last executing test programs:

1.179566124s ago: executing program 2 (id=5235):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

1.175357908s ago: executing program 2 (id=5237):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @local, 0x4}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

1.101821591s ago: executing program 2 (id=5239):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x138}}, 0x0)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x1, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}], 0x8)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @multicast2}, 0x4, 0x1002, 0x0, 0x2}}, 0x26)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10)

1.101678671s ago: executing program 2 (id=5240):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYRES32=r2], 0x54}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}, {0xfff2}, {0xfff1, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_FD, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0)

924.828048ms ago: executing program 2 (id=5243):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x24000010)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
recvmmsg(r2, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x100, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_USERDATA={0x8, 0xd, 0x1, 0x0, "e771295c"}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x4, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xe6)

830.88235ms ago: executing program 1 (id=5244):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
syz_emit_ethernet(0x22, &(0x7f0000000040)={@remote, @multicast, @val={@void, {0x8100, 0x5, 0x0, 0x2}}, {@can={0xc, {{0x4, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "c18c26d3c45db938"}}}}, &(0x7f00000000c0)={0x0, 0x3, [0xf89, 0x213, 0xd96, 0x21d]})
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x2}, 0x1c)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x3, 0x30, 0x8, 0xd8}, &(0x7f0000000100)=0x18)
socket$igmp(0x2, 0x3, 0x2)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x180, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x0, @in=@multicast2}]}, @mark={0xc, 0x15, {0x0, 0x37}}]}, 0x180}}, 0x0)
socket$kcm(0x2, 0xa, 0x73)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
socket$kcm(0x2, 0xa, 0x73)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40800)

652.164142ms ago: executing program 0 (id=5247):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9}, {0x0, 0xfff1}, {0xe, 0xe}}, [{0x8, 0xb, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), 0xffffffffffffffff)
socket(0x10, 0xa, 0x0) (async)
r5 = socket(0x10, 0xa, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
socket(0x10, 0x803, 0x0) (async)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYRESOCT=r5], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYRESOCT=r5], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0xfffffffa, 0x10, 0xffff}}]}]}}}]}, 0x6c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0xfffffffa, 0x10, 0xffff}}]}]}}}]}, 0x6c}}, 0x0)
sendto$packet(r6, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10)
unshare(0x62040200)
r9 = socket$nl_route(0x10, 0x3, 0x0)
write(r9, &(0x7f00000008c0)="eafbd13a478d7903f90bec54ef029b9fb28c7f9e5acfb9e9d713775cffe34b073f76f096cd9e6c9578b5489676ac25f2cf1c6475a526ef1bbd35c46f0dc345f31444846684e95dd37ab5c70041be662d7a812cadf36c70b9befbbeb3adf1ad8e9ce406e69b53678a2ae7cf5333654bf91b3e8aec31f934cd2ce23e196751f2254415035a1631f673561b772ef816ea0940c12e2d00095693b9425dd077a9fef2e227e07ac48a5062e5ac14eb60fc453ea2550589ec664d373a967a0043bb258708fbb7488908435a30", 0xc9)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000010000000800000008"], 0x48) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000010000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400b1e9d8bb3d00001a0000022dbd7000fddbdf2500000000fbab3ae593d14731ba3ee087780a9028fa447ec8196dc0ee5553457c4cd47b0329e4d9bd9f9ef749f39567321caedd31a152813e15030065070d5dae6fabe5cdd3a116bcdac68bb8e3981b2d99984e9fbb20762948ef4356696647fdfe0ca3a94bdbab7920884990ad81a8312e178a5d72df301b81bfa7031bfdb70fa9fec114026c660ee70843c8fbecd7d32d564b0000000000000f0632a9d3e8af91e283bc89529c8c0f11fc32375c1c32e3ca5293d2258fc959ee1e28a5bf409d14455a64d5cdc59a6d97481ef204b89134d14d8ce3da2adb4b29121a8c39b3ed289f"], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400b1e9d8bb3d00001a0000022dbd7000fddbdf2500000000fbab3ae593d14731ba3ee087780a9028fa447ec8196dc0ee5553457c4cd47b0329e4d9bd9f9ef749f39567321caedd31a152813e15030065070d5dae6fabe5cdd3a116bcdac68bb8e3981b2d99984e9fbb20762948ef4356696647fdfe0ca3a94bdbab7920884990ad81a8312e178a5d72df301b81bfa7031bfdb70fa9fec114026c660ee70843c8fbecd7d32d564b0000000000000f0632a9d3e8af91e283bc89529c8c0f11fc32375c1c32e3ca5293d2258fc959ee1e28a5bf409d14455a64d5cdc59a6d97481ef204b89134d14d8ce3da2adb4b29121a8c39b3ed289f"], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r12 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022cbd7000ffdbdf250a00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x840)

651.490496ms ago: executing program 1 (id=5248):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x24020010}, 0x20044800)

572.139234ms ago: executing program 1 (id=5249):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'gre0\x00'})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'team0\x00', <r0=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000200)=0x5, 0x4) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r5 = socket(0x400000000010, 0x3, 0x0) (async)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@getchain={0x74, 0x66, 0x100, 0x70bd2b, 0x400, {0x0, 0x0, 0x0, r0, {0x9, 0xd}, {0x0, 0xfff0}, {0xe}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0xc2e}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0x201}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xfffffffc}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x96f}, {0x8}, {0x8, 0xb, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x144}, 0x20000800) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000c0000000900000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="002200000000000100000000ff0000200000000000000000b7ce40f9"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r9, 0x0, 0x0}, 0x20) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r10, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})

501.567854ms ago: executing program 0 (id=5250):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000700000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES64=r1], 0x38}}, 0x0)

499.291341ms ago: executing program 1 (id=5251):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, 0x0, 0x0)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x24, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e", 0x0, 0x104, 0x6000000000000000, 0x106, 0x0, &(0x7f0000000400)="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", 0x0}, 0x50)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, 0x0, 0x4000010)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r12, 0x3, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0)
sendmsg$nl_route(r9, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x20000000)
bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)

428.551885ms ago: executing program 0 (id=5252):
epoll_create(0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
accept(r0, &(0x7f0000000180)=@l2tp, &(0x7f0000000200)=0x80)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x3}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x40000)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000003c0)=0x7, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mr_alloc\x00', r1, 0x0, 0x3}, 0x18)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x5a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0x6a, [@dev={0xac, 0x14, 0x14, 0x39}, @broadcast, @multicast2]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$kcm(0xa, 0x2, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e24, 0x3, 'wrr\x00', 0x25, 0x80005, 0x6f}, 0x2c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
readv(r7, 0x0, 0xffffffffffffff31)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@private=0xa010101, 0x4e20, 0x10000, 0xf8}}, 0x44)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
close(r9)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
ioctl$SIOCSIFHWADDR(r9, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="bcff03400200"})
connect$vsock_stream(r5, &(0x7f0000000280), 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x230, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd8, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6847ae2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2528f282}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b177737}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe98bf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x206ae37e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}]}, {0xfffffffffffffd3b, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70e86448}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f39ccd6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x573e3c1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51871617}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c40d60f}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ac79afb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6068c8f0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b5b677f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14aa9319}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3503e160}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xe0, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44287c9d}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd14b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb84b532}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x477615b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x542b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa145}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x340f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa71e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e41670}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38c4cab9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe120}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4cdcc38c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62d09e96}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x250435be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57aa132f}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22232d28}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64078f19}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa173}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5034}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63405a66}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf979}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ca6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d90d521}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x230}, 0x1, 0x0, 0x0, 0x40080}, 0x40800)

321.60432ms ago: executing program 0 (id=5253):
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000180)={0x6, 0x5})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x16, 0x6, 0x3, 0x3}]})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0)
close(r5)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000570000c2000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), r6)
r7 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4}]}, 0x10)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
r10 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_FLOWS={0xc, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8}]}}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0xc8}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x5, 0x9, 0x9, 0x4, 0x1, 0x7, 0x5}}, {0x0, 0x2, [0x5, 0x2, 0x40, 0x0, 0x2, 0x2, 0x4, 0x0, 0x8]}}, {{0x0, 0x1, {0x81, 0x5, 0x9, 0x400, 0x0, 0xfffffff9, 0x6}}, {0x0, 0x2, [0x10, 0x8, 0x3, 0x5, 0x2]}}, {{0x0, 0x1, {0x9f, 0xfa, 0xfff, 0xffff9b67, 0x1, 0x40, 0x2}}, {0x0, 0x2, [0x60, 0x74c, 0x2, 0xfff4, 0x10, 0x8000, 0x7, 0xfff, 0x5]}}, {{0x0, 0x1, {0x3, 0x9, 0xfff9, 0x420, 0x1, 0xfffffff8}}, {0x0, 0x2, [0x9ee, 0x95f2, 0x8]}}, {{0x0, 0x1, {0x1, 0x0, 0x9, 0x80000001, 0x2, 0x6, 0xae24}}, {0x0, 0x2, [0xe650]}}]}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x40, 0x6, 0x2, 0xa, 0x1, 0xfffffffc, 0x7}}, {0x0, 0x2, [0x1, 0x8000, 0x9, 0x6c6c, 0x1000, 0xe, 0x1, 0x2, 0x0]}}, {{0x0, 0x1, {0x8, 0xd2, 0x1, 0x73, 0x1, 0x400, 0x8}}, {0x0, 0x2, [0x10, 0x2, 0x2]}}, {{0x0, 0x1, {0xd, 0x9, 0x4, 0x9, 0x2, 0xeb, 0x5a67}}, {0x0, 0x2, [0x418, 0x6, 0xbc, 0x1, 0x8, 0x1, 0x4, 0x9]}}, {{0x0, 0x1, {0x6, 0xe, 0x4, 0x1, 0x1, 0x5, 0x8}}, {0x0, 0x2, [0x2, 0x9, 0x200]}}, {{0x0, 0x1, {0x7, 0x7f, 0x80, 0x2, 0x1, 0x7, 0x2}}, {0x0, 0x2, [0x1a12]}}]}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x5, 0x3, 0xd, 0x5, 0x0, 0x80, 0x4}}, {0x0, 0x2, [0x401, 0x7]}}, {{0x0, 0x1, {0x8, 0x7, 0x1abc, 0x401, 0x0, 0x7, 0x9}}, {0x0, 0x2, [0x2]}}, {{0x0, 0x1, {0x1, 0x1, 0x80, 0x401, 0x0, 0x3, 0x8}}, {0x0, 0x2, [0xeca]}}]}, @TCA_RATE={0x0, 0x5, {0x2, 0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000ff7f0000006000001700382c00fe80000000000000000000000000e7a9ff0200000000000000000000000000013a"], 0x6e)

321.300955ms ago: executing program 1 (id=5254):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
close(0x4)
r3 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, 0x0, 0x0)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'erspan0\x00'})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00')
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0)
ioctl$sock_SIOCBRDELBR(r6, 0x89a3, &(0x7f0000000200)='bridge0\x00')
listen(0xffffffffffffffff, 0x86a)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904008100000000030000000000000800040006020000", 0x24)
pwrite64(r3, &(0x7f00000002c0)="559e591871203c2fd76aaceb6178a8baed95015b8a3716bfef0edc88b7aadfaa7cddbf62cc07d8ed38afa1a9f29de7927ce016ccff056ed395f7df6593a7a8a1ca02e1513b03978bbdfc6c50ee277a6b521a8e3b4d536ca21381deb28054f41ea2680d11e4b47e5c673873596255edac5367e3156cdacf8ae6007ea23332b6c14180b8f18efe96de65c00accba777f2e30", 0x91, 0xa4d)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25020100800c00f6000000000000000000140001000008000000000000000000000000000050bb"], 0x114}], 0x1}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000070a01080000000019e6000002000000000000000000000000000010"], 0x20}, 0x1, 0x0, 0x0, 0x20009c40}, 0x10004080)

161.752889ms ago: executing program 1 (id=5255):
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
syz_open_procfs$namespace(0x0, 0x0) (async)
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={<r2=>r1, 0x6, 0x91b9, 0x1})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@getlink={0x40, 0x12, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x61080}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_CARRIER={0x5, 0x21, 0x3}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8003}, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x80)
socket$alg(0x26, 0x5, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000f328f7cc3b7958ab347c75f90da6b210dfed8117574f17bf3f05a0d1f7324f6740b14555516191270583fa6a6f60ded8a3beb3cc8161d174bcb4f6736ebd1c130c6195951053731a4303a4de108746543f21dc05e7a8a8e04676670bb7c0b93a455c814a3c13fc86f256bd0727b2ac26bd2a7efdc65e6708f3a087ea8f7624c7effa33f66f4b37e636d3365ef522ef4948af53e1d5d424e50fa2997d566dfe401be875653a19170d"], 0x20}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000f328f7cc3b7958ab347c75f90da6b210dfed8117574f17bf3f05a0d1f7324f6740b14555516191270583fa6a6f60ded8a3beb3cc8161d174bcb4f6736ebd1c130c6195951053731a4303a4de108746543f21dc05e7a8a8e04676670bb7c0b93a455c814a3c13fc86f256bd0727b2ac26bd2a7efdc65e6708f3a087ea8f7624c7effa33f66f4b37e636d3365ef522ef4948af53e1d5d424e50fa2997d566dfe401be875653a19170d"], 0x20}}, 0x0)

91.156578ms ago: executing program 0 (id=5256):
socketpair(0xa, 0xa, 0x8, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x14, 0x1d, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2400085d}, 0x24048040)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x24}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100026bd7000fbdbdf251700000008000300", @ANYRES32=r5, @ANYBLOB="0c00980009a5aa6cc2813cbc7922570000001b000c000a001a0008021100000000000a000600ffffffffffff00000a00060008021100000000000a001a00c053110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4882}, 0x24004880)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fcdbdf25150000006c0002802c00038008000200ca0000000800020009000000080001005f0b0000080001000600000008000200740300003c000380080001009800000008000200dd0a000008000100cd0400000800b0d801800000080001000100000008000100ce99000008000100000100003000058007000100696200002400028008000300010000000800020002000000080001000b000000080004000600000004000580"], 0xb4}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000801)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

771.412µs ago: executing program 2 (id=5257):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x2f8, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "1961a1bd4f6f11d3dd445ec42374fa4248c8494b63"}}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x25f, @empty, 0x7fff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5ab6}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1f41, @local, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}, 0xd136}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x7d, 0x3, "83af4255eee0c88739bce66519605928a20d8a8d13738da0194c21193ade767562fddd4ec1c989f3216d18243d4d06b900361461d6c0bb2e9a07b72f47d31a871b5b30d4430b7abc7adb9ce85aff991349e67b0aeecb2251db91b6b2bac47183d1ee087a7b962f13c9ffdbf1b37aebac07b07597c3c2309422"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5401}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xec9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xee2c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x600}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4f23}]}, @TIPC_NLA_SOCK={0xd4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb88e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4004084}, 0x8004)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5205eeff4dd4d624423e040092e2cb09007e548f31051bae19737f9e2ad9c5e119fd01901186c64ce6b8c2b55ea7109d63567c2b0cf8655895b7fe5269c62103feb3591b05cca3ca411672add1aca074ef1034989bba4e3858b8ffb40a3d0d679e297d5a1826cf1c389248a619e826a2a7847a1bf53ad50fb628ff672b9e178459ea91f097a6efdb806b0833dba1bbb9493b527b0b10270dcb31f2e798b0c7fdcae4f808454f319f8f7ec37fcb94bb701b8e7fbe06cf3e532eda5fad1b23a8550a88aa35fb7f599d5531f1f49416788e56d395bf633db19d3d1f2d85c2e1eb42c7fe44", @ANYRES32=r0, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40800)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115100000000008510000002000000850000008c00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70)
ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"})
bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x3ff}, 0x1c)
ioctl$SIOCNRDECOBS(r0, 0x89e2)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r7, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_fadd={0x58, 0x118, 0x8, {{}, 0x0, 0x0, 0x5c, 0x8, 0x1, 0xfffffffffffffffc, 0x0, 0x20}}, @rdma_dest={0xffffffffffffff28, 0x114, 0x2, {0x1, 0x1}}], 0x70, 0x20000000}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r8)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7c9e16faad4c562f8bc198974d0537cd1040081d8db5bd1e9179180993d14c8515351e45b4a85b55d56a89d60692f66d204249e1e32de8c2cb884fdb5b3538fa9ac575fe163950f4e466d49ed45d31a7777427072bdfe4cd917136d4b89812d98f4460dabd883ac45db2e8581d40c32e89681ece8c173b17449ab6b758ddb129bdd6665b03c8a7c762286e2ff180"], 0x8c}, 0x1, 0xba01}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000001000000500000000000000e919678a00000000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r13, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, 0x0, 0xf}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r11}, &(0x7f0000000500), &(0x7f00000008c0)=r12}, 0x20)

