last executing test programs:

11.202283718s ago: executing program 1 (id=2703):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000140)=0xec5, 0x4)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec0000000000000000d000000000010ff020000000000000000000000000001"], 0x340a)

10.786882222s ago: executing program 1 (id=2708):
socket$alg(0x26, 0x5, 0x0)
pipe(&(0x7f0000000580))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000100), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001)

10.454538465s ago: executing program 1 (id=2711):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000) (async)
unshare(0x6a040000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmsg$tipc(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000600)="a7000000", 0x4}, {&(0x7f00000006c0)="b324d9f1", 0x4}], 0x2}, 0x400c1)
write$tcp_congestion(r0, 0x0, 0x0)

7.474999723s ago: executing program 2 (id=2729):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x26, 0x5, 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', <r2=>0x0, 0x2f, 0x5, 0x10, 0x1, 0xc, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x40, 0x7800, 0x3, 0x6}})
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6, @random="cb8034a6b730"}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1)
sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x60}}, 0x4000)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=<r5=>0x0)
bind$nfc_llcp(r1, &(0x7f00000002c0)={0x27, r5, 0x1, 0x3, 0x2, 0x0, "55b3876cef722e5bf3279856ae68b41110e8b3c92fa50ba75acf76364db0b2d5e725fd889d8ef09a2c34a73cdfbc964d25298d0527f299430a575a16a6a3a8", 0x29}, 0x60)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1)
sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa33}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3c5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8004}, 0x20040000)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r8, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000000}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7ff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080)
r9 = socket$packet(0x11, 0x3, 0x300)
bind$bt_sco(r1, &(0x7f0000000680)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r10, &(0x7f0000000700)='syz1\x00', 0x1ff)
ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0xc0385869, &(0x7f0000000840)={<r11=>r3, &(0x7f0000000740)='IPVS\x00', 0x200000, &(0x7f0000000780)={@_ha_fsid={[0x4, 0x401]}, {0x0, 0x7f, 0x2, 0x8000000000000001}}, 0x8, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0x9})
sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f0000000bc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000008c0)={0x2b8, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff00000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x77}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "7946500642c0cbcb8aee71cad54b268008a216ccb552dfedb20a3ed384ceaa3e966f4331"}}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @mcast1, 0xfffffff9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xb97, @loopback, 0x80000000}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcfe}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffca}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb4a9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x24000030}, 0x4000000)
ioctl$sock_ifreq(r11, 0x8934, &(0x7f0000000c00)={'netdevsim0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0xffffffff, @host}})
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r12, 0x10e, 0x4, &(0x7f0000000c40)=0x4, 0x4)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r12, 0x4048587b, &(0x7f0000001200)={{<r13=>r11, &(0x7f0000000c80)='!\x00', 0x402000, &(0x7f0000000cc0)={@_ha_fsid={[0x9, 0x2]}, {0x0, 0x1ff, 0x5, 0x5}}, 0x1, &(0x7f0000000d00), &(0x7f0000000d40)=0x7ab1}, 0x4, &(0x7f0000001180)=[{0x2, 0x6, &(0x7f0000000d80)='\'\x04//}\x00', &(0x7f0000000dc0)="92c3257a3aec04af89157998cd382e4ef2e2de376d378a4d964ee9db8a8b31fbd0764132601444d2aa5c97c53d477a437013a6cfa85e87405b75d62cf3c0ed16c4134a1a99226780965baec85267d7d1278d32562eb5cab22a29a2af9bd06f9b15cb6e86b3bcf9de", 0x68, 0x28}, {0x2, 0x0, &(0x7f0000000e40)='\'^\x00', &(0x7f0000000e80)="c1a54907284c73cfbc85e986fafbb328617dc5d4ef825abc536fb505da291a5a99697f9ee61416140a0f16835a4be8eae0216abd39d230683cb6117e7359b86da4a0b385693aa9c73d27ec9a023b2b0fcac5e444057cff292201e34b7c4f806b0852f44cbfdf19c5f68b46a7bd1850e0e49a3231a2f7213ed02b28829ab6f1b54c891d525ce1e77474f8a70d62a8cf36638fdcfaf3a3a833a12e4506148528a55400ec8d8633984897f1fc85ab8cefb275c333e8a245a772cae9ac7cf58bd09e28695f9a8f5c4cf2297c1d2eda70c294fecb88c34b9731e29a7936995e7bc8e53b", 0xe1, 0x2}, {0x2, 0x6, &(0x7f0000000f80)='bridge_slave_0\x00', &(0x7f0000000fc0)="461d6a73b8f1a4f03e9310d46d629bfe9154c895c3e50fa19d23ba1a0d89f3bd37731ea4643123d50a126565ebdd9aaed527aaac246a5467f695d7c1a823efd004a53aa4988ba18e2d8dc39ca3d250be96acd2000417d89d61459563cb8a9051675cc48e3e977449c20ac97b003892099d2e1122121ae4f706c8283d056ba7b195d39be9c5781d45247d39ebb80b0f96e028f8c5c5532a212837f353c3f1b7762281d1eaa69e4934d61acb1e537fe34cf65b3d2c2376c7ee76d9303488048dc4553fd04fcd296b5422e9ee5d2be599a9c7337866a4dccf3e3fe3bf73b078", 0xde, 0x8}, {0x2, 0x1, &(0x7f00000010c0)='netdevsim0\x00', &(0x7f0000001100)="55fc79e623c578b0a3d1e9c95e332492d82e81a19a81ac7450256971f13b3c3f1c8d98aee4cc9874999d1b5130e338c8f25141df5ad62f2a3abf8b3bb16838bb109f4aefcbf2637a03c0dc18901580494aa59645c1efd8da1ab28fb64f97ca6522f861", 0x63, 0x2e}]})
sendto$inet(r13, &(0x7f0000001280)="d3987ab3cf944bc480fb43bdbdf1dc7dfd66f92089ce7681cfe9d230e383d76eeb4697a9e9b0f3d48ea1a06f6623cbda75ccd0b25960017c64a89481ef61f863a53ddf5c2a9827cd8ae3371246dae818632751735a674e245a136bc5599b3cdbf8da8335599645597012123a39ce42c518", 0x71, 0x11, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r14 = socket$netlink(0x10, 0x3, 0x1)
ioctl$INCFS_IOC_PERMIT_FILL(r14, 0x40046721, &(0x7f0000001300)={r11})
r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r6)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x30, r15, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8054)

7.294202878s ago: executing program 2 (id=2730):
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', <r0=>0x0, 0x4, 0xd, 0x1, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x10, 0x8000, 0x2, 0xac}})
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x200000000000037e, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000030000000000000012000000850000009300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x211}, 0x94)
vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000200)="f29ac5c11642f3c5b6500207f2f8ad83c58234d5d7524030a5975b00a0ccfd4278536e5f945d763579673ae95576da5c9108b8b065b3af1dad68e5c7e6278dcfe505ab43bf54e009d1cdeacabc05ab7e8e31542b07162da3dcc2c530f4a0eb1fe8b69c2d10c6d62b7c77d4e41070bddd85033c61d8dceac1d707dc29bfe04974c0483021176894134e14d0e749fb69e6002efad7e378977dfa5fceb2d0755437e66b559d3ebc429abf5134ebed5eb8442ecd72a3ddbfcbe7a2d3abbc04707e1bcfb894e8a376bab865b2dc1b276b4453e1a73faf7b", 0xd5}, {&(0x7f0000000140)}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000000300)="7dd2dba8a9beda5981000a2eaa3bb3f5de75367981cd1d8cf124d1ead26b4f3e63204ba5b60accba75b7d7dfb837b896bc5ac25513f229aae9dc3955ea8c147d3d3b7bd167550e4beb46462e3464daa3c10a34e107012e29a8cc05d2d74cac872f6353f857793c028ad7be2b85e7021f6b11937eb146d9d6", 0x78}], 0x4, 0x0)

7.277381465s ago: executing program 2 (id=2731):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="9802000003000000009500000080000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='memory.swap.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000})
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x800, 0x8070bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000804}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000df326b33a8a2494105f200b84f4b1f55b3c01145727f032e24b3eedeb51d63df327f16780667d2c89382a074eccf92f14f7064a36e85728e5195af17df7dbf308f36f86493ddbbbe9205cb7ea060846ad19d39cdfb72529b098f901e798f61945e770f3340ca92e2d5df077fc4609ede47201b14aa3c8f5478fc4827029c604c5988e32201cf45c932343e2a8a6ce34d8fda45fd4982e749735a", @ANYRES16=r2, @ANYBLOB="040026bd7000fddbdf251a00000008000300", @ANYRES32=0x0, @ANYBLOB="38002e80050005000100000006000300feff000006000200010000000c0004000200aaaaaaaaaaaa08000600010000000500050001000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x8)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
sendto$inet6(r7, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88)
syz_init_net_socket$ax25(0x3, 0x3, 0xce)
socket$netlink(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)

7.146751446s ago: executing program 2 (id=2732):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)='%\x00\x00\x00\x00\x00\x00\x00', 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r1, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x64}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f0000000800)=""/162, 0xa2}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000000b40)=""/140, 0x8c}, {&(0x7f0000002a00)=""/4099, 0x1000}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/19, 0x13}, {&(0x7f0000000100)=""/3, 0x3}], 0xc}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x8bb8}], 0x3, 0x2000, 0x0)

6.929851346s ago: executing program 2 (id=2735):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r1, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, 0x8)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@loopback, @rand_addr, <r4=>0x0}, &(0x7f0000000100)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000200)={'gre0\x00', <r5=>0x0, 0x7, 0x8000, 0x77dc5451, 0x7082a2dc, {{0xd, 0x4, 0x0, 0x25, 0x34, 0x66, 0x0, 0x1, 0x4, 0x0, @loopback, @multicast1, {[@ssrr={0x89, 0x1f, 0x21, [@remote, @private=0xa010100, @multicast2, @dev={0xac, 0x14, 0x14, 0xa}, @remote, @local, @multicast1]}]}}}}})
r6 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)={0x1c, 0x5e, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x4dc}]}]}, 0x1c}], 0x1}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip_vti0\x00', <r9=>0x0, 0x10, 0x700, 0x1, 0x7f, {{0x16, 0x4, 0x0, 0x2, 0x58, 0x67, 0x0, 0x66, 0x2f, 0x0, @loopback, @multicast1, {[@end, @noop, @ssrr={0x89, 0x17, 0x6e, [@rand_addr=0x64010101, @remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @lsrr={0x83, 0x23, 0xb7, [@private=0xa010102, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @local, @broadcast, @multicast2]}, @lsrr={0x83, 0x7, 0xec, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r13)
sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r12, {0x5, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_INDEV={0x14, 0x3, 'gretap0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x810)
bind$x25(r6, &(0x7f0000000580), 0x12)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', <r14=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x170, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4004000}, 0x80)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000027c0000040042800c00018006120612903912"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000)

6.567656656s ago: executing program 2 (id=2737):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000076000d00000000000000000003000000000000000800010002"], 0x20}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
readv(r3, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1)
recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
read$alg(r3, &(0x7f0000000080)=""/47, 0x2f)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
r7 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r7, &(0x7f00000006c0)=[{{&(0x7f0000000400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x28}}], 0x1, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000100001040000000000000000000000001c926e0918c1248aad9416b156bcb3ecb9bb4b58ee7a", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x4c}}, 0x0)
r9 = socket$rds(0x15, 0x5, 0x0)
getsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000000c0), 0x10)

5.428641778s ago: executing program 4 (id=2742):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050029bd7000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="08000500060000000a0009000000110000010000"], 0x30}, 0x1, 0x0, 0x0, 0x200008d5}, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, r1, 0x201, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1ff, 0x5f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20040844)
bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10)
close(0x3)

5.234162589s ago: executing program 4 (id=2743):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x18, 0x0, 0x2}, 0x28)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x58, &(0x7f0000000040)}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000042}, 0xc0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x1b, 0x400, 0x70bd25, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4042004}, 0x60845)

5.189642488s ago: executing program 4 (id=2744):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000540)={0xb0000010})
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4408}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0x130c, 0x13, 0x2, 0x70bd2b, 0x25dfdbfc, {0x2, 0x28, 0x6, 0x7, {0x4e22, 0x4e23, [0x100, 0x97c, 0x1, 0xb5], [0x2d, 0x80000001, 0x8, 0xff49], r11, [0x401, 0x3]}, 0x9, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "f16eb04a1e4b10cf4791fbb084852017d332536b6286617aa95cf32b231e0806c541d292d636612c995871a009989a7674d42dafd904eb55d3de9c749f7a889ee1f51546a4354270cf20b4fc45cff9c34308410aa32f71d7c2c6cc76595d3041b4c702161878155aec93f2a483217bcedb97d17db48c72ac526afd22552a4b3468a5bfc406c88aa797e820e2134ed5c64d519120589c49a072fbd15ad6d0c6620c9b2998bd88be0c039a48eaf0a86205e5d8cf4c5e5895036c5de89b8120586555ce70361e9811a6b7ef24bf7372267c7f64cef107aed26adb5987864d0ca972fd3507c1cf8a3b151afe098b"}, @INET_DIAG_REQ_BYTECODE={0x79, 0x1, "aeb9bb9214a747b30a7e6a3401a103e7e39cb491d498e18de43bd85440ea00c25bbb27f93599a113e9c28e9aac6fee3c5fa0083ff0c867d787bbae2334826b2a3755a39567bd13bad04df86a2c01ac943636fc734300a8a68feb1ce811ecd279a7f9d8205a922cfe0ca6220723e138cc5686aa77c6"}, @INET_DIAG_REQ_BYTECODE={0xc4, 0x1, "bd955af11c2864509d1f74d31b25a12e67749f725346657bbbc2c5c4372dc1eb9bef410a91bcd4484ea6a3835b575ccecc5de88fa917a18aa8bc72c7c32946d119b29bb0bf28e15ab7ce48af18c948e37f270fe53b7a4940750d141643a27a841629e4f9a69ad6712bf7166074fdf945dfadea174914f57f345cb572a6717c344dde3d6052ddd86e621533d901282db1b2ce22bc7f9b4fa327391788662bd8f7a3c2a4f83f0b36871e367a2faa61aaa1106a2bebcaa9bd4489a5d2b7e79005a8"}, @INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "38aafc72ca3e93cea5d3902aa93186d739c97a0dbf2f46a7b1affee350ab6a253085bba738e484ff"}, @INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "83c4c645e8efa12328af912c431ff7138b38b90c0bf26f69b2eabcbec9c35a9bc4affe9ab2c9b8cd44bb2f3ac8dee8739f032069671096a360accc3b733ad0361fd8600a8bbe75c338589c2bc78fa1f0d0b3bad1fb7f7e39933982"}]}, 0x130c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000041)
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socket(0x400000000010, 0x3, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f000000fa00)=0x9)
sendmsg(r0, &(0x7f0000012900)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

4.502302031s ago: executing program 4 (id=2747):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x1b75000}, [@generic={0x71, 0x0, 0x1, 0x75}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x107}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x205082, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r3, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000900)=@proc={0x10, 0x0, 0x25dfdbfc, 0x400}, 0xc, &(0x7f0000000940)=[{&(0x7f00000019c0)={0x1108, 0x3a, 0x200, 0x70bd29, 0x25dfdbff, "", [@nested={0xf6, 0x128, 0x0, 0x1, [@generic="ffb77821fbb73c0b96692f3fcfa0c76efbddc068b5a005d33e0932452e07f18497659db778abc7512c046fc557f5cd72c959f2560bd030812c0176a7010c5814368af7e14f63a257a0b2d56eae3a23d228c0ab00934e09dcaf4201b06c427c738c47b6ec29dacc287fb9c58d06245311b2c4c12b3498116fddc0168b97b51d0fe91b687d50ec045bde0de543d74df02e785a8c6be2e093b1c333e76d7b883e0dab25f1833148bb854ff3b8040502fe254dd29a4797378441a11b759a6e7859d29204ed988132e91c0139bdf85128b648e1ccded18b0dfd68416c8e853f943daa223a7d661fc12bf86395", @nested={0x4, 0x41}, @nested={0x4, 0x13}]}, @generic="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"]}, 0x1108}], 0x1, &(0x7f0000000a00)=[@rights={{0x34, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r1, r1, r1]}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r1, r1, r1, r1]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r2, r1, r1]}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r1, r3, r1]}}], 0xc8, 0x40000}, 0x4800)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
bind$can_j1939(r4, &(0x7f00000004c0)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x3}}, 0x18)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_HASHSIZE={0xfffffffc, 0x12, 0x1, 0x0, 0xe54a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x80)
syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xf, "0476bc4b4c9e3e260cbfad9904"}, @timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'tunl0\x00', <r9=>0x0, 0x700, 0x40, 0x401, 0x1, {{0x10, 0x4, 0x3, 0x3e, 0x40, 0x66, 0x0, 0x5, 0x4, 0x0, @multicast1, @multicast1, {[@ssrr={0x89, 0x2b, 0xaa, [@broadcast, @empty, @private=0xa010101, @multicast1, @multicast2, @multicast2, @multicast1, @remote, @local, @remote]}]}}}}})
sendmsg$nl_route_sched(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=@deltclass={0x24, 0x29, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x6, 0xffff}, {0xfff3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000c}, 0x4)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r11, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x18)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r11, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4000000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4891}, 0x20000060)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000600))
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0xd4, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf9f6}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0xce24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x41}, 0x804)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CONNECT(r12, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000003e40)={0x20, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40840)

4.329157771s ago: executing program 1 (id=2749):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x25, &(0x7f0000000700)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a0000020900030073797a300000000044010000080a01080000000000000000010000073a00074032e97608c07b8f34d704cc507d07a8d4c429672a9b6841e516ce194f03354b3c46a930469ce36ee8391a02352a70d543c633dc17a9d300007900074012119f33dbd27dbba871f33b8206fc0a59dac6df96baf86f3deffa20b8a2b13fa2fbc917a33ad4b9dc903553ff1e7533cd9d1e3f6a3248b10a63552977fab38d9ad7409cbd223b094a0bb6f0884c8839890d122f9b9963668c97749b2304852a8d461ccc39dc307f41ac41688a4f2d64a916dc532d00000008000a4000000000090001007379"], 0x248}}, 0x0)

