
[  472.809393][T25500] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5166'.
[  473.085948][T25511] 8021q: adding VLAN 0 to HW filter on device bond33
[  473.095196][T25511] bond0: (slave bond33): Enslaving as an active interface with an up link
[  473.289898][T25548] macsec23: entered promiscuous mode
[  473.297963][T25548] macsec23: entered allmulticast mode
[  473.763077][T25596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  473.766337][T25596] syzkaller0: entered promiscuous mode
[  473.768479][T25596] syzkaller0: entered allmulticast mode
[  473.793536][T25596] tipc: Resetting bearer <eth:syzkaller0>
[  473.815321][T25599] tun0: tun_chr_ioctl cmd 1074025675
[  473.819118][T25599] tun0: persist enabled
[  473.821805][T25595] tipc: Resetting bearer <eth:syzkaller0>
[  473.836472][T25595] tipc: Disabling bearer <eth:syzkaller0>
[  473.842672][T25599] tun0: tun_chr_ioctl cmd 1074025675
[  473.844924][T25599] tun0: persist enabled
[  473.873933][ T5839] Bluetooth: hci1: command 0x0405 tx timeout
[  474.353069][ T1118] block nbd0: Possible stuck request ffff888022828000: control (read@0,1024B). Runtime 330 seconds
[  474.357670][ T1118] block nbd0: Possible stuck request ffff888022828200: control (read@1024,1024B). Runtime 330 seconds
[  474.362362][ T1118] block nbd0: Possible stuck request ffff888022828400: control (read@2048,1024B). Runtime 330 seconds
[  474.366651][ T1118] block nbd0: Possible stuck request ffff888022828600: control (read@3072,1024B). Runtime 330 seconds
[  474.977766][T25687] tap0: tun_chr_ioctl cmd 1074025677
[  474.980240][T25687] tap0: linktype set to 270
[  475.273434][T25709] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.277333][T25709] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  475.329826][T25709] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.337200][T25709] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  475.375090][T25709] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.383085][T25709] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  475.431807][T25709] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.436096][T25709] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  475.517769][T25709] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  475.520797][T25709] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  475.547624][T25709] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  475.550752][T25709] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  475.563720][T25709] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  475.572130][T25709] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  475.602434][T25709] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  475.605423][T25709] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  475.610170][T25741] pim6reg1: entered promiscuous mode
[  475.618681][T25741] pim6reg1: entered allmulticast mode
[  475.960765][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  476.977750][T25826] validate_nla: 3 callbacks suppressed
[  476.977767][T25826] netlink: 'syz.0.5242': attribute type 3 has an invalid length.
[  476.984911][T25832] netlink: 'syz.1.5244': attribute type 13 has an invalid length.
[  476.995076][T25826] __nla_validate_parse: 63 callbacks suppressed
[  476.995085][T25826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5242'.
[  477.000767][T25832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  477.008127][  T973] lo speed is unknown, defaulting to 1000
[  477.010286][  T973] syz0: Port: 1 Link ACTIVE
[  477.012445][  T973] lo speed is unknown, defaulting to 1000
[  477.135748][T25849] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5245'.
[  477.176923][T25836] vlan1: entered promiscuous mode
[  477.181056][T25836] hsr_slave_1: entered promiscuous mode
[  477.183062][T25836] vlan1: entered allmulticast mode
[  477.233595][T25852] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  477.442895][T25867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5250'.
[  478.173111][T25889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5256'.
[  478.450833][T25908] netlink: 'syz.2.5261': attribute type 5 has an invalid length.
[  478.462804][T25908] netlink: 'syz.2.5261': attribute type 5 has an invalid length.
[  478.528937][T25920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5264'.
[  478.620342][T25922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5265'.
[  478.647436][T25922] 8021q: adding VLAN 0 to HW filter on device bond25
[  478.652218][T25922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5265'.
[  478.655083][T25922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5265'.
[  478.795583][T25944] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  478.822839][T25943] netlink: 'syz.0.5260': attribute type 1 has an invalid length.
[  478.823009][T25944] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  478.860983][T25943] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address
[  478.866172][T25943] bond7: (slave vxcan5): Error -95 calling set_mac_address
[  478.916273][T25955] gretap3: entered promiscuous mode
[  478.919548][T25955] bond7: (slave gretap3): making interface the new active one
[  478.924664][T25955] bond7: (slave gretap3): Enslaving as an active interface with an up link
[  479.117460][T25970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5276'.
[  479.178692][T25974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5277'.
[  479.354106][T25985] netlink: 'syz.0.5281': attribute type 1 has an invalid length.