0s ago: executing program 0 (id=5258):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1d}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x8008)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x33, 0x6d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000090)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe8, r1, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x1b, 0x13, [{0x24}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x36, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x16}, {0xb}, {0x60, 0x1}, {0x24}, {}, {0x63, 0x1}, {0x3}, {0x24}, {0x2, 0x1}, {0x60, 0x1}, {0xb, 0x1}, {0x36}, {0x60}, {0x6}, {0x18, 0x1}, {0x18, 0x1}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xfff}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x55b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x6, 0x7, 0x1f1b, 0x8]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x61, 0xbe, "6b1bb1479efb525d9619744d61bbdca03e9d0b396415bbd0cdfb460a481970a1fb866de475a31c5bc1f6fb50510ff2cbe75dac764a9e9cbfa4c01a9ef464e88681b8810e520a2c9c5df6f4881f06c7f7faa961677ad316d27c2faf0735"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xfd2d}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xb4bf}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80000}, 0x200000c0) (async)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe8, r1, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x1b, 0x13, [{0x24}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x36, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x16}, {0xb}, {0x60, 0x1}, {0x24}, {}, {0x63, 0x1}, {0x3}, {0x24}, {0x2, 0x1}, {0x60, 0x1}, {0xb, 0x1}, {0x36}, {0x60}, {0x6}, {0x18, 0x1}, {0x18, 0x1}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xfff}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x55b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x6, 0x7, 0x1f1b, 0x8]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x61, 0xbe, "6b1bb1479efb525d9619744d61bbdca03e9d0b396415bbd0cdfb460a481970a1fb866de475a31c5bc1f6fb50510ff2cbe75dac764a9e9cbfa4c01a9ef464e88681b8810e520a2c9c5df6f4881f06c7f7faa961677ad316d27c2faf0735"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xfd2d}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xb4bf}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80000}, 0x200000c0)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x4) (async)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000540)=<r4=>0x0, &(0x7f0000000580)=0x4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f00000005c0)={'syztnl1\x00', <r5=>0x0, 0x10, 0x7, 0x7, 0xe, {{0x27, 0x4, 0x2, 0x5, 0x9c, 0x66, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xc0, 0x1, 0x6, [{@broadcast, 0x8}, {@remote, 0x6}, {@rand_addr=0x9, 0xa8b2}]}, @rr={0x7, 0xb, 0x4a, [@remote, @multicast2]}, @timestamp={0x44, 0x1c, 0x2a, 0x0, 0x3, [0x7, 0xffff22da, 0x9, 0x2, 0x40, 0x8]}, @rr={0x7, 0x7, 0x4d, [@rand_addr=0x64010101]}, @cipso={0x86, 0x3e, 0xffffffffffffffff, [{0x0, 0xd, "4ae7f0c7f8f5bca3bc0a15"}, {0x6, 0x4, "1639"}, {0x2, 0x12, "e5f7fa62d33c3d66b85c95a58d15fabe"}, {0x1, 0xd, "ee32512ed4e17b372ed1aa"}, {0x7, 0x8, "1f19631dfcb3"}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vcan0\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'syztnl2\x00', <r7=>0x0, 0x4, 0xd, 0xe, 0x7, 0x20, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x80000001, 0xed}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vxcan1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vxcan1\x00', <r8=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'sit0\x00', 0x0, 0x8000, 0x1, 0x2, 0x7fffffff, {{0x10, 0x4, 0x3, 0x31, 0x40, 0x65, 0x0, 0x81, 0x29, 0x0, @loopback, @private=0xa010100, {[@rr={0x7, 0x1f, 0x59, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010102, @loopback, @dev={0xac, 0x14, 0x14, 0x33}, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x14, 0x3, 0x0, [{@private=0xa010100, 0x3}]}, @noop]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'sit0\x00', <r9=>0x0, 0x8000, 0x1, 0x2, 0x7fffffff, {{0x10, 0x4, 0x3, 0x31, 0x40, 0x65, 0x0, 0x81, 0x29, 0x0, @loopback, @private=0xa010100, {[@rr={0x7, 0x1f, 0x59, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010102, @loopback, @dev={0xac, 0x14, 0x14, 0x33}, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x14, 0x3, 0x0, [{@private=0xa010100, 0x3}]}, @noop]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000980)={'sit0\x00', &(0x7f00000008c0)={'syztnl2\x00', <r10=>0x0, 0x8000, 0x8, 0x8, 0x8, {{0x24, 0x4, 0x0, 0x37, 0x90, 0x64, 0x0, 0x2, 0x29, 0x0, @broadcast, @broadcast, {[@generic={0x89, 0x4, '\n '}, @ssrr={0x89, 0xf, 0xe6, [@dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010100, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x54, 0xba, 0x1, 0x7, [{@empty, 0xb9}, {@local, 0x5}, {@multicast2, 0x2}, {@rand_addr=0x64010101, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast1, 0x8000}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@multicast1, 0x232}, {@empty, 0x161}]}, @rr={0x7, 0x13, 0xc, [@multicast1, @remote, @broadcast, @broadcast]}]}}}}})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000b00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1800080}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd4, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x400}, @ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xa4}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc014}, 0x48000)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000b40)=[{0x3, 0x0, {0x0, 0x0, 0x1}, {0x2, 0x0, 0x3}, 0xfd, 0x1}, {0x1, 0x0, {0x2, 0xff, 0x2}, {0x0, 0xff, 0x1}, 0xfd, 0xff}, {0x1, 0x2, {0x2, 0xf0, 0x1}, {0x1, 0xf0, 0x1}, 0xfe}, {0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xfd, 0xff}, {0x1, 0x10, {0x2, 0x1, 0x2}, {0x0, 0x1}, 0x2, 0x2}, {0x3, 0x3, {0x0, 0x0, 0x3}, {0x0, 0xf0, 0x2}, 0xff}, {0x2, 0x0, {0x0, 0x0, 0x1}, {0x1, 0xf0}, 0xfd, 0xff}], 0xe0) (async)
setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000b40)=[{0x3, 0x0, {0x0, 0x0, 0x1}, {0x2, 0x0, 0x3}, 0xfd, 0x1}, {0x1, 0x0, {0x2, 0xff, 0x2}, {0x0, 0xff, 0x1}, 0xfd, 0xff}, {0x1, 0x2, {0x2, 0xf0, 0x1}, {0x1, 0xf0, 0x1}, 0xfe}, {0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xfd, 0xff}, {0x1, 0x10, {0x2, 0x1, 0x2}, {0x0, 0x1}, 0x2, 0x2}, {0x3, 0x3, {0x0, 0x0, 0x3}, {0x0, 0xf0, 0x2}, 0xff}, {0x2, 0x0, {0x0, 0x0, 0x1}, {0x1, 0xf0}, 0xfd, 0xff}], 0xe0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c80)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c80)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x70, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x80000000}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x52c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ed}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x175}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000000}, 0x44)
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e00), r0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r12, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xab}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x40000c0) (async)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r12, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xab}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x40000c0)
r13 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r13, 0x800448d2, &(0x7f00000011c0)={0x4, &(0x7f0000000f40)=[{@fixed}, {@none}, {@none}, {@none}]}) (async)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r13, 0x800448d2, &(0x7f00000011c0)={0x4, &(0x7f0000000f40)=[{@fixed}, {@none}, {@none}, {@none}]})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
r14 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCGIFBR(r14, 0x8940, &(0x7f0000001200)=@generic={0x0, 0x4, 0x5})
r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000001280), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001380)={&(0x7f0000001240), 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x44, r15, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040000}, 0x20040000) (async)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001380)={&(0x7f0000001240), 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x44, r15, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040000}, 0x20040000)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000013c0), 0x2)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000001400)={0x4, {{0x2, 0x4e24, @remote}}}, 0x88)

kernel console output (not intermixed with test programs):