4.039007376s ago: executing program 4 (id=2752):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0)
r1 = socket(0x1, 0x5, 0x0)
close(r1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000000010000081100000900040001000000", @ANYRES32, @ANYBLOB="200000000000000000000000000018b69a950009dd345167d22fe3fee340d025726c12eacbcd8e28aebcd859000000009c0b1d205930500000000000000000e876160b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x2)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9beb01001800000000008000000000200000000002bf03"], &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r7 = socket$igmp6(0xa, 0x3, 0x2)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xd7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x4f, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x200008c6}, 0x24000040)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
epoll_create1(0x80000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)

4.037261482s ago: executing program 1 (id=2753):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0800080007000000000016000000461200600065000003019078e00000017f0000014428694000000002000000fcffffff00000000810000000500000005800000000000000d00001000071b04000000000000000000000000ac1414bb0a0101020000000000110090780000000713a1b3f9e962c96cf1e606cfef72acc4b22df36cbcba68efd7760eae34651dd8b85a264b33476fb2621358017a9e7210efd8ecf0566540c896fd9628b44a03150e566a2022af6e9623f359d38557a31a"], 0x6e)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x10})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={<r3=>0x0, @in={{0x2, 0x4e23, @multicast1}}}, &(0x7f0000000280)=0x84)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)={r3, 0x4, 0x1, [0x5]}, 0xa)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000240)={0x28, 0x0, 0x2710, @hyper}, 0xfffffde1)
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30d)

3.687180805s ago: executing program 0 (id=2755):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000100))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000180)=0x1ff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x2000c090)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000010002104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="002004fdfb000000"], 0x20}}, 0x0)
socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x3}, {0xfff3, 0x6}, {0x9, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20048081}, 0x51)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x88, 0xd, 0x401}, {0xc, 0x0, 0x6, 0x25d8}]})
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0x4}, 0x6)
write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6)
socket$alg(0x26, 0x5, 0x0)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x404c880)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x84)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4041)
syz_open_procfs$namespace(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

3.28615835s ago: executing program 1 (id=2756):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000020440)=ANY=[@ANYBLOB="18000000004000000000000009000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
close(0x3)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

2.717812112s ago: executing program 4 (id=2757):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = getpid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40)
syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/time_for_children\x00')
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000) (async)
unshare(0x6a040000)
r2 = socket$kcm(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x97, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

2.218391029s ago: executing program 3 (id=2759):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0134014030d9"})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
close(r1)
mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x4a, 0x0, 0x0, 0x0, 0x7, 0x0, 0x226, 0x8, 0x4})
mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r1, 0x5c2a7000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r3, 0xac9d4000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9, 0x32, 0xffffffffffffffff, 0x59449000)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0)
r5 = socket(0x1d, 0x2, 0x6)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x6a, 0x3, 0x1, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r3, 0x20, &(0x7f0000000080)={&(0x7f0000000300)=""/207, 0xcf, 0x0, &(0x7f00000020c0)=""/4096, 0x1000}}, 0x10)
write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x2b, 'rlimit'}, {0x0, 'net'}, {0x2b, 'io'}, {0x2b, 'rdma'}, {0x2d, 'devices'}, {0x2d, 'blkio'}, {0x2b, 'rlimit'}, {0x35c85cc7672f58c6, 'cpuacct'}]}, 0x38)
ioctl$TUNGETFEATURES(r6, 0x5452, &(0x7f00000013c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94)

2.134037978s ago: executing program 0 (id=2760):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010000304fdff01010000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000a04d060028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00020000100000000800200001"], 0x50}, 0x1, 0xba01}, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000140))
setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$sock_timeval(r5, 0x1, 0x15, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200))
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd5a906d002008000c11ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20000c90788108"], 0x46)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x748)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010000304fdff01010000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000a04d060028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00020000100000000800200001"], 0x50}, 0x1, 0xba01}, 0x0) (async)
ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000140)) (async)
setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
getsockopt$sock_timeval(r5, 0x1, 0x15, 0x0, &(0x7f0000000080)) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200)) (async)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async)
write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd5a906d002008000c11ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20000c90788108"], 0x46) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x748) (async)

1.729135324s ago: executing program 0 (id=2761):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x8000, 0x7, 0x9, 0xfbffffff, 0xf}) (async)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x8000, 0x7, 0x9, 0xfbffffff, 0xf})
recvmmsg$unix(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/221, 0xdd}, {&(0x7f0000000240)=""/95, 0x5f}], 0x2, &(0x7f00000003c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2}}, {{&(0x7f0000001540)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f00000015c0)}, {&(0x7f0000001600)=""/234, 0xea}], 0x2, &(0x7f0000001740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000001800), 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/155, 0x9b}, {&(0x7f0000001940)=""/155, 0x9b}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000003e80)=[{&(0x7f0000001bc0)=""/164, 0xa4}, {&(0x7f0000001c80)=""/218, 0xda}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/26, 0x1a}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/169, 0xa9}], 0x6, &(0x7f0000003f00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000003f80), 0x6e, &(0x7f00000040c0)=[{&(0x7f0000004000)=""/163, 0xa3}], 0x1, &(0x7f0000004100)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000004180), 0x6e, &(0x7f00000044c0)=[{&(0x7f0000004200)=""/16, 0x10}, {&(0x7f0000004240)=""/19, 0x13}, {&(0x7f0000004280)}, {&(0x7f00000042c0)=""/69, 0x45}, {&(0x7f0000004340)=""/228, 0xe4}, {&(0x7f0000004440)=""/112, 0x70}], 0x6, &(0x7f0000004540)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f00000045c0), 0x6e, &(0x7f0000004900)=[{&(0x7f0000004640)=""/186, 0xba}, {&(0x7f0000004700)=""/247, 0xf7}, {&(0x7f0000004800)=""/225, 0xe1}], 0x3, &(0x7f0000004940)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f00000049c0)=""/43, 0x2b}, {&(0x7f0000004a00)=""/93, 0x5d}, {&(0x7f0000004a80)=""/60, 0x3c}], 0x3, &(0x7f0000004b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x9, 0x240, &(0x7f0000004d80))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x18, 0x2e, 0x9, 0x70bd27, 0x25dfdbff, {0x4}, [@nested={0x4, 0x1a}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2)

1.576536992s ago: executing program 0 (id=2762):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x38, 0x19, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x14, 0x0, 0x0, 0xff, 0x3, 0x0, 0x7, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x5}, @RTA_GATEWAY={0x14, 0x5, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000090}, 0x50)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000500)=0x1aa6, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, <r6=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000280), &(0x7f0000000140)=r3}, 0x22)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0)
r7 = getpid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x2c], 0x0, 0x0, 0x1, 0x0, r7}}, 0x40)

1.570952872s ago: executing program 3 (id=2763):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000000)={0x20, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}]}, 0x20}}, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000780)=""/100, 0x64, 0x4)

1.406960861s ago: executing program 0 (id=2764):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x2}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)={0xac, 0xb, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x84, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x80, 0x1a, ';/f4d\x11\xac\xa4P\x8dd=\xd9\xc3W\xaf\xd8W\x9d\n\xa6&\xb3\x96M\xa3\x83\xce\xd8\xc2L\xf9t\xf7\x81\x9f\t\xe5\xf3\xdb7\x14\x16\x1a\x96\x1e|\xfc\x99}\x81;yW;\xf1\xbe\xf7\xb3\xe9\xaa\v\xbe0SP\xab\xad\xe7Y\x10\x19\xa4E\xb6!\xe6\x83\xc1\xa6D\xe3\xb8m\x7f\xed%6\xd2\x98\x02xKZ\x95^d\x85M\x9f\r[\x84\xfa\xf6\xd6\xea\x88\x12T\x16\xb0\x8b\x9b\xb1\xc5|v\x0f$\xf9\x06w\xf4'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000800)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="4980020009d000003c0012800b000100697036746e6c00002c00028014000200ff010000000000000000000000000001140003"], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x0)

1.393469744s ago: executing program 3 (id=2765):
syz_emit_ethernet(0x208, &(0x7f0000000540)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x6, 0x1, 0x2}}, {@ipv6={0x86dd, @dccp_packet={0x3, 0x6, 'Oee', 0x1ca, 0x21, 0x62494e5ddc8fdbe, @local, @mcast2, {[@srh={0x2c, 0x10, 0x4, 0x8, 0x5, 0x10, 0x7, [@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x42}, @rand_addr=' \x01\x00', @private2, @mcast1]}, @dstopts={0x16, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0xe}, @calipso={0x7, 0x48, {0x1, 0x10, 0x4, 0x1, [0x0, 0x1, 0x7, 0xffffffffffffffff, 0x3c, 0x7, 0x0, 0x8001]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1}]}], {{0x4e23, 0x4e24, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, "1d23c5", 0x1, "2593b9"}, "0f99b85a68e1493e22dcf78917c1eac0a7bfb31cc487807c1508f5eeeeeb6eb7eb9340886fd9f8bee9d3e7dfd2ee021a993a542a800216a54aef0e68efd1668e4df29730307ce9fcd98a00bb0c3ca5b40badf7ce091f4ff9ae61064ddc351aa7a6d9e0037ccc4cd984ff9560514024127d6f89ed88e6a99430f270995d2cb6cf50404be201d308e9add997ee10db6727023cdaf7c7016eed7cce4cd5f96dea90725071c3587636b34282bb7ed66ebafa5b4e7bd8e1a511a24146"}}}}}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

1.284267712s ago: executing program 0 (id=2766):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000200000000000008000000000000610022f0192477e33d7ce45f3ff38e89a8"], 0x0, 0x28}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
socket$kcm(0xa, 0x3, 0x87)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000ffff25b800e402f720ff076a0000", @ANYRES32=0x0, @ANYBLOB="4200000021200000300012800c0001006d6163766c616e0020000280080003000300"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44891}, 0x44)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000002c0)=<r9=>0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001e00)={0x0, 0x0, {0x0, @struct, <r10=>0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r8, 0x50009418, &(0x7f0000000e00)={{r6}, r9, 0x2, @inherit={0x58, &(0x7f0000000300)={0x0, 0x2, 0x1, 0x7485, {0x20, 0x0, 0x9, 0x1, 0xddbc}, [0x8c76, 0xb]}}, @devid=r10})
ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000380)={{r2}, r9, 0x4, @unused=[0xcd7ecb0, 0x8, 0x6040, 0x1d54b3a6], @subvolid=0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0xc, 0x4)
r11 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100000000000020000800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000005000008001b"], 0x30}}, 0x0)

182.536911ms ago: executing program 3 (id=2767):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000001380)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="17", 0x1}], 0x1, 0x0, 0x0, 0x11}], 0x1, 0xc48d4)
readv(r2, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4)
write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)
recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/17, 0x11}}, {{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000500)=""/247, 0xf7}, 0xfffffffb}], 0x2, 0x2002, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x0, 'lblcr\x00', 0x2, 0xac, 0x13}, 0x2c)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x2c, @broadcast, 0x4e24, 0x4, 'lc\x00', 0x4, 0x4000, 0x76}, 0x2c)

123.466867ms ago: executing program 3 (id=2768):
socket(0x25, 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000380)=0xf, 0x4)

0s ago: executing program 3 (id=2769):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
unshare(0xc000600)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0x3}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0xfffffffffffffdea, &(0x7f0000000480)}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x2000c090)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010002104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000849b464c3113ea54b63b237e2340c0a9bc50708ec85bc84bb6978009668603f5d76c81d7d344a78beee97235c7dbdb0c65122dfd20bacc9056920e0012d5b0ab8c66b2320225f6f447dfe8efa379cbee325d0fc97bc8af3133f5d65443c24563e6a1c1c5bf7a441a6055963740d059507c22e3de82bf9014a4d0ec223793638c1054005f99b8ec9aecbcc240c7116969fe462ca89e1bcec4c4bd24b0d14caaff9c2eeb233226d489b2570cfaac51b5dd178bee40e418cffec81508dfc581b0c731e6a34217512e541c602bd509855dce7a314c68829ae4470b9760602599f1e932"], 0x20}}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
sendmsg$nl_route_sched(r10, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@getqdisc={0x40, 0x26, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x8, 0x4}, {0x4, 0x9}, {0xfff3, 0x7}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}}, 0x11)
r11 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4)

kernel console output (not intermixed with test programs):