[  479.411314][T25985] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  479.544950][T26002] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  479.565421][T26002] tipc: Resetting bearer <eth:syzkaller0>
[  479.828685][T26023] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  479.842700][T26023] macsec30: entered promiscuous mode
[  479.844742][T26023] macsec30: entered allmulticast mode
[  480.467604][T26078] netlink: 'syz.2.5307': attribute type 10 has an invalid length.
[  480.813848][T26105] wireguard1: entered promiscuous mode
[  480.816166][T26105] wireguard1: entered allmulticast mode
[  480.878859][T26112] netlink: 'syz.1.5316': attribute type 4 has an invalid length.
[  480.892216][T26111] smc: net device bond0 applied user defined pnetid SYZ2
[  481.148094][T26141] ip6t_srh: unknown srh invflags 4000
[  481.595700][T26194] netlink: 'syz.2.5336': attribute type 13 has an invalid length.
[  481.615253][T26194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  481.664398][T26198] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  481.678434][T26198] tipc: Resetting bearer <eth:syzkaller0>
[  481.780642][T26211] netlink: 'syz.1.5342': attribute type 1 has an invalid length.
[  481.813793][T26211] 8021q: adding VLAN 0 to HW filter on device bond26
[  481.839499][T26210] 8021q: adding VLAN 0 to HW filter on device bond26
[  481.842891][T26210] bond26: (slave vxcan1): The slave device specified does not support setting the MAC address
[  481.848845][T26210] bond26: (slave vxcan1): Error -95 calling set_mac_address
[  482.120245][T26239] __nla_validate_parse: 22 callbacks suppressed
[  482.120254][T26239] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5347'.
[  482.134137][T26244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5348'.
[  482.260021][T26253] netlink: 'syz.2.5350': attribute type 10 has an invalid length.
[  482.263650][T26253] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  482.267936][T26253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5350'.
[  482.280825][T26255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5351'.
[  482.286488][T26255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5351'.
[  482.345393][T26263] veth0_to_bridge: left allmulticast mode
[  482.347475][T26263] veth0_to_bridge: left promiscuous mode
[  482.349437][T26263] bridge0: port 1(veth0_to_bridge) entered disabled state
[  482.355597][T26263] tipc: Resetting bearer <eth:geneve1>
[  482.373733][T26264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5354'.
[  482.382387][  T973] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  482.411392][T26268] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5356'.
[  482.489985][T26273] lo speed is unknown, defaulting to 1000
[  482.677625][T26295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5361'.
[  482.721497][T26298] netlink: 'syz.2.5362': attribute type 1 has an invalid length.
[  482.726477][T26298] workqueue: Failed to create a rescuer kthread for wq "bond34": -EINTR
[  482.866789][T26312] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5366'.
[  482.963817][T26321] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5369'.
[  483.153086][T26332] Cannot find del_set index 3 as target
[  483.397539][  T973] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  483.736921][T26369] xt_hashlimit: size too large, truncated to 1048576
[  483.794972][T26376] openvswitch: netlink: Multiple metadata blocks provided
[  483.872504][T26375] wg2: entered promiscuous mode
[  483.874616][T26375] wg2: entered allmulticast mode
[  483.880285][T26375] syzkaller0: entered promiscuous mode
[  483.884748][T26375] syzkaller0: entered allmulticast mode
[  484.184171][T26400] rdma_op ffff88803b2791f0 conn xmit_rdma 0000000000000000
[  484.512155][T26412] gtp3: entered promiscuous mode
[  484.514194][T26412] gtp3: entered allmulticast mode
[  484.738032][T26420] wg1: left allmulticast mode
[  484.740307][T26420] wg2: left promiscuous mode
[  484.744948][T26420] wg2: left allmulticast mode
[  484.748398][T26420] veth1_to_team: left allmulticast mode
[  484.751493][T26420] tipc: Resetting bearer <eth:geneve1>