 block 0, async page read
[  317.507446][T11377] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.511224][T11377] Buffer I/O error on dev nbd0, logical block 1, async page read
[  317.514648][T11377] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.520058][T11377] Buffer I/O error on dev nbd0, logical block 2, async page read
[  317.523362][T11377] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.527337][T11377] Buffer I/O error on dev nbd0, logical block 3, async page read
[  317.530820][T11377] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.534537][T11377] Buffer I/O error on dev nbd0, logical block 0, async page read
[  317.548366][T11377] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.560031][T11377] Buffer I/O error on dev nbd0, logical block 1, async page read
[  317.565326][T11377] ldm_validate_partition_table(): Disk read failed.
[  317.587363][T11377] Dev nbd0: unable to read RDB block 0
[  317.591305][T11377]  nbd0: unable to read partition table
[  317.610346][T11377] ldm_validate_partition_table(): Disk read failed.
[  317.628163][T11377] Dev nbd0: unable to read RDB block 0
[  317.632153][T11377]  nbd0: unable to read partition table
[  317.752355][T18940] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3708'.
[  317.769494][T18940] bond0 (unregistering): left allmulticast mode
[  317.772100][T18940] bond0 (unregistering): left promiscuous mode
[  317.774660][T18940] bridge0: port 1(bond0) entered disabled state
[  317.779354][T18940] bond0 (unregistering): Released all slaves
[  317.799358][T18945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3711'.
[  317.840352][T18951] netlink: 'syz.0.3712': attribute type 2 has an invalid length.
[  317.878798][T18951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3712'.
[  317.889703][T18951] veth0_to_team: entered promiscuous mode
[  317.892233][T18951] veth0_to_team: entered allmulticast mode
[  317.896569][T18948] wg1 speed is unknown, defaulting to 1000
[  317.899432][T18948] lo speed is unknown, defaulting to 1000
[  318.033153][T18960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3715'.
[  318.087487][T18960] pim6reg: entered allmulticast mode
[  318.098123][T18968] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  318.157280][T18971] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  318.200180][T18977] netlink: 'syz.0.3719': attribute type 1 has an invalid length.
[  318.241094][T18977] bond57: (slave bridge25): making interface the new active one
[  318.244079][T18977] bond57: (slave bridge25): Enslaving as an active interface with an up link
[  318.923834][T19013] IPVS: length: 24 != 12312
[  319.094021][T19022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3733'.
[  319.102142][T19022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3733'.
[  319.105120][T19022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3733'.
[  319.454407][T19037] netlink: 'syz.0.3737': attribute type 12 has an invalid length.
[  319.908843][T19078] netlink: 'syz.2.3748': attribute type 9 has an invalid length.
[  319.919361][T19078] team0: left allmulticast mode
[  320.064350][T19083] wg1 speed is unknown, defaulting to 1000
[  320.099721][T19082] netlink: 'syz.0.3749': attribute type 3 has an invalid length.
[  320.100365][T19083] lo speed is unknown, defaulting to 1000
[  320.103554][T19084] wg1 speed is unknown, defaulting to 1000
[  320.121445][T19084] lo speed is unknown, defaulting to 1000
[  320.129860][T19088] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.500193][T19101] smc: net device bond0 applied user defined pnetid SYZ2
[  320.503064][T19101] smc: net device bond0 erased user defined pnetid SYZ2
[  320.548927][T19113] netlink: 'syz.0.3759': attribute type 1 has an invalid length.
[  320.559270][T19111] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  320.572436][T19115] netlink: 'syz.1.3760': attribute type 42 has an invalid length.
[  320.583040][T19111] bond0: (slave batadv0): Releasing backup interface
[  320.623942][T19111] veth0_to_bond: left allmulticast mode
[  320.639795][T19111] veth0_to_bond: left promiscuous mode
[  320.646974][T19111] bridge14: port 2(veth0_to_bond) entered disabled state
[  320.659454][T19111] bond0: (slave macvlan0): Releasing backup interface
[  320.666891][T19111] batman_adv: batadv0: Removing interface: ip6gretap0
[  320.671399][T19111] bond18: (slave geneve0): Releasing active interface
[  320.676685][T19111] bond19: (slave bridge13): Releasing backup interface
[  320.680259][T19111] bridge13: left promiscuous mode
[  320.682505][T19111] bridge13: left allmulticast mode
[  320.685531][T19111] veth11: left allmulticast mode
[  320.690051][T19111] veth11: left promiscuous mode
[  320.691843][T19111] bridge14: port 1(veth11) entered disabled state
[  320.696932][T19111] vlan3: left promiscuous mode
[  320.699671][T19111] veth1: left promiscuous mode
[  320.702124][T19111] bridge14: port 3(vlan3) entered disabled state
[  320.725186][T19111] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  320.736443][T19111] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  320.767487][T19126] syzkaller1: entered promiscuous mode
[  320.769341][T19126] syzkaller1: entered allmulticast mode
[  321.112260][T19140] syzkaller0: mtu less than device minimum
[  321.122328][T19140] syzkaller0: left promiscuous mode
[  321.131602][T19140] syzkaller0: left allmulticast mode
[  321.136345][T19140] tipc: Resetting bearer <eth:syzkaller0>
[  321.139204][T19140] tipc: Resetting bearer <eth:syzkaller0>
[  321.244670][T19146] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  321.272151][T19146] netlink: 'syz.1.3767': attribute type 6 has an invalid length.
[  321.275515][T19146] IPv6: NLM_F_CREATE should be specified when creating new route
[  321.714780][T19160] wg1 speed is unknown, defaulting to 1000
[  321.720406][T19160] lo speed is unknown, defaulting to 1000
[  321.772770][T19163] __nla_validate_parse: 108 callbacks suppressed
[  321.772784][T19163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3770'.
[  321.812899][T19163] bond0: entered promiscuous mode
[  321.816840][T19163] bond0: left promiscuous mode
[  321.871434][T19167] sctp: [Deprecated]: syz.0.3772 (pid 19167) Use of int in max_burst socket option deprecated.
[  321.871434][T19167] Use struct sctp_assoc_value instead
[  321.909449][T19167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3772'.
[  321.923090][T19164] wg1 speed is unknown, defaulting to 1000
[  321.930812][T19164] lo speed is unknown, defaulting to 1000
[  321.999432][T19170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3773'.
[  322.425720][T19178] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.470823][T19178] 8021q: adding VLAN 0 to HW filter on device team0
[  322.512467][T19178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  322.546854][T19183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  322.580805][T19185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3778'.
[  322.673887][T19190] netlink: 'syz.2.3780': attribute type 39 has an invalid length.
[  322.769701][T19192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3781'.
[  322.773729][   T10] IPVS: starting estimator thread 0...
[  322.777864][T19192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3781'.
[  322.838648][T19199] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3782'.
[  322.849855][T19199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3782'.
[  322.860853][T19199] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  322.864015][T19199] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  322.866433][T19197] IPVS: using max 53 ests per chain, 127200 per kthread
[  322.906761][T19200] netlink: 'syz.2.3782': attribute type 10 has an invalid length.
[  323.026864][T19204] team0: Mode changed to "activebackup"
[  323.032697][T19204] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3784'.
[  323.060973][T19209] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3785'.
[  323.828819][T19236] netlink: 'syz.1.3793': attribute type 1 has an invalid length.
[  323.855039][T19236] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address
[  323.859314][T19236] bond0: (slave vxcan1): Error -95 calling set_mac_address
[  323.998546][T19246] netlink: 'syz.0.3797': attribute type 1 has an invalid length.
[  324.151362][T19258] netlink: 'syz.1.3796': attribute type 8 has an invalid length.
[  324.818678][T19260] tipc: Resetting bearer <eth:syzkaller0>
[  324.822144][T19260] bond16: (slave veth27): Releasing backup interface
[  324.829222][T19260] bond25: (slave veth29): Releasing backup interface
[  324.852555][T19260] netlink: 'syz.1.3800': attribute type 10 has an invalid length.
[  324.907283][T19262] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  324.911270][T19262] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  324.958024][T19265] netlink: 'syz.1.3801': attribute type 10 has an invalid length.
[  325.145950][T19269] veth13: entered promiscuous mode
[  325.865101][T19278] netlink: 'syz.1.3805': attribute type 3 has an invalid length.
[  325.900216][T19280] netlink: 'syz.2.3806': attribute type 1 has an invalid length.
[  325.905490][T19280] workqueue: Failed to create a rescuer kthread for wq "bond22": -EINTR
[  326.078698][T19298] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  326.330210][T19307] netlink: 'syz.1.3813': attribute type 13 has an invalid length.
[  326.430502][T19313] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.450237][T19309] tipc: Resetting bearer <eth:syzkaller0>
[  326.595960][T19318] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.600303][T19318] syzkaller0: entered promiscuous mode
[  326.602633][T19318] syzkaller0: entered allmulticast mode
[  326.605207][T19318] tipc: Resetting bearer <eth:syzkaller0>
[  327.448707][T19357] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  327.452435][T19357] syzkaller0: entered promiscuous mode
[  327.454875][T19357] syzkaller0: entered allmulticast mode
[  327.609913][T19367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  327.616242][ T6069] lo speed is unknown, defaulting to 1000
[  327.618759][ T6069] syz2: Port: 1 Link ACTIVE
[  327.627975][T19367] __nla_validate_parse: 13 callbacks suppressed
[  327.627990][T19367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3832'.
[  327.685002][T19367] wg1 speed is unknown, defaulting to 1000
[  327.707166][T19367] lo speed is unknown, defaulting to 1000
[  327.771021][T19374] wg1 speed is unknown, defaulting to 1000
[  327.781833][T19374] lo speed is unknown, defaulting to 1000
[  328.024884][T19383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3835'.
[  328.369424][T19388] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3837'.
[  328.528893][T19392] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  328.758776][T19396] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  328.876516][T19403] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3843'.
[  328.881805][T19403] nbd: must specify a size in bytes for the device
[  329.079278][T19424] syzkaller1: entered promiscuous mode
[  329.081850][T19424] syzkaller1: entered allmulticast mode
[  329.181010][T19428] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3850'.
[  329.197199][T19428] validate_nla: 45 callbacks suppressed
[  329.197213][T19428] netlink: 'syz.1.3850': attribute type 1 has an invalid length.
[  329.219047][T19428] 8021q: adding VLAN 0 to HW filter on device bond26
[  329.229157][T19428] veth31: entered promiscuous mode
[  329.233690][T19428] bond26: (slave veth31): Enslaving as a backup interface with a down link
[  329.239622][T19428] tipc: Resetting bearer <eth:syzkaller0>
[  329.242633][T19428] bond26: (slave veth31): Releasing backup interface
[  329.338917][T19439] netlink: 'syz.1.3854': attribute type 3 has an invalid length.
[  329.383754][T19433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3851'.
[  329.406745][T19442] pimreg: left allmulticast mode
[  329.458438][T19444] siw: device registration error -23
[  329.462725][T19433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3851'.
[  330.080966][T19446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3855'.
[  330.217486][T19452] netlink: 'syz.2.3858': attribute type 4 has an invalid length.
[  330.225639][T19454] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3859'.
[  330.294130][T19461] netlink: 'syz.1.3860': attribute type 1 has an invalid length.
[  330.302877][T19461] bond1: (slave vcan2): The slave device specified does not support setting the MAC address
[  330.307802][T19461] bond1: (slave vcan2): Error -95 calling set_mac_address
[  330.315122][T19462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.356197][T19461] bond1: (slave vcan2): The slave device specified does not support setting the MAC address
[  330.361078][T19461] bond1: (slave vcan2): Error -95 calling set_mac_address
[  330.377029][T19465] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3861'.
[  331.181221][T19485] netlink: 'syz.1.3866': attribute type 1 has an invalid length.
[  331.725429][T19503] netlink: 'syz.2.3873': attribute type 8 has an invalid length.
[  332.639083][T19572] __nla_validate_parse: 1 callbacks suppressed
[  332.639094][T19572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3892'.
[  332.660332][T19572] 8021q: adding VLAN 0 to HW filter on device bond22
[  332.839009][T19589] siw: device registration error -23
[  332.854596][T19590] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3897'.
[  332.871563][T19590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3897'.
[  332.882137][T19591] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3897'.
[  332.886051][T19591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3897'.
[  332.909856][T19589] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  332.917198][T19589] veth0_to_bridge: entered promiscuous mode
[  332.919408][T19589] veth0_to_bridge: entered allmulticast mode
[  332.986595][T19593] vti1: entered promiscuous mode
[  333.028153][T19593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3898'.
[  333.035132][T19593] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3898'.
[  333.360947][T19601] openvswitch: netlink: IP tunnel dst address not specified
[  333.365374][T19601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3901'.
[  333.377958][T19603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3900'.
[  333.388188][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  333.391033][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  333.394375][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  333.397706][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  333.401101][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  333.404414][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  333.407900][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  333.411202][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  333.414593][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  333.417986][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  333.421217][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  333.424433][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  333.427912][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  333.431233][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  333.434599][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  333.438011][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  333.441420][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  333.444794][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  333.445083][ T5703] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  333.448196][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  333.448215][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  333.448263][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  333.448271][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  333.448316][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  333.448324][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  333.841910][T19611] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3902'.
[  333.845713][T19611] netlink: 'syz.2.3902': attribute type 5 has an invalid length.
[  333.893319][T19611] wg1 speed is unknown, defaulting to 1000
[  333.896969][T19611] lo speed is unknown, defaulting to 1000
[  334.389219][T19625] syzkaller1: entered allmulticast mode
[  334.477747][T19627] siw: device registration error -23
[  334.867636][T19647] batadv4: entered promiscuous mode
[  334.869822][T19647] batadv4: entered allmulticast mode
[  335.471945][T19672] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  335.619227][T19676] tipc: Enabled bearer <eth:gre0>, priority 10
[  335.764534][T19687] wg1 speed is unknown, defaulting to 1000
[  335.773130][T19687] lo speed is unknown, defaulting to 1000
[  336.113521][T19697] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  336.117789][T19698] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  336.128440][T19698] tc_dump_action: action bad kind
[  336.130973][T19697] tc_dump_action: action bad kind
[  336.287108][T19700] wg1 speed is unknown, defaulting to 1000
[  336.291346][T19700] lo speed is unknown, defaulting to 1000
[  336.474789][T19713] sctp: [Deprecated]: syz.1.3928 (pid 19713) Use of int in max_burst socket option deprecated.
[  336.474789][T19713] Use struct sctp_assoc_value instead
[  336.649180][T19725] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  336.882626][T19744] openvswitch: netlink: Key type 248 is out of range max 32
[  336.955316][T19747] gretap9: entered promiscuous mode
[  337.289685][T19765] netlink: 'syz.1.3942': attribute type 21 has an invalid length.
[  337.495691][T19771] netlink: 'syz.2.3945': attribute type 4 has an invalid length.
[  337.503037][T19771] netlink: 'syz.2.3945': attribute type 4 has an invalid length.
[  337.535185][T19775] netlink: 'syz.2.3946': attribute type 6 has an invalid length.
[  337.631817][T19782] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.657513][T19782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.752759][T19784] netlink: 'syz.2.3948': attribute type 10 has an invalid length.
[  337.756297][T19785] netlink: 'syz.2.3948': attribute type 10 has an invalid length.
[  337.762744][T19788] __nla_validate_parse: 26 callbacks suppressed
[  337.762753][T19788] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3949'.
[  337.831818][T19796] netlink: 'syz.2.3950': attribute type 2 has an invalid length.
[  337.893406][T19807] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3954'.
[  337.920908][T19813] netlink: 'syz.2.3952': attribute type 2 has an invalid length.
[  337.961893][T19815] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3955'.
[  337.974116][T19815] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  337.977816][ T1118] block nbd1: Possible stuck request ffff888043398000: control (read@0,1024B). Runtime 30 seconds
[  337.981830][ T1118] block nbd1: Possible stuck request ffff888043398200: control (read@1024,1024B). Runtime 30 seconds
[  337.986518][T19815] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  337.990375][ T1118] block nbd1: Possible stuck request ffff888043398400: control (read@2048,1024B). Runtime 30 seconds
[  337.997409][ T1118] block nbd1: Possible stuck request ffff888043398600: control (read@3072,1024B). Runtime 30 seconds
[  338.027969][T19822] netlink: 'syz.0.3955': attribute type 10 has an invalid length.
[  338.035661][T19823] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3957'.
[  338.040670][T19823] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3957'.
[  338.050607][T19823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3957'.
[  338.822617][T19845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3963'.
[  338.853512][T19847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3964'.
[  338.863390][T19848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3964'.
[  338.872697][T19847] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3964'.
[  339.244865][T19873] wg1 speed is unknown, defaulting to 1000
[  339.249657][T19873] lo speed is unknown, defaulting to 1000
[  339.562986][T19883] wg1 speed is unknown, defaulting to 1000
[  339.568201][T19883] lo speed is unknown, defaulting to 1000
[  340.246600][T19932] netlink: 'syz.0.3983': attribute type 1 has an invalid length.
[  340.283282][T19935] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20001
[  340.312803][   T34] audit: type=1800 audit(1756742831.242:7): pid=19941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3985" name="memory.events" dev="tmpfs" ino=6397 res=0 errno=0
[  340.335680][   T34] audit: type=1804 audit(1756742831.242:8): pid=19941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3985" name="/newroot/1251/memory.events" dev="tmpfs" ino=6397 res=1 errno=0
[  340.353172][T19944] vxcan1: entered allmulticast mode
[  340.541382][T19957] wg1 speed is unknown, defaulting to 1000
[  340.545351][T19957] lo speed is unknown, defaulting to 1000
[  341.308898][T19975] tipc: Resetting bearer <eth:ipvlan1>
[  341.553094][T19986] batman_adv: batadv0: Adding interface: ip6gretap3
[  341.558017][T19986] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  341.569028][T19986] batman_adv: batadv0: Interface activated: ip6gretap3
[  342.070240][T20013] pim6reg: left allmulticast mode
[  342.314551][T20016] validate_nla: 2 callbacks suppressed
[  342.314565][T20016] netlink: 'syz.2.4006': attribute type 39 has an invalid length.
[  342.446571][T20020] netlink: 'syz.0.4008': attribute type 1 has an invalid length.
[  342.598666][T20033] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  342.717879][T20052] 8021q: adding VLAN 0 to HW filter on device bond1
[  342.729282][T20052] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  342.734102][T20052] bond1: (slave macvlan0): Enslaving as a backup interface with a down link
[  342.743281][T20052] tipc: Resetting bearer <eth:gre0>
[  342.746304][T20052] tipc: Resetting bearer <eth:syzkaller0>
[  342.751946][T20052] batman_adv: batadv0: Interface deactivated: ip6gretap3
[  342.754931][T20052] batman_adv: batadv0: Removing interface: ip6gretap3
[  342.771475][T20052] bond1: (slave macvlan0): Releasing backup interface
[  342.784761][T20053] __nla_validate_parse: 23 callbacks suppressed
[  342.784776][T20053] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4016'.
[  342.786265][T20055] netlink: 'syz.0.4017': attribute type 13 has an invalid length.
[  342.794311][T20055] netlink: 'syz.0.4017': attribute type 17 has an invalid length.
[  342.827469][T20055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  342.915558][T20055] wg1 speed is unknown, defaulting to 1000
[  342.947770][T20055] lo speed is unknown, defaulting to 1000
[  343.029449][T20072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4021'.
[  343.040350][T20061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  343.043166][T20061] IPv6: NLM_F_CREATE should be set when creating new route
[  343.046094][T20061] IPv6: NLM_F_CREATE should be set when creating new route
[  343.062919][T20061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  343.226167][T20079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4024'.
[  343.234544][T20081] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4025'.
[  343.376930][T20091] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20003
[  343.585680][T20110] netlink: 'syz.2.4031': attribute type 2 has an invalid length.
[  343.739068][T20128] netlink: 184624 bytes leftover after parsing attributes in process `syz.2.4036'.
[  343.754218][T20128] openvswitch: netlink: Message has 5 unknown bytes.
[  343.807985][T20128] netlink: 184624 bytes leftover after parsing attributes in process `syz.2.4036'.
[  343.811827][T20128] openvswitch: netlink: Message has 5 unknown bytes.
[  343.814948][T20128] netlink: 184624 bytes leftover after parsing attributes in process `syz.2.4036'.
[  343.824812][T20128] openvswitch: netlink: Message has 5 unknown bytes.
[  343.842037][T20136] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4037'.
[  343.850287][T20136] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4037'.
[  343.854133][T20136] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  343.878140][T20134] wg1 speed is unknown, defaulting to 1000
[  343.880822][T20134] lo speed is unknown, defaulting to 1000
[  343.938045][T20140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4039'.
[  343.944536][T20142] netlink: 'syz.2.4038': attribute type 1 has an invalid length.
[  343.964928][T20140] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  343.971193][T20140] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  343.976034][T20140] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  344.007562][   T34] audit: type=1800 audit(1756742834.942:9): pid=20146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4039" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=6325 res=0 errno=0
[  344.207090][T20157] netlink: 'syz.0.4043': attribute type 10 has an invalid length.
[  344.212438][T20157] team0: Port device hsr_slave_0 added
[  344.282174][T20161] batadv_slave_0: entered promiscuous mode
[  344.464648][T20177] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  344.557055][T20182] tc_dump_action: action bad kind