p6gre3): Enslaving as an active interface with an up link
[  225.713898][T10961] netlink: 'syz.2.1295': attribute type 20 has an invalid length.
[  225.819098][T10964] netlink: 'syz.4.1296': attribute type 61 has an invalid length.
[  225.866143][T10964] netlink: 'syz.4.1296': attribute type 62 has an invalid length.
[  227.373426][T11030] netlink: 'syz.1.1317': attribute type 1 has an invalid length.
[  227.399608][T11030] bond4: entered promiscuous mode
[  227.404749][T11030] bond4: entered allmulticast mode
[  227.410778][T11030] 8021q: adding VLAN 0 to HW filter on device bond4
[  227.449693][T11030] erspan2: entered allmulticast mode
[  227.459989][T11030] bond4: (slave erspan2): making interface the new active one
[  227.467740][T11030] erspan2: entered promiscuous mode
[  227.474798][T11030] bond4: (slave erspan2): Enslaving as an active interface with an up link
[  227.753729][T11044] __nla_validate_parse: 11 callbacks suppressed
[  227.753747][T11044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1321'.
[  227.928957][T11050] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1324'.
[  228.667552][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  229.104303][T10982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  229.359242][T11073] tipc: New replicast peer: 255.255.255.255
[  229.374903][T11073] tipc: Enabled bearer <udp:syz1>, priority 10
[  229.420825][T11078] macvlan0: entered promiscuous mode
[  229.431885][T11078] macvlan0: entered allmulticast mode
[  229.437684][T11078] veth1_vlan: entered allmulticast mode
[  229.445324][T11074] lo speed is unknown, defaulting to 1000
[  229.628064][T11087] macsec1: entered allmulticast mode
[  229.794785][T11096] sctp: [Deprecated]: syz.1.1339 (pid 11096) Use of struct sctp_assoc_value in delayed_ack socket option.
[  229.794785][T11096] Use struct sctp_sack_info instead
[  229.849939][T11089] lo speed is unknown, defaulting to 1000
[  230.991750][T11139] netlink: 'syz.1.1348': attribute type 1 has an invalid length.
[  231.416022][T11159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1354'.
[  231.444611][T11161] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1355'.
[  231.726000][T11159] netlink: 'syz.0.1354': attribute type 4 has an invalid length.
[  231.734115][T11159] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1354'.
[  232.706503][T11155] 
@0�: renamed from bond_slave_1
[  232.979504][T11170] lo speed is unknown, defaulting to 1000
[  232.997303][T11172] netlink: 'syz.4.1358': attribute type 1 has an invalid length.
[  233.017226][T11176] netlink: 'syz.1.1359': attribute type 1 has an invalid length.
[  233.135347][T11176] bond5: entered promiscuous mode
[  233.141476][T11176] 8021q: adding VLAN 0 to HW filter on device bond5
[  233.214042][T11179] bond12: entered promiscuous mode
[  233.221185][T11179] bond12: entered allmulticast mode
[  233.239838][T11179] 8021q: adding VLAN 0 to HW filter on device bond12
[  233.272912][T11184] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  233.286491][T11169] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1357'.
[  233.317515][T11184] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  233.329163][T11184] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  233.612560][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1361'.
[  233.700625][T11172] bridge5: entered promiscuous mode
[  233.706205][T11172] bridge5: entered allmulticast mode
[  233.712770][T11172] bond12: (slave bridge5): Enslaving as a backup interface with an up link
[  233.760014][T11190] bridge6: entered promiscuous mode
[  233.766282][T11190] bridge6: entered allmulticast mode
[  233.774750][T11190] bond12: (slave bridge6): Enslaving as a backup interface with a down link
[  233.788814][ T1148] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  233.977534][ T7207] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  234.091541][T11206] bond12: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[  234.101886][T11206] bond12: entered promiscuous mode
[  234.108131][T11206] 8021q: adding VLAN 0 to HW filter on device bond12
[  234.286482][T11218] syzkaller1: entered promiscuous mode
[  234.292283][T11218] syzkaller1: entered allmulticast mode
[  234.328812][T11221] FAULT_INJECTION: forcing a failure.
[  234.328812][T11221] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  234.342199][T11221] CPU: 0 UID: 0 PID: 11221 Comm: syz.1.1370 Not tainted syzkaller #0 PREEMPT(full) 
[  234.342239][T11221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  234.342253][T11221] Call Trace:
[  234.342262][T11221]  <TASK>
[  234.342272][T11221]  dump_stack_lvl+0xe8/0x150
[  234.342309][T11221]  should_fail_ex+0x412/0x560
[  234.342346][T11221]  _copy_from_user+0x2d/0xb0
[  234.342377][T11221]  ___sys_sendmsg+0x1c6/0x360
[  234.342412][T11221]  ? __pfx____sys_sendmsg+0x10/0x10
[  234.342474][T11221]  ? __fget_files+0x2a/0x420
[  234.342505][T11221]  ? __fget_files+0x3a0/0x420
[  234.342547][T11221]  __x64_sys_sendmsg+0x1bd/0x2a0
[  234.342579][T11221]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  234.342616][T11221]  ? __pfx_ksys_write+0x10/0x10
[  234.342652][T11221]  do_syscall_64+0x14d/0xf80
[  234.342681][T11221]  ? trace_irq_disable+0x3b/0x150
[  234.342701][T11221]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.342722][T11221]  ? clear_bhb_loop+0x40/0x90
[  234.342746][T11221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.342765][T11221] RIP: 0033:0x7fae3339c799
[  234.342784][T11221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.342800][T11221] RSP: 002b:00007fae3431c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  234.342821][T11221] RAX: ffffffffffffffda RBX: 00007fae33615fa0 RCX: 00007fae3339c799
[  234.342834][T11221] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  234.342845][T11221] RBP: 00007fae3431c090 R08: 0000000000000000 R09: 0000000000000000
[  234.342856][T11221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  234.342867][T11221] R13: 00007fae33616038 R14: 00007fae33615fa0 R15: 00007ffffd634c78
[  234.342896][T11221]  </TASK>
[  234.481488][T11223] netlink: 'syz.0.1371': attribute type 3 has an invalid length.
[  234.641634][T11229] netlink: 'syz.4.1373': attribute type 1 has an invalid length.
[  234.755866][T11229] bond13: entered promiscuous mode
[  234.761952][T11229] 8021q: adding VLAN 0 to HW filter on device bond13
[  234.783404][T11235] bond13: (slave ipvlan12): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  234.797716][T11235] bond13: (slave ipvlan12): The slave device specified does not support setting the MAC address
[  234.811659][T11235] bond13: (slave ipvlan12): Setting fail_over_mac to active for active-backup mode
[  234.868631][T11234] syzkaller0: entered promiscuous mode
[  234.874195][T11234] syzkaller0: entered allmulticast mode
[  234.888708][T11238] lo speed is unknown, defaulting to 1000
[  234.980996][T11246] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.1377'.
[  235.390298][T11258] FAULT_INJECTION: forcing a failure.
[  235.390298][T11258] name failslab, interval 1, probability 0, space 0, times 0
[  235.420666][T11258] CPU: 1 UID: 0 PID: 11258 Comm: syz.4.1383 Not tainted syzkaller #0 PREEMPT(full) 
[  235.420699][T11258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  235.420713][T11258] Call Trace:
[  235.420722][T11258]  <TASK>
[  235.420731][T11258]  dump_stack_lvl+0xe8/0x150
[  235.420767][T11258]  should_fail_ex+0x412/0x560
[  235.420805][T11258]  should_failslab+0xa8/0x100
[  235.420835][T11258]  __kmalloc_noprof+0xe8/0x760
[  235.420860][T11258]  ? iovec_from_user+0x87/0x250
[  235.420889][T11258]  iovec_from_user+0x87/0x250
[  235.420917][T11258]  __import_iovec+0x163/0x7e0
[  235.420951][T11258]  import_iovec+0x73/0xa0
[  235.420980][T11258]  ___sys_sendmsg+0x255/0x360
[  235.421016][T11258]  ? __pfx____sys_sendmsg+0x10/0x10
[  235.421088][T11258]  ? __fget_files+0x2a/0x420
[  235.421119][T11258]  ? __fget_files+0x3a0/0x420
[  235.421162][T11258]  __x64_sys_sendmsg+0x1bd/0x2a0
[  235.421194][T11258]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  235.421233][T11258]  ? __pfx_ksys_write+0x10/0x10
[  235.421270][T11258]  do_syscall_64+0x14d/0xf80
[  235.421301][T11258]  ? trace_irq_disable+0x3b/0x150
[  235.421320][T11258]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.421342][T11258]  ? clear_bhb_loop+0x40/0x90
[  235.421369][T11258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.421390][T11258] RIP: 0033:0x7f5f9db9c799
[  235.421410][T11258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  235.421428][T11258] RSP: 002b:00007f5f9e9ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  235.421451][T11258] RAX: ffffffffffffffda RBX: 00007f5f9de15fa0 RCX: 00007f5f9db9c799
[  235.421467][T11258] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  235.421480][T11258] RBP: 00007f5f9e9ea090 R08: 0000000000000000 R09: 0000000000000000
[  235.421494][T11258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  235.421506][T11258] R13: 00007f5f9de16038 R14: 00007f5f9de15fa0 R15: 00007fffa40ba958
[  235.421540][T11258]  </TASK>
[  235.629424][T11233] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  235.638057][T11233] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  235.736006][T11266] netlink: 'syz.3.1387': attribute type 1 has an invalid length.
[  235.763733][T11266] bond13: entered promiscuous mode
[  235.771613][T11266] 8021q: adding VLAN 0 to HW filter on device bond13
[  235.790445][T11266] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  235.803404][T11266] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  235.815494][T11266] bond13: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  236.057880][T11280] netlink: 'syz.4.1389': attribute type 83 has an invalid length.
[  236.068052][T11272] syzkaller1: entered promiscuous mode
[  236.078312][T11272] syzkaller1: entered allmulticast mode
[  236.104765][T11280] netlink: 'syz.4.1389': attribute type 1 has an invalid length.
[  236.588260][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1393'.
[  236.618380][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'.
[  236.672720][T11304] netlink: 'syz.4.1393': attribute type 14 has an invalid length.
[  236.683993][T11304] netlink: 'syz.4.1393': attribute type 13 has an invalid length.
[  236.736387][ T5161] block nbd1: Possible stuck request ffff8880278d0000: control (read@0,1024B). Runtime 90 seconds
[  236.750001][ T5161] block nbd1: Possible stuck request ffff8880278d0200: control (read@1024,1024B). Runtime 90 seconds
[  236.763685][ T5161] block nbd1: Possible stuck request ffff8880278d0400: control (read@2048,1024B). Runtime 90 seconds
[  236.774870][ T5161] block nbd1: Possible stuck request ffff8880278d0600: control (read@3072,1024B). Runtime 90 seconds
[  236.994555][T11323] vcan1: entered allmulticast mode
[  237.000731][T11323] bond11: left promiscuous mode
[  237.005781][T11323] bond11: entered allmulticast mode
[  237.012666][T11323] bond12: left promiscuous mode
[  237.017833][T11323] bridge5: left promiscuous mode
[  237.023118][T11323] bridge6: left promiscuous mode
[  237.037354][T11323] bond13: left promiscuous mode
[  237.054148][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'.
[  237.054602][T11323] bond13: entered allmulticast mode
[  237.090420][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1398'.
[  237.099677][T11323] bridge7: entered allmulticast mode
[  237.115370][T11323] vxlan0: entered allmulticast mode
[  237.307365][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  237.342324][T11334] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  237.382130][T11335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1402'.
[  237.391322][T11335] netlink: 'syz.4.1402': attribute type 7 has an invalid length.
[  237.399296][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1402'.
[  237.628220][T11342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1407'.
[  237.655209][T11342] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  237.675933][T11351] nft_compat: unsupported protocol 1
[  237.687239][T11342] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  237.911443][T11359] bridge2: entered promiscuous mode
[  238.228663][T11376] siw: device registration error -23
[  238.305957][T11381] __nla_validate_parse: 3 callbacks suppressed
[  238.305979][T11381] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1414'.
[  238.647677][T11390] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1417'.
[  238.830280][T11395] lo speed is unknown, defaulting to 1000
[  238.859668][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'.
[  238.961816][T11395] netlink: 308 bytes leftover after parsing attributes in process `syz.4.1419'.
[  239.240493][T11406] bond4: left promiscuous mode
[  239.268159][T11406] erspan2: left promiscuous mode
[  239.311789][T11406] bridge1: entered allmulticast mode
[  239.321937][T11406] bond5: left promiscuous mode
[  239.326974][T11406] bond5: entered allmulticast mode
[  239.335685][T11406] bridge2: left promiscuous mode
[  239.341519][T11406] bridge2: entered allmulticast mode
[  239.363504][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'.
[  239.373290][T11407] lo speed is unknown, defaulting to 1000
[  239.466988][T11416] validate_nla: 1 callbacks suppressed
[  239.467008][T11416] netlink: 'syz.1.1424': attribute type 1 has an invalid length.
[  239.481084][T11408] lo speed is unknown, defaulting to 1000
[  239.484032][T11416] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1424'.
[  239.855848][T11433] ieee802154 phy0 wpan0: encryption failed: -22
[  240.073472][T11442] ieee802154 phy0 wpan0: encryption failed: -22
[  240.142333][T11442] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1429'.
[  240.255559][T11450] pim6reg: entered allmulticast mode
[  240.296209][T11449] pim6reg: left allmulticast mode
[  240.610836][T11468] lo speed is unknown, defaulting to 1000
[  240.631121][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'.
[  240.686526][T11469] : entered promiscuous mode
[  240.740632][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1437'.
[  240.808984][T11478] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1439'.
[  240.891967][T11478] bond8: option lacp_rate: invalid value (128)
[  240.915535][T11478] bond8 (unregistering): Released all slaves
[  241.020168][T11482] bond8: option lacp_rate: invalid value (128)
[  241.028659][T11482] bond8 (unregistering): Released all slaves
[  241.056692][T11484] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  241.232862][T11495] mac80211_hwsim hwsim10 wlan0: left allmulticast mode
[  241.374062][T11503] xt_CT: You must specify a L4 protocol and not use inversions on it
[  241.453401][T11506] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  244.777322][ T5196] udevd[5196]: worker [5883] /devices/virtual/block/nbd0 is taking a long time
[  244.786504][ T5196] udevd[5196]: worker [5884] /devices/virtual/block/nbd1 is taking a long time
[  250.111230][ T5161] block nbd0: Possible stuck request ffff888027878000: control (read@0,1024B). Runtime 150 seconds
[  250.122239][ T5161] block nbd0: Possible stuck request ffff888027878200: control (read@1024,1024B). Runtime 150 seconds
[  250.133411][ T5161] block nbd0: Possible stuck request ffff888027878400: control (read@2048,1024B). Runtime 150 seconds
[  250.144773][ T5161] block nbd0: Possible stuck request ffff888027878600: control (read@3072,1024B). Runtime 150 seconds
[  255.227372][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  255.870207][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.878985][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  255.885334][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  267.388536][ T5161] block nbd1: Possible stuck request ffff8880278d0000: control (read@0,1024B). Runtime 120 seconds
[  267.399516][ T5161] block nbd1: Possible stuck request ffff8880278d0200: control (read@1024,1024B). Runtime 120 seconds
[  267.410638][ T5161] block nbd1: Possible stuck request ffff8880278d0400: control (read@2048,1024B). Runtime 120 seconds
[  267.421703][ T5161] block nbd1: Possible stuck request ffff8880278d0600: control (read@3072,1024B). Runtime 120 seconds
[  280.187982][ T5161] block nbd0: Possible stuck request ffff888027878000: control (read@0,1024B). Runtime 180 seconds
[  280.198849][ T5161] block nbd0: Possible stuck request ffff888027878200: control (read@1024,1024B). Runtime 180 seconds
[  280.210052][ T5161] block nbd0: Possible stuck request ffff888027878400: control (read@2048,1024B). Runtime 180 seconds
[  280.221541][ T5161] block nbd0: Possible stuck request ffff888027878600: control (read@3072,1024B). Runtime 180 seconds
[  280.837270][ T5196] udevd[5196]: worker [5883] /devices/virtual/block/nbd0 timeout; kill it
[  280.847571][ T5196] udevd[5196]: seq 10941 '/devices/virtual/block/nbd0' killed
[  291.707417][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  295.444898][T11526] netlink: 'syz.4.1454': attribute type 1 has an invalid length.
[  295.477230][T11526] __nla_validate_parse: 6 callbacks suppressed
[  295.477252][T11526] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1454'.
[  295.534647][T11526] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1454'.
[  295.548016][T11526] netlink: 'syz.4.1454': attribute type 1 has an invalid length.
[  295.597220][T11526] netlink: 634 bytes leftover after parsing attributes in process `syz.4.1454'.
[  295.704797][T11544] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1451'.
[  295.885754][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'.
[  296.492162][T11568] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1462'.
[  296.572327][T11561] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  296.691788][T11561] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  296.801057][T11577] bond0: (slave rose0): Releasing backup interface
[  296.822953][T11575] syzkaller0: entered promiscuous mode
[  296.828951][T11575] syzkaller0: entered allmulticast mode
[  296.838505][T11561] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  296.890494][T11577] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1466'.
[  296.954325][T11561] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  297.131650][ T1148] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  297.160370][ T7170] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  297.199856][ T7170] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  297.237612][ T7190] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  297.323128][T11605] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1472'.
[  297.483591][ T5161] block nbd1: Possible stuck request ffff8880278d0000: control (read@0,1024B). Runtime 150 seconds
[  297.494527][ T5161] block nbd1: Possible stuck request ffff8880278d0200: control (read@1024,1024B). Runtime 150 seconds
[  297.506483][ T5161] block nbd1: Possible stuck request ffff8880278d0400: control (read@2048,1024B). Runtime 150 seconds
[  297.517885][ T5161] block nbd1: Possible stuck request ffff8880278d0600: control (read@3072,1024B). Runtime 150 seconds
[  297.621749][ T5833] Bluetooth: hci4: link tx timeout
[  297.629331][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  297.744771][T11621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1474'.
[  297.777667][T11622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1476'.
[  297.819156][T11621] netlink: 'syz.3.1474': attribute type 4 has an invalid length.
[  297.842448][T11621] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  297.860660][T11622] netlink: 'syz.4.1476': attribute type 1 has an invalid length.
[  298.005337][T11616] siw: device registration error -23
[  298.548057][T11662] netlink: 'syz.2.1481': attribute type 1 has an invalid length.
[  298.731500][T11674] block nbd0: Unsupported socket: should be TCP or UNIX.
[  299.248599][T11704] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  299.366762][T11708] syzkaller1: entered promiscuous mode
[  299.383368][T11708] syzkaller1: entered allmulticast mode
[  299.709592][ T5833] Bluetooth: hci4: command 0x0405 tx timeout
[  299.848501][T11738] syzkaller0: entered promiscuous mode
[  299.856042][T11738] syzkaller0: entered allmulticast mode
[  299.865505][T11736] bond1: left allmulticast mode
[  299.899733][T11730] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  299.916560][T11730] bond1: (slave lo): Enslaving as an active interface with an up link
[  299.926184][T11730] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  300.186223][T11743] netlink: 'syz.0.1507': attribute type 1 has an invalid length.
[  300.235196][T11743] netlink: 'syz.0.1507': attribute type 2 has an invalid length.
[  300.255874][T11747] netlink: 'syz.4.1508': attribute type 4 has an invalid length.
[  300.808693][T11763] vlan0: entered allmulticast mode
[  300.816451][T11763] bridge0: port 2(vlan0) entered blocking state
[  300.838995][T11766] netlink: 'syz.3.1511': attribute type 1 has an invalid length.
[  300.849018][T11763] bridge0: port 2(vlan0) entered disabled state
[  300.869599][T11763] vlan0: entered promiscuous mode
[  300.907857][T11766] bond14: entered promiscuous mode
[  300.913409][T11766] 8021q: adding VLAN 0 to HW filter on device bond14
[  300.984971][T11768] bond14: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  301.009854][T11768] bond14: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  301.021289][T11768] bond14: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  301.159941][T11766] bond14: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  301.175163][T11766] bond14: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  301.359624][T11780] syzkaller1: entered promiscuous mode