[  484.753717][T26420] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  484.756499][T26420] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  484.759187][T26420] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  484.764662][T26420] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  484.768548][T26420] macsec1: left allmulticast mode
[  484.771216][T26420] macsec2: left allmulticast mode
[  484.774710][T26420] macsec4: left allmulticast mode
[  484.777667][T26420] gtp1: left allmulticast mode
[  484.779569][T26420] macsec11: left allmulticast mode
[  484.782504][T26420] macsec12: left allmulticast mode
[  484.784629][T26420] macsec13: left allmulticast mode
[  484.786419][T26420] macsec15: left allmulticast mode
[  484.790790][T26420] gretap2: left allmulticast mode
[  484.792863][T26420] macsec17: left allmulticast mode
[  484.794898][T26420] bond10: left allmulticast mode
[  484.796765][T26420] macsec20: left allmulticast mode
[  484.798462][T26420] macsec21: left allmulticast mode
[  484.801203][T26420] xfrm2: left allmulticast mode
[  484.804000][T26420] macsec9: left allmulticast mode
[  484.805834][T26420] macsec23: left promiscuous mode
[  484.807485][T26420] macsec23: left allmulticast mode
[  484.809466][T26420] macsec7: left promiscuous mode
[  484.812449][T26420] macsec7: left allmulticast mode
[  484.814696][T26420] macsec22: left promiscuous mode
[  484.816411][T26420] macsec22: left allmulticast mode
[  484.818190][T26420] bridge14: left promiscuous mode
[  484.819851][T26420] bridge14: left allmulticast mode
[  484.821963][T26420] ip6gre1: left allmulticast mode
[  484.823841][T26420] erspan1: left promiscuous mode
[  484.825506][T26420] erspan1: left allmulticast mode
[  484.827501][T26420] macsec0: left promiscuous mode
[  484.834597][T26420] macsec6: left promiscuous mode
[  484.836427][T26420] macsec6: left allmulticast mode
[  484.839056][T26420] macsec8: left promiscuous mode
[  484.840650][T26420] macsec8: left allmulticast mode
[  484.845792][T26420] macsec24: left promiscuous mode
[  484.847420][T26420] macsec24: left allmulticast mode
[  484.849859][T26420] macsec25: left promiscuous mode
[  484.851849][T26420] macsec25: left allmulticast mode
[  484.856235][T26420] bridge21: left promiscuous mode
[  484.857841][T26420] bridge21: left allmulticast mode
[  484.859831][T26420] macsec26: left promiscuous mode
[  484.862550][T26420] macsec26: left allmulticast mode
[  484.866952][T26420] macsec27: left promiscuous mode
[  484.868600][T26420] macsec27: left allmulticast mode
[  484.874852][T26420] macsec28: left promiscuous mode
[  484.876544][T26420] macsec28: left allmulticast mode
[  484.880283][T26420] veth13: left promiscuous mode
[  484.883869][T26420] macsec29: left promiscuous mode
[  484.885685][T26420] macsec29: left allmulticast mode
[  484.890054][T26420] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  484.892523][T26420] macsec30: left promiscuous mode
[  484.894323][T26420] macsec30: left allmulticast mode
[  484.901989][T26420] gtp3: left promiscuous mode
[  484.903812][T26420] gtp3: left allmulticast mode
[  484.918161][    T9] lo speed is unknown, defaulting to 1000
[  484.920669][    T9] syz0: Port: 1 Link DOWN
[  484.925080][    T9] lo speed is unknown, defaulting to 1000
[  484.947800][T26428] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  484.950457][T26428] IPv6: NLM_F_CREATE should be set when creating new route
[  484.953412][T26428] IPv6: NLM_F_CREATE should be set when creating new route
[  485.247896][T26451] (unnamed net_device) (uninitialized): option use_carrier: invalid value (24)
[  485.251366][T26451] netlink: 'syz.0.5407': attribute type 8 has an invalid length.
[  485.349350][T26458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  485.982578][T26467] vxcan0: entered promiscuous mode
[  486.097233][T26472] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  486.446478][T26505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  486.487166][T26512] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  486.511622][   T34] INFO: task udevd:8799 blocked for more than 143 seconds.