[  344.601828][T20190] netlink: 'syz.0.4054': attribute type 14 has an invalid length.
[  344.604505][T20190] netlink: 'syz.0.4054': attribute type 13 has an invalid length.
[  344.807203][T20201] wg1 speed is unknown, defaulting to 1000
[  344.810433][T20201] lo speed is unknown, defaulting to 1000
[  344.932979][T20211] IPVS: Unknown mcast interface: vcan0
[  345.169233][T20231] netlink: 'syz.1.4064': attribute type 1 has an invalid length.
[  345.421696][T20250] syzkaller1: entered promiscuous mode
[  345.424593][T20250] syzkaller1: entered allmulticast mode
[  345.599753][T20268] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  345.621683][T20268] bond0: (slave 0!): Releasing backup interface
[  345.653409][T20268] team0: Port device hsr_slave_0 removed
[  345.666827][T20268] bond0: (slave macvlan0): Releasing backup interface
[  345.693135][T20268] bond18: (slave bridge15): Releasing active interface
[  345.700621][T20268] bond19: (slave ip6gretap3): Removing an active aggregator
[  345.704844][T20268] bond19: (slave ip6gretap3): Releasing backup interface
[  345.710212][T20268] bond22: (slave bond23): Releasing backup interface
[  345.714885][T20268] bond24: (slave gretap4): Releasing active interface
[  345.728891][T20268] vlan4: left promiscuous mode
[  345.730933][T20268] bridge0: left promiscuous mode
[  345.733211][T20268] bridge23: port 1(vlan4) entered disabled state
[  345.742055][T20268] bond57: (slave bridge25): Releasing active interface
[  345.767342][T20268] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  345.770424][T20268] bond0: (slave wlan1): refused to change device type
[  345.781015][T20268] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  345.790497][T20268] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  346.001481][T20290] wg1 speed is unknown, defaulting to 1000
[  346.004461][T20290] lo speed is unknown, defaulting to 1000
[  346.057894][T20292] wg1 speed is unknown, defaulting to 1000
[  346.062615][T20292] lo speed is unknown, defaulting to 1000
[  346.653880][T20311] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  346.795575][T20316] netem: change failed
[  346.901760][T20331] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR
[  346.963193][T20338] veth0_to_bridge: left promiscuous mode
[  346.975254][T20338] batadv_slave_0: left promiscuous mode
[  346.980242][T20338] macvlan0: left promiscuous mode
[  346.987781][T20338] tipc: Resetting bearer <eth:ipvlan1>
[  346.990453][T20338] tipc: Resetting bearer <eth:ipvlan1>
[  346.993273][T20338] syzkaller0: left promiscuous mode
[  347.005681][T20338] bond19: left promiscuous mode
[  347.017813][T20338] gretap5: left promiscuous mode
[  347.021884][T20341] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  347.133453][T20350] dvmrp0: entered allmulticast mode
[  347.141749][T20350] ipvlan3: entered promiscuous mode
[  347.217082][T20357] sit4: entered promiscuous mode
[  347.318323][T20361] wg1 speed is unknown, defaulting to 1000
[  347.322465][T20361] lo speed is unknown, defaulting to 1000
[  347.511664][T20365] xt_limit: Overflow, try lower: 271964/0
[  347.622500][T20374] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  347.793138][T20383] validate_nla: 6 callbacks suppressed
[  347.793148][T20383] netlink: 'syz.0.4102': attribute type 3 has an invalid length.
[  347.890669][T20387] __nla_validate_parse: 25 callbacks suppressed
[  347.890679][T20387] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4104'.
[  347.938144][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4105'.
[  348.014868][T20400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4106'.
[  348.097617][T20411] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4108'.
[  348.117458][T20411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4108'.
[  348.305304][T20435] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4115'.
[  348.409242][T20449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4119'.
[  348.477185][T20456] openvswitch: netlink: IPv6 tunnel dst address is zero
[  348.650142][T20467] netlink: 'syz.2.4124': attribute type 1 has an invalid length.
[  348.663323][T20465] netlink: 'syz.2.4124': attribute type 1 has an invalid length.
[  348.692527][T20465] bond25: (slave vxcan7): The slave device specified does not support setting the MAC address
[  348.699433][T20465] bond25: (slave vxcan7): Error -95 calling set_mac_address
[  348.718491][T20467] bond25: (slave vxcan7): The slave device specified does not support setting the MAC address
[  348.723164][T20467] bond25: (slave vxcan7): Error -95 calling set_mac_address
[  348.788895][T20462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4123'.
[  348.849843][T20475] vlan5: entered promiscuous mode
[  348.852122][T20475] !: entered promiscuous mode
[  348.876859][T20478] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4126'.
[  348.880726][T20478] openvswitch: netlink: Flow actions attr not present in new flow.
[  348.889614][T20478] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4126'.
[  349.149037][T20502] wg1 speed is unknown, defaulting to 1000
[  349.154713][T20506] netlink: 'syz.2.4135': attribute type 10 has an invalid length.
[  349.155216][T20502] lo speed is unknown, defaulting to 1000
[  349.166164][T20506] !: entered promiscuous mode
[  349.169055][T20506] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  349.269464][T20511] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  349.273467][T20511] syzkaller0: entered promiscuous mode
[  349.435154][ T5873] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  349.444191][ T5873] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  349.454851][ T5873] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  349.466656][ T5873] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  349.485412][T20517] netlink: 'syz.2.4139': attribute type 14 has an invalid length.
[  349.494971][T20517] netlink: 'syz.2.4139': attribute type 13 has an invalid length.
[  349.573037][T20519] bridge22: entered promiscuous mode
[  349.575590][T20519] bridge22: entered allmulticast mode
[  349.586291][T20519] team0: Port device bridge22 added
[  349.953289][T20537] bridge0: failed insert local address into bridge forwarding table
[  350.052537][T20537] wg1 speed is unknown, defaulting to 1000
[  350.068227][T20537] lo speed is unknown, defaulting to 1000
[  350.299125][T20544] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  350.363000][T20544] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  350.410786][T20544] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  350.490728][T20544] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  350.540446][ T5910] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  350.550474][ T5910] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  350.561833][ T5910] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  350.576678][ T5910] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  350.792976][T20552] netlink: 'syz.1.4148': attribute type 1 has an invalid length.
[  350.799968][T20552] netlink: 'syz.1.4148': attribute type 1 has an invalid length.
[  350.834899][T20557] netlink: 'syz.1.4150': attribute type 2 has an invalid length.
[  350.844572][T20557] netlink: 'syz.1.4150': attribute type 2 has an invalid length.
[  350.922553][T20568] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  351.173954][T20581] syzkaller1: entered allmulticast mode
[  352.281736][T20620] macvlan0: entered promiscuous mode
[  352.290550][T20620] bond0: (slave macvlan0): Enslaving as an active interface with a down link
[  352.436598][T20626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.586361][T20628] openvswitch: netlink: Missing key (keys=40, expected=80)
[  352.913408][T20658] validate_nla: 2 callbacks suppressed
[  352.913417][T20658] netlink: 'syz.1.4176': attribute type 7 has an invalid length.
[  352.918882][T20658] __nla_validate_parse: 20 callbacks suppressed
[  352.918893][T20658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4176'.
[  352.984175][T20662] netlink: 'syz.1.4178': attribute type 9 has an invalid length.
[  353.051176][T20670] tipc: Resetting bearer <eth:syzkaller0>
[  353.144459][T20680] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4182'.
[  353.258116][T20696] IPVS: Error connecting to the multicast addr
[  353.263510][T20696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4187'.
[  353.388399][T20701] netlink: 'syz.1.4186': attribute type 11 has an invalid length.
[  353.396605][T20701] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4186'.
[  353.430930][T20713] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4193'.
[  353.436782][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4193'.
[  353.441414][T20713] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  353.445612][T20713] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  353.661095][T20734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4196'.
[  353.664110][T20734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4196'.
[  353.668699][T20734] netlink: 'syz.2.4196': attribute type 7 has an invalid length.
[  353.716428][T20736] wg1 speed is unknown, defaulting to 1000
[  353.719194][T20736] lo speed is unknown, defaulting to 1000
[  354.366850][T20750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4201'.
[  354.464094][T20755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4202'.
[  354.601728][T20757] wg1 speed is unknown, defaulting to 1000
[  354.611629][T20757] lo speed is unknown, defaulting to 1000
[  354.673967][T20764] pimreg: entered allmulticast mode
[  354.690686][T20766] netlink: 'syz.2.4206': attribute type 1 has an invalid length.
[  354.878699][T20771] netlink: 'syz.2.4207': attribute type 1 has an invalid length.
[  354.935187][T20771] 8021q: adding VLAN 0 to HW filter on device bond26
[  354.978385][T20775] team0: Device gtp2 is up. Set it down before adding it as a team port
[  355.017227][T20780] netlink: 'syz.1.4208': attribute type 6 has an invalid length.
[  355.053829][T20780] bond28: entered promiscuous mode
[  355.385007][T20821] netlink: 'syz.2.4220': attribute type 1 has an invalid length.
[  355.750470][T20834] syzkaller0: left promiscuous mode
[  355.752581][T20834] syzkaller0: left allmulticast mode
[  356.068348][T20859] netlink: 'syz.0.4230': attribute type 1 has an invalid length.
[  356.074390][T20859] bond9: (slave vcan1): The slave device specified does not support setting the MAC address
[  356.083761][T20859] bond9: (slave vcan1): making interface the new active one
[  356.090158][T20859] bond9: (slave vcan1): Enslaving as an active interface with an up link
[  356.162423][T20859] 8021q: adding VLAN 0 to HW filter on device bond9
[  356.299589][T20878] bridge27: port 1(veth0_to_bond) entered blocking state
[  356.302104][T20878] bridge27: port 1(veth0_to_bond) entered disabled state
[  356.304558][T20878] veth0_to_bond: entered allmulticast mode
[  356.308464][T20878] veth0_to_bond: entered promiscuous mode
[  356.518415][T20895] netlink: 'syz.0.4241': attribute type 1 has an invalid length.
[  356.526814][T20893] syzkaller1: entered promiscuous mode
[  356.528796][T20893] syzkaller1: entered allmulticast mode
[  356.534930][T20895] NCSI netlink: No device for ifindex 246
[  356.652306][T20900] openvswitch: netlink: Flow actions attr not present in new flow.
[  356.744379][T20898] 8021q: adding VLAN 0 to HW filter on device bond61
[  356.969689][T20926] geneve4: entered promiscuous mode
[  356.972019][T20926] geneve4: entered allmulticast mode
[  356.999621][ T5873] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  357.008483][ T5873] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  357.011992][ T5873] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  357.026786][ T5873] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  357.204082][T20944] netem: change failed
[  357.224207][T20948] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  357.228444][T20948] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  357.471075][T20976] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  358.089090][T20987] pimreg: left allmulticast mode
[  358.123827][T20992] validate_nla: 20 callbacks suppressed
[  358.123842][T20992] netlink: 'syz.2.4268': attribute type 16 has an invalid length.
[  358.132386][T20992] netlink: 'syz.2.4268': attribute type 17 has an invalid length.
[  358.154829][T20992] gretap0: entered promiscuous mode
[  358.197513][T20992] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.201871][T20992] 8021q: adding VLAN 0 to HW filter on device team0
[  358.208081][T20992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  358.234997][T20988] bond62: entered promiscuous mode
[  358.242358][T20988] bond62: entered allmulticast mode
[  358.247653][T20988] 8021q: adding VLAN 0 to HW filter on device bond62
[  358.252152][T20987] workqueue: Failed to create a rescuer kthread for wq "bond63": -EINTR
[  358.270954][T21002] __nla_validate_parse: 48 callbacks suppressed
[  358.270966][T21002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4271'.
[  358.368078][T21013] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4274'.
[  358.579928][T21025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4277'.
[  358.624815][T21027] netlink: 'syz.1.4278': attribute type 1 has an invalid length.
[  358.633638][T21027] workqueue: Failed to create a rescuer kthread for wq "bond29": -EINTR
[  358.673917][T21033] vlan5: entered promiscuous mode
[  358.681320][T21033] gretap0: entered promiscuous mode
[  358.743725][T21035] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4280'.
[  358.756263][T21035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4280'.
[  358.760632][T21035] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4280'.
[  358.801651][T21039] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  358.974248][T21057] wg1 speed is unknown, defaulting to 1000
[  358.981183][T21057] lo speed is unknown, defaulting to 1000
[  359.088914][T21073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4288'.
[  359.106993][T21073] bridge28: entered promiscuous mode
[  359.108805][T21073] bridge28: entered allmulticast mode
[  359.116317][T21073] team0: Port device bridge28 added
[  360.160801][T21101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4293'.
[  360.175685][T21101] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4293'.
[  360.261839][T21094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4293'.
[  360.509029][T21119] netlink: 'syz.0.4298': attribute type 10 has an invalid length.
[  360.515649][T21119] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  360.586337][T21115] block nbd0: server does not support multiple connections per device.
[  360.591379][T21115] block nbd0: shutting down sockets
[  360.711966][T21131] wg1 speed is unknown, defaulting to 1000
[  360.716978][T21131] lo speed is unknown, defaulting to 1000
[  360.777521][ T5910] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[  360.803441][T21133] tipc: Resetting bearer <eth:gre0>
[  360.830174][T21133] tipc: Resetting bearer <eth:syzkaller0>
[  360.910825][  T793] lo speed is unknown, defaulting to 1000
[  360.912775][  T793] syz2: Port: 1 Link DOWN
[  360.920269][T21135] netlink: 'syz.2.4301': attribute type 13 has an invalid length.
[  360.923496][T21135] netlink: 'syz.2.4301': attribute type 17 has an invalid length.
[  361.004114][T21135] !: left promiscuous mode
[  361.011017][T21135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  361.026241][ T5910] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  361.029312][ T5910] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  361.032763][ T5910] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  361.043727][ T5910] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  361.244411][T21158] vlan6: entered allmulticast mode
[  361.250782][T21158] bond63: entered allmulticast mode
[  361.358705][T21173] netlink: 'syz.2.4313': attribute type 13 has an invalid length.
[  361.361333][T21173] netlink: 'syz.2.4313': attribute type 11 has an invalid length.
[  361.442752][T21180] netlink: 'syz.0.4314': attribute type 1 has an invalid length.
[  361.456516][T21180] block nbd0: Unsupported socket: shutdown callout must be supported.
[  361.575456][T21196] veth0_to_bridge: left allmulticast mode
[  361.583130][T21196] macvlan0: left promiscuous mode
[  361.599139][T21196] tipc: Resetting bearer <eth:ipvlan1>
[  361.612108][T21196] tipc: Resetting bearer <eth:syzkaller0>
[  361.615912][T21196] syzkaller0: left promiscuous mode
[  361.617704][T21196] syzkaller0: left allmulticast mode
[  361.640935][T21196] bond19: left allmulticast mode
[  361.654068][T21196] vlan3: left allmulticast mode
[  361.656713][T21196] veth1: left allmulticast mode
[  361.675653][T21196] ipvlan3: left promiscuous mode
[  361.682289][T21196] sit4: left promiscuous mode
[  361.686967][T21196] bridge22: left promiscuous mode
[  361.688946][T21196] bridge22: left allmulticast mode
[  361.718253][ T5703] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  361.727073][ T5703] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  361.737285][ T5703] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  361.746355][ T5703] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  361.968937][T21234] netlink: 'syz.1.4325': attribute type 10 has an invalid length.
[  362.144214][T21238] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  362.152679][T21241] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  362.158915][T21241] CPU: 1 UID: 0 PID: 21241 Comm: syz.0.4329 Not tainted syzkaller #0 PREEMPT(full) 
[  362.158928][T21241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  362.158933][T21241] Call Trace:
[  362.158936][T21241]  <TASK>
[  362.158940][T21241]  dump_stack_lvl+0x189/0x250
[  362.158954][T21241]  ? __pfx_dump_stack_lvl+0x10/0x10
[  362.158963][T21241]  ? __pfx__printk+0x10/0x10
[  362.158975][T21241]  ? kernfs_path_from_node+0x2f/0x290
[  362.158984][T21241]  ? kernfs_path_from_node+0x250/0x290
[  362.158992][T21241]  ? kernfs_path_from_node+0x2f/0x290
[  362.159001][T21241]  sysfs_warn_dup+0x8e/0xa0
[  362.159009][T21241]  sysfs_do_create_link_sd+0xc0/0x110
[  362.159019][T21241]  device_add_class_symlinks+0x1cf/0x240
[  362.159030][T21241]  device_add+0x475/0xb50
[  362.159040][T21241]  wiphy_register+0x1ba6/0x28d0
[  362.159056][T21241]  ? __pfx_wiphy_register+0x10/0x10
[  362.159062][T21241]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  362.159076][T21241]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  362.159087][T21241]  ieee80211_register_hw+0x3425/0x4080
[  362.159103][T21241]  ? ieee80211_register_hw+0x1431/0x4080
[  362.159116][T21241]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  362.159127][T21241]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  362.159142][T21241]  ? __hrtimer_setup+0x187/0x210
[  362.159149][T21241]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  362.159161][T21241]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  362.159207][T21241]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  362.159219][T21241]  ? trace_kmalloc+0x1f/0xd0
[  362.159233][T21241]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  362.159243][T21241]  ? kstrndup+0xbf/0x160
[  362.159255][T21241]  hwsim_new_radio_nl+0xea4/0x1b10
[  362.159267][T21241]  ? __pfx___nla_validate_parse+0x10/0x10
[  362.159284][T21241]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  362.159299][T21241]  ? __nla_parse+0x40/0x60
[  362.159313][T21241]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  362.159326][T21241]  genl_family_rcv_msg_doit+0x215/0x300
[  362.159338][T21241]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  362.159352][T21241]  ? bpf_lsm_capable+0x9/0x20
[  362.159361][T21241]  ? security_capable+0x7e/0x2e0
[  362.159373][T21241]  genl_rcv_msg+0x60e/0x790
[  362.159384][T21241]  ? __pfx_genl_rcv_msg+0x10/0x10
[  362.159393][T21241]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  362.159407][T21241]  netlink_rcv_skb+0x208/0x470
[  362.159413][T21241]  ? __lock_acquire+0xab9/0xd20
[  362.159423][T21241]  ? __pfx_genl_rcv_msg+0x10/0x10
[  362.159432][T21241]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  362.159446][T21241]  ? down_read+0x1ad/0x2e0
[  362.159455][T21241]  genl_rcv+0x28/0x40
[  362.159462][T21241]  netlink_unicast+0x82f/0x9e0
[  362.159476][T21241]  ? __pfx_netlink_unicast+0x10/0x10
[  362.159486][T21241]  ? netlink_sendmsg+0x642/0xb30
[  362.159492][T21241]  ? skb_put+0x11b/0x210
[  362.159500][T21241]  netlink_sendmsg+0x805/0xb30
[  362.159511][T21241]  ? __pfx_netlink_sendmsg+0x10/0x10
[  362.159519][T21241]  ? aa_sock_msg_perm+0xf1/0x1d0
[  362.159527][T21241]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  362.159534][T21241]  ? __pfx_netlink_sendmsg+0x10/0x10
[  362.159540][T21241]  __sock_sendmsg+0x21c/0x270
[  362.159552][T21241]  ____sys_sendmsg+0x505/0x830
[  362.159564][T21241]  ? __pfx_____sys_sendmsg+0x10/0x10
[  362.159575][T21241]  ? import_iovec+0x74/0xa0
[  362.159585][T21241]  ___sys_sendmsg+0x21f/0x2a0
[  362.159594][T21241]  ? __pfx____sys_sendmsg+0x10/0x10
[  362.159617][T21241]  ? __fget_files+0x2a/0x420
[  362.159623][T21241]  ? __fget_files+0x3a0/0x420
[  362.159634][T21241]  __x64_sys_sendmsg+0x19b/0x260
[  362.159643][T21241]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  362.159655][T21241]  ? rcu_is_watching+0x15/0xb0
[  362.159664][T21241]  ? do_syscall_64+0xbe/0x3b0
[  362.159673][T21241]  do_syscall_64+0xfa/0x3b0
[  362.159679][T21241]  ? lockdep_hardirqs_on+0x9c/0x150
[  362.159686][T21241]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.159693][T21241]  ? exc_page_fault+0x9f/0xf0
[  362.159700][T21241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.159706][T21241] RIP: 0033:0x7fbb5358ebe9
[  362.159714][T21241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  362.159720][T21241] RSP: 002b:00007fbb54481038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  362.159729][T21241] RAX: ffffffffffffffda RBX: 00007fbb537c5fa0 RCX: 00007fbb5358ebe9
[  362.159734][T21241] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  362.159738][T21241] RBP: 00007fbb53611e19 R08: 0000000000000000 R09: 0000000000000000
[  362.159742][T21241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  362.159746][T21241] R13: 00007fbb537c6038 R14: 00007fbb537c5fa0 R15: 00007fff7b6572b8
[  362.159779][T21241]  </TASK>
[  362.469934][T21246] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.968646][T21272] batadv34: entered promiscuous mode
[  362.970990][T21272] batadv34: entered allmulticast mode
[  362.990246][   T34] audit: type=1800 audit(1756742853.922:10): pid=21274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4338" name="freezer.self_freezing" dev="tmpfs" ino=6817 res=0 errno=0
[  363.004232][   T34] audit: type=1800 audit(1756742853.932:11): pid=21274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4338" name="freezer.self_freezing" dev="tmpfs" ino=6817 res=0 errno=0
[  363.331774][T21291] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  363.437391][T21290] tipc: Resetting bearer <eth:syzkaller0>
[  363.504676][T21302] __nla_validate_parse: 26 callbacks suppressed
[  363.504693][T21302] netlink: 316 bytes leftover after parsing attributes in process `syz.2.4343'.
[  363.625147][T21309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4344'.
[  363.738430][T21320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4348'.
[  363.741616][T21320] validate_nla: 5 callbacks suppressed
[  363.741625][T21320] netlink: 'syz.1.4348': attribute type 29 has an invalid length.
[  363.748545][T21320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4348'.
[  363.812589][T21327] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4350'.
[  363.930375][T21339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4351'.
[  363.941557][T21339] netlink: 'syz.2.4351': attribute type 5 has an invalid length.
[  363.945835][T21339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4351'.
[  363.961460][T21339] geneve4: entered promiscuous mode
[  363.963847][T21339] geneve4: entered allmulticast mode
[  363.971616][ T5703] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  363.975324][ T5703] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  363.984127][ T5703] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  363.987072][ T5703] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  364.133401][T21352] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.4356'.
[  364.138130][T21352] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  364.141449][T21352] openvswitch: netlink: Duplicate key (type 0).
[  364.253735][T21363] netlink: 'syz.0.4360': attribute type 58 has an invalid length.
[  364.267780][T21363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4360'.
[  364.338469][T21378] netlink: 'syz.1.4361': attribute type 1 has an invalid length.
[  364.341662][T21378] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.4361'.
[  364.351220][T21378] netlink: 'syz.1.4361': attribute type 1 has an invalid length.
[  364.444372][T21392] openvswitch: netlink: Actions may not be safe on all matching packets
[  364.528909][T21397] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[  364.718759][T21405] wg1 speed is unknown, defaulting to 1000