[  301.369325][T11780] syzkaller1: entered allmulticast mode
[  301.756931][T11804] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  301.765796][T11804] gre3: entered allmulticast mode
[  301.774621][T11804] ip6gretap1: entered allmulticast mode
[  301.843356][   T30] audit: type=1804 audit(1774832953.918:3): pid=11808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1525" name="/newroot/323/cgroup.controllers" dev="tmpfs" ino=1665 res=1 errno=0
[  301.892309][   T30] audit: type=1800 audit(1774832953.948:4): pid=11808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1525" name="cgroup.controllers" dev="tmpfs" ino=1665 res=0 errno=0
[  301.956485][T11813] __nla_validate_parse: 8 callbacks suppressed
[  301.956508][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1524'.
[  301.995453][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'.
[  302.069856][T11823] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1527'.
[  302.089046][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'.
[  302.117388][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'.
[  302.139031][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'.
[  302.175075][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'.
[  302.280968][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'.
[  302.292307][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'.
[  302.308091][T11831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1528'.
[  302.731521][T11837] bond14: Unable to set down delay as MII monitoring is disabled
[  302.742413][T11837] bond14 (unregistering): Released all slaves
[  302.840085][T11840] nbd4: detected capacity change from 0 to 63
[  302.863600][ T5841] block nbd4: Receive control failed (result -32)
[  302.872389][ T7900] block nbd4: Dead connection, failed to find a fallback
[  302.927153][ T7900] block nbd4: shutting down sockets
[  302.957617][ T7900] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  302.995952][ T7900] Buffer I/O error on dev nbd4, logical block 0, async page read
[  303.004358][ T7900] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  303.015356][ T7900] Buffer I/O error on dev nbd4, logical block 1, async page read
[  303.023898][ T7900] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  303.038374][ T7900] Buffer I/O error on dev nbd4, logical block 2, async page read
[  303.046222][ T7900] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  303.056092][ T7900] Buffer I/O error on dev nbd4, logical block 3, async page read
[  303.099877][ T7900] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  303.112426][ T7900] Buffer I/O error on dev nbd4, logical block 0, async page read
[  303.123804][ T7900] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  303.151410][ T7900] Buffer I/O error on dev nbd4, logical block 1, async page read
[  303.166467][ T7900] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  303.181900][ T7900] Buffer I/O error on dev nbd4, logical block 2, async page read
[  303.190950][ T7900] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  303.238143][ T7900] Buffer I/O error on dev nbd4, logical block 3, async page read
[  303.254950][ T7640] IPVS: starting estimator thread 0...
[  303.258153][ T7900] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  303.282299][ T7900] Buffer I/O error on dev nbd4, logical block 0, async page read
[  303.302883][ T7900] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  303.314654][ T7900] Buffer I/O error on dev nbd4, logical block 1, async page read
[  303.324825][ T7900] ldm_validate_partition_table(): Disk read failed.
[  303.332797][ T7900] Dev nbd4: unable to read RDB block 0
[  303.348112][ T7900]  nbd4: unable to read partition table
[  303.357357][T11864] IPVS: using max 24 ests per chain, 57600 per kthread
[  303.385893][ T7900] ldm_validate_partition_table(): Disk read failed.
[  303.402548][ T7900] Dev nbd4: unable to read RDB block 0
[  303.409696][ T7900]  nbd4: unable to read partition table
[  303.464949][T11851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.474780][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.515143][T11861] syzkaller1: entered promiscuous mode
[  303.526736][T11861] syzkaller1: entered allmulticast mode
[  305.146925][T11935] syzkaller1: entered promiscuous mode
[  305.162247][T11935] syzkaller1: entered allmulticast mode
[  305.218654][T11944] N���: entered allmulticast mode
[  305.273260][T11941] syzkaller0: entered promiscuous mode
[  305.280955][T11941] syzkaller0: entered allmulticast mode
[  305.726655][T11973] netlink: 'syz.4.1564': attribute type 39 has an invalid length.
[  305.908799][T11988] netlink: 'syz.3.1569': attribute type 33 has an invalid length.
[  306.108442][T12001] xt_hashlimit: size too large, truncated to 1048576
[  306.556841][T12018] 8021q: VLANs not supported on lo
[  306.659747][T12023] netlink: 'syz.3.1582': attribute type 6 has an invalid length.
[  306.723652][T12029] batadv_slave_0: Caught tx_queue_len zero misconfig
[  306.798783][T12027] lec:lec_vcc_attach: copy from user failed for 28 bytes
[  306.887796][T12037] x_tables: duplicate underflow at hook 1
[  306.894213][T12039] netlink: 'syz.3.1587': attribute type 9 has an invalid length.
[  307.358872][T12067] __nla_validate_parse: 70 callbacks suppressed
[  307.358895][T12067] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.1594'.
[  307.829323][T12082] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  308.052635][T12099] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1604'.
[  308.247474][T12108] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1606'.
[  308.281667][T12108] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1606'.
[  308.325985][T12110] netlink: 'syz.1.1608': attribute type 1 has an invalid length.
[  308.414300][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1607'.
[  308.610414][T12110] veth5: entered promiscuous mode
[  308.741344][T12129] netlink: 'syz.3.1611': attribute type 1 has an invalid length.
[  308.811808][T12129] bond15: entered promiscuous mode
[  308.818764][T12129] 8021q: adding VLAN 0 to HW filter on device bond15
[  308.879350][T12137] bond15: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  308.892029][T12137] bond15: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  308.902800][T12137] bond15: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  309.388440][ T5841] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  309.404166][T12169] x_tables: duplicate underflow at hook 2
[  309.653725][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'.
[  309.666416][T12179] netlink: 'syz.2.1626': attribute type 30 has an invalid length.
[  309.674474][T12179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1626'.
[  309.699325][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'.
[  309.716775][T12180] netlink: 'syz.2.1626': attribute type 30 has an invalid length.
[  309.738920][T12180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1626'.
[  309.902751][T12185] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1628'.
[  309.922159][T12185] netlink: 'syz.2.1628': attribute type 5 has an invalid length.
[  309.936664][T12184] xt_TPROXY: Can be used only with -p tcp or -p udp
[  310.104995][T12190] netlink: 'syz.2.1630': attribute type 1 has an invalid length.
[  310.196903][T12190] bond10: entered promiscuous mode
[  310.239836][T12190] 8021q: adding VLAN 0 to HW filter on device bond10
[  310.271127][ T5161] block nbd0: Possible stuck request ffff888027878000: control (read@0,1024B). Runtime 210 seconds
[  310.282063][ T5161] block nbd0: Possible stuck request ffff888027878200: control (read@1024,1024B). Runtime 210 seconds
[  310.293375][ T5161] block nbd0: Possible stuck request ffff888027878400: control (read@2048,1024B). Runtime 210 seconds
[  310.304450][ T5161] block nbd0: Possible stuck request ffff888027878600: control (read@3072,1024B). Runtime 210 seconds
[  310.334710][T12193] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  310.349348][T12193] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  310.364583][T12193] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  310.502622][T12213] syzkaller1: entered promiscuous mode
[  310.511389][T12213] syzkaller1: entered allmulticast mode
[  310.938561][T12236] dvmrp1: entered allmulticast mode
[  310.972960][T12236] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  311.116801][T12246] netlink: 'syz.1.1645': attribute type 1 has an invalid length.
[  311.272914][T12246] bond6: entered promiscuous mode
[  311.287820][T12246] 8021q: adding VLAN 0 to HW filter on device bond6
[  311.303272][T12252] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  311.317366][T12252] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  311.327884][T12252] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  311.555827][T12271] syzkaller1: entered promiscuous mode
[  311.562184][T12271] syzkaller1: entered allmulticast mode
[  312.001387][T12299] lo speed is unknown, defaulting to 1000
[  312.012584][T12299] lo speed is unknown, defaulting to 1000
[  312.047953][T12299] lo speed is unknown, defaulting to 1000
[  312.135489][T12299] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  312.170675][T12299] lo speed is unknown, defaulting to 1000
[  312.191831][T12299] lo speed is unknown, defaulting to 1000
[  312.201544][T12299] lo speed is unknown, defaulting to 1000
[  312.209327][T12299] lo speed is unknown, defaulting to 1000
[  312.218456][T12299] lo speed is unknown, defaulting to 1000
[  312.254599][T12321] netlink: 'syz.3.1662': attribute type 1 has an invalid length.
[  312.316606][T12321] bond16: entered promiscuous mode
[  312.336801][T12321] 8021q: adding VLAN 0 to HW filter on device bond16
[  312.386791][T12326] bond16: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  312.444066][T12326] bond16: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  312.488725][T12326] bond16: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  312.580378][T12325] syzkaller1: entered promiscuous mode
[  312.599739][T12325] syzkaller1: entered allmulticast mode
[  313.394085][T12384] syzkaller1: entered promiscuous mode
[  313.407189][T12384] syzkaller1: entered allmulticast mode
[  313.498794][T12390] lo speed is unknown, defaulting to 1000
[  313.695526][T12404] sctp: [Deprecated]: syz.4.1684 (pid 12404) Use of struct sctp_assoc_value in delayed_ack socket option.
[  313.695526][T12404] Use struct sctp_sack_info instead
[  313.826271][T12398] lo speed is unknown, defaulting to 1000
[  313.917028][T12411] __nla_validate_parse: 6 callbacks suppressed
[  313.939720][T12411] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1686'.
[  314.315449][T12420] netlink: 'syz.0.1683': attribute type 4 has an invalid length.
[  314.323557][T12420] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1683'.
[  314.517239][T12433] vlan2: entered promiscuous mode
[  314.522432][T12433] geneve1: entered promiscuous mode
[  314.587886][T12433] vlan2: entered allmulticast mode
[  314.593632][T12433] geneve1: entered allmulticast mode
[  315.026153][T12455] netlink: 'syz.0.1696': attribute type 1 has an invalid length.
[  315.385358][T12470] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1696'.
[  315.495052][T12437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1694'.
[  315.549734][T12455] 8021q: adding VLAN 0 to HW filter on device bond8
[  315.594196][T12458] bond8: (slave veth9): Enslaving as an active interface with a down link
[  315.603306][T12461] dummy0: left allmulticast mode
[  315.615893][T12461] bond8: (slave dummy0): making interface the new active one
[  315.627000][T12461] dummy0: entered promiscuous mode
[  315.634677][T12461] bond8: (slave dummy0): Enslaving as an active interface with an up link
[  315.649998][T12469] tap0: tun_chr_ioctl cmd 1074025677
[  315.656534][T12469] tap0: linktype set to 6
[  315.676177][T12470] bond8: (slave dummy0): Releasing active interface
[  315.684454][T12470] dummy0 (unregistering): left promiscuous mode
[  315.747093][T12446] lo speed is unknown, defaulting to 1000
[  316.086041][T12494] netlink: 'syz.0.1703': attribute type 1 has an invalid length.
[  316.107731][T12494] netlink: 'syz.0.1703': attribute type 3 has an invalid length.
[  316.125098][T12494] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1703'.
[  316.148137][T12494] NCSI netlink: No device for ifindex 813332851
[  316.210222][T12497] netlink: 'syz.3.1705': attribute type 1 has an invalid length.
[  316.226547][T12497] netlink: 'syz.3.1705': attribute type 2 has an invalid length.
[  316.344198][T12498] syzkaller1: entered promiscuous mode
[  316.351523][T12498] syzkaller1: entered allmulticast mode
[  316.391706][T12506] bond9: option arp_all_targets: invalid value (129)
[  316.410013][T12506] bond9 (unregistering): Released all slaves
[  316.610577][T12515] lo speed is unknown, defaulting to 1000
[  317.164840][T12553] bond1: entered allmulticast mode
[  317.190638][T12553] bond7: left promiscuous mode
[  317.204572][T12553] bond7: entered allmulticast mode
[  317.224208][T12553] ip6gre1: entered allmulticast mode
[  317.238988][T12553] gtp0: entered allmulticast mode
[  317.244470][T12553] : entered allmulticast mode
[  317.250322][T12553] gtp1: entered allmulticast mode
[  317.255703][T12553] veth6: entered allmulticast mode
[  317.261739][T12553] veth7: entered allmulticast mode
[  317.270968][T12553] syzkaller0: entered allmulticast mode
[  317.293819][T12553] bond8: entered allmulticast mode
[  317.310512][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.322065][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  317.322075][T12553] veth8: entered allmulticast mode
[  317.335523][T12553] veth9: entered allmulticast mode
[  317.336880][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  317.350821][T12559] dvmrp0: entered allmulticast mode
[  317.367307][T12559] bond8: entered allmulticast mode
[  317.382227][T12559] vlan3: entered allmulticast mode
[  317.387761][T12559] �9: entered allmulticast mode
[  317.393474][T12559] ip6gre2: entered allmulticast mode
[  317.401615][T12559] bond9: entered allmulticast mode
[  317.407019][T12559] ip6gre3: entered allmulticast mode
[  317.413862][T12559] vxlan1: entered allmulticast mode
[  317.427010][T12559] netdevsim netdevsim2 eth0: entered allmulticast mode
[  317.434457][T12559] netdevsim netdevsim2 eth1: entered allmulticast mode
[  317.444601][T12559] netdevsim netdevsim2 eth2: entered allmulticast mode
[  317.451977][T12559] netdevsim netdevsim2 eth3: entered allmulticast mode
[  317.459625][T12559] syztnl1: entered allmulticast mode
[  317.465241][T12559] syztnl0: entered allmulticast mode
[  317.471181][T12559] vxcan2: entered allmulticast mode
[  317.476927][T12559] veth4: entered allmulticast mode
[  317.482789][T12559] veth5: entered allmulticast mode
[  317.488544][T12559] veth6: entered allmulticast mode
[  317.494141][T12559] veth7: entered allmulticast mode
[  317.500645][T12559] macvlan2: entered allmulticast mode
[  317.518781][T12559] bond10: left promiscuous mode
[  317.534054][T12559] bond10: entered allmulticast mode
[  317.549996][T12559] macvtap0.1: entered allmulticast mode
[  317.570172][T12564] ieee802154 phy0 wpan0: encryption failed: -22
[  317.588860][T12564] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  317.652894][T12568] tipc: Failed to remove unknown binding: 66,0,0/0:3739738746/3739738748
[  317.667308][T12568] tipc: Failed to remove unknown binding: 66,0,0/0:3739738746/3739738747
[  317.686840][T12568] tipc: Failed to remove unknown binding: 66,0,0/0:3739738746/3739738748
[  317.709898][T12568] tipc: Failed to remove unknown binding: 66,0,0/0:3739738746/3739738747
[  317.800213][T12572] netlink: 'syz.3.1723': attribute type 8 has an invalid length.
[  317.808331][T12572] sch_fq: defrate 0 ignored.
[  319.480473][T12513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  319.490372][T12564] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1721'.
[  319.732743][T12609] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  319.756716][T12609] bond11: (slave lo): Enslaving as an active interface with an up link
[  319.765816][T12609] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  319.818780][T12607] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  319.826982][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1733'.
[  320.099978][T12623] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.112914][T12623] 8021q: adding VLAN 0 to HW filter on device team0
[  320.189908][T12623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  320.231742][T12624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  320.296261][T12631] vxcan2: entered allmulticast mode
[  320.394818][T12621] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1735'.
[  320.413972][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1735'.
[  320.486889][T12651] netlink: 'syz.1.1743': attribute type 30 has an invalid length.
[  320.532617][T12653] sctp: [Deprecated]: syz.2.1744 (pid 12653) Use of struct sctp_assoc_value in delayed_ack socket option.
[  320.532617][T12653] Use struct sctp_sack_info instead
[  320.576380][T12653] sctp: [Deprecated]: syz.2.1744 (pid 12653) Use of struct sctp_assoc_value in delayed_ack socket option.
[  320.576380][T12653] Use struct sctp_sack_info instead
[  320.630442][T12657] SET target dimension over the limit!
[  320.634551][T12653] sctp: [Deprecated]: syz.2.1744 (pid 12653) Use of int in max_burst socket option.
[  320.634551][T12653] Use struct sctp_assoc_value instead
[  320.682546][T12653] sit1: entered promiscuous mode
[  320.758774][T12659] netlink: 'syz.1.1748': attribute type 1 has an invalid length.
[  320.810175][T12659] bond7: entered promiscuous mode
[  320.831809][T12659] 8021q: adding VLAN 0 to HW filter on device bond7
[  320.870295][T12669] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  320.886569][T12669] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  320.897609][T12669] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  320.981300][T12671] nbd: nbd0 already in use
[  321.247212][T12690] xt_CT: No such helper "snmp_trap"
[  321.254085][T12695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  321.261443][T12695] IPv6: NLM_F_CREATE should be set when creating new route
[  321.286046][T12697] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1757'.
[  321.355782][T12695] bond11: entered allmulticast mode
[  321.363090][T12695] sit1: left promiscuous mode
[  321.368076][T12695] sit1: entered allmulticast mode
[  321.420457][T12704] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1759'.
[  321.464705][T12706] netlink: 'syz.4.1761': attribute type 1 has an invalid length.
[  321.607868][T12716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1764'.
[  321.728709][T12726] trusted_key: syz.2.1765 sent an empty control message without MSG_MORE.
[  322.061667][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1770'.
[  322.260842][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1774'.
[  322.274168][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'.
[  322.773560][T12787] netlink: 'syz.2.1780': attribute type 10 has an invalid length.
[  322.972423][T12807] netlink: 'syz.0.1785': attribute type 1 has an invalid length.
[  323.036685][T12813] sctp: [Deprecated]: syz.3.1786 (pid 12813) Use of int in maxseg socket option.
[  323.036685][T12813] Use struct sctp_assoc_value instead
[  323.065960][T12807] bond9: entered promiscuous mode
[  323.087571][T12807] 8021q: adding VLAN 0 to HW filter on device bond9
[  323.123865][T12813] veth0_to_bond: Caught tx_queue_len zero misconfig
[  323.857917][T12844] openvswitch: netlink: IP tunnel dst address not specified
[  324.015777][T12851] netlink: 'syz.2.1799': attribute type 4 has an invalid length.
[  324.027700][ T5841] Bluetooth: hci4: command 0x0405 tx timeout
[  324.060809][T12851] netlink: 'syz.2.1799': attribute type 4 has an invalid length.
[  324.267774][T12861] netlink: 'syz.2.1802': attribute type 1 has an invalid length.
[  324.345049][T12861] 8021q: adding VLAN 0 to HW filter on device bond12
[  324.359032][T12866] gre0 speed is unknown, defaulting to 1000
[  324.369542][T12866] gre0 speed is unknown, defaulting to 1000
[  324.379346][T12866] gre0 speed is unknown, defaulting to 1000
[  324.491553][T12876] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.500342][T12876] 8021q: adding VLAN 0 to HW filter on device team0
[  324.514271][T12869] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  324.535626][T12876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  324.601589][T12881] sit1: entered allmulticast mode
[  324.608682][T12881] bridge8: entered allmulticast mode
[  324.625123][T12881] bridge9: entered allmulticast mode
[  324.653684][T12881] bridge10: entered allmulticast mode
[  324.664825][T12881] syztnl1: entered allmulticast mode
[  324.677933][T12881] bridge11: entered allmulticast mode
[  324.684970][T12884] __nla_validate_parse: 7 callbacks suppressed
[  324.684990][T12884] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1809'.
[  324.707559][T12881] ipip0: entered allmulticast mode
[  324.714309][T12881] 7: entered allmulticast mode
[  324.804711][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1810'.
[  325.096916][T12910] netlink: 'syz.0.1817': attribute type 1 has an invalid length.
[  325.109121][T12866] infiniband syz1: set active
[  325.114071][T12866] infiniband syz1: added gre0
[  325.171262][T12910] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  325.172237][ T9090] gre0 speed is unknown, defaulting to 1000