[  486.514741][   T34]       Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0
[  486.519036][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  486.528542][   T34] task:udevd           state:D stack:21928 pid:8799  tgid:8799  ppid:5281   task_flags:0x400140 flags:0x00004006
[  486.536092][   T34] Call Trace:
[  486.538789][T26517] xt_policy: output policy not valid in PREROUTING and INPUT
[  486.542218][   T34]  <TASK>
[  486.543617][   T34]  __schedule+0x16f5/0x4d00
[  486.545611][   T34]  ? schedule+0x165/0x360
[  486.547465][   T34]  ? __pfx___schedule+0x10/0x10
[  486.549575][   T34]  ? schedule+0x91/0x360
[  486.561510][   T34]  schedule+0x165/0x360
[  486.563551][   T34]  io_schedule+0x80/0xd0
[  486.565369][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  486.567619][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  486.570112][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  486.572876][   T34]  ? __filemap_get_folio+0x760/0xaf0
[  486.575149][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  486.577380][   T34]  do_read_cache_folio+0x1aa/0x590
[  486.579515][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  486.581910][   T34]  read_part_sector+0xb6/0x2b0
[  486.583979][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  486.586159][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  486.588453][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  486.591301][   T34]  bdev_disk_changed+0x75f/0x14b0
[  486.593597][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  486.596010][   T34]  ? wait_on_inode+0xc0/0x230
[  486.598064][   T34]  blkdev_get_whole+0x380/0x510
[  486.600188][   T34]  bdev_open+0x31e/0xd30
[  486.602126][   T34]  blkdev_open+0x3a8/0x510
[  486.604063][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  486.606159][   T34]  do_dentry_open+0xdf3/0x1970
[  486.608155][   T34]  vfs_open+0x3b/0x340
[  486.609850][   T34]  ? path_openat+0x2ecd/0x3830
[  486.612100][   T34]  path_openat+0x2ee5/0x3830
[  486.614045][   T34]  ? arch_stack_walk+0xfc/0x150
[  486.616300][   T34]  ? __pfx_path_openat+0x10/0x10
[  486.618512][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.621258][   T34]  do_filp_open+0x1fa/0x410
[  486.623212][   T34]  ? __lock_acquire+0xab9/0xd20
[  486.625014][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  486.626693][   T34]  ? _raw_spin_unlock+0x28/0x50
[  486.628375][   T34]  ? alloc_fd+0x64c/0x6c0
[  486.630132][   T34]  do_sys_openat2+0x121/0x1c0
[  486.632308][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  486.634671][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  486.636797][   T34]  ? rcu_is_watching+0x15/0xb0
[  486.638836][   T34]  __x64_sys_openat+0x138/0x170
[  486.641274][   T34]  do_syscall_64+0xfa/0x3b0
[  486.643330][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  486.645563][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.648063][   T34]  ? exc_page_fault+0x9f/0xf0
[  486.650062][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.652851][   T34] RIP: 0033:0x7ff43f5169a4
[  486.654768][   T34] RSP: 002b:00007ffc3dcf34c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  486.658299][   T34] RAX: ffffffffffffffda RBX: 0000564e5bf4ec40 RCX: 00007ff43f5169a4
[  486.662070][   T34] RDX: 00000000000a0800 RSI: 0000564e5bf3bce0 RDI: 00000000ffffff9c
[  486.666099][   T34] RBP: 0000564e5bf3bce0 R08: 0000000000000001 R09: 7fffffffffffffff
[  486.669359][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  486.673201][   T34] R13: 0000564e5bf3f910 R14: 0000000000000001 R15: 0000564e5bf28910
[  486.676617][   T34]  </TASK>
[  486.678112][   T34] 
[  486.678112][   T34] Showing all locks held in the system:
[  486.682172][   T34] 1 lock held by rcu_exp_gp_kthr/18:
[  486.684402][   T34]  #0: ffff888136639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  486.688680][   T34] 1 lock held by khungtaskd/34:
[  486.690713][   T34]  #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  486.695152][   T34] 2 locks held by getty/5657:
[  486.697204][   T34]  #0: ffff8880234210a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  486.701706][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  486.705892][   T34] 1 lock held by udevd/8799:
[  486.707814][   T34]  #0: ffff88802272f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  486.713483][   T34] 2 locks held by syz.0.5425/26519:
[  486.715669][   T34]  #0: ffffffff8fa212b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  486.719672][   T34]  #1: ffffffff8e144b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  486.724042][   T34] 
[  486.725133][   T34] =============================================
[  486.725133][   T34] 
[  486.728706][   T34] NMI backtrace for cpu 0
[  486.728718][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  486.728732][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  486.728739][   T34] Call Trace:
[  486.728746][   T34]  <TASK>
[  486.728754][   T34]  dump_stack_lvl+0x189/0x250
[  486.728771][   T34]  ? __wake_up_klogd+0xd9/0x110
[  486.728790][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  486.728804][   T34]  ? __pfx__printk+0x10/0x10
[  486.728829][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  486.728849][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  486.728864][   T34]  ? _printk+0xcf/0x120
[  486.728883][   T34]  ? __pfx__printk+0x10/0x10
[  486.728900][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  486.728914][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  486.728933][   T34]  watchdog+0xfee/0x1030