[  364.728523][T21405] lo speed is unknown, defaulting to 1000
[  365.267769][T21419] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.285057][T21419] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  365.380611][T21419] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.395111][T21419] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  365.474621][T21419] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.486527][T21419] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  365.549486][T21419] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.553469][T21419] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  365.608253][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  365.611882][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  365.629074][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  365.632122][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  365.644050][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  365.648819][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  365.658261][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  365.661012][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  366.077802][T21428] tipc: Failed to remove unknown binding: 66,1,1/2388641203:2627622717/2627622719
[  366.082670][T21428] tipc: Failed to remove unknown binding: 66,1,1/2388641203:2627622717/2627622719
[  366.086972][T21428] tipc: Failed to remove unknown binding: 66,1,1/2388641203:2627622717/2627622719
[  366.110113][T21428] syzkaller0: Caught tx_queue_len zero misconfig
[  366.489741][T21454] netlink: 'syz.1.4377': attribute type 3 has an invalid length.
[  367.443177][T21479] netlink: 'syz.1.4385': attribute type 1 has an invalid length.
[  367.548871][T21483] veth0: entered promiscuous mode
[  368.054673][ T1118] block nbd1: Possible stuck request ffff888043398000: control (read@0,1024B). Runtime 60 seconds
[  368.059568][ T1118] block nbd1: Possible stuck request ffff888043398200: control (read@1024,1024B). Runtime 60 seconds
[  368.063950][ T1118] block nbd1: Possible stuck request ffff888043398400: control (read@2048,1024B). Runtime 60 seconds
[  368.068778][ T1118] block nbd1: Possible stuck request ffff888043398600: control (read@3072,1024B). Runtime 60 seconds
[  368.290848][T21498] wg1 speed is unknown, defaulting to 1000
[  368.294848][T21498] lo speed is unknown, defaulting to 1000
[  368.323586][T21481] veth0: left promiscuous mode
[  368.340558][T21500] netlink: 'syz.1.4393': attribute type 20 has an invalid length.
[  368.344472][T21500] netlink: 'syz.1.4393': attribute type 20 has an invalid length.
[  368.682666][T21511] __nla_validate_parse: 18 callbacks suppressed
[  368.682676][T21511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4398'.
[  368.770461][T21515] netlink: 'syz.0.4400': attribute type 4 has an invalid length.
[  368.872619][T21519] siw: device registration error -23
[  368.879806][T21519] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4402'.
[  368.883554][T21519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4402'.
[  368.895513][T21519] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  368.902051][T21519] veth0_to_bridge: entered promiscuous mode
[  368.904043][T21519] veth0_to_bridge: entered allmulticast mode
[  368.911412][T21519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4402'.
[  368.967314][T21521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4403'.
[  368.971333][T21521] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  368.974629][T21521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4403'.
[  369.013911][T21526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4404'.
[  369.019312][T21526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4404'.
[  369.057247][T21528] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  369.076503][T21528] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4405'.
[  369.222666][T21537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4409'.
[  369.610641][T21564] RDS: rds_bind could not find a transport for ::ffff:0.0.0.6, load rds_tcp or rds_rdma?
[  369.616729][T21564] team0: entered promiscuous mode
[  369.628397][T21564] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  369.694303][T21570] netlink: 'syz.1.4422': attribute type 10 has an invalid length.
[  369.698330][T21571] netlink: 'syz.1.4422': attribute type 10 has an invalid length.
[  369.716640][T21570] 8021q: adding VLAN 0 to HW filter on device bond1
[  369.720092][T21570] bond1: option mode: unable to set because the bond device is up
[  369.745925][T21570] bond1: option mode: unable to set because the bond device is up
[  369.764632][T21570] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  369.770390][T21570] bond1: (slave macvlan1): Enslaving as a backup interface with a down link
[  369.779275][T21576] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  369.783209][T21576] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:0
[  369.847271][T21582] tipc: Resetting bearer <eth:gre0>
[  369.849146][T21582] tipc: Resetting bearer <eth:gre0>
[  369.857580][T21582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  369.862556][ T5877] lo speed is unknown, defaulting to 1000
[  369.864456][ T5877] syz2: Port: 1 Link ACTIVE
[  369.928609][T21586] wg1 speed is unknown, defaulting to 1000
[  369.931614][T21586] lo speed is unknown, defaulting to 1000
[  370.085507][T21591] bridge0: port 1(ipvlan1) entered blocking state
[  370.091443][T21591] bridge0: port 1(ipvlan1) entered disabled state
[  370.095208][T21591] ipvlan1: entered allmulticast mode
[  370.104484][T21591] bridge0: entered allmulticast mode
[  370.108089][T21591] ipvlan1: left allmulticast mode
[  370.110016][T21591] bridge0: left allmulticast mode
[  370.293666][T21595] tipc: Resetting bearer <eth:gre0>
[  370.317971][T21595] tipc: Resetting bearer <eth:syzkaller0>
[  370.320595][T21595] syzkaller0: left promiscuous mode
[  370.322406][T21595] syzkaller0: left allmulticast mode
[  370.337085][T21595] gretap8: left allmulticast mode
[  370.339181][T21595] vlan0: left allmulticast mode
[  370.340803][T21595] veth1: left allmulticast mode
[  370.342835][T21595] veth27: left promiscuous mode
[  370.345084][T21595] ipvlan0: left promiscuous mode
[  370.347438][T21595] bond20: left promiscuous mode
[  370.349379][T21595] ip6gre1: left allmulticast mode
[  370.351430][T21595] veth29: left promiscuous mode
[  370.353724][T21595] veth31: left promiscuous mode
[  370.355397][T21595] vti1: left promiscuous mode
[  370.357224][T21595] gretap9: left promiscuous mode
[  370.358989][T21595] vxcan1: left allmulticast mode
[  370.361311][T21595] bond28: left promiscuous mode
[  370.371513][   T10] lo speed is unknown, defaulting to 1000
[  370.373642][   T10] syz2: Port: 1 Link DOWN
[  370.421259][T21598] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[  370.851928][T21632] bridge0: port 1(batadv34) entered blocking state
[  370.854891][T21632] bridge0: port 1(batadv34) entered disabled state
[  370.858061][T21632] batadv34: entered allmulticast mode
[  370.861721][T21632] batadv34: entered promiscuous mode
[  370.864996][T21633] batadv_slave_0: entered promiscuous mode
[  370.874184][T21629] syzkaller1: entered promiscuous mode
[  370.884171][T21629] syzkaller1: entered allmulticast mode
[  370.968185][T21637] sctp: [Deprecated]: syz.0.4444 (pid 21637) Use of int in max_burst socket option.
[  370.968185][T21637] Use struct sctp_assoc_value instead
[  371.023850][T21643] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  371.029472][T21643] syzkaller0: entered promiscuous mode
[  371.031388][T21643] syzkaller0: entered allmulticast mode
[  371.121865][T21651] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  371.125690][T21651] syzkaller0: entered promiscuous mode
[  371.138006][T21651] syzkaller0: entered allmulticast mode
[  371.156907][T21651] tipc: Resetting bearer <eth:syzkaller0>
[  371.268605][T21656] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  371.283428][T21662] netlink: 'syz.1.4450': attribute type 4 has an invalid length.
[  371.337245][T21669] sctp: [Deprecated]: syz.0.4454 (pid 21669) Use of int in max_burst socket option deprecated.
[  371.337245][T21669] Use struct sctp_assoc_value instead
[  371.358507][ T5703] batman_adv: batadv34: No IGMP Querier present - multicast optimizations disabled
[  371.361671][ T5703] batman_adv: batadv34: No MLD Querier present - multicast optimizations disabled
[  371.404892][T21673] netlink: 'syz.0.4455': attribute type 1 has an invalid length.
[  371.443035][T21673] 8021q: adding VLAN 0 to HW filter on device bond64
[  371.482328][T21673] veth15: entered promiscuous mode
[  371.492686][T21673] bond64: (slave veth15): Enslaving as an active interface with a down link
[  371.503514][T21673] erspan0: entered allmulticast mode
[  371.517360][T21673] bond64: (slave erspan0): making interface the new active one
[  371.524448][T21673] erspan0: entered promiscuous mode
[  371.526541][T21673] bond64: (slave erspan0): Enslaving as an active interface with an up link
[  371.529473][T21678] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  371.627999][T21683] netlink: 'syz.1.4459': attribute type 12 has an invalid length.
[  371.640942][T21690] netlink: 'syz.0.4460': attribute type 10 has an invalid length.
[  371.643918][T21690] team0: left promiscuous mode
[  371.652901][T21690] 8021q: adding VLAN 0 to HW filter on device team0
[  371.666522][T21690] bond0: (slave team0): Enslaving as an active interface with an up link
[  371.979734][T21697] pim6reg9: entered allmulticast mode
[  372.064038][T21717] syzkaller0: left promiscuous mode
[  372.073157][T21717] syzkaller0: left allmulticast mode
[  372.187138][T21719] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  372.312942][T21731] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  372.959697][T21796] wg1 speed is unknown, defaulting to 1000
[  372.963566][T21796] lo speed is unknown, defaulting to 1000
[  373.007613][T21801] team0: entered promiscuous mode
[  373.009338][T21801] bridge22: entered promiscuous mode
[  373.011304][T21801] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  373.404823][T21831] openvswitch: netlink: EtherType 0 is less than min 600
[  373.475483][T21840] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.829634][T21849] __nla_validate_parse: 31 callbacks suppressed
[  373.829649][T21849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4500'.
[  373.920308][T21853] pim6reg1: entered promiscuous mode
[  373.922629][T21853] pim6reg1: entered allmulticast mode
[  373.929129][T21853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4502'.
[  373.957498][T21853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4502'.
[  374.307144][T21875] ip6tnl9: entered promiscuous mode
[  374.309460][T21875] ip6tnl9: entered allmulticast mode
[  374.312567][T21875] team0: Device ip6tnl9 is of different type
[  374.351930][T21881] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4510'.
[  374.420252][T21888] netlink: 'syz.2.4513': attribute type 10 has an invalid length.
[  374.635952][T21902] netlink: 'syz.2.4516': attribute type 12 has an invalid length.
[  374.760031][T21916] openvswitch: netlink: Multiple metadata blocks provided
[  374.774039][T21916] openvswitch: netlink: Multiple metadata blocks provided
[  375.216234][T21948] wg1 speed is unknown, defaulting to 1000
[  375.220200][T21948] lo speed is unknown, defaulting to 1000
[  375.289603][T21953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4529'.
[  375.311216][T21953] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  375.321989][T21956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4530'.
[  375.418748][T21960] netlink: 'syz.2.4532': attribute type 4 has an invalid length.
[  375.424488][T21960] netlink: 'syz.2.4532': attribute type 4 has an invalid length.
[  375.448875][T21968] netlink: 'syz.0.4531': attribute type 8 has an invalid length.
[  375.543511][T21975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4535'.
[  375.555427][T21975] xfrm2: entered promiscuous mode
[  375.561474][T21975] xfrm2: entered allmulticast mode
[  375.571614][T21975] bridge: RTM_NEWNEIGH with invalid ether address
[  375.628683][T21984] syzkaller0: entered promiscuous mode
[  375.630719][T21984] syzkaller0: entered allmulticast mode
[  375.632946][T21983] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  375.683337][T21992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4539'.
[  375.690811][T21985] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4537'.
[  375.774117][T21994] bridge0: port 1(batadv0) entered blocking state
[  375.778470][T21994] bridge0: port 1(batadv0) entered disabled state
[  375.783733][T21994] batadv0: entered allmulticast mode
[  375.787737][T21994] batadv0: entered promiscuous mode
[  375.815239][T21999] delete_channel: no stack
[  375.861928][T22004] : left promiscuous mode
[  375.903756][T22006] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4545'.
[  376.054548][T22015] netlink: 'syz.0.4547': attribute type 10 has an invalid length.
[  376.299341][ T5873] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  376.302585][ T5873] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  376.388667][T22046] sctp: [Deprecated]: syz.0.4555 (pid 22046) Use of int in max_burst socket option.
[  376.388667][T22046] Use struct sctp_assoc_value instead
[  376.429733][T22059] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  376.570071][T22074] sctp: [Deprecated]: syz.0.4559 (pid 22074) Use of int in max_burst socket option.
[  376.570071][T22074] Use struct sctp_assoc_value instead
[  376.645347][T22076] wg1 speed is unknown, defaulting to 1000
[  376.661916][T22076] lo speed is unknown, defaulting to 1000
[  376.834778][ T5877] hid-generic 0005:046D:0009.0002: unknown main item tag 0x0
[  376.862121][ T5877] hid-generic 0005:046D:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  377.062662][T22103] netlink: 'syz.2.4566': attribute type 1 has an invalid length.
[  377.125891][T22108] bond27: entered promiscuous mode
[  377.127762][T22108] bond27: entered allmulticast mode
[  377.130451][T22108] 8021q: adding VLAN 0 to HW filter on device bond27
[  377.155090][T22109] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  377.288530][T22103] bridge24: entered promiscuous mode
[  377.301956][T22103] bridge24: entered allmulticast mode
[  377.304598][T22103] bond27: (slave bridge24): Enslaving as a backup interface with an up link
[  377.346201][ T5910] bond27: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  377.466167][ T5873] bond27: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  377.783151][T22128] wg1 speed is unknown, defaulting to 1000
[  377.788475][T22128] lo speed is unknown, defaulting to 1000
[  378.296168][ T1361] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  378.579444][T22173] batadv3: entered promiscuous mode
[  378.581250][T22173] batadv3: entered allmulticast mode
[  378.941205][T22179] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  378.944511][T22179] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  379.209887][T22188] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  379.243334][T22188] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  379.257630][T22188] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  379.370477][T22200] netlink: 'syz.1.4584': attribute type 1 has an invalid length.
[  379.435033][T22200] 8021q: adding VLAN 0 to HW filter on device bond29
[  379.503988][T22206] bond29: (slave bridge29): making interface the new active one
[  379.514405][T22206] bond29: (slave bridge29): Enslaving as an active interface with an up link
[  379.547449][T22200] bond29: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  379.639407][T22210] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  380.053864][T22225] netlink: 'syz.0.4591': attribute type 10 has an invalid length.
[  380.057368][T22225] __nla_validate_parse: 12 callbacks suppressed
[  380.057375][T22225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4591'.
[  380.064088][T22225] !: entered allmulticast mode
[  380.067678][T22225] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  380.120630][T22233] netlink: 'syz.0.4592': attribute type 3 has an invalid length.
[  380.129962][T22233] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4592'.
[  380.220026][T22240] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4595'.
[  380.223962][T22240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4595'.
[  380.270444][T22240] netlink: 'syz.2.4595': attribute type 4 has an invalid length.
[  380.358344][T22254] 8021q: adding VLAN 0 to HW filter on device bond28
[  380.360865][T22254] bridge0: port 1(bond28) entered blocking state
[  380.363081][T22254] bridge0: port 1(bond28) entered disabled state
[  380.365277][T22254] bond28: entered allmulticast mode
[  380.369171][T22254] bond28: entered promiscuous mode
[  380.396537][T22254] 8021q: adding VLAN 0 to HW filter on device bond29
[  380.399438][T22254] bridge0: port 2(bond29) entered blocking state
[  380.401785][T22254] bridge0: port 2(bond29) entered disabled state
[  380.404139][T22254] bond29: entered allmulticast mode
[  380.407590][T22254] bond29: entered promiscuous mode
[  380.421081][T22254] 8021q: adding VLAN 0 to HW filter on device bond30
[  380.424163][T22254] bridge0: port 3(bond30) entered blocking state
[  380.426982][T22254] bridge0: port 3(bond30) entered disabled state
[  380.429589][T22254] bond30: entered allmulticast mode
[  380.433061][T22254] bond30: entered promiscuous mode
[  380.447787][T22254] 8021q: adding VLAN 0 to HW filter on device bond31
[  380.450423][T22254] bridge0: port 4(bond31) entered blocking state
[  380.452965][T22254] bridge0: port 4(bond31) entered disabled state
[  380.455505][T22254] bond31: entered allmulticast mode
[  380.458424][T22254] bond31: entered promiscuous mode
[  380.470144][T22254] 8021q: adding VLAN 0 to HW filter on device bond32
[  380.472842][T22254] bridge0: port 5(bond32) entered blocking state
[  380.475119][T22254] bridge0: port 5(bond32) entered disabled state
[  380.477378][T22254] bond32: entered allmulticast mode
[  380.480039][T22254] bond32: entered promiscuous mode
[  380.491489][T22254] 8021q: adding VLAN 0 to HW filter on device bond33
[  380.494257][T22254] bridge0: port 6(bond33) entered blocking state
[  380.497183][T22254] bridge0: port 6(bond33) entered disabled state
[  380.499512][T22254] bond33: entered allmulticast mode
[  380.502678][T22254] bond33: entered promiscuous mode
[  380.516409][T22254] 8021q: adding VLAN 0 to HW filter on device bond34
[  380.519096][T22254] bridge0: port 7(bond34) entered blocking state
[  380.521404][T22254] bridge0: port 7(bond34) entered disabled state
[  380.523577][T22254] bond34: entered allmulticast mode
[  380.528736][T22254] bond34: entered promiscuous mode
[  380.540254][T22254] 8021q: adding VLAN 0 to HW filter on device bond35
[  380.542915][T22254] bridge0: port 8(bond35) entered blocking state
[  380.545188][T22254] bridge0: port 8(bond35) entered disabled state
[  380.547794][T22254] bond35: entered allmulticast mode
[  380.550858][T22254] bond35: entered promiscuous mode
[  380.563461][T22254] 8021q: adding VLAN 0 to HW filter on device bond36
[  380.566410][T22254] bridge0: port 9(bond36) entered blocking state
[  380.568583][T22254] bridge0: port 9(bond36) entered disabled state
[  380.570762][T22254] bond36: entered allmulticast mode
[  380.573558][T22254] bond36: entered promiscuous mode
[  380.585708][T22254] 8021q: adding VLAN 0 to HW filter on device bond37
[  380.588491][T22254] bridge0: port 10(bond37) entered blocking state
[  380.590975][T22254] bridge0: port 10(bond37) entered disabled state
[  380.593974][T22254] bond37: entered allmulticast mode
[  380.597776][T22254] bond37: entered promiscuous mode
[  380.612195][T22254] 8021q: adding VLAN 0 to HW filter on device bond38
[  380.617078][T22254] bridge0: port 11(bond38) entered blocking state
[  380.620192][T22254] bridge0: port 11(bond38) entered disabled state
[  380.622712][T22254] bond38: entered allmulticast mode
[  380.626425][T22254] bond38: entered promiscuous mode
[  380.639220][T22254] 8021q: adding VLAN 0 to HW filter on device bond39
[  380.641841][T22254] bridge0: port 12(bond39) entered blocking state
[  380.644372][T22254] bridge0: port 12(bond39) entered disabled state
[  380.647139][T22254] bond39: entered allmulticast mode
[  380.650424][T22254] bond39: entered promiscuous mode
[  380.669152][T22254] 8021q: adding VLAN 0 to HW filter on device bond40
[  380.671749][T22254] bridge0: port 13(bond40) entered blocking state
[  380.674251][T22254] bridge0: port 13(bond40) entered disabled state
[  380.676886][T22254] bond40: entered allmulticast mode
[  380.679772][T22254] bond40: entered promiscuous mode
[  380.693962][T22254] 8021q: adding VLAN 0 to HW filter on device bond41
[  380.697314][T22254] bridge0: port 14(bond41) entered blocking state
[  380.700012][T22254] bridge0: port 14(bond41) entered disabled state
[  380.702603][T22254] bond41: entered allmulticast mode
[  380.706494][T22254] bond41: entered promiscuous mode
[  380.724580][T22254] 8021q: adding VLAN 0 to HW filter on device bond42
[  380.728860][T22254] bridge0: port 15(bond42) entered blocking state
[  380.731908][T22254] bridge0: port 15(bond42) entered disabled state
[  380.734898][T22254] bond42: entered allmulticast mode
[  380.739304][T22254] bond42: entered promiscuous mode
[  380.761415][T22254] 8021q: adding VLAN 0 to HW filter on device bond43
[  380.764872][T22254] bridge0: port 16(bond43) entered blocking state
[  380.768134][T22254] bridge0: port 16(bond43) entered disabled state
[  380.771210][T22254] bond43: entered allmulticast mode
[  380.775619][T22254] bond43: entered promiscuous mode
[  380.798193][T22254] 8021q: adding VLAN 0 to HW filter on device bond44
[  380.801574][T22254] bridge0: port 17(bond44) entered blocking state
[  380.804604][T22254] bridge0: port 17(bond44) entered disabled state
[  380.807723][T22254] bond44: entered allmulticast mode
[  380.811910][T22254] bond44: entered promiscuous mode
[  380.834477][T22254] 8021q: adding VLAN 0 to HW filter on device bond45
[  380.838723][T22254] bridge0: port 18(bond45) entered blocking state
[  380.841760][T22254] bridge0: port 18(bond45) entered disabled state
[  380.844797][T22254] bond45: entered allmulticast mode
[  380.849388][T22254] bond45: entered promiscuous mode
[  380.871377][T22254] 8021q: adding VLAN 0 to HW filter on device bond46
[  380.874838][T22254] bridge0: port 19(bond46) entered blocking state
[  380.877896][T22254] bridge0: port 19(bond46) entered disabled state
[  380.880873][T22254] bond46: entered allmulticast mode
[  380.885264][T22254] bond46: entered promiscuous mode
[  380.909493][T22254] 8021q: adding VLAN 0 to HW filter on device bond47
[  380.913047][T22254] bridge0: port 20(bond47) entered blocking state
[  380.916190][T22254] bridge0: port 20(bond47) entered disabled state
[  380.919280][T22254] bond47: entered allmulticast mode
[  380.923790][T22254] bond47: entered promiscuous mode
[  380.946538][T22254] 8021q: adding VLAN 0 to HW filter on device bond48
[  380.949977][T22254] bridge0: port 21(bond48) entered blocking state
[  380.953074][T22254] bridge0: port 21(bond48) entered disabled state
[  380.956184][T22254] bond48: entered allmulticast mode
[  380.960483][T22254] bond48: entered promiscuous mode
[  380.983535][T22254] 8021q: adding VLAN 0 to HW filter on device bond49
[  380.987145][T22254] bridge0: port 22(bond49) entered blocking state
[  380.990228][T22254] bridge0: port 22(bond49) entered disabled state
[  380.993296][T22254] bond49: entered allmulticast mode
[  380.997598][T22254] bond49: entered promiscuous mode
[  381.031737][T22254] 8021q: adding VLAN 0 to HW filter on device bond50
[  381.041312][T22254] bridge0: port 23(bond50) entered blocking state
[  381.043903][T22254] bridge0: port 23(bond50) entered disabled state
[  381.047718][T22254] bond50: entered allmulticast mode
[  381.051614][T22254] bond50: entered promiscuous mode
[  381.074417][T22254] 8021q: adding VLAN 0 to HW filter on device bond51
[  381.078532][T22254] bridge0: port 24(bond51) entered blocking state
[  381.081384][T22254] bridge0: port 24(bond51) entered disabled state
[  381.084473][T22254] bond51: entered allmulticast mode
[  381.088772][T22254] bond51: entered promiscuous mode
[  381.115709][T22254] 8021q: adding VLAN 0 to HW filter on device bond52
[  381.125325][T22254] bridge0: port 25(bond52) entered blocking state
[  381.129354][T22254] bridge0: port 25(bond52) entered disabled state
[  381.136312][T22254] bond52: entered allmulticast mode
[  381.139566][T22254] bond52: entered promiscuous mode
[  381.293361][T22254] workqueue: Failed to create a rescuer kthread for wq "bond53": -EINTR
[  381.402237][T22306] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  381.422020][T22306] ip6gre4: entered allmulticast mode
[  381.459823][T22310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4603'.
[  381.505002][T22312] 8021q: adding VLAN 0 to HW filter on device bond65
[  381.531170][T22315] netlink: 'syz.2.4605': attribute type 1 has an invalid length.
[  381.533810][T22315] netlink: 'syz.2.4605': attribute type 2 has an invalid length.