[  325.199591][T12866] RDS/IB: syz1: added
[  325.204611][T12866] smc: adding ib device syz1 with port count 1
[  325.213990][ T9090] syz1: Port: 1 Link ACTIVE
[  325.237654][T12866] smc:    ib device syz1 port 1 has no pnetid
[  325.246320][ T9090] gre0 speed is unknown, defaulting to 1000
[  325.262510][T12866] gre0 speed is unknown, defaulting to 1000
[  325.389362][T12923] IPVS: Error connecting to the multicast addr
[  325.653458][T12932] netlink: 'syz.4.1824': attribute type 1 has an invalid length.
[  325.741473][T12932] bond14: entered promiscuous mode
[  325.747503][T12932] 8021q: adding VLAN 0 to HW filter on device bond14
[  325.808694][T12938] bond14: (slave ipvlan12): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  325.856489][T12938] bond14: (slave ipvlan12): The slave device specified does not support setting the MAC address
[  325.871244][T12938] bond14: (slave ipvlan12): Setting fail_over_mac to active for active-backup mode
[  325.921978][T12866] gre0 speed is unknown, defaulting to 1000
[  325.954296][T12934] 8021q: VLANs not supported on wg1
[  326.415717][T12960] openvswitch: netlink: nsh attr 1647 is out of range max 3
[  326.534544][T12966] netem: change failed
[  326.564390][T12971] netem: change failed
[  326.583243][T12866] gre0 speed is unknown, defaulting to 1000
[  326.714509][T12975] x_tables: unsorted underflow at hook 4
[  326.941840][T12983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1841'.
[  326.970085][T12983] nbd: must specify a device to reconfigure
[  327.040499][T12991] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1844'.
[  327.068168][T12993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1845'.
[  327.130309][T12993] nbd: nbd4 already in use
[  327.148094][T12993] block nbd4: NBD_DISCONNECT
[  327.152840][T12993] block nbd4: Send disconnect failed -32
[  327.314060][T12866] gre0 speed is unknown, defaulting to 1000
[  327.390125][T13004] openvswitch: netlink: IP tunnel dst address not specified
[  327.552172][ T5161] block nbd1: Possible stuck request ffff8880278d0000: control (read@0,1024B). Runtime 180 seconds
[  327.563602][ T5161] block nbd1: Possible stuck request ffff8880278d0200: control (read@1024,1024B). Runtime 180 seconds
[  327.570968][T13012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1852'.
[  327.576630][ T5161] block nbd1: Possible stuck request ffff8880278d0400: control (read@2048,1024B). Runtime 180 seconds
[  327.594930][ T5161] block nbd1: Possible stuck request ffff8880278d0600: control (read@3072,1024B). Runtime 180 seconds
[  327.624360][T13016] Bluetooth: MGMT ver 1.23
[  327.685089][T13021] netlink: 'syz.0.1856': attribute type 3 has an invalid length.
[  327.692718][T13022] netlink: 'syz.4.1853': attribute type 1 has an invalid length.
[  327.700344][T13021] netlink: 'syz.0.1856': attribute type 2 has an invalid length.
[  327.708844][T13021] netlink: 'syz.0.1856': attribute type 2 has an invalid length.
[  327.861879][T13028] delete_channel: no stack
[  327.950745][T13036] netlink: 'syz.0.1862': attribute type 1 has an invalid length.
[  328.008468][T13036] bond10: entered promiscuous mode
[  328.019810][T13036] 8021q: adding VLAN 0 to HW filter on device bond10
[  328.081012][T13040] 8021q: adding VLAN 0 to HW filter on device bond10
[  328.101788][T13040] bond10: (slave vti0): The slave device specified does not support setting the MAC address
[  328.137185][T13040] bond10: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  328.152521][T13040] bond10: (slave vti0): making interface the new active one
[  328.160561][T13040] vti0: entered promiscuous mode
[  328.168681][T13040] bond10: (slave vti0): Enslaving as an active interface with an up link
[  328.187508][T12866] gre0 speed is unknown, defaulting to 1000
[  328.527771][T13053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1866'.
[  328.896316][T13069] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1871'.
[  329.379673][T13056] lec:lec_atm_send: lec0: Unknown message type -1737790450
[  329.396502][T13080] syzkaller1: entered promiscuous mode
[  329.407516][T13080] syzkaller1: entered allmulticast mode
[  329.448679][T13055] lec:lec_atm_close: lec0: Shut down!
[  329.663413][T13106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  329.670783][T13106] IPv6: NLM_F_CREATE should be set when creating new route
[  329.919523][T13121] openvswitch: netlink: IP tunnel dst address not specified
[  330.100189][T13128] netlink: 'syz.0.1881': attribute type 1 has an invalid length.
[  330.335250][T13139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1883'.
[  330.557184][T13106] veth1_vlan: left allmulticast mode
[  330.563475][T13106] macvlan0: left promiscuous mode
[  330.568886][T13106] macvlan0: left allmulticast mode
[  330.587781][T13106] geneve3: left promiscuous mode
[  330.592780][T13106] geneve3: left allmulticast mode
[  330.604342][T13106] bond10: left promiscuous mode
[  330.624150][T13106] bond11: left promiscuous mode
[  330.638898][T13106] bond12: left promiscuous mode
[  330.664104][T13106] bond13: left promiscuous mode
[  330.679151][T13106] bond14: left promiscuous mode
[  330.691764][T13106] bond15: left promiscuous mode
[  330.708985][T13106] bond16: left promiscuous mode
[  330.727594][T13106] vlan2: left promiscuous mode
[  330.732456][T13106] geneve1: left promiscuous mode
[  330.738167][T13106] vlan2: left allmulticast mode
[  330.743152][T13106] geneve1: left allmulticast mode
[  330.766677][ T7362] gre0 speed is unknown, defaulting to 1000
[  330.783408][ T7362] syz1: Port: 1 Link DOWN
[  330.890585][ T7172] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  330.909986][ T7362] gre0 speed is unknown, defaulting to 1000
[  330.938458][ T7172] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  330.946807][ T7172] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  330.992208][ T7172] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  331.025300][T13121] lo speed is unknown, defaulting to 1000
[  331.050164][T13121] gre0 speed is unknown, defaulting to 1000
[  331.107356][ T7362] lec:lec_start_xmit: lec0:No lecd attached
[  331.182884][T13163] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1889'.
[  331.321057][T13169] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  331.521648][T13179] netlink: 'syz.0.1894': attribute type 10 has an invalid length.
[  331.536718][T13179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1894'.
[  331.558944][T13179] batadv0: entered promiscuous mode
[  331.564895][T13179] bridge0: port 3(batadv0) entered blocking state
[  331.595319][T13179] bridge0: port 3(batadv0) entered disabled state
[  331.741748][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'.
[  331.818509][   T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  331.827955][   T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  331.841180][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'.
[  333.194827][T13257] netlink: 'syz.4.1903': attribute type 1 has an invalid length.
[  333.354307][T13262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1904'.
[  333.404364][T13262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1904'.
[  333.500891][T13268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1907'.
[  333.551730][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1907'.
[  333.575297][T13268] bridge3: entered promiscuous mode
[  333.582743][T13268] bridge3: port 1(macsec2) entered blocking state
[  333.590400][T13268] bridge3: port 1(macsec2) entered disabled state
[  333.598478][T13268] macsec2: entered allmulticast mode
[  333.604028][T13268] bridge3: entered allmulticast mode
[  333.613445][T13268] macsec2: left allmulticast mode
[  333.619141][T13268] bridge3: left allmulticast mode
[  333.636293][T13268] bridge3: left promiscuous mode
[  333.800998][T13287] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1911'.
[  333.969186][T13285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  334.342791][T13310] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  334.492340][T13318] openvswitch: netlink: Flow key attr not present in new flow.
[  334.493430][T13315] bond17: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  334.513160][T13315] bond17 (unregistering): Released all slaves
[  334.776307][T13329] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  334.814265][T13326] lo speed is unknown, defaulting to 1000
[  334.849065][T13326] gre0 speed is unknown, defaulting to 1000
[  334.888191][T13334] netlink: 'syz.3.1925': attribute type 12 has an invalid length.
[  335.138599][T13346] lo speed is unknown, defaulting to 1000
[  335.302569][T13346] gre0 speed is unknown, defaulting to 1000
[  335.818863][T13357] lo speed is unknown, defaulting to 1000
[  335.985434][T13357] gre0 speed is unknown, defaulting to 1000
[  336.350929][T13387] __nla_validate_parse: 5 callbacks suppressed
[  336.350952][T13387] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1940'.
[  336.387312][T13387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1940'.
[  336.410918][T13387] : entered promiscuous mode
[  336.507149][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5400 ms
[  336.515840][    C1] lec:lec_tx_timeout: lec0
[  336.520689][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  336.685723][T13396] wg1 speed is unknown, defaulting to 1000
[  336.755555][T13396] wg1 speed is unknown, defaulting to 1000
[  336.848969][T13396] wg1 speed is unknown, defaulting to 1000
[  337.385326][T13414] ieee802154 phy0 wpan0: encryption failed: -22
[  337.718539][T13396] infiniband syz0: set down
[  337.723230][ T9090] wg1 speed is unknown, defaulting to 1000
[  337.733990][T13396] infiniband syz0: added wg1
[  337.741358][T13396] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  337.747327][T13396] infiniband syz0: Couldn't open port 1
[  337.820243][T13396] RDS/IB: syz0: added
[  337.826798][T13396] smc: adding ib device syz0 with port count 1
[  337.846729][T13396] smc:    ib device syz0 port 1 has no pnetid
[  337.911838][ T9089] wg1 speed is unknown, defaulting to 1000
[  337.921159][T13396] wg1 speed is unknown, defaulting to 1000
[  338.197239][T13439] lo speed is unknown, defaulting to 1000
[  338.294862][T13439] gre0 speed is unknown, defaulting to 1000
[  338.330503][T13445] netlink: 'syz.3.1956': attribute type 13 has an invalid length.
[  338.580361][T13396] wg1 speed is unknown, defaulting to 1000
[  339.358539][T13439] wg1 speed is unknown, defaulting to 1000
[  339.583629][T13474] netlink: 'syz.1.1964': attribute type 2 has an invalid length.
[  339.620495][T13474] : entered promiscuous mode
[  339.705059][T13477] IPVS: Scheduler module ip_vs_ not found
[  339.711906][T13479] IPVS: length: 24 != 73752
[  339.853881][T13396] wg1 speed is unknown, defaulting to 1000
[  340.035612][T13486] netlink: 'syz.3.1967': attribute type 1 has an invalid length.
[  340.102899][T13488] netlink: 'syz.1.1968': attribute type 10 has an invalid length.
[  340.178897][T13488] netlink: 'syz.1.1968': attribute type 10 has an invalid length.
[  340.198417][T13492] netlink: 'syz.0.1969': attribute type 1 has an invalid length.
[  340.262030][T13492] bond11: entered promiscuous mode
[  340.274736][T13492] 8021q: adding VLAN 0 to HW filter on device bond11
[  340.289948][T13495] bond11: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  340.303610][T13495] bond11: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  340.309064][T13497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1970'.
[  340.315096][T13495] bond11: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode
[  340.348225][ T5161] block nbd0: Possible stuck request ffff888027878000: control (read@0,1024B). Runtime 240 seconds
[  340.359133][ T5161] block nbd0: Possible stuck request ffff888027878200: control (read@1024,1024B). Runtime 240 seconds
[  340.371670][ T5161] block nbd0: Possible stuck request ffff888027878400: control (read@2048,1024B). Runtime 240 seconds
[  340.383250][ T5161] block nbd0: Possible stuck request ffff888027878600: control (read@3072,1024B). Runtime 240 seconds
[  340.418751][T13396] wg1 speed is unknown, defaulting to 1000
[  340.517969][T13503] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1971'.
[  340.537817][T13503] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1971'.
[  340.616908][T13505] syzkaller0: entered promiscuous mode
[  340.784099][T13396] wg1 speed is unknown, defaulting to 1000
[  341.423509][T13538] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1983'.
[  341.564878][T13546] tipc: Started in network mode
[  341.571475][T13546] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711
[  341.582092][T13546] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  342.267083][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  342.275284][    C1] lec:lec_tx_timeout: lec0
[  342.282256][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  342.316276][T13581] netlink: 'syz.2.1991': attribute type 13 has an invalid length.
[  342.510656][T13581] netlink: 'syz.2.1991': attribute type 62 has an invalid length.
[  342.569341][T13603] lo speed is unknown, defaulting to 1000
[  342.627792][T13603] gre0 speed is unknown, defaulting to 1000
[  342.797740][T13613] netlink: 'syz.0.2000': attribute type 11 has an invalid length.
[  342.821700][T13613] netlink: 'syz.0.2000': attribute type 23 has an invalid length.
[  342.831441][T13613] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2000'.
[  342.898763][T13618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2002'.
[  342.952492][T13618] netlink: 'syz.2.2002': attribute type 1 has an invalid length.
[  343.093000][T13603] wg1 speed is unknown, defaulting to 1000
[  343.721418][T13660] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2006'.
[  344.206411][T13678] netlink: 'syz.0.2011': attribute type 13 has an invalid length.
[  344.236406][T13678] netlink: 'syz.0.2011': attribute type 12 has an invalid length.
[  344.913016][T13710] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2020'.
[  345.005095][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2019'.
[  345.401291][T13719] syzkaller0: entered promiscuous mode
[  345.419623][T13719] syzkaller0: entered allmulticast mode
[  345.591039][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2026'.
[  345.612527][T13735] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2025'.
[  345.639010][T13735] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2025'.
[  345.666432][T13742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2027'.
[  345.993448][T13762] netlink: 'syz.2.2032': attribute type 3 has an invalid length.
[  346.363063][ T7213] tipc: Subscription rejected, illegal request
[  346.560403][T13792] syzkaller1: entered promiscuous mode
[  346.566168][T13792] syzkaller1: entered allmulticast mode
[  346.645201][T13800] ip6tnl0: left allmulticast mode
[  346.704040][T13798] __nla_validate_parse: 5 callbacks suppressed
[  346.704064][T13798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2044'.
[  346.780490][T13806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2046'.
[  346.799824][T13806] netlink: 'syz.0.2046': attribute type 14 has an invalid length.
[  346.808179][T13806] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2046'.
[  346.972105][T13820] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  347.301079][T13836] lo speed is unknown, defaulting to 1000
[  347.310874][T13836] gre0 speed is unknown, defaulting to 1000
[  347.635095][T13841] bond8: option min_links: invalid value (18446744073709551612)
[  347.648029][T13841] bond8: option min_links: allowed values 0 - 2147483647
[  347.679639][T13841] bond8 (unregistering): Released all slaves
[  347.798636][T13836] wg1 speed is unknown, defaulting to 1000
[  347.891354][T13849] netlink: 'syz.3.2058': attribute type 1 has an invalid length.
[  348.027064][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  348.035167][    C1] lec:lec_tx_timeout: lec0
[  348.041183][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  348.158543][T13849] bond18: entered promiscuous mode
[  348.164319][T13849] 8021q: adding VLAN 0 to HW filter on device bond18
[  348.207633][T13855] bond18: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  348.259657][T13855] bond18: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  348.271962][T13855] bond18: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  348.421975][T13864] lo speed is unknown, defaulting to 1000
[  348.430204][T13864] gre0 speed is unknown, defaulting to 1000
[  348.654747][T13873] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.2065'.
[  348.664286][T13873] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.2065'.
[  348.809295][T13876] 8021q: adding VLAN 0 to HW filter on device bond19
[  348.835340][T13864] wg1 speed is unknown, defaulting to 1000
[  349.148915][T13893] netlink: 'syz.4.2070': attribute type 1 has an invalid length.
[  349.178981][T13892] xt_hashlimit: size too large, truncated to 1048576
[  349.534162][T13893] bond16: entered promiscuous mode
[  349.548329][T13893] 8021q: adding VLAN 0 to HW filter on device bond16
[  349.923101][T13920] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2077'.
[  350.382795][T13941] netlink: 'syz.3.2084': attribute type 1 has an invalid length.
[  350.476605][T13941] bond20: entered promiscuous mode
[  350.482436][T13941] 8021q: adding VLAN 0 to HW filter on device bond20
[  350.579332][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2085'.
[  350.674575][ T5831] lo speed is unknown, defaulting to 1000
[  350.761132][T13947] bond12: entered promiscuous mode
[  350.772377][T13947] bond12: entered allmulticast mode
[  350.779350][T13947] 8021q: adding VLAN 0 to HW filter on device bond12
[  350.820703][T13961] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2087'.
[  351.239647][T13978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2092'.
[  351.315528][T13980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2094'.
[  351.350817][T13987] netlink: 'syz.1.2096': attribute type 1 has an invalid length.
[  351.408714][T13987] bond8: entered promiscuous mode
[  351.414739][T13987] 8021q: adding VLAN 0 to HW filter on device bond8
[  351.751134][T14010] __nla_validate_parse: 3 callbacks suppressed
[  351.751158][T14010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2102'.
[  351.935623][T14008] delete_channel: no stack
[  352.180091][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2108'.
[  352.298853][T14034] syzkaller0: entered promiscuous mode
[  352.305327][T14034] syzkaller0: entered allmulticast mode
[  352.326043][T14034] team0: left promiscuous mode
[  352.334558][T14034] team_slave_0: left promiscuous mode
[  352.341291][T14034] team_slave_1: left promiscuous mode
[  352.350104][T14034] bridge2: left promiscuous mode
[  352.355866][T14034] bridge0: port 3(team0) entered disabled state
[  352.370820][T14034] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.383911][T14034] bridge_slave_1: left promiscuous mode
[  352.396678][T14034] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.444098][T14034] bond0: (slave bond_slave_0): Releasing backup interface
[  352.455620][T14034] bond0: (slave bond_slave_1): Releasing backup interface
[  352.468129][T14034] team0: Port device team_slave_0 removed
[  352.488225][T14034] team0: Port device team_slave_1 removed
[  352.498532][T14034] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.513038][T14034] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  352.619265][T14055] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2118'.
[  352.653924][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2118'.
[  352.663450][T14058] netlink: 'syz.1.2115': attribute type 1 has an invalid length.
[  352.673470][T14059] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2117'.
[  352.804066][T14058] 8021q: adding VLAN 0 to HW filter on device bond9
[  352.831848][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2117'.
[  352.937868][T14068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2119'.
[  352.964470][T14070] netlink: 'syz.4.2120': attribute type 1 has an invalid length.
[  352.973132][T14070] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2120'.
[  352.987210][T14070] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2120'.
[  352.996329][T14070] netlink: 'syz.4.2120': attribute type 1 has an invalid length.
[  353.014458][T14070] netlink: 634 bytes leftover after parsing attributes in process `syz.4.2120'.
[  353.024764][T14066] bond9: (slave geneve3): making interface the new active one
[  353.042630][T14066] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  353.052467][ T7213] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.061767][ T7213] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.071126][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  353.071184][    C1] lec:lec_tx_timeout: lec0
[  353.071327][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  353.150902][ T7213] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.165163][ T7213] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.219216][T14068] netlink: 'syz.0.2119': attribute type 3 has an invalid length.
[  353.524465][T14090] netlink: 'syz.0.2125': attribute type 16 has an invalid length.
[  355.009251][T14145] netlink: 'syz.4.2138': attribute type 1 has an invalid length.
[  355.009251][T14146] netlink: 'syz.4.2138': attribute type 1 has an invalid length.
[  355.102310][T14146] 8021q: adding VLAN 0 to HW filter on device bond17
[  355.115036][T14147] bond17: entered allmulticast mode
[  355.184807][ T5196] udevd[5196]: worker [5884] /devices/virtual/block/nbd1 timeout; kill it