[  486.728946][   T34]  ? watchdog+0x1de/0x1030
[  486.728963][   T34]  kthread+0x711/0x8a0
[  486.728983][   T34]  ? __pfx_watchdog+0x10/0x10
[  486.728994][   T34]  ? __pfx_kthread+0x10/0x10
[  486.729012][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  486.729031][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  486.729042][   T34]  ? __pfx_kthread+0x10/0x10
[  486.729059][   T34]  ret_from_fork+0x3fc/0x770
[  486.729074][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  486.729097][   T34]  ? __switch_to_asm+0x39/0x70
[  486.729111][   T34]  ? __switch_to_asm+0x33/0x70
[  486.729126][   T34]  ? __pfx_kthread+0x10/0x10
[  486.729143][   T34]  ret_from_fork_asm+0x1a/0x30
[  486.729172][   T34]  </TASK>
[  486.729178][   T34] Sending NMI from CPU 0 to CPUs 1:
[  486.798995][    C1] NMI backtrace for cpu 1
[  486.799011][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  486.799025][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  486.799032][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  486.799049][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 dd 1a 00 f3 0f 1e fa fb f4 <e9> c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  486.799059][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000286
[  486.799070][    C1] RAX: 00475ac2b4726400 RBX: ffffffff81976c78 RCX: 00475ac2b4726400
[  486.799079][    C1] RDX: 0000000000000001 RSI: ffffffff8d99603b RDI: ffffffff8be28c40
[  486.799086][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  486.799100][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa1d5f0
[  486.799108][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110201d6000
[  486.799115][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c26000(0000) knlGS:0000000000000000
[  486.799125][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  486.799133][    C1] CR2: 00007f8d23983178 CR3: 000000011162a000 CR4: 00000000000006f0
[  486.799168][    C1] Call Trace:
[  486.799175][    C1]  <TASK>
[  486.799179][    C1]  default_idle+0x13/0x20
[  486.799194][    C1]  default_idle_call+0x74/0xb0
[  486.799208][    C1]  do_idle+0x1e8/0x510
[  486.799224][    C1]  ? __pfx_do_idle+0x10/0x10
[  486.799244][    C1]  cpu_startup_entry+0x44/0x60
[  486.799257][    C1]  start_secondary+0x101/0x110
[  486.799268][    C1]  common_startup_64+0x13e/0x147
[  486.799289][    C1]  </TASK>
[  486.800059][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  486.871723][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  486.876910][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  486.881546][   T34] Call Trace:
[  486.882901][   T34]  <TASK>
[  486.884129][   T34]  dump_stack_lvl+0x99/0x250
[  486.886066][   T34]  ? __asan_memcpy+0x40/0x70
[  486.888048][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  486.890219][   T34]  ? __pfx__printk+0x10/0x10
[  486.892223][   T34]  panic+0x2db/0x790
[  486.893911][   T34]  ? __pfx_panic+0x10/0x10
[  486.895753][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  486.898274][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  486.900803][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  486.903541][   T34]  watchdog+0x102d/0x1030
[  486.905401][   T34]  ? watchdog+0x1de/0x1030
[  486.907278][   T34]  kthread+0x711/0x8a0
[  486.908978][   T34]  ? __pfx_watchdog+0x10/0x10
[  486.910893][   T34]  ? __pfx_kthread+0x10/0x10
[  486.912804][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  486.914934][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  486.917153][   T34]  ? __pfx_kthread+0x10/0x10
[  486.919164][   T34]  ret_from_fork+0x3fc/0x770
[  486.921180][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  486.923298][   T34]  ? __switch_to_asm+0x39/0x70
[  486.925346][   T34]  ? __switch_to_asm+0x33/0x70
[  486.927532][   T34]  ? __pfx_kthread+0x10/0x10
[  486.929636][   T34]  ret_from_fork_asm+0x1a/0x30
[  486.931739][   T34]  </TASK>
[  486.933889][   T34] Kernel Offset: disabled
[  486.935743][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:54:26  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff888021550237 R9 =1ffff110042aa046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8bb R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000009000 CR3=000000012b6ae000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc005586478 00007fc005586450 XMM03=00007fc005586488 00007fc005586480
XMM04=00007fc0060ed100 00007fc005586440 XMM05=00007fc005586458 00007fc0055864a0
XMM06=00007fc005586498 00007fc005586490 XMM07=00007fc005586488 00007fc005586480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc005411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00475ac2b4726400 RBX=ffffffff81976c78 RCX=00475ac2b4726400 RDX=0000000000000001
RSI=ffffffff8d99603b RDI=ffffffff8be28c40 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1d5f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110201d6000
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000564d572067e8 CR3=000000011162a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=000600000000000b 0005800200140000
XMM02=0208061690030005 00080000224e4002 XMM03=030210000ab00301 9810001003010000
XMM04=08000ae003001000 0ad0030010000ac0 XMM05=0104808080881000 0a80040100000408
XMM06=06060168e0000800 0ae0030010000ad0 XMM07=030010000ac00302 10000ab003019810
XMM08=0010030100000208 0616900300050008 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