[  381.537659][T22315] netlink: 'syz.2.4605': attribute type 1 has an invalid length.
[  381.540510][T22315] netlink: 'syz.2.4605': attribute type 2 has an invalid length.
[  381.554971][T22317] netlink: 'syz.0.4606': attribute type 1 has an invalid length.
[  381.561210][T22317] netlink: 'syz.0.4606': attribute type 1 has an invalid length.
[  381.673721][T22324] netlink: 'syz.0.4609': attribute type 10 has an invalid length.
[  381.719354][T22328] syzkaller0: left promiscuous mode
[  381.721581][T22328] syzkaller0: left allmulticast mode
[  382.035082][T22352] wg1 speed is unknown, defaulting to 1000
[  382.043449][T22352] lo speed is unknown, defaulting to 1000
[  382.108116][T22357] wg1 speed is unknown, defaulting to 1000
[  382.112054][T22357] lo speed is unknown, defaulting to 1000
[  382.412843][T22370] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  382.462786][T22378] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.502917][T22384] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4627'.
[  382.553304][T22385] wg1 speed is unknown, defaulting to 1000
[  382.592649][T22385] lo speed is unknown, defaulting to 1000
[  382.609009][   T13] erspan0: left promiscuous mode
[  382.695349][T22391] openvswitch: netlink: Message has 20 unknown bytes.
[  382.796478][T22402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4629'.
[  382.800676][T22402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4629'.
[  382.855270][T22412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4631'.
[  382.870587][T22412] batadv34: left allmulticast mode
[  382.872875][T22412] batadv34: left promiscuous mode
[  382.875413][T22412] bridge0: port 1(batadv34) entered disabled state
[  382.918364][T22414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4632'.
[  383.322875][T22443] openvswitch: netlink: VXLAN extension 2 out of range max 1
[  383.465509][T22457] siw: device registration error -23
[  383.534267][T22463] 8021q: adding VLAN 0 to HW filter on device bond30
[  383.548402][T22463] 8021q: adding VLAN 0 to HW filter on device bond30
[  383.553344][T22463] bond30: (slave vcan0): The slave device specified does not support setting the MAC address
[  383.558170][T22463] bond30: (slave vcan0): Error -95 calling set_mac_address
[  383.599182][T22465] gretap10: entered promiscuous mode
[  383.603291][T22465] bond30: (slave gretap10): making interface the new active one
[  383.606423][T22465] bond30: (slave gretap10): Enslaving as an active interface with an up link
[  384.085490][T22505] wg1 speed is unknown, defaulting to 1000
[  384.097557][T22505] lo speed is unknown, defaulting to 1000
[  384.141340][T22516] netlink: 'syz.0.4656': attribute type 11 has an invalid length.
[  384.251260][T22522] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  384.332422][  T793] lo speed is unknown, defaulting to 1000
[  384.334391][  T793] syz2: Port: 1 Link ACTIVE
[  384.421045][T22538] only policy match revision 0 supported
[  384.421063][T22538] unable to load match
[  384.915478][T22570] wg1 speed is unknown, defaulting to 1000
[  384.929390][T22570] lo speed is unknown, defaulting to 1000
[  385.063469][T22578] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  385.808907][T22605] __nla_validate_parse: 46 callbacks suppressed
[  385.808917][T22605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4675'.
[  385.815965][T22602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4675'.
[  385.922611][T22613] validate_nla: 3 callbacks suppressed
[  385.922630][T22613] netlink: 'syz.1.4677': attribute type 1 has an invalid length.
[  385.923924][T22617] netlink: 'syz.0.4680': attribute type 1 has an invalid length.
[  385.931202][T22617] netlink: 'syz.0.4680': attribute type 4 has an invalid length.
[  385.949575][T22613] 8021q: adding VLAN 0 to HW filter on device bond32
[  385.955011][T22617] pimreg: entered allmulticast mode
[  385.978306][T22613] bond32: (slave ip6gretap4): making interface the new active one
[  385.984616][T22613] bond32: (slave ip6gretap4): Enslaving as an active interface with an up link
[  385.989152][T22619] netlink: 'syz.2.4679': attribute type 8 has an invalid length.
[  385.994006][T22617] pimreg: left allmulticast mode
[  386.011341][T22613] syzkaller0: left promiscuous mode
[  386.013049][T22613] syzkaller0: left allmulticast mode
[  386.015013][T22613] tipc: Resetting bearer <eth:syzkaller0>
[  386.026218][T22613] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  386.059307][T22613] veth33: entered promiscuous mode
[  386.066748][T22613] bond32: (slave veth33): Enslaving as an active interface with a down link
[  386.216511][T22631] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4685'.
[  386.322919][T22635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4687'.
[  386.545072][T22657] netlink: 'syz.2.4691': attribute type 10 has an invalid length.
[  386.563207][T22657] netlink: 'syz.2.4691': attribute type 10 has an invalid length.
[  386.700440][T22663] netlink: 'syz.0.4694': attribute type 1 has an invalid length.
[  386.759578][T22663] 8021q: adding VLAN 0 to HW filter on device bond66
[  386.813069][T22665] bond66: (slave veth17): Enslaving as an active interface with a down link
[  386.848777][T22663] macvlan2: entered promiscuous mode
[  386.856536][T22663] macvlan2: entered allmulticast mode
[  386.861433][T22663] bond66: entered promiscuous mode
[  386.868018][T22663] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  386.877512][T22663] bond66: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  386.895275][T22663] bond66: left promiscuous mode
[  387.037623][T22668] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4695'.
[  387.102993][T22674] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4697'.
[  387.154279][T22681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4698'.
[  387.178824][T22681] netlink: 'syz.1.4698': attribute type 4 has an invalid length.
[  387.236428][T22684] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4699'.
[  387.292211][T22690] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4701'.
[  387.302358][T22689] netlink: 'syz.1.4702': attribute type 83 has an invalid length.
[  387.305534][T22690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4701'.
[  387.432107][T22706] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  387.436149][T22706] veth0_to_bond: left allmulticast mode
[  387.437966][T22706] veth0_to_bond: left promiscuous mode
[  387.439863][T22706] bridge27: port 1(veth0_to_bond) entered disabled state
[  387.455247][T22706] tipc: Resetting bearer <eth:syzkaller0>
[  387.470263][T22706] bond1: (slave macvlan1): Releasing backup interface
[  387.477733][T22706] bond29: (slave bridge29): Releasing active interface
[  387.489559][T22706] bond30: (slave gretap10): Releasing active interface
[  387.495190][T22706] bond32: (slave ip6gretap4): Releasing active interface
[  387.498044][T22706] bond32: (slave ip6gretap4): the permanent HWaddr of slave - ee:6f:ec:13:3c:a5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  387.508172][T22706] bond32: (slave veth33): Releasing active interface
[  387.524537][T22710] netlink: 'syz.2.4708': attribute type 6 has an invalid length.
[  387.549113][T22706] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  387.553159][T22706] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  387.557203][T22706] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  387.678876][T22725] dvmrp8: entered allmulticast mode
[  387.683176][T22726] bond64: (slave erspan0): Releasing active interface
[  387.693554][T22726] bond0: (slave team0): Releasing backup interface
[  387.714793][T22726] bond9: (slave vcan1): Releasing backup interface
[  387.722834][T22726] team0: Port device bridge28 removed
[  387.730440][T22726] bond64: (slave veth15): Releasing active interface
[  387.736943][T22726] batadv0: left allmulticast mode
[  387.739232][T22726] batadv0: left promiscuous mode
[  387.741665][T22726] bridge0: port 1(batadv0) entered disabled state
[  387.750115][T22726] bond66: (slave veth17): Releasing active interface
[  387.757646][T22725] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  387.784283][T22727] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  387.796443][T22723] dvmrp8: left allmulticast mode
[  388.421344][T22752] syzkaller0: entered promiscuous mode
[  388.423581][T22752] syzkaller0: entered allmulticast mode
[  388.426315][T22752] tipc: Resetting bearer <eth:syzkaller0>
[  388.917934][T22767] siw: device registration error -23
[  388.931364][T22769] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  389.002222][T22773] bridge0: port 26(ipvlan4) entered blocking state
[  389.009763][T22773] bridge0: port 26(ipvlan4) entered disabled state
[  389.014627][T22773] ipvlan4: entered allmulticast mode
[  389.020051][T22773] ipvlan4: left allmulticast mode
[  389.488021][T22810] tipc: Resetting bearer <eth:syzkaller0>
[  389.493619][T22810] syzkaller0: left promiscuous mode
[  389.502189][T22810] syzkaller0: left allmulticast mode
[  389.510024][T22810] xfrm2: left promiscuous mode
[  389.511935][T22810] xfrm2: left allmulticast mode
[  389.517439][T22810] gretap10: left promiscuous mode
[  389.521812][T22810] veth33: left promiscuous mode
[  389.523655][ T6069] lo speed is unknown, defaulting to 1000
[  389.525719][ T6069] syz2: Port: 1 Link DOWN
[  389.666729][ T5703] bond27: (slave bridge24): link status up again after 0 ms
[  389.686916][ T5873] bond27: (slave bridge24): link status up again after 0 ms
[  389.695443][ T5873] bond27: (slave bridge24): failed to get link speed/duplex
[  389.806012][ T5873] bond27: (slave bridge24): failed to get link speed/duplex
[  389.917369][ T5910] bond27: (slave bridge24): failed to get link speed/duplex
[  390.036047][ T5910] bond27: (slave bridge24): failed to get link speed/duplex
[  390.156535][ T5703] bond27: (slave bridge24): failed to get link speed/duplex
[  390.266729][T19618] bond27: (slave bridge24): failed to get link speed/duplex
[  390.281972][T22854] sctp: [Deprecated]: syz.0.4751 (pid 22854) Use of int in max_burst socket option deprecated.
[  390.281972][T22854] Use struct sctp_assoc_value instead
[  390.378440][T22861] wg1 speed is unknown, defaulting to 1000
[  390.382851][T22861] lo speed is unknown, defaulting to 1000
[  390.452743][T22867] wg1 speed is unknown, defaulting to 1000
[  390.456811][T19618] bond27: (slave bridge24): failed to get link speed/duplex
[  390.461014][T22867] lo speed is unknown, defaulting to 1000
[  390.762561][T22888] bridge0: entered promiscuous mode
[  390.765683][T22888] bridge0: port 26(macvlan5) entered blocking state
[  390.771564][T22888] bridge0: port 26(macvlan5) entered disabled state
[  390.774047][T22888] macvlan5: entered allmulticast mode
[  390.779216][T22888] macvlan5: left allmulticast mode
[  390.782956][T22888] bridge0: left promiscuous mode
[  390.924910][T22903] __nla_validate_parse: 25 callbacks suppressed
[  390.924923][T22903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4764'.
[  391.032664][T22908] erspan0: left allmulticast mode
[  391.038778][T22910] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4766'.
[  391.043667][T22910] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4766'.
[  391.048096][T22910] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4766'.
[  391.048700][T22912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4767'.
[  391.236397][T22930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4772'.
[  391.256427][T22928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4771'.
[  391.342923][T22935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4773'.
[  391.353291][T22935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4773'.
[  391.363794][T22943] wg1 speed is unknown, defaulting to 1000
[  391.374529][T22943] lo speed is unknown, defaulting to 1000
[  391.394751][T22935] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4773'.
[  391.625404][T22964] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  392.025596][T23019] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  392.062197][T23030] validate_nla: 6 callbacks suppressed
[  392.062207][T23030] netlink: 'syz.1.4794': attribute type 21 has an invalid length.
[  392.072744][T23030] netlink: 'syz.1.4794': attribute type 4 has an invalid length.
[  392.075443][T23030] netlink: 'syz.1.4794': attribute type 5 has an invalid length.
[  392.081833][T23014] wg1 speed is unknown, defaulting to 1000
[  392.085183][T23014] lo speed is unknown, defaulting to 1000
[  392.351511][T23047] wg1 speed is unknown, defaulting to 1000
[  392.360968][T23047] lo speed is unknown, defaulting to 1000
[  392.556185][T23065] netlink: 'syz.1.4802': attribute type 1 has an invalid length.
[  392.708047][T23073] netlink: 'syz.0.4804': attribute type 1 has an invalid length.
[  392.732455][T23073] 8021q: adding VLAN 0 to HW filter on device bond68
[  392.737589][T23072] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  392.797812][T19618] net_ratelimit: 19 callbacks suppressed
[  392.797822][T19618] bond27: (slave bridge24): failed to get link speed/duplex
[  392.821154][T23084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  392.823622][T23084] IPv6: NLM_F_CREATE should be set when creating new route
[  392.826339][T23084] IPv6: NLM_F_CREATE should be set when creating new route
[  392.829129][T23084] IPv6: NLM_F_CREATE should be set when creating new route
[  392.834242][T23084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  392.906118][ T5910] bond27: (slave bridge24): failed to get link speed/duplex
[  392.913886][T23080] wg1 speed is unknown, defaulting to 1000
[  392.930307][T23091] delete_channel: no stack
[  392.934784][T23080] lo speed is unknown, defaulting to 1000
[  393.008048][T23094] siw: device registration error -23
[  393.015895][T19618] bond27: (slave bridge24): failed to get link speed/duplex
[  393.019930][T23094] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  393.156362][ T5873] bond27: (slave bridge24): failed to get link speed/duplex
[  393.276401][ T5873] bond27: (slave bridge24): failed to get link speed/duplex
[  393.297234][T23113] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  393.320596][T23113] IPv4: Oversized IP packet from 127.202.26.0
[  393.386309][ T5910] bond27: (slave bridge24): failed to get link speed/duplex
[  393.395571][T23122] netlink: 'syz.2.4820': attribute type 1 has an invalid length.
[  393.419760][T23122] bond53: entered promiscuous mode
[  393.421672][T23122] 8021q: adding VLAN 0 to HW filter on device bond53
[  393.427734][T23126] netlink: 'syz.0.4821': attribute type 1 has an invalid length.
[  393.434933][T23122] batadv4: entered promiscuous mode
[  393.436837][T23122] batadv4: entered allmulticast mode
[  393.439416][T23122] 8021q: adding VLAN 0 to HW filter on device batadv4
[  393.442751][T23122] bond53: (slave batadv4): making interface the new active one
[  393.446359][T23122] bond53: (slave batadv4): Enslaving as an active interface with an up link
[  393.481408][T23126] 8021q: adding VLAN 0 to HW filter on device bond69
[  393.495013][T23125] veth19: entered promiscuous mode
[  393.503451][T23125] bond69: (slave veth19): Enslaving as an active interface with a down link
[  393.523494][T23127] erspan0: entered allmulticast mode
[  393.541747][T23127] bond69: (slave erspan0): making interface the new active one
[  393.550805][T23127] erspan0: entered promiscuous mode
[  393.552841][T23127] bond69: (slave erspan0): Enslaving as an active interface with an up link
[  393.577301][ T5873] bond27: (slave bridge24): failed to get link speed/duplex
[  393.587614][ T5703] bond69: (slave erspan0): link status definitely down, disabling slave
[  393.593647][ T5703] erspan0: left promiscuous mode
[  393.597323][ T5703] bond69: now running without any active interface!
[  393.639587][T23131] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  393.643156][T23131] syzkaller0: entered promiscuous mode
[  393.645507][T23131] syzkaller0: entered allmulticast mode
[  393.686441][T19618] bond27: (slave bridge24): failed to get link speed/duplex
[  393.805118][T23144] netlink: 'syz.0.4826': attribute type 1 has an invalid length.
[  393.873662][T23150] wg1 speed is unknown, defaulting to 1000
[  393.878156][T23150] lo speed is unknown, defaulting to 1000
[  394.408985][T23180] ip6gre0: Master is either lo or non-ether device
[  394.523815][T23185] wg1 speed is unknown, defaulting to 1000
[  394.529361][T23185] lo speed is unknown, defaulting to 1000
[  394.651804][T23196] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  394.679240][T23198] sctp: [Deprecated]: syz.2.4840 (pid 23198) Use of int in max_burst socket option deprecated.
[  394.679240][T23198] Use struct sctp_assoc_value instead
[  394.941809][T23214] wg1 speed is unknown, defaulting to 1000
[  394.944787][T23214] lo speed is unknown, defaulting to 1000
[  395.181316][T23224] netlink: 'syz.1.4847': attribute type 2 has an invalid length.
[  395.184423][T23224] netlink: 'syz.1.4847': attribute type 1 has an invalid length.
[  395.222065][T23228] gretap0: entered promiscuous mode
[  395.270344][T23236] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  395.321714][T23238] 8021q: adding VLAN 0 to HW filter on device bond70
[  395.329794][T23239] bond69: (slave erspan0): Releasing active interface
[  395.344446][T23239] bond69: (slave veth19): Releasing active interface
[  396.111721][T23283] __nla_validate_parse: 37 callbacks suppressed
[  396.111732][T23283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4865'.
[  396.176157][ T5852] Bluetooth: hci2: link tx timeout
[  396.179017][ T5852] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  396.185025][T23286] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4866'.
[  396.402219][T23300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4869'.
[  396.405535][T23300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4869'.
[  396.472623][T23307] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4871'.
[  396.542117][T23315] 8021q: adding VLAN 0 to HW filter on device bond1
[  396.653745][T23321] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4875'.
[  396.680897][T23324] netlink: 308 bytes leftover after parsing attributes in process `syz.2.4876'.
[  396.684316][T23324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4876'.
[  396.738749][T23335] workqueue: Failed to create a rescuer kthread for wq "bond55": -EINTR
[  396.854955][T23345] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  396.861610][T23345] syzkaller0: entered promiscuous mode
[  396.863616][T23345] syzkaller0: entered allmulticast mode
[  397.035307][T23359] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  397.065631][T23359] tipc: Resetting bearer <eth:syzkaller0>
[  397.159165][ T5873] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  397.162040][ T5873] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  397.164888][ T5873] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  397.168206][ T5873] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  397.223203][T23361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4884'.
[  397.364127][T23367] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4886'.
[  397.984301][T23430] erspan0: left allmulticast mode
[  398.057551][T23435] wg1 speed is unknown, defaulting to 1000
[  398.060694][T23435] lo speed is unknown, defaulting to 1000
[  398.136417][ T1118] block nbd1: Possible stuck request ffff888043398000: control (read@0,1024B). Runtime 90 seconds
[  398.140000][ T1118] block nbd1: Possible stuck request ffff888043398200: control (read@1024,1024B). Runtime 90 seconds
[  398.143699][ T1118] block nbd1: Possible stuck request ffff888043398400: control (read@2048,1024B). Runtime 90 seconds
[  398.151062][ T1118] block nbd1: Possible stuck request ffff888043398600: control (read@3072,1024B). Runtime 90 seconds
[  398.206787][T23287] Bluetooth: hci2: command 0x0406 tx timeout
[  398.586266][T23459] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  398.589663][T23459] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  398.606292][T23461] siw: device registration error -23
[  398.641088][T23469] validate_nla: 2 callbacks suppressed
[  398.641097][T23469] netlink: 'syz.2.4912': attribute type 10 has an invalid length.
[  398.754240][T23481] netlink: 'syz.0.4917': attribute type 20 has an invalid length.
[  398.757240][T23481] netlink: 'syz.0.4917': attribute type 20 has an invalid length.
[  398.802026][T23484] siw: device registration error -23
[  398.982625][T23500] bond0: Error: Cannot enslave bond to itself.
[  399.303413][T23513] netlink: 'syz.0.4925': attribute type 4 has an invalid length.
[  399.324056][T23511] netlink: 'syz.0.4925': attribute type 4 has an invalid length.
[  399.456914][T23519] dvmrp8: entered allmulticast mode
[  399.504672][T23521] netlink: 'syz.0.4929': attribute type 1 has an invalid length.
[  399.550164][T23531] bridge0: failed insert local address into bridge forwarding table
[  399.631400][T23518] dvmrp8: left allmulticast mode
[  399.717676][T23540] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  399.721550][T23539] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  399.737579][T23541] syzkaller1: entered promiscuous mode
[  399.742872][T23541] syzkaller1: entered allmulticast mode
[  399.811831][T23547] net_ratelimit: 31 callbacks suppressed
[  399.811841][T23547] openvswitch: netlink: Missing key (keys=40, expected=100)
[  400.139862][T23583] wg1 speed is unknown, defaulting to 1000
[  400.142683][T23583] lo speed is unknown, defaulting to 1000
[  400.178400][T23585] bond1: option mode: unable to set because the bond device is up
[  400.307089][T23590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  401.010052][T23613] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  401.577235][T23622] __nla_validate_parse: 25 callbacks suppressed
[  401.577252][T23622] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4955'.
[  401.596010][T23622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4955'.
[  401.689943][T23626] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001
[  401.843639][T23636] netlink: 'syz.0.4958': attribute type 2 has an invalid length.
[  401.860227][T23636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  402.277926][T23655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4963'.
[  402.520875][T23668] netlink: 'syz.2.4968': attribute type 9 has an invalid length.
[  402.669289][T23678] siw: device registration error -23
[  402.672342][T23678] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4970'.
[  402.677511][T23678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4970'.
[  402.685175][T23678] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  402.721684][T23684] netlink: 'syz.0.4972': attribute type 30 has an invalid length.
[  402.724293][T23684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4972'.
[  402.742079][T23684] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  402.752252][T23683] netlink: 'syz.1.4973': attribute type 1 has an invalid length.
[  402.755431][T23683] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4973'.
[  402.763790][T23684] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4972'.
[  403.048109][T23690] veth23: entered allmulticast mode
[  403.159042][T23707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4978'.
[  403.186542][T23707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4978'.
[  403.202167][T23707] 8021q: adding VLAN 0 to HW filter on device team0
[  403.205148][T23707] !: left allmulticast mode
[  403.208146][T23707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  403.248955][T23707] wg1 speed is unknown, defaulting to 1000
[  403.251651][T23707] lo speed is unknown, defaulting to 1000
[  403.400621][T23719] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  403.496210][T23724] team0: Refused to change device type
[  403.764882][T23753] validate_nla: 2 callbacks suppressed
[  403.764892][T23753] netlink: 'syz.1.4992': attribute type 1 has an invalid length.
[  403.785385][T23757] netlink: 'syz.2.4993': attribute type 1 has an invalid length.
[  403.807635][T23757] 8021q: adding VLAN 0 to HW filter on device bond55
[  403.820125][T23757] vlan4: entered promiscuous mode
[  403.821879][T23757] bond55: entered promiscuous mode
[  403.823662][T23757] vlan4: entered allmulticast mode
[  403.825406][T23757] bond55: entered allmulticast mode
[  404.024558][ T5910] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  404.037494][ T5910] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  404.041015][ T5910] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  404.044472][ T5910] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  404.062307][T23782] gretap0: left promiscuous mode
[  404.101719][ T5910] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.107348][ T5910] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.111499][ T5910] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.115124][ T5910] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.155649][T23785] wg1 speed is unknown, defaulting to 1000
[  404.159184][T23785] lo speed is unknown, defaulting to 1000
[  404.218093][T23790] netlink: 'syz.0.5004': attribute type 8 has an invalid length.
[  404.436930][T23815] netlink: 'syz.1.5009': attribute type 11 has an invalid length.