[  355.219984][ T5196] udevd[5196]: seq 13065 '/devices/virtual/block/nbd1' killed
[  355.732630][T14174] netlink: 'syz.4.2148': attribute type 1 has an invalid length.
[  355.780169][T14174] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR
[  356.140077][T14199] netlink: 'syz.2.2154': attribute type 10 has an invalid length.
[  356.167640][T14199] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  356.780375][T14222] __nla_validate_parse: 7 callbacks suppressed
[  356.780401][T14222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2159'.
[  357.062008][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2163'.
[  357.091522][T14234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2163'.
[  357.209627][T14240] netlink: 'syz.3.2165': attribute type 7 has an invalid length.
[  357.232740][T14240] netlink: 'syz.3.2165': attribute type 8 has an invalid length.
[  357.251645][T14240] netlink: 209828 bytes leftover after parsing attributes in process `syz.3.2165'.
[  357.643466][ T5161] block nbd1: Possible stuck request ffff8880278d0000: control (read@0,1024B). Runtime 210 seconds
[  357.656206][ T5161] block nbd1: Possible stuck request ffff8880278d0200: control (read@1024,1024B). Runtime 210 seconds
[  357.668562][ T5161] block nbd1: Possible stuck request ffff8880278d0400: control (read@2048,1024B). Runtime 210 seconds
[  357.680208][ T5161] block nbd1: Possible stuck request ffff8880278d0600: control (read@3072,1024B). Runtime 210 seconds
[  357.748372][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2172'.
[  357.938603][T14267] macvlan0: left allmulticast mode
[  357.959317][T14267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2172'.
[  357.982502][T14275] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2172'.
[  358.077547][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  358.085700][    C1] lec:lec_tx_timeout: lec0
[  358.090466][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  359.088491][T14317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2176'.
[  359.121082][T14319] netlink: 'syz.3.2179': attribute type 1 has an invalid length.
[  359.166321][T14319] bond21: entered promiscuous mode
[  359.172128][T14319] 8021q: adding VLAN 0 to HW filter on device bond21
[  359.399792][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2185'.
[  359.971696][T14353] tun0: tun_chr_ioctl cmd 1074812118
[  360.019317][T14357] tun0: tun_chr_ioctl cmd 1074033169
[  360.092666][T14364] xt_hashlimit: size too large, truncated to 1048576
[  360.185907][T14368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2191'.
[  360.306986][T14373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  361.022253][T14403] macsec0: entered promiscuous mode
[  361.030656][T14403] macsec0: left allmulticast mode
[  361.036179][T14405] macsec0: left promiscuous mode
[  361.043756][T14407] veth1: entered promiscuous mode
[  361.051245][T14401] lo speed is unknown, defaulting to 1000
[  361.079772][T14401] gre0 speed is unknown, defaulting to 1000
[  361.188316][T14409] openvswitch: netlink: Flow actions attr not present in new flow.
[  361.432601][T14401] wg1 speed is unknown, defaulting to 1000
[  361.454893][T14420] netlink: 'syz.2.2204': attribute type 1 has an invalid length.
[  361.546283][T14420] bond13: entered promiscuous mode
[  361.560981][T14420] 8021q: adding VLAN 0 to HW filter on device bond13
[  361.670876][T14430] netlink: 'syz.3.2206': attribute type 8 has an invalid length.
[  362.112859][T14446] __nla_validate_parse: 4 callbacks suppressed
[  362.112879][T14446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2210'.
[  362.150749][T14452] dvmrp1: entered allmulticast mode
[  362.212892][T14452] dvmrp1: left allmulticast mode
[  362.310759][T14452] x_tables: duplicate underflow at hook 2
[  362.329254][T14456] atomic_op ffff8880535fa198 conn xmit_atomic 0000000000000000
[  362.351649][T14464] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2215'.
[  362.388939][T14464] netlink: 'syz.3.2215': attribute type 13 has an invalid length.
[  362.639829][T14466] lo speed is unknown, defaulting to 1000
[  362.652385][T14466] gre0 speed is unknown, defaulting to 1000
[  363.058695][ T5841] Bluetooth: hci4: link tx timeout
[  363.064015][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  363.097737][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  363.105861][    C1] lec:lec_tx_timeout: lec0
[  363.118047][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  363.413961][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2225'.
[  363.444051][T14499] netlink: 'syz.0.2227': attribute type 1 has an invalid length.
[  363.509238][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2227'.
[  363.523537][T14507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2227'.
[  363.583461][T14510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2227'.
[  363.598061][T14466] wg1 speed is unknown, defaulting to 1000
[  364.175653][T14528] netlink: 'syz.1.2233': attribute type 1 has an invalid length.
[  364.247374][T14528] bond10: entered promiscuous mode
[  364.253737][T14528] 8021q: adding VLAN 0 to HW filter on device bond10
[  364.311384][T14533] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  364.333475][T14533] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  364.344948][T14533] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  364.635125][T14555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2239'.
[  364.649959][T14548] tipc: New replicast peer: 255.255.255.255
[  364.666841][T14548] tipc: Enabled bearer <udp:syz2>, priority 10
[  364.781629][T14557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2238'.
[  364.822187][T14557] dummy0: Device is already in use.
[  365.147855][ T5833] Bluetooth: hci4: command 0x0405 tx timeout
[  365.507401][T14578] nbd4: detected capacity change from 0 to 63
[  365.525693][ T5841] block nbd4: Receive control failed (result -104)
[  365.903459][T14602] netlink: 'syz.1.2250': attribute type 1 has an invalid length.
[  366.081593][T14602] bond11: entered promiscuous mode
[  366.111328][T14602] 8021q: adding VLAN 0 to HW filter on device bond11
[  366.138092][T14616] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  366.208222][T14610] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  366.309078][T14610] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  366.328511][T14610] bond11: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  366.423683][T14627] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2253'.
[  366.470701][T14630] syzkaller1: entered promiscuous mode
[  366.484177][T14630] syzkaller1: entered allmulticast mode
[  366.663048][T14631] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[  366.685003][T14634] syzkaller0: entered promiscuous mode
[  366.712151][T14634] syzkaller0: entered allmulticast mode
[  367.020494][T14654] netlink: 'syz.3.2260': attribute type 21 has an invalid length.
[  367.031098][T14654] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2260'.
[  367.182575][T14657] netlink: 'syz.4.2262': attribute type 39 has an invalid length.
[  367.452957][T14670] netlink: 'syz.3.2266': attribute type 1 has an invalid length.
[  367.533558][T14670] bond22: entered promiscuous mode
[  367.592763][T14670] 8021q: adding VLAN 0 to HW filter on device bond22
[  367.738990][T14683] bond22: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  367.806426][T14683] bond22: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  367.862821][T14683] bond22: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  367.947347][T14701] __nla_validate_parse: 2 callbacks suppressed
[  367.947367][T14701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2270'.
[  368.127951][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  368.136195][    C1] lec:lec_tx_timeout: lec0
[  368.141437][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  368.346882][T14715] xt_recent: Unsupported userspace flags (000000b1)
[  368.573558][T14723] netlink: 'syz.0.2274': attribute type 3 has an invalid length.
[  368.713632][T14735] xt_hashlimit: overflow, try lower: 0/0
[  368.991499][T14746] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2279'.
[  369.161304][T14753] netlink: 'syz.3.2282': attribute type 1 has an invalid length.
[  369.333081][T14753] bond23: entered promiscuous mode
[  369.355910][T14753] 8021q: adding VLAN 0 to HW filter on device bond23
[  369.431463][T14758] bond23: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  369.445488][T14758] bond23: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  369.458826][T14758] bond23: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  369.540363][T14746] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2279'.
[  370.247209][T14778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2287'.
[  370.256753][T14778] tipc: Invalid UDP bearer configuration
[  370.256813][T14778] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  370.442363][ T5161] block nbd0: Possible stuck request ffff888027878000: control (read@0,1024B). Runtime 270 seconds
[  370.453690][ T5161] block nbd0: Possible stuck request ffff888027878200: control (read@1024,1024B). Runtime 270 seconds
[  370.464936][ T5161] block nbd0: Possible stuck request ffff888027878400: control (read@2048,1024B). Runtime 270 seconds
[  370.477698][ T5161] block nbd0: Possible stuck request ffff888027878600: control (read@3072,1024B). Runtime 270 seconds
[  370.482006][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2289'.
[  370.500682][T14790] netlink: 'syz.1.2287': attribute type 4 has an invalid length.
[  370.569357][ T9090] lo speed is unknown, defaulting to 1000
[  370.575231][ T9090] syz2: Port: 1 Link ACTIVE
[  370.633424][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2289'.
[  370.708227][T14785] unsupported nla_type 216
[  370.802645][T14799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2293'.
[  370.847545][T14796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2292'.
[  370.910612][T14801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2292'.
[  370.951121][T14796] team1: entered promiscuous mode
[  370.966525][T14796] team1: entered allmulticast mode
[  370.978526][T14796] 8021q: adding VLAN 0 to HW filter on device team1
[  371.059570][T14799] 8021q: adding VLAN 0 to HW filter on device bond13
[  371.095237][T14814] netlink: 'syz.1.2296': attribute type 1 has an invalid length.
[  371.104112][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2292'.
[  371.240564][T14821] netlink: 'syz.4.2292': attribute type 3 has an invalid length.
[  371.319598][T14801] team2: entered promiscuous mode
[  371.334655][T14801] team2: entered allmulticast mode
[  371.353365][T14801] 8021q: adding VLAN 0 to HW filter on device team2
[  371.375382][T14804] tunl0: Caught tx_queue_len zero misconfig
[  371.478668][T14814] bond12: entered promiscuous mode
[  371.486788][T14814] 8021q: adding VLAN 0 to HW filter on device bond12
[  371.608978][T14818] bond12: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  371.640614][T14818] bond12: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  371.665595][T14818] bond12: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  371.795924][T14838] syzkaller0: left promiscuous mode
[  371.848428][T14838] syzkaller0: left allmulticast mode
[  372.068099][T14850] lo speed is unknown, defaulting to 1000
[  372.095354][T14850] gre0 speed is unknown, defaulting to 1000
[  372.143989][T14862] openvswitch: netlink: Actions may not be safe on all matching packets
[  372.304262][T14869] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.157998][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  373.166086][    C1] lec:lec_tx_timeout: lec0
[  373.172211][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  373.217290][T14884] sctp: [Deprecated]: syz.1.2310 (pid 14884) Use of struct sctp_assoc_value in delayed_ack socket option.
[  373.217290][T14884] Use struct sctp_sack_info instead
[  373.397309][T14884] __nla_validate_parse: 6 callbacks suppressed
[  373.397330][T14884] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2310'.
[  373.417295][T14892] xt_HMARK: spi-set and port-set can't be combined
[  373.463636][T14884] sctp: [Deprecated]: syz.1.2310 (pid 14884) Use of struct sctp_assoc_value in delayed_ack socket option.
[  373.463636][T14884] Use struct sctp_sack_info instead
[  373.533119][T14888] lo speed is unknown, defaulting to 1000
[  373.620842][T14892] tipc: Can't bind to reserved service type 1
[  373.684341][T14898] netlink: 'syz.1.2312': attribute type 21 has an invalid length.
[  373.732342][T14898] netlink: 'syz.1.2312': attribute type 6 has an invalid length.
[  373.749193][T14898] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2312'.
[  373.779440][T14902] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2312'.
[  373.971790][T14907] netlink: 'syz.0.2313': attribute type 1 has an invalid length.
[  373.982149][T14906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  374.000307][T14908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  374.037921][ T9090] lo speed is unknown, defaulting to 1000
[  374.041895][T14850] wg1 speed is unknown, defaulting to 1000
[  374.043866][T14888] gre0 speed is unknown, defaulting to 1000
[  374.079161][ T9090] syz2: Port: 1 Link DOWN
[  374.130023][T14907] bond15: entered promiscuous mode
[  374.135742][T14907] 8021q: adding VLAN 0 to HW filter on device bond15
[  374.156485][T14909] bond15: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  374.170224][T14909] bond15: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  374.182186][T14909] bond15: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode
[  374.463823][T14930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2317'.
[  374.527940][T14929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2318'.
[  374.999408][T14888] wg1 speed is unknown, defaulting to 1000
[  375.043373][T14958] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2323'.
[  376.153662][T14993] netlink: 'syz.4.2329': attribute type 1 has an invalid length.
[  376.448590][T14993] bond18: entered promiscuous mode
[  376.493373][T14993] 8021q: adding VLAN 0 to HW filter on device bond18
[  376.562244][T15013] sit2: entered promiscuous mode
[  376.736067][T15021] netlink: 'syz.0.2334': attribute type 1 has an invalid length.
[  376.941331][T15021] bond16: entered promiscuous mode
[  376.949069][T15021] 8021q: adding VLAN 0 to HW filter on device bond16
[  376.959670][T15000] lo speed is unknown, defaulting to 1000
[  377.032938][T15024] bond16: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  377.060993][T15024] bond16: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  377.102704][T15024] bond16: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode
[  377.311448][T15027] bond16: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  377.336155][T15027] bond16: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  377.406537][T15000] gre0 speed is unknown, defaulting to 1000
[  377.999197][T15058] netlink: 'syz.4.2343': attribute type 1 has an invalid length.
[  378.072304][T15058] bond19: entered promiscuous mode
[  378.084192][T15058] 8021q: adding VLAN 0 to HW filter on device bond19
[  378.104111][T15000] wg1 speed is unknown, defaulting to 1000
[  378.167647][T15064] bond19: (slave ipvlan12): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  378.188248][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  378.196520][    C1] lec:lec_tx_timeout: lec0
[  378.201387][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  378.221415][T15064] bond19: (slave ipvlan12): The slave device specified does not support setting the MAC address
[  378.257302][T15064] bond19: (slave ipvlan12): Setting fail_over_mac to active for active-backup mode
[  378.381574][T15080] netlink: 'syz.2.2346': attribute type 1 has an invalid length.
[  378.498049][T15086] netlink: 'syz.4.2348': attribute type 1 has an invalid length.
[  378.543792][T15080] bond14: entered promiscuous mode
[  378.551410][T15080] 8021q: adding VLAN 0 to HW filter on device bond14
[  378.577439][T15084] bond14: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  378.625785][T15084] bond14: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  378.671930][T15084] bond14: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  378.749758][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.759509][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  378.766121][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  378.803141][T15086] bond20: entered promiscuous mode
[  378.818592][T15086] 8021q: adding VLAN 0 to HW filter on device bond20
[  378.844131][T15087] bond14: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  378.882096][T15087] bond14: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  378.929790][T15088] bond20: (slave ipvlan12): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  378.958406][T15088] bond20: (slave ipvlan12): The slave device specified does not support setting the MAC address
[  378.980729][T15100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2349'.
[  378.991796][T15088] bond20: (slave ipvlan12): Setting fail_over_mac to active for active-backup mode
[  379.062827][T15100] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  379.079823][T15100] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2349'.
[  379.098999][T15103] ipvlan0: entered promiscuous mode
[  379.104363][T15103] ipvlan0: entered allmulticast mode
[  379.110873][T15103] team0: entered allmulticast mode
[  379.117283][T15103] team_slave_0: entered allmulticast mode
[  379.124420][T15103] team_slave_1: entered allmulticast mode
[  379.131940][T15103] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  379.140636][T15103] team0: Device ipvlan0 is already an upper device of the team interface
[  379.149709][T15101] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2349'.
[  379.235603][T15107] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2351'.
[  379.250804][T15107] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2351'.
[  379.370301][T15111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2353'.
[  379.430984][T15118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2353'.
[  379.464453][T15113] syzkaller1: entered promiscuous mode
[  379.497160][T15113] syzkaller1: entered allmulticast mode
[  379.678494][T15124] netlink: 'syz.4.2357': attribute type 10 has an invalid length.
[  379.686638][T15124] vxcan1: left allmulticast mode
[  379.703441][T15124] vxcan1: entered allmulticast mode
[  379.721000][T15124] team0: Device vxcan1 is of different type
[  379.743314][T15125] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  379.943994][T15134] lo: Caught tx_queue_len zero misconfig
[  379.995791][T15130] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  380.009825][T15130] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  380.139311][T15132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  380.152286][T15130] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  380.167367][T15130] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  380.198463][T15130] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  380.206191][T15130] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  380.282569][T15130] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  380.300631][T15149] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2364'.
[  380.308376][T15130] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  380.501091][T15161] netlink: 'syz.0.2367': attribute type 13 has an invalid length.
[  380.518309][T15161] netlink: 'syz.0.2367': attribute type 17 has an invalid length.
[  380.709056][T15161] tunl0: left allmulticast mode
[  380.719684][T15161] gre0: left allmulticast mode
[  380.733105][T15161] erspan0: left allmulticast mode
[  380.745936][T15161] ip_vti0: left allmulticast mode
[  380.759982][T15161] ip6_vti0: left allmulticast mode
[  380.779902][T15161] sit0: left allmulticast mode
[  380.794157][T15161] ip6tnl0: left allmulticast mode
[  380.802441][T15161] ip6gre0: left allmulticast mode
[  380.810427][T15161] syz_tun: left allmulticast mode
[  380.825090][T15161] ip6gretap0: left allmulticast mode
[  380.845087][T15161] vcan0: left allmulticast mode
[  380.853111][T15161] bond0: left allmulticast mode
[  380.861934][T15161] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.870302][ T7362] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  380.881283][T15161] team0: left allmulticast mode
[  380.888034][T15161] 8021q: adding VLAN 0 to HW filter on device team0
[  380.896711][T15161] nlmon0: left allmulticast mode
[  380.908528][T15161] caif0: left allmulticast mode
[  380.914522][T15161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  380.928461][T15181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2372'.
[  380.972701][T15181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2372'.
[  381.002596][ T7195] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  381.033072][ T7195] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  381.044924][T15181] netlink: 'syz.4.2372': attribute type 18 has an invalid length.
[  381.108732][T15164] lo speed is unknown, defaulting to 1000
[  381.138874][T15164] gre0 speed is unknown, defaulting to 1000
[  381.644803][T15164] wg1 speed is unknown, defaulting to 1000
[  381.707358][ T9090] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  381.740740][ T5831] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  381.973983][T15219] lo speed is unknown, defaulting to 1000
[  381.992449][T15219] gre0 speed is unknown, defaulting to 1000
[  382.032059][T15221] netlink: 'syz.1.2386': attribute type 1 has an invalid length.