[  404.455628][T23817] netlink: 'syz.2.5010': attribute type 4 has an invalid length.
[  405.522982][T23857] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  405.633638][T23872] netlink: 'syz.2.5022': attribute type 3 has an invalid length.
[  405.644506][T23872] dvmrp0: left allmulticast mode
[  405.730157][T23878] gretap0: left promiscuous mode
[  405.741071][T23878] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.743612][T23878] team0: left promiscuous mode
[  405.745635][T23878] bridge22: left promiscuous mode
[  405.749250][T23878] 8021q: adding VLAN 0 to HW filter on device team0
[  405.753488][T23878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  406.738673][T23909] __nla_validate_parse: 15 callbacks suppressed
[  406.738684][T23909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5031'.
[  406.836019][T23916] delete_channel: no stack
[  406.838940][T23916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5032'.
[  406.850296][T23916] vlan0: entered promiscuous mode
[  406.876269][T23918] IPVS: ip_vs_add_dest(): server weight less than zero
[  406.922473][T23923] dvmrp8: entered allmulticast mode
[  406.970401][T23923] wg1 speed is unknown, defaulting to 1000
[  406.973229][T23923] lo speed is unknown, defaulting to 1000
[  407.015637][T23928] netlink: 'syz.2.5034': attribute type 23 has an invalid length.
[  407.110071][T23922] dvmrp8: left allmulticast mode
[  407.331679][T23943] pim6reg: entered allmulticast mode
[  407.655057][T23958] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  407.667241][T23958] syzkaller0: entered promiscuous mode
[  407.669554][T23958] syzkaller0: entered allmulticast mode
[  407.686492][T23958] tipc: Resetting bearer <eth:syzkaller0>
[  408.017674][T23982] dvmrp8: entered allmulticast mode
[  408.120907][T23991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5050'.
[  408.129115][T23983] netlink: 'syz.2.5048': attribute type 23 has an invalid length.
[  408.142980][T23984] wg1 speed is unknown, defaulting to 1000
[  408.149389][T23982] wg1 speed is unknown, defaulting to 1000
[  408.155293][T23984] lo speed is unknown, defaulting to 1000
[  408.171529][T23982] lo speed is unknown, defaulting to 1000
[  408.584558][T24015] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5055'.
[  408.624777][T23982] dvmrp8: left allmulticast mode
[  408.732886][T24018] netlink: 212 bytes leftover after parsing attributes in process `syz.1.5058'.
[  408.753364][T24022] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  408.784210][T24025] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  408.789421][T24025] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) !
[  408.830609][T24026] wg1 speed is unknown, defaulting to 1000
[  408.834048][T24026] lo speed is unknown, defaulting to 1000
[  408.840008][T24029] netlink: 'syz.2.5062': attribute type 1 has an invalid length.
[  408.898658][T24029] 8021q: adding VLAN 0 to HW filter on device bond56
[  409.017017][T24029] wg1 speed is unknown, defaulting to 1000
[  409.022146][T24029] lo speed is unknown, defaulting to 1000
[  409.040185][T24034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5062'.
[  409.271539][T24055] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  409.274498][T24054] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  409.323814][T24059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5069'.
[  409.365423][T24064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5070'.
[  409.494709][T24077] veth1_to_bond: entered allmulticast mode
[  409.498099][T24077] bond_slave_1: entered promiscuous mode
[  409.504932][T24077] bond_slave_1: left promiscuous mode
[  409.513399][T24077] veth1_to_bond: left allmulticast mode
[  409.536316][T24078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5074'.
[  409.651769][T24084] netlink: 'syz.0.5076': attribute type 12 has an invalid length.
[  409.700633][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5077'.
[  409.770376][T24100] netlink: 'syz.0.5079': attribute type 4 has an invalid length.
[  409.956062][T24112] bond0: entered promiscuous mode
[  409.959001][T24112] bond0: left promiscuous mode
[  410.036623][T24114] netlink: 'syz.0.5084': attribute type 10 has an invalid length.
[  410.425133][T24128] netlink: 'syz.2.5089': attribute type 7 has an invalid length.
[  410.430829][T24128] netlink: 'syz.2.5089': attribute type 8 has an invalid length.
[  410.548554][T24144] macvlan8: entered allmulticast mode
[  410.550513][T24144] veth1_vlan: entered allmulticast mode
[  410.554182][T24144] veth1_vlan: left allmulticast mode
[  410.731385][T24148] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  410.734486][T24149] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  410.764241][T24153] netlink: 'syz.2.5094': attribute type 1 has an invalid length.
[  411.420954][T24164] dvmrp8: entered allmulticast mode
[  411.427624][T24158] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  411.431002][T24158] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  411.433485][T24158] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  411.436970][T24157] dvmrp8: left allmulticast mode
[  411.490591][T24168] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  411.521521][T24168] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  411.700518][T24183] dvmrp8: entered allmulticast mode
[  411.723934][T24183] wg1 speed is unknown, defaulting to 1000
[  411.728516][T24183] lo speed is unknown, defaulting to 1000
[  411.746961][T24184] wg1: entered promiscuous mode
[  411.749061][T24184] wg1: entered allmulticast mode
[  411.760165][T24185] netlink: 'syz.2.5105': attribute type 10 has an invalid length.
[  411.761491][ T5851] wg1 speed is unknown, defaulting to 1000
[  411.769420][ T5851] syz0: Port: 1 Link ACTIVE
[  411.772929][T24185] netlink: 'syz.2.5105': attribute type 23 has an invalid length.
[  411.798131][T24182] dvmrp8: left allmulticast mode
[  412.142359][T24197] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  412.181320][T24199] __nla_validate_parse: 10 callbacks suppressed
[  412.181335][T24199] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5108'.
[  412.198982][T24199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5108'.
[  412.396733][T24210] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5111'.
[  412.619162][T24213] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5112'.
[  412.679288][T24213] netlink: 'syz.0.5112': attribute type 2 has an invalid length.
[  412.688405][T24217] : entered promiscuous mode
[  412.977098][T24235] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5118'.
[  413.149998][T24246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5122'.
[  413.154366][T24246] bridge: RTM_NEWNEIGH with invalid ether address
[  413.196805][T24251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5123'.
[  413.200311][T24251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5123'.
[  413.420070][T24260] wg1: left promiscuous mode
[  413.422036][T24260] wg1: left allmulticast mode
[  413.438042][T24260] veth0_to_bridge: left promiscuous mode
[  413.440190][T24260] veth0_to_bridge: left allmulticast mode
[  413.448300][T24260] batadv_slave_0: left promiscuous mode
[  413.451409][T24260] vlan0: left promiscuous mode
[  413.456110][T24260] macvlan0: left promiscuous mode
[  413.463765][T24260] tipc: Resetting bearer <eth:syzkaller0>
[  413.466551][T24260] syzkaller0: left promiscuous mode
[  413.468612][T24260] syzkaller0: left allmulticast mode
[  413.509858][T24260] bond29: left promiscuous mode
[  413.515227][T24260] bond29: left allmulticast mode
[  413.522941][T24260] bond30: left promiscuous mode
[  413.524945][T24260] bond30: left allmulticast mode
[  413.530657][T24260] bond31: left promiscuous mode
[  413.532453][T24260] bond31: left allmulticast mode
[  413.535979][T24260] bond32: left promiscuous mode
[  413.537864][T24260] bond32: left allmulticast mode
[  413.541231][T24260] bond33: left promiscuous mode
[  413.543025][T24260] bond33: left allmulticast mode
[  413.547986][T24260] bond34: left promiscuous mode
[  413.550308][T24260] bond34: left allmulticast mode
[  413.554053][T24260] bond35: left promiscuous mode
[  413.556448][T24260] bond35: left allmulticast mode
[  413.560667][T24260] bond36: left promiscuous mode
[  413.562778][T24260] bond36: left allmulticast mode
[  413.569044][T24260] bond37: left promiscuous mode
[  413.570894][T24260] bond37: left allmulticast mode
[  413.574784][T24260] bond38: left promiscuous mode
[  413.576972][T24260] bond38: left allmulticast mode
[  413.581533][T24260] bond39: left promiscuous mode
[  413.583741][T24260] bond39: left allmulticast mode
[  413.589440][T24260] bond40: left promiscuous mode
[  413.591484][T24260] bond40: left allmulticast mode
[  413.595283][T24260] bond41: left promiscuous mode
[  413.597789][T24260] bond41: left allmulticast mode
[  413.601861][T24260] bond42: left promiscuous mode
[  413.604165][T24260] bond42: left allmulticast mode
[  413.609398][T24260] bond43: left promiscuous mode
[  413.611940][T24260] bond43: left allmulticast mode
[  413.616763][T24260] bond44: left promiscuous mode
[  413.618574][T24260] bond44: left allmulticast mode
[  413.622165][T24260] bond45: left promiscuous mode
[  413.624085][T24260] bond45: left allmulticast mode
[  413.627894][T24260] bond46: left promiscuous mode
[  413.629621][T24260] bond46: left allmulticast mode
[  413.632930][T24260] bond47: left promiscuous mode
[  413.634975][T24260] bond47: left allmulticast mode
[  413.638755][T24260] bond48: left promiscuous mode
[  413.640494][T24260] bond48: left allmulticast mode
[  413.644033][T24260] bond49: left promiscuous mode
[  413.646855][T24260] bond49: left allmulticast mode
[  413.650455][T24260] bond50: left promiscuous mode
[  413.652813][T24260] bond50: left allmulticast mode
[  413.657704][T24260] bond51: left promiscuous mode
[  413.659819][T24260] bond51: left allmulticast mode
[  413.663582][T24260] bond52: left promiscuous mode
[  413.665620][T24260] bond52: left allmulticast mode
[  413.669069][T24260] bond53: left promiscuous mode
[  413.670744][T24260] bond53: left allmulticast mode
[  413.674135][T24260] bond54: left promiscuous mode
[  413.676051][T24260] bond54: left allmulticast mode
[  413.679857][T24260] bond55: left promiscuous mode
[  413.681814][T24260] bond55: left allmulticast mode
[  413.693776][T24260] vti0: left promiscuous mode
[  413.709890][T24260] geneve4: left promiscuous mode
[  413.712029][T24260] geneve4: left allmulticast mode
[  413.719446][T24260] bond62: left promiscuous mode
[  413.721505][T24260] bond62: left allmulticast mode
[  413.725471][T24260] vlan5: left promiscuous mode
[  413.728240][T24260] gretap0: left promiscuous mode
[  413.730658][T24260] bridge28: left promiscuous mode
[  413.732667][T24260] bridge28: left allmulticast mode
[  413.758785][T24260] veth15: left promiscuous mode
[  413.773178][T24260] veth19: left promiscuous mode
[  413.801074][T24260] veth23: left allmulticast mode
[  413.886767][T24268] vlan0: left promiscuous mode
[  413.888953][T24268] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  413.894483][ T5851] wg1 speed is unknown, defaulting to 1000
[  413.897019][ T5851] syz0: Port: 1 Link DOWN
[  413.932343][ T5703] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  413.952037][T24289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5134'.
[  413.955085][ T5703] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  413.968335][T24289] validate_nla: 2 callbacks suppressed
[  413.968344][T24289] netlink: 'syz.2.5134': attribute type 4 has an invalid length.
[  413.981568][ T5703] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  413.985957][ T5703] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  414.002425][ T5703] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  414.005518][ T5703] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  414.024582][ T5703] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  414.031893][ T5703] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  414.159927][T24306] netlink: 'syz.1.5137': attribute type 1 has an invalid length.
[  414.169433][T24306] netlink: 'syz.1.5137': attribute type 1 has an invalid length.
[  414.184724][T24306] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5137'.
[  414.197953][ T5703] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  414.201925][ T5703] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  414.204854][ T5703] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  414.216481][ T5703] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  414.365349][T24322] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  414.546224][T24337] netlink: 'syz.0.5149': attribute type 9 has an invalid length.
[  414.604394][T24340] unknown channel width for channel at 909000KHz?
[  414.607275][T24340] unknown channel width for channel at 909000KHz?
[  414.609550][T24340] unknown channel width for channel at 909000KHz?
[  415.159463][T24351] geneve5: entered promiscuous mode
[  415.556415][T24358] wg1 speed is unknown, defaulting to 1000
[  415.560569][T24358] lo speed is unknown, defaulting to 1000
[  416.421959][T24381] batadv5: entered promiscuous mode
[  416.427191][T24381] batadv5: entered allmulticast mode
[  416.688689][T24394] geneve5: entered promiscuous mode
[  417.366346][T24416] netlink: 'syz.0.5168': attribute type 13 has an invalid length.
[  417.369117][T24416] netlink: 'syz.0.5168': attribute type 17 has an invalid length.
[  417.389210][T24416] 8021q: adding VLAN 0 to HW filter on device bond0
[  417.392793][T24416] 8021q: adding VLAN 0 to HW filter on device team0
[  417.398319][T24416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  417.417370][T24416] wg1 speed is unknown, defaulting to 1000
[  417.420501][T24416] lo speed is unknown, defaulting to 1000
[  417.894919][T24435] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  418.402885][T24476] netlink: 'syz.2.5177': attribute type 13 has an invalid length.
[  418.406122][T24476] __nla_validate_parse: 14 callbacks suppressed
[  418.406134][T24476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5177'.
[  418.411996][T24476] netlink: 'syz.2.5177': attribute type 13 has an invalid length.
[  418.414782][T24476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5177'.
[  418.585169][T24486] bridge_slave_0: entered promiscuous mode
[  418.597226][T24486] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  418.693682][T24494] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5184'.
[  418.704898][T24494] netlink: 'syz.0.5184': attribute type 1 has an invalid length.
[  418.720325][T24494] 8021q: adding VLAN 0 to HW filter on device bond71
[  418.724362][T24494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5184'.
[  418.735236][T24492] netlink: 'syz.2.5183': attribute type 29 has an invalid length.
[  418.882691][T24505] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5188'.
[  418.896415][T24505] tc_dump_action: action bad kind
[  418.901744][T24505] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5188'.
[  418.905500][T24505] tc_dump_action: action bad kind
[  418.923770][T24507] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5189'.
[  419.130420][T24532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5196'.
[  419.137200][T24532] validate_nla: 1 callbacks suppressed
[  419.137209][T24532] netlink: 'syz.1.5196': attribute type 7 has an invalid length.
[  419.142396][T24532] netlink: 'syz.1.5196': attribute type 8 has an invalid length.
[  419.145499][T24532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5196'.
[  419.185515][T24541] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5199'.
[  419.369659][T24553] tipc: Resetting bearer <eth:syzkaller0>
[  419.373308][T24553] tipc: Resetting bearer <eth:syzkaller0>
[  419.429357][T24558] netlink: 'syz.2.5205': attribute type 12 has an invalid length.
[  419.439231][T24558] netlink: 'syz.2.5205': attribute type 2 has an invalid length.
[  419.813811][T24596] netlink: 'syz.1.5216': attribute type 13 has an invalid length.
[  419.991395][T24612] netlink: 'syz.2.5220': attribute type 2 has an invalid length.
[  420.082691][T24618] openvswitch: netlink: Flow key attribute not present in set flow.
[  420.103912][T24620] netlink: 'syz.0.5223': attribute type 1 has an invalid length.
[  420.148293][T24620] 8021q: adding VLAN 0 to HW filter on device bond72
[  421.193584][T24689] syzkaller1: entered promiscuous mode
[  421.195694][T24689] syzkaller1: entered allmulticast mode
[  421.296282][T24695] netlink: 'syz.0.5246': attribute type 1 has an invalid length.
[  421.315403][T24693] geneve6: entered promiscuous mode
[  421.339657][T24695] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  421.399378][T24698] wg1 speed is unknown, defaulting to 1000
[  421.402210][T24698] lo speed is unknown, defaulting to 1000
[  421.659495][T24717] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  421.662964][T24717] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  421.707285][T24723] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  421.710531][T24723] syzkaller0: entered promiscuous mode
[  421.712700][T24723] syzkaller0: entered allmulticast mode
[  421.789758][T24727] tipc: Resetting bearer <eth:gre0>
[  421.792032][T24727] tipc: Resetting bearer <eth:gre0>
[  421.802782][T24727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  421.809827][T24282] lo speed is unknown, defaulting to 1000
[  421.812299][T24282] syz2: Port: 1 Link ACTIVE
[  422.073366][T24738] 
[  422.074470][T24738] ======================================================
[  422.077386][T24738] WARNING: possible circular locking dependency detected
[  422.080311][T24738] syzkaller #0 Not tainted
[  422.082369][T24738] ------------------------------------------------------
[  422.086087][T24738] syz.2.5257/24738 is trying to acquire lock:
[  422.088682][T24738] ffffffff8f68e758 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[  422.092435][T24738] 
[  422.092435][T24738] but task is already holding lock:
[  422.095558][T24738] ffff88803aa08c70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  422.099310][T24738] 
[  422.099310][T24738] which lock already depends on the new lock.
[  422.099310][T24738] 
[  422.103565][T24738] 
[  422.103565][T24738] the existing dependency chain (in reverse order) is:
[  422.107248][T24738] 
[  422.107248][T24738] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  422.110612][T24738]        lock_acquire+0x120/0x360
[  422.112777][T24738]        _raw_spin_lock_bh+0x36/0x50
[  422.115034][T24738]        nr_rt_device_down+0x12a/0x720
[  422.117357][T24738]        nr_device_event+0x137/0x150
[  422.119601][T24738]        notifier_call_chain+0x1b6/0x3e0
[  422.122004][T24738]        __dev_notify_flags+0x18d/0x2e0
[  422.124362][T24738]        netif_change_flags+0xe8/0x1a0
[  422.126621][T24738]        dev_change_flags+0x130/0x260
[  422.128861][T24738]        dev_ioctl+0x7b4/0x1150
[  422.130922][T24738]        sock_do_ioctl+0x22c/0x300
[  422.133072][T24738]        sock_ioctl+0x576/0x790
[  422.135096][T24738]        __se_sys_ioctl+0xfc/0x170
[  422.137230][T24738]        do_syscall_64+0xfa/0x3b0
[  422.139383][T24738]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.142031][T24738] 
[  422.142031][T24738] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  422.145309][T24738]        lock_acquire+0x120/0x360
[  422.147383][T24738]        _raw_spin_lock_bh+0x36/0x50
[  422.149611][T24738]        nr_rt_device_down+0xa9/0x720
[  422.151893][T24738]        nr_device_event+0x137/0x150
[  422.154131][T24738]        notifier_call_chain+0x1b6/0x3e0
[  422.156462][T24738]        __dev_notify_flags+0x18d/0x2e0
[  422.158767][T24738]        netif_change_flags+0xe8/0x1a0
[  422.161072][T24738]        dev_change_flags+0x130/0x260
[  422.163258][T24738]        dev_ioctl+0x7b4/0x1150
[  422.165327][T24738]        sock_do_ioctl+0x22c/0x300
[  422.167435][T24738]        sock_ioctl+0x576/0x790
[  422.169470][T24738]        __se_sys_ioctl+0xfc/0x170
[  422.171668][T24738]        do_syscall_64+0xfa/0x3b0
[  422.173807][T24738]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.176433][T24738] 
[  422.176433][T24738] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  422.179775][T24738]        validate_chain+0xb9b/0x2140
[  422.182037][T24738]        __lock_acquire+0xab9/0xd20
[  422.184271][T24738]        lock_acquire+0x120/0x360
[  422.186435][T24738]        _raw_spin_lock_bh+0x36/0x50
[  422.188675][T24738]        nr_rt_ioctl+0x390/0xd50
[  422.190748][T24738]        sock_do_ioctl+0xdc/0x300
[  422.192861][T24738]        sock_ioctl+0x576/0x790
[  422.194880][T24738]        __se_sys_ioctl+0xfc/0x170
[  422.197071][T24738]        do_syscall_64+0xfa/0x3b0
[  422.199225][T24738]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.201941][T24738] 
[  422.201941][T24738] other info that might help us debug this:
[  422.201941][T24738] 
[  422.206045][T24738] Chain exists of:
[  422.206045][T24738]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  422.206045][T24738] 
[  422.211469][T24738]  Possible unsafe locking scenario:
[  422.211469][T24738] 
[  422.214392][T24738]        CPU0                    CPU1
[  422.216511][T24738]        ----                    ----
[  422.218793][T24738]   lock(&nr_node->node_lock);
[  422.220837][T24738]                                lock(nr_node_list_lock);
[  422.223728][T24738]                                lock(&nr_node->node_lock);
[  422.226631][T24738]   lock(nr_neigh_list_lock);
[  422.228620][T24738] 
[  422.228620][T24738]  *** DEADLOCK ***
[  422.228620][T24738] 
[  422.232064][T24738] 2 locks held by syz.2.5257/24738:
[  422.234258][T24738]  #0: ffffffff8f68e7b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[  422.238127][T24738]  #1: ffff88803aa08c70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  422.241954][T24738] 
[  422.241954][T24738] stack backtrace:
[  422.244428][T24738] CPU: 1 UID: 0 PID: 24738 Comm: syz.2.5257 Not tainted syzkaller #0 PREEMPT(full) 
[  422.244445][T24738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  422.244453][T24738] Call Trace:
[  422.244459][T24738]  <TASK>
[  422.244466][T24738]  dump_stack_lvl+0x189/0x250
[  422.244485][T24738]  ? __pfx_dump_stack_lvl+0x10/0x10
[  422.244499][T24738]  ? __pfx__printk+0x10/0x10
[  422.244514][T24738]  ? stack_trace_save+0x9c/0xe0
[  422.244563][T24738]  print_circular_bug+0x2ee/0x310
[  422.244579][T24738]  check_noncircular+0x134/0x160
[  422.244595][T24738]  validate_chain+0xb9b/0x2140
[  422.244610][T24738]  __lock_acquire+0xab9/0xd20
[  422.244628][T24738]  ? nr_rt_ioctl+0x390/0xd50
[  422.244642][T24738]  lock_acquire+0x120/0x360
[  422.244656][T24738]  ? nr_rt_ioctl+0x390/0xd50
[  422.244670][T24738]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  422.244683][T24738]  ? nr_rt_ioctl+0x390/0xd50
[  422.244695][T24738]  _raw_spin_lock_bh+0x36/0x50
[  422.244711][T24738]  ? nr_rt_ioctl+0x390/0xd50
[  422.244724][T24738]  nr_rt_ioctl+0x390/0xd50
[  422.244741][T24738]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  422.244757][T24738]  ? apparmor_capable+0x137/0x1b0
[  422.244773][T24738]  ? capable+0x89/0xe0
[  422.244792][T24738]  ? nr_ioctl+0x1b1/0x3b0
[  422.244806][T24738]  sock_do_ioctl+0xdc/0x300
[  422.244821][T24738]  ? __pfx_sock_do_ioctl+0x10/0x10
[  422.244836][T24738]  ? __lock_acquire+0xab9/0xd20
[  422.244855][T24738]  sock_ioctl+0x576/0x790
[  422.244869][T24738]  ? __pfx_sock_ioctl+0x10/0x10
[  422.244882][T24738]  ? __fget_files+0x2a/0x420
[  422.244893][T24738]  ? __fget_files+0x3a0/0x420
[  422.244901][T24738]  ? __fget_files+0x2a/0x420
[  422.244910][T24738]  ? bpf_lsm_file_ioctl+0x9/0x20
[  422.244926][T24738]  ? __pfx_sock_ioctl+0x10/0x10
[  422.244938][T24738]  __se_sys_ioctl+0xfc/0x170
[  422.244953][T24738]  do_syscall_64+0xfa/0x3b0
[  422.244964][T24738]  ? lockdep_hardirqs_on+0x9c/0x150
[  422.244974][T24738]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.244985][T24738]  ? exc_page_fault+0x9f/0xf0
[  422.244994][T24738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.245003][T24738] RIP: 0033:0x7fd17dd8ebe9
[  422.245016][T24738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  422.245024][T24738] RSP: 002b:00007fd17eb61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  422.245037][T24738] RAX: ffffffffffffffda RBX: 00007fd17dfc5fa0 RCX: 00007fd17dd8ebe9
[  422.245045][T24738] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004
[  422.245051][T24738] RBP: 00007fd17de11e19 R08: 0000000000000000 R09: 0000000000000000
[  422.245057][T24738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  422.245063][T24738] R13: 00007fd17dfc6038 R14: 00007fd17dfc5fa0 R15: 00007ffc13176788
[  422.245076][T24738]  </TASK>
[  422.363352][T24743] ieee80211 phy52: Selected rate control algorithm 'minstrel_ht'
[  428.206090][ T1118] block nbd1: Possible stuck request ffff888043398000: control (read@0,1024B). Runtime 120 seconds
[  428.210729][ T1118] block nbd1: Possible stuck request ffff888043398200: control (read@1024,1024B). Runtime 120 seconds
[  428.215076][ T1118] block nbd1: Possible stuck request ffff888043398400: control (read@2048,1024B). Runtime 120 seconds
[  428.219593][ T1118] block nbd1: Possible stuck request ffff888043398600: control (read@3072,1024B). Runtime 120 seconds