[  382.295874][T15219] wg1 speed is unknown, defaulting to 1000
[  383.161855][T15248] pimreg: entered allmulticast mode
[  383.271079][T15253] macsec1: entered promiscuous mode
[  383.276382][T15253] macsec1: entered allmulticast mode
[  383.381107][T15259] netlink: 'syz.1.2397': attribute type 3 has an invalid length.
[  384.028220][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms
[  384.036392][    C1] lec:lec_tx_timeout: lec0
[  384.042542][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  384.167092][T15298] lo: Caught tx_queue_len zero misconfig
[  384.194667][T15298] netlink: 'syz.2.2407': attribute type 5 has an invalid length.
[  384.641907][T15314] __nla_validate_parse: 8 callbacks suppressed
[  384.641925][T15314] netlink: 536 bytes leftover after parsing attributes in process `syz.1.2410'.
[  384.747849][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  384.928959][T15330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2413'.
[  384.954563][T15325] netlink: 'syz.3.2412': attribute type 1 has an invalid length.
[  385.098572][T15334] tipc: Started in network mode
[  385.119417][T15334] tipc: Node identity 8a25bedae8b1, cluster identity 4711
[  385.136644][T15334] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  385.156630][T15337] netlink: 'syz.3.2416': attribute type 29 has an invalid length.
[  385.203301][T15336] netlink: 'syz.3.2416': attribute type 29 has an invalid length.
[  385.381890][T15353] IPVS: Error connecting to the multicast addr
[  385.392197][T15353] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2422'.
[  385.500488][T15359] lo speed is unknown, defaulting to 1000
[  385.644650][T15359] gre0 speed is unknown, defaulting to 1000
[  385.708646][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2428'.
[  385.718073][T15377] netlink: 261 bytes leftover after parsing attributes in process `syz.2.2428'.
[  385.980973][T15334] tipc: Resetting bearer <eth:syzkaller0>
[  386.034392][T15392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2430'.
[  386.105811][T15394] macsec1: entered promiscuous mode
[  386.137861][ T5831] tipc: Node number set to 1653915354
[  386.337631][T15406] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993
[  386.349400][T15404] lo speed is unknown, defaulting to 1000
[  386.352205][T15359] wg1 speed is unknown, defaulting to 1000
[  386.361539][T15404] gre0 speed is unknown, defaulting to 1000
[  386.910626][ T7197] tipc: Resetting bearer <eth:syzkaller0>
[  386.966179][T15423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.226035][T15422] syzkaller0: entered promiscuous mode
[  387.232482][T15422] syzkaller0: entered allmulticast mode
[  387.240241][T15404] wg1 speed is unknown, defaulting to 1000
[  387.708458][ T5161] block nbd1: Possible stuck request ffff8880278d0000: control (read@0,1024B). Runtime 240 seconds
[  387.719928][ T5161] block nbd1: Possible stuck request ffff8880278d0200: control (read@1024,1024B). Runtime 240 seconds
[  387.731694][ T5161] block nbd1: Possible stuck request ffff8880278d0400: control (read@2048,1024B). Runtime 240 seconds
[  387.743410][ T5161] block nbd1: Possible stuck request ffff8880278d0600: control (read@3072,1024B). Runtime 240 seconds
[  389.059911][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  389.068175][    C1] lec:lec_tx_timeout: lec0
[  389.073692][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  390.116912][T15472] netlink: 'syz.4.2451': attribute type 8 has an invalid length.
[  390.744771][T15497] lo speed is unknown, defaulting to 1000
[  390.752686][T15497] gre0 speed is unknown, defaulting to 1000
[  390.768315][T15499] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  390.872337][T15503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2456'.
[  391.146655][T15497] wg1 speed is unknown, defaulting to 1000
[  391.242288][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2464'.
[  391.289822][T15518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2464'.
[  391.525885][T15534] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2468'.
[  391.526608][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2468'.
[  391.601356][T15534] bond0 (unregistering): left promiscuous mode
[  391.613166][T15534] bond_slave_0: left promiscuous mode
[  391.622301][T15534] bond_slave_1: left promiscuous mode
[  391.670063][T15534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  391.686885][T15534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  391.712840][T15534] bond0 (unregistering): Released all slaves
[  391.799700][T15539] bridge0: port 3(vlan0) entered blocking state
[  391.810014][T15539] bridge0: port 3(vlan0) entered disabled state
[  391.817821][T15539] vlan0: entered allmulticast mode
[  391.824969][T15539] bond0: entered allmulticast mode
[  391.834276][T15539] bond_slave_0: entered allmulticast mode
[  391.841832][T15539] 
@0�: entered allmulticast mode
[  391.846959][T15539] dummy0: entered allmulticast mode
[  391.859321][T15539] vlan0: entered promiscuous mode
[  391.864486][T15539] bond0: entered promiscuous mode
[  391.872597][T15539] bond_slave_0: entered promiscuous mode
[  391.881434][T15539] 
@0�: entered promiscuous mode
[  391.886797][T15539] dummy0: entered promiscuous mode
[  391.901106][T15550] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2474'.
[  391.931888][T15550] netlink: 'syz.2.2474': attribute type 1 has an invalid length.
[  391.964011][T15550] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2474'.
[  392.125788][T15557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2475'.
[  392.145529][T15559] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  392.153524][T15557] IPv6: NLM_F_CREATE should be specified when creating new route
[  392.187254][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  392.274278][T15559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2476'.
[  392.477482][T15572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2479'.
[  392.769951][T15578] syzkaller1: entered promiscuous mode
[  392.775502][T15578] syzkaller1: entered allmulticast mode
[  393.838112][T15608] tap0: tun_chr_ioctl cmd 1074025677
[  393.844059][T15608] tap0: linktype set to 6
[  393.894529][T15611] xfrm0: entered promiscuous mode
[  393.903631][T15611] xfrm0: entered allmulticast mode
[  393.911798][T15608] netem: unknown loss type 0
[  393.917049][T15608] netem: change failed
[  393.926817][T15608] syzkaller1: entered promiscuous mode
[  393.934569][T15608] syzkaller1: entered allmulticast mode
[  393.962199][T15615] xt_bpf: check failed: parse error
[  394.087053][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  394.095151][    C1] lec:lec_tx_timeout: lec0
[  394.100708][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  394.195179][T15626] netlink: 'syz.4.2498': attribute type 4 has an invalid length.
[  394.280223][T15630] netlink: 'syz.4.2498': attribute type 4 has an invalid length.
[  394.733768][T15655] x_tables: duplicate underflow at hook 1
[  394.849077][T15656] syzkaller0: entered promiscuous mode
[  394.854740][T15656] syzkaller0: entered allmulticast mode
[  394.870204][T15649] syzkaller0: entered promiscuous mode
[  394.878538][T15649] syzkaller0: entered allmulticast mode
[  395.018461][T15663] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  395.032322][T15663] bond0 (unregistering): Released all slaves
[  395.220286][T15674] lo speed is unknown, defaulting to 1000
[  395.234698][T15674] gre0 speed is unknown, defaulting to 1000
[  395.474131][T15686] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  395.715749][T15674] wg1 speed is unknown, defaulting to 1000
[  396.030462][ T5161] block nbd4: Possible stuck request ffff888027a0ae00: control (read@0,1024B). Runtime 30 seconds
[  396.044136][ T5161] block nbd4: Possible stuck request ffff888027a0b000: control (read@1024,1024B). Runtime 30 seconds
[  396.056495][ T5161] block nbd4: Possible stuck request ffff888027a0b200: control (read@2048,1024B). Runtime 30 seconds
[  396.068926][ T5161] block nbd4: Possible stuck request ffff888027a0b400: control (read@3072,1024B). Runtime 30 seconds
[  396.422491][T15724] tipc: Failed to remove unknown binding: 66,0,0/2855555340:2289677706/2289677708
[  396.432739][T15724] tipc: Failed to remove unknown binding: 66,0,0/2855555340:2289677706/2289677707
[  396.444099][T15724] tipc: Failed to remove unknown binding: 66,0,0/2855555340:2289677706/2289677708
[  396.465090][T15724] tipc: Failed to remove unknown binding: 66,0,0/2855555340:2289677706/2289677707
[  396.555166][T15725] netlink: 'syz.1.2527': attribute type 1 has an invalid length.
[  396.716752][T15742] __nla_validate_parse: 16 callbacks suppressed
[  396.716774][T15742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2530'.
[  396.756389][T15742] x_tables: unsorted entry at hook 3
[  396.822322][T15748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2530'.
[  397.284432][T15754] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2531'.
[  397.474948][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2532'.
[  397.650891][T15768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2535'.
[  397.661895][T15770] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  397.793145][T15772] bridge_slave_0 (unregistering): left allmulticast mode
[  397.809173][T15772] bridge_slave_0 (unregistering): left promiscuous mode
[  397.820948][T15772] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.848386][T15781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2535'.
[  398.194326][T15768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2535'.
[  398.206234][T15780] team0: entered promiscuous mode
[  398.212262][T15780] bridge2: entered promiscuous mode
[  398.219255][T15780] 8021q: adding VLAN 0 to HW filter on device team0
[  398.585561][T15810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2545'.
[  398.664513][T15808] lo speed is unknown, defaulting to 1000
[  398.685712][T15808] gre0 speed is unknown, defaulting to 1000
[  398.865167][T15824] netlink: 'syz.1.2550': attribute type 11 has an invalid length.
[  398.899162][ T9090] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  399.107972][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  399.116039][    C1] lec:lec_tx_timeout: lec0
[  399.121506][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  399.229389][T15808] wg1 speed is unknown, defaulting to 1000
[  399.329169][ T1148] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  399.475227][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2556'.
[  399.627588][ T9090] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  400.016021][T15861] syzkaller1: entered promiscuous mode
[  400.024494][T15861] syzkaller1: entered allmulticast mode
[  400.024639][T15864] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2561'.
[  400.196400][T15869] gre3: entered promiscuous mode
[  400.347575][ T7172] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  400.358314][ T7172] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  400.508299][ T5161] block nbd0: Possible stuck request ffff888027878000: control (read@0,1024B). Runtime 300 seconds
[  400.528086][ T5161] block nbd0: Possible stuck request ffff888027878200: control (read@1024,1024B). Runtime 300 seconds
[  400.540845][ T5161] block nbd0: Possible stuck request ffff888027878400: control (read@2048,1024B). Runtime 300 seconds
[  400.552965][ T5161] block nbd0: Possible stuck request ffff888027878600: control (read@3072,1024B). Runtime 300 seconds
[  400.679395][T15879] 8021q: adding VLAN 0 to HW filter on device bond25
[  400.758906][ T5831] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  401.226109][T15898] siw: device registration error -23
[  401.443449][T15916] 8021q: VLANs not supported on ip_vti0
[  401.511332][T15917] lo speed is unknown, defaulting to 1000
[  401.523313][T15917] gre0 speed is unknown, defaulting to 1000
[  401.976464][T15917] wg1 speed is unknown, defaulting to 1000
[  402.071116][T15935] lo speed is unknown, defaulting to 1000
[  402.091689][T15935] gre0 speed is unknown, defaulting to 1000
[  402.338305][T15937] batadv_slave_0: entered promiscuous mode
[  402.482402][T15935] wg1 speed is unknown, defaulting to 1000
[  403.119436][T15954] __nla_validate_parse: 3 callbacks suppressed
[  403.119458][T15954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2586'.
[  403.179016][T15936] batadv_slave_0: left promiscuous mode
[  403.464863][T15954] lo speed is unknown, defaulting to 1000
[  403.544698][T15954] gre0 speed is unknown, defaulting to 1000
[  403.924584][T15971] bond13: entered allmulticast mode
[  404.014305][T15974] macvlan2: entered promiscuous mode
[  404.034776][T15974] macvlan2: entered allmulticast mode
[  404.058868][T15974] bond13: entered promiscuous mode
[  404.065091][T15974] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  404.137507][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  404.145715][    C1] lec:lec_tx_timeout: lec0
[  404.151487][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  404.159905][T15974] bond13: left promiscuous mode
[  404.336482][T15980] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  404.369377][T15954] wg1 speed is unknown, defaulting to 1000
[  404.517630][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  404.560684][T15990] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  405.063745][T16011] bond26: option lacp_rate: invalid value (128)
[  405.073347][T16011] bond26 (unregistering): Released all slaves
[  405.558550][T16032] ieee802154 phy0 wpan0: encryption failed: -22
[  405.586437][T16032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2607'.
[  405.780659][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'.
[  405.790575][T16043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2609'.
[  405.805306][T16043] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2609'.
[  405.930273][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2613'.
[  405.953977][T16052] netlink: 'syz.1.2613': attribute type 1 has an invalid length.
[  405.962426][T16052] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2613'.
[  405.976389][T16052] ipvlan1: left allmulticast mode
[  405.993457][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2613'.
[  406.040445][T16058] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2611'.
[  406.067549][T16058] vlan0: entered promiscuous mode
[  406.086511][T16058] erspan0: entered promiscuous mode
[  406.243045][T16068] ip6gre4: entered promiscuous mode
[  406.257431][T16068] ip6gre4: entered allmulticast mode
[  406.267579][ T7172] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  406.275619][ T7172] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  406.312521][ T7640] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  406.344339][T16065] netlink: 820 bytes leftover after parsing attributes in process `syz.1.2616'.
[  406.397376][ T7640] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  406.436084][T16078] netlink: 'syz.3.2620': attribute type 1 has an invalid length.
[  406.474124][T16078] 8021q: adding VLAN 0 to HW filter on device bond26
[  406.511832][T16078] bond26: (slave veth13): Enslaving as an active interface with a down link
[  406.536268][T16078] vlan1: entered allmulticast mode
[  406.542042][T16078] veth0_to_bond: entered allmulticast mode
[  406.550319][T16078] bond26: (slave vlan1): Opening slave failed
[  406.830213][ T7362] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  406.907598][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  406.954137][T16099] lo speed is unknown, defaulting to 1000
[  406.971642][T16100] lo speed is unknown, defaulting to 1000
[  406.986308][T16099] gre0 speed is unknown, defaulting to 1000
[  407.218113][T16112] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  407.248818][T16112] netlink: zone id is out of range
[  407.254006][T16112] netlink: zone id is out of range
[  407.259781][T16112] netlink: zone id is out of range
[  407.265027][T16112] netlink: zone id is out of range
[  407.287434][T16100] gre0 speed is unknown, defaulting to 1000
[  407.297257][T16112] netlink: zone id is out of range
[  407.304757][T16099] wg1 speed is unknown, defaulting to 1000
[  407.316944][T16112] netlink: zone id is out of range
[  407.338473][T16112] netlink: zone id is out of range
[  407.343857][T16112] netlink: zone id is out of range
[  407.349755][T16112] netlink: zone id is out of range
[  407.886051][T16100] wg1 speed is unknown, defaulting to 1000
[  408.066654][T16148] bond0: (slave dummy0): Releasing backup interface
[  408.074919][T16148] dummy0 (unregistering): left promiscuous mode
[  408.082867][T16148] dummy0 (unregistering): left allmulticast mode
[  408.237446][T16146] lo speed is unknown, defaulting to 1000
[  408.255842][T16146] gre0 speed is unknown, defaulting to 1000
[  408.954439][T16163] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  408.974159][T16162] __nla_validate_parse: 6 callbacks suppressed
[  408.974182][T16162] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2643'.
[  409.065488][T16146] wg1 speed is unknown, defaulting to 1000
[  409.167955][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  409.176084][    C1] lec:lec_tx_timeout: lec0
[  409.181078][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  409.188522][T16176] syzkaller1: entered promiscuous mode
[  409.197170][T16176] syzkaller1: entered allmulticast mode
[  409.265362][T16179] netlink: 195920 bytes leftover after parsing attributes in process `syz.0.2647'.
[  410.027409][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  410.366129][T16205] netlink: 'syz.3.2652': attribute type 1 has an invalid length.
[  410.391018][T16205] netlink: 'syz.3.2652': attribute type 4 has an invalid length.
[  410.408340][T16205] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2652'.
[  410.879704][T16227] syzkaller1: entered promiscuous mode
[  410.885416][T16227] syzkaller1: entered allmulticast mode
[  411.026445][T16234] netlink: 'syz.4.2659': attribute type 1 has an invalid length.
[  411.351345][T16246] netlink: 'syz.1.2664': attribute type 1 has an invalid length.
[  411.413685][T16248] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2665'.
[  411.764132][T16261] syzkaller1: entered promiscuous mode
[  411.774618][T16261] syzkaller1: entered allmulticast mode
[  411.860503][T16267] netlink: 'syz.3.2671': attribute type 10 has an invalid length.
[  411.870268][T16267] net_ratelimit: 12 callbacks suppressed
[  411.870290][T16267] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  411.995542][T16269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2672'.
[  412.017756][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2672'.
[  412.043642][T16271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2673'.
[  412.667242][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  414.197142][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  414.205337][    C1] lec:lec_tx_timeout: lec0
[  414.210219][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  414.370788][T16271] workqueue: Failed to create a rescuer kthread for wq "bond27": -EINTR
[  414.560398][T16281] vcan0: left allmulticast mode
[  414.806728][T16300] netlink: 'syz.2.2679': attribute type 27 has an invalid length.
[  414.890803][T16303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2680'.
[  414.900892][T16303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2680'.
[  414.979264][T16308] ieee802154 phy0 wpan0: encryption failed: -22
[  415.193992][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2684'.
[  415.365535][T16335] netlink: 'syz.1.2686': attribute type 16 has an invalid length.
[  415.374314][T16335] netlink: 'syz.1.2686': attribute type 17 has an invalid length.
[  415.410830][T16335] lo: left allmulticast mode
[  415.429474][T16335] tunl0: left allmulticast mode
[  415.446122][T16335] gre0: left allmulticast mode
[  415.460311][T16335] gretap0: left allmulticast mode
[  415.479037][T16335] ip_vti0: left allmulticast mode
[  415.486118][T16335] ip6_vti0: left allmulticast mode
[  415.497404][T16335] sit0: left allmulticast mode
[  415.542790][T16335] ip6gre0: left allmulticast mode
[  415.575123][T16335] syz_tun: left allmulticast mode
[  415.595181][T16335] bridge0: left allmulticast mode
[  415.608783][T16335] vcan0: left allmulticast mode
[  415.616281][T16335] nlmon0: left allmulticast mode
[  415.635730][T16335] caif0: left allmulticast mode
[  415.642493][T16335] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  415.682328][ T9090] lo speed is unknown, defaulting to 1000
[  415.691666][ T9090] syz2: Port: 1 Link ACTIVE
[  415.705115][T16332] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  415.759967][T16346] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2686'.
[  415.776872][T16340] syzkaller1: entered promiscuous mode
[  415.798090][T16340] syzkaller1: entered allmulticast mode
[  415.959069][T16359] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20002
[  415.981418][T16359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2691'.
[  416.189049][T16367] netlink: 'syz.0.2693': attribute type 1 has an invalid length.
[  416.279279][T16377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2693'.
[  416.340595][T16367] 8021q: adding VLAN 0 to HW filter on device bond17
[  416.404789][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2696'.
[  416.414586][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2696'.
[  416.440614][T16367] xt_hashlimit: size too large, truncated to 1048576
[  416.500358][T16377] syzkaller1: entered promiscuous mode
[  416.505912][T16377] syzkaller1: entered allmulticast mode
[  416.533441][T16377] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2693'.
[  416.687321][T16392] ip6gre3: entered promiscuous mode
[  416.698417][T16392] ip6gre3: entered allmulticast mode
[  417.200229][T16414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2702'.
[  417.285129][T16416] syzkaller1: entered promiscuous mode
[  417.292042][T16416] syzkaller1: entered allmulticast mode
[  417.592870][T16418] gtp1: entered promiscuous mode
[  417.602538][T16418] gtp1: entered allmulticast mode
[  417.636902][T16423] ip6tnl0: Caught tx_queue_len zero misconfig
[  417.708544][ T1148] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  417.716338][ T1148] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  417.787200][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  417.809751][ T7362] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  417.819539][ T5161] block nbd1: Possible stuck request ffff8880278d0000: control (read@0,1024B). Runtime 270 seconds
[  417.831422][ T5161] block nbd1: Possible stuck request ffff8880278d0200: control (read@1024,1024B). Runtime 270 seconds
[  417.843295][ T5161] block nbd1: Possible stuck request ffff8880278d0400: control (read@2048,1024B). Runtime 270 seconds
[  417.854782][ T5161] block nbd1: Possible stuck request ffff8880278d0600: control (read@3072,1024B). Runtime 270 seconds
[  418.337862][T16440] lo speed is unknown, defaulting to 1000
[  418.345758][T16440] gre0 speed is unknown, defaulting to 1000
[  418.354138][T16444] lo speed is unknown, defaulting to 1000
[  418.508486][ T7362] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  418.589194][ T7362] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  418.597940][T16456] xfrm2: entered allmulticast mode
[  418.779595][T16444] gre0 speed is unknown, defaulting to 1000
[  418.798553][T16440] wg1 speed is unknown, defaulting to 1000
[  418.836757][T16459] openvswitch: netlink: IP tunnel dst address not specified
[  419.368411][T16469] bond1: (slave lo): Releasing backup interface
[  419.404752][T16469] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  419.433979][T16469] lo: left allmulticast mode
[  419.482821][T16469] bridge0: port 3(batadv0) entered disabled state
[  419.508434][ T7640] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  419.549351][T16469] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.593498][T16469] bond0: (slave bridge_slave_1): Releasing backup interface
[  419.614304][T16469] bond0: (slave bond_slave_0): Releasing backup interface
[  419.639146][T16469] bond0: (slave 
4
@0�): Releasing backup interface
[  419.663046][T16469] team0: Port device team_slave_0 removed
[  419.682636][T16469] team0: Port device team_slave_1 removed
[  419.709485][T16469] batman_adv: batadv0: Removing interface: batadv_slave_0
[  419.728630][T16469] batman_adv: batadv0: Removing interface: batadv_slave_1
[  419.748890][T16469] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  419.853658][T16489] bond0: option ad_select: invalid value (34)
[  419.876026][T16489] bond0 (unregistering): Released all slaves
[  419.926410][T16444] wg1 speed is unknown, defaulting to 1000
[  419.987892][T16474] lo speed is unknown, defaulting to 1000
[  420.002367][T16474] gre0 speed is unknown, defaulting to 1000
[  420.027145][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms
[  420.035234][    C1] lec:lec_tx_timeout: lec0
[  420.040883][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  420.068207][T16499] __nla_validate_parse: 2 callbacks suppressed
[  420.068228][T16499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2723'.
[  420.384007][T16497] lo speed is unknown, defaulting to 1000
[  420.508255][ T7362] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  420.626216][T16497] gre0 speed is unknown, defaulting to 1000
[  420.871381][T16515] syzkaller0: entered promiscuous mode
[  420.886336][T16515] syzkaller0: entered allmulticast mode
[  420.979964][T16497] wg1 speed is unknown, defaulting to 1000
[  421.222925][T16474] wg1 speed is unknown, defaulting to 1000
[  421.748406][T16537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2735'.
[  421.770073][T16537] �9: left promiscuous mode
[  422.028312][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  422.176832][T16548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  422.262997][T16552] netlink: 'syz.2.2737': attribute type 1 has an invalid length.
[  422.280587][T16552] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2737'.
[  422.315349][T16554] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  422.782114][T16556] macsec1: entered promiscuous mode
[  423.163682][T16561] netlink: 'syz.4.2742': attribute type 9 has an invalid length.
[  423.461040][T16565] netlink: 'syz.4.2744': attribute type 1 has an invalid length.
[  423.585338][T16565] 8021q: adding VLAN 0 to HW filter on device bond22
[  423.709015][T16567] bond22: (slave geneve3): making interface the new active one
[  423.740866][T16567] bond22: (slave geneve3): Enslaving as an active interface with an up link
[  423.838563][ T7195] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.869183][ T7195] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.891002][ T7195] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.920671][ T7195] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  424.166691][T16582] netlink: 'syz.0.2746': attribute type 29 has an invalid length.
[  424.169262][T16581] netlink: 'syz.3.2748': attribute type 8 has an invalid length.
[  424.195559][T16582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2746'.
[  424.252811][T16587] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2749'.
[  424.313491][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2747'.
[  424.598125][ T7362] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  424.629383][T16595] 8021q: adding VLAN 0 to HW filter on device bond0
[  424.658053][ T7362] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  424.676632][T16595] bridge0: port 3(vlan0) entered blocking state
[  424.683142][T16595] bridge0: port 3(vlan0) entered forwarding state
[  424.787851][T16595] 8021q: adding VLAN 0 to HW filter on device team0
[  424.842733][T16595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  424.891302][ T7636] gre0 speed is unknown, defaulting to 1000
[  424.897737][ T7636] syz1: Port: 1 Link ACTIVE
[  424.940781][T16600] syzkaller0: left promiscuous mode
[  424.946058][T16600] syzkaller0: left allmulticast mode
[  424.951548][ T7636] gre0 speed is unknown, defaulting to 1000
[  424.968508][T16600] tipc: Resetting bearer <eth:syzkaller0>
[  425.063046][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  425.071254][    C1] lec:lec_tx_timeout: lec0
[  425.077313][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  425.215446][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2756'.
[  425.495577][T16628] lo speed is unknown, defaulting to 1000
[  425.542664][T16628] gre0 speed is unknown, defaulting to 1000
[  425.549243][ T1148] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  425.664602][T16629] lo speed is unknown, defaulting to 1000
[  425.801683][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  425.819785][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  425.829535][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  425.846638][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  425.888656][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  425.943090][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  425.955911][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  425.964814][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  425.999022][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  426.008379][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  426.110996][ T5161] block nbd4: Possible stuck request ffff888027a0ae00: control (read@0,1024B). Runtime 60 seconds
[  426.123133][ T5161] block nbd4: Possible stuck request ffff888027a0b000: control (read@1024,1024B). Runtime 60 seconds
[  426.135140][ T5161] block nbd4: Possible stuck request ffff888027a0b200: control (read@2048,1024B). Runtime 60 seconds
[  426.146969][ T5161] block nbd4: Possible stuck request ffff888027a0b400: control (read@3072,1024B). Runtime 60 seconds
[  426.241862][T16631] lo speed is unknown, defaulting to 1000
[  426.531566][T16628] wg1 speed is unknown, defaulting to 1000
[  426.601379][ T1148] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.709729][T16629] gre0 speed is unknown, defaulting to 1000
[  426.710847][ T7172] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  426.734450][ T7172] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  426.769010][ T1148] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.816780][T16647] netlink: 'syz.0.2761': attribute type 4 has an invalid length.
[  426.888975][ T1148] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.113248][ T1148] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.258348][ T5831] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  427.584486][ T1148] batadv0: left promiscuous mode
[  427.602007][ T1148] bridge0: port 3(batadv0) entered disabled state
[  427.847893][ T1148] bridge_slave_1: left promiscuous mode
[  427.853851][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.865265][ T1148] bridge_slave_0: left promiscuous mode
[  427.876516][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.108197][ T5833] Bluetooth: hci5: command tx timeout
[  428.639154][ T1148] bond4 (unregistering): (slave erspan2): Releasing active interface
[  428.667217][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  428.679411][   T31] INFO: task udevd:5883 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  428.686900][   T31]       Not tainted syzkaller #0
[  428.721135][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  428.768031][   T31] task:udevd           state:D stack:22200 pid:5883  tgid:5883  ppid:5196   task_flags:0x400140 flags:0x00080802
[  428.867680][   T31] Call Trace:
[  428.871044][   T31]  <TASK>
[  428.874028][   T31]  __schedule+0x15dd/0x52d0
[  428.937696][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  428.942753][   T31]  ? __pfx___schedule+0x10/0x10
[  428.988916][   T31]  ? schedule+0x90/0x360
[  428.993303][   T31]  schedule+0x164/0x360
[  429.027084][   T31]  io_schedule+0x7f/0xd0
[  429.031449][   T31]  folio_wait_bit_common+0x6d8/0xbc0
[  429.069153][   T31]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  429.075186][   T31]  ? __pfx_wake_page_function+0x10/0x10
[  429.098018][   T31]  ? __filemap_get_folio_mpol+0x7a9/0xb00
[  429.104009][   T31]  do_read_cache_folio+0x1ad/0x590
[  429.118185][   T31]  ? __pfx_blkdev_read_folio+0x10/0x10
[  429.123740][   T31]  read_part_sector+0xb6/0x2b0
[  429.137206][   T31]  adfspart_check_POWERTEC+0x92/0xef0
[  429.142673][   T31]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  429.154364][   T31]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  429.160672][   T31]  bdev_disk_changed+0x7ba/0x1550
[  429.165769][   T31]  ? bdev_open+0xe0/0xd30
[  429.170279][   T31]  ? __pfx_bdev_disk_changed+0x10/0x10
[  429.175805][   T31]  blkdev_get_whole+0x380/0x510
[  429.180889][   T31]  bdev_open+0x31e/0xd30
[  429.185202][   T31]  blkdev_open+0x470/0x610
[  429.189903][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  429.194946][   T31]  do_dentry_open+0x785/0x14e0
[  429.200205][   T31]  vfs_open+0x3b/0x340
[  429.204330][   T31]  ? path_openat+0x2df0/0x3860
[  429.209324][   T31]  path_openat+0x2e08/0x3860
[  429.214034][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  429.220041][   T31]  ? stack_depot_save_flags+0x33/0x810
[  429.225562][   T31]  ? __pfx_path_openat+0x10/0x10
[  429.231061][   T31]  ? __x64_sys_openat+0x138/0x170
[  429.236142][   T31]  ? do_syscall_64+0x14d/0xf80
[  429.241215][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.247533][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  429.252550][   T31]  do_file_open+0x23e/0x4a0
[  429.257270][   T31]  ? __pfx_do_file_open+0x10/0x10
[  429.262396][   T31]  ? _raw_spin_unlock+0x28/0x50
[  429.267546][   T31]  ? alloc_fd+0x64b/0x6c0
[  429.271949][   T31]  do_sys_openat2+0x113/0x200
[  429.276665][   T31]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  429.282417][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  429.287743][   T31]  ? rcu_is_watching+0x15/0xb0
[  429.292559][   T31]  __x64_sys_openat+0x138/0x170
[  429.297618][   T31]  do_syscall_64+0x14d/0xf80
[  429.302260][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.308820][   T31]  ? clear_bhb_loop+0x40/0x90
[  429.313576][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.319705][   T31] RIP: 0033:0x7ff3ae4a7407
[  429.324163][   T31] RSP: 002b:00007ffc894a8470 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  429.333023][   T31] RAX: ffffffffffffffda RBX: 00007ff3aebcf880 RCX: 00007ff3ae4a7407
[  429.341523][   T31] RDX: 00000000000a0800 RSI: 0000558c5453d360 RDI: ffffffffffffff9c
[  429.349711][   T31] RBP: 0000558c5453c910 R08: 0000000000000000 R09: 0000000000000000
[  429.357969][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000558c54550ba0
[  429.365982][   T31] R13: 0000558c5454a190 R14: 0000000000000000 R15: 0000558c54550ba0
[  429.374111][   T31]  </TASK>
[  429.377419][   T31] 
[  429.377419][   T31] Showing all locks held in the system:
[  429.407089][   T31] 1 lock held by khungtaskd/31:
[  429.412014][   T31]  #0: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  429.437303][   T31] 6 locks held by kworker/u8:9/1148:
[  429.442748][   T31] 1 lock held by dhcpcd/5491:
[  429.494911][   T31]  #0: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30
[  429.517381][   T31] 2 locks held by getty/5583:
[  429.522131][   T31]  #0: ffff8880333a00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  429.532079][   T31]  #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  429.543947][   T31] 1 lock held by syz-executor/5829:
[  429.550505][   T31] 3 locks held by kworker/1:3/5831:
[  429.555846][   T31]  #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  429.568159][   T31]  #1: ffffc900038a7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  429.579679][   T31]  #2: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  429.590431][   T31] 1 lock held by udevd/5883:
[  429.595058][   T31]  #0: ffff888027808358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  429.604790][   T31] 1 lock held by udevd/5884:
[  429.609764][   T31]  #0: ffff88802780c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  429.619465][   T31] 3 locks held by kworker/u8:37/7195:
[  429.624896][   T31]  #0: ffff88813fe54148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  429.637255][   T31]  #1: ffffc9000cbdfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  429.648586][   T31]  #2: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  429.658170][   T31] 1 lock held by udevd/7900:
[  429.662798][   T31]  #0: ffff888027019358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  429.672491][   T31] 2 locks held by syz.4.2757/16628:
[  429.678319][   T31]  #0: ffffffff8fbbacf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  429.688256][   T31]  #1: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x200
[  429.698010][   T31] 6 locks held by syz.4.2757/16629:
[  429.703822][   T31]  #0: ffffffff8fbbacf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  429.713752][   T31]  #1: ffffffff8f921690 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0
[  429.723929][   T31]  #2: ffffffff8f921850 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0
[  429.734174][   T31]  #3: ffff888040f28ff8 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650
[  429.745828][   T31]  #4: ffff888040f292f0 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0
[  429.755938][   T31]  #5: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0
[  429.766204][   T31] 6 locks held by syz-executor/16631:
[  429.772088][   T31]  #0: ffffffff8fbbacf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  429.781979][   T31]  #1: ffffffff8f921690 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0
[  429.794189][   T31]  #2: ffffffff8f921850 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0
[  429.806031][   T31]  #3: ffff888042474ff8 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650
[  429.817485][   T31]  #4: ffff8880424752f0 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0
[  429.827854][   T31]  #5: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0
[  429.841008][   T31] 1 lock held by syz.0.2766/16659:
[  429.846179][   T31]  #0: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10
[  429.856404][   T31] 1 lock held by syz.0.2766/16662:
[  429.861870][   T31]  #0: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30
[  429.872200][   T31] 1 lock held by syz.0.2766/16667:
[  429.877796][   T31]  #0: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  429.887328][   T31] 1 lock held by syz.3.2769/16682:
[  429.892492][   T31]  #0: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10
[  429.902384][   T31] 1 lock held by syz.3.2769/16687:
[  429.909186][   T31]  #0: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0
[  429.921769][   T31] 1 lock held by syz.3.2769/16691:
[  429.926944][   T31]  #0: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  429.936314][   T31] 1 lock held by syz.3.2769/16693:
[  429.942761][   T31]  #0: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  429.951910][   T31] 
[  429.954324][   T31] =============================================
[  429.954324][   T31] 
[  429.965275][   T31] NMI backtrace for cpu 0
[  429.965304][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  429.965326][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  429.965339][   T31] Call Trace:
[  429.965346][   T31]  <TASK>
[  429.965357][   T31]  dump_stack_lvl+0xe8/0x150
[  429.965390][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  429.965414][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  429.965441][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  429.965467][   T31]  sys_info+0x135/0x170
[  429.965485][   T31]  watchdog+0xfd9/0x1030
[  429.965509][   T31]  ? watchdog+0x21a/0x1030
[  429.965534][   T31]  kthread+0x388/0x470
[  429.965553][   T31]  ? __pfx_watchdog+0x10/0x10
[  429.965569][   T31]  ? __pfx_kthread+0x10/0x10
[  429.965589][   T31]  ret_from_fork+0x51e/0xb90
[  429.965626][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  429.965650][   T31]  ? __switch_to+0xc7d/0x1450
[  429.965676][   T31]  ? __pfx_kthread+0x10/0x10
[  429.965696][   T31]  ret_from_fork_asm+0x1a/0x30
[  429.965739][   T31]  </TASK>
[  429.965747][   T31] Sending NMI from CPU 0 to CPUs 1:
[  430.080868][    C1] NMI backtrace for cpu 1
[  430.080888][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  430.080908][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  430.080919][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  430.080951][    C1] Code: 3e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 72 18 00 fb f4 <e9> fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  430.080968][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246
[  430.080984][    C1] RAX: 00000000000b6165 RBX: ffffffff819a913a RCX: 0000000080000001
[  430.080997][    C1] RDX: 0000000000000001 RSI: ffffffff8df28289 RDI: ffffffff8c27ca80
[  430.081009][    C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733
[  430.081022][    C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001
[  430.081035][    C1] R13: 1ffff11003b59000 R14: 0000000000000001 R15: 1ffff11003b59000
[  430.081047][    C1] FS:  0000000000000000(0000) GS:ffff888125555000(0000) knlGS:0000000000000000
[  430.081061][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  430.081073][    C1] CR2: 0000563e076be138 CR3: 000000007f24a000 CR4: 00000000003526f0
[  430.081090][    C1] Call Trace:
[  430.081097][    C1]  <TASK>
[  430.081103][    C1]  default_idle+0x9/0x20
[  430.081121][    C1]  default_idle_call+0x72/0xb0
[  430.081140][    C1]  do_idle+0x36a/0x5f0
[  430.081168][    C1]  ? __pfx_do_idle+0x10/0x10
[  430.081199][    C1]  cpu_startup_entry+0x43/0x60
[  430.081225][    C1]  start_secondary+0x101/0x110
[  430.081246][    C1]  common_startup_64+0x13e/0x147
[  430.081274][    C1]  </TASK>
[  430.098729][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  430.113816][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  430.113881][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  430.113953][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  430.113987][   T31] Call Trace:
[  430.114010][   T31]  <TASK>
[  430.114041][   T31]  vpanic+0x56c/0xa60
[  430.114139][   T31]  ? __pfx___schedule+0x10/0x10
[  430.114225][   T31]  ? __pfx_vpanic+0x10/0x10
[  430.114318][   T31]  ? __pfx_console_unlock+0x10/0x10
[  430.114456][   T31]  panic+0xc5/0xd0
[  430.114533][   T31]  ? __pfx_panic+0x10/0x10
[  430.114611][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  430.114694][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  430.114770][   T31]  watchdog+0x1023/0x1030
[  430.114836][   T31]  ? watchdog+0x21a/0x1030
[  430.114910][   T31]  kthread+0x388/0x470
[  430.114967][   T31]  ? __pfx_watchdog+0x10/0x10
[  430.115019][   T31]  ? __pfx_kthread+0x10/0x10
[  430.115075][   T31]  ret_from_fork+0x51e/0xb90
[  430.115169][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  430.115243][   T31]  ? __switch_to+0xc7d/0x1450
[  430.115329][   T31]  ? __pfx_kthread+0x10/0x10
[  430.115394][   T31]  ret_from_fork_asm+0x1a/0x30
[  430.115515][   T31]  </TASK>
[  430.131857][   T31] Kernel Offset: disabled