VM DIAGNOSIS:
16:08:33  Registers:
info registers vcpu 0

CPU#0
RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffff888109588000 RDX=0000000000000000
RSI=0000000000000000 RDI=000000000000000a RBP=ffffc9000351fee0 RSP=ffffc9000351fe20
R8 =ffffc9000351fe6f R9 =0000000000000000 R10=ffffc9000351fe60 R11=fffff520006a3fce
R12=ffffc9000351fe60 R13=ffffffff8b8d2750 R14=0000000000000000 R15=1ffffffff171a4ea
RIP=ffffffff81afe7c0 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555831a2500 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbb5445ffc8 CR3=0000000119094000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fd17de12e53
XMM06=0000000000000000 00007fd17de12e4d XMM07=0000000000000000 00007fd17de12e61
XMM08=0000000000000000 00007fd17de12ee7 XMM09=0000000000000000 00007fd17de12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000012fe RDI=00000000000012ff RBP=00000000000003f8 RSP=ffffc900027bf150
R8 =ffff888021320237 R9 =1ffff11004264046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b018d1 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd17eb616c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000011c0 CR3=0000000022058000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffff000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fd17eafd100 00007fd17df97460 XMM05=00007fd17df97478 00007fd17df974c0
XMM06=00007fd17df974b8 00007fd17df974b0 XMM07=00007fd17df974a8 00007fd17df974a0
XMM08=0000000000000000 00007fd17de12ee7 XMM09=0000000000000000 00007fd17de12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
