last executing test programs:

5m33.801076942s ago: executing program 2 (id=10049):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48081}, 0x4)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x437, 0x0, 0x600, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

5m33.7086921s ago: executing program 2 (id=10051):
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x30, r2, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0)

5m33.634831101s ago: executing program 2 (id=10055):
r0 = socket$kcm(0x2b, 0x3, 0x0)
sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) (async)
sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="0423530e73ab434722663f17ec9c564e1594ce7c34122cc1c861f99b47e49037753e14be873a6de01e84a50f0f41ff29bdf8fd058d12158e5e4ca6f77bf5363a0c8fdeaabbde39f373608bd68da6bf8cb1ba6606d16a5b0372e23ac71c6425", 0x5f}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x0) (async)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r3=>0x0})
sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f00000005c0)={&(0x7f0000000400)=@canfd={{0x3, 0x1, 0x1}, 0x3a, 0x1, 0x0, 0x0, "1c49ef8b036ed420c88b05fd694b271d785450681b07c5eccb8922ff4a70204c0af52439e9b0bfa06391ac07002f97bf3ef1f45e4e3a009b323bed13ed63acfb"}, 0x48}}, 0x0) (async)
r4 = socket(0x2, 0x80805, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1}, 0x1c)
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000800)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8) (async)
r8 = gettid() (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@private0, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000b00)=0xe8) (async)
r10 = socket$kcm(0x2, 0x5, 0x84)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, <r11=>0x0}, 0x0)
sendmsg$unix(r4, &(0x7f0000000c00)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r11}}}, @rights={{0x18, 0x1, 0x1, [r5, 0xffffffffffffffff]}}], 0x58, 0x400}, 0x800)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e24, 0x3, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0x2c, r3, r9}, {0x8000, 0xe, 0x90a, 0x8, 0x4, 0x4, 0x0, 0x7ff}, {0x9, 0x63c6174, 0x1, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x0, 0x3, 0xd13fb9ec73110f46}, {{@in6=@private2, 0x4d6, 0xff}, 0xa, @in=@rand_addr=0x64010102, 0x3501, 0x4, 0x1, 0x0, 0x8, 0x1ff, 0x100}}, 0xe8)

5m33.629858671s ago: executing program 2 (id=10056):
unshare(0x68040200)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x4b, 0x4a, "4b721b782a17a7b6a00d963e3f7fdafd95073830fb8cfb34eb7cbd173ef6f04cba5a1e6a6f0ef6c61346d54f61bd850519514421d1f3050000f99b355dcb6ab9ed36e7e245825e2998b6"}}) (async)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1)
syz_emit_ethernet(0x76, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty, [@dstopts={0x87, 0x0, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}]}}}}}}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r3, 0x1, 0x70bd29, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x30}}, 0x0) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0x1, 0x0) (async)
ioctl$sock_inet_udp_SIOCINQ(r7, 0x5760, 0x0)
write(r5, 0x0, 0x0) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000000000000200fffee00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) (async)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r10, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r8)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r11)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x80}]}}}]}, @NFTA_RULE_USERDATA={0x39, 0x7, 0x1, 0x0, "9b421df3df397f414f139c4d231be1a042735ce2fbff5c577cdde0f612fa4f6cf2b95f33cf25f055154adbd5378685803ddf113c89"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0xd0}}, 0x5)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r14=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r12, @ANYBLOB="010052000000fcdbdf25200000000c0006000100000001000000080003003798a88680db2882394a79b8ab65a05d86412fde75eec0fceac9ee1fc421ab62a8b06138ef9c31878d3b4058177e3fdbcc49442400"/93, @ANYRES32=r14, @ANYBLOB="44002d80080003000500000008000300030000000800030001000000080002000200000005000100000000000800030006000000080002000200000005000400010000000c00060002000000020000000c00060001000000010000000c0006000000000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})

5m32.432608738s ago: executing program 2 (id=10067):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/92, &(0x7f0000000100)=0x5c)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x90}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)

5m32.298133674s ago: executing program 2 (id=10068):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, 0x0, 0x0)
close(0x3)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x25dfdbff, {0x81, 0x80, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x14}, [@FRA_SRC={0x14, 0x2, @mcast1}]}, 0x30}}, 0x0)

5m32.217069554s ago: executing program 32 (id=10068):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, 0x0, 0x0)
close(0x3)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x25dfdbff, {0x81, 0x80, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x14}, [@FRA_SRC={0x14, 0x2, @mcast1}]}, 0x30}}, 0x0)

10.469309713s ago: executing program 3 (id=13715):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async)

10.321815262s ago: executing program 3 (id=13716):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10)
read(r0, &(0x7f0000000800)=""/4096, 0x1000)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x41}}}, 0x10, 0x0}, 0x0)
close(r2)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=@mpls_delroute={0x30, 0x18, 0x9, 0x70bd6c, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x0, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0)

10.202041414s ago: executing program 3 (id=13717):
syz_emit_ethernet(0x4e, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=@dellink={0x3c, 0x11, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x80, 0xb200}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x80000000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'syzkaller1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4094}, 0x40008000)

10.14954215s ago: executing program 3 (id=13719):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
sendmsg$can_j1939(r0, &(0x7f0000001240)={&(0x7f0000001000)={0x1d, r1, 0x0, {0x0, 0xff, 0x4}, 0xff}, 0x18, &(0x7f00000010c0)={0x0}}, 0x8090) (async)
sendmmsg$sock(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x1000}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="fba6afc9eb799cc037f9bf44b4eb5ff8626934685d9483b8c2e00b9bce06e90388cdb4c811e98357fa4cd4c92902a52146ad300ef0", 0x35}], 0x1, &(0x7f0000000180)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}}, {{&(0x7f00000001c0)=@isdn={0x22, 0x8, 0x2, 0x3, 0x6}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000240)="7ad747e11fddafef521e851c8ecbc5eab901757469d541b1203fabd0775d7c022caa78c91cdb90040c414c0d3a1e8b14b1f6356c996a279d", 0x38}, {&(0x7f0000000280)="5b3684b765664f529e031861cc8fb47159a0570b53e7c7c17501f10e05f2bcba9601ad1329c41cab29dca80a0d736f12df7f1625faaab4d92c829433fabaa408ba69fae75af2454ecc6398064d823114cecdc8016fe01c6fe47e1bcf4f7dd616377d1cc32e76c15264379a479747eb800e65a47c9b2a212e9ad646c4ba45075bfb47f8b8d6406d6c529772e3b759c147fd8f3a4b1fee1d03b54a71943f80fd8872651e2f8ff735adfbd726acabda3ce0c2b7a0a118060c643c9e74a743f734", 0xbf}, {&(0x7f0000000380)="f33697892b560e52ec815f1c6d2b581933641fd02fc956f1606873dff992ca8342992b5e1c58d43486826649344df3b3d08f60f19ab01bf8da8a522bc20e6899d804ccdb01f48fad704e39db1d51b56a15b848d91a68bbde26aeca25a95e200c1899a6ba48f6b8b4bc13decef1aae95cdf6ff2ccaa9748bb3e3f82caaada2766607d48a3de319b89abf04b1e1e7359ce0971d117319a09f2d41022b2cd3493c903cdc9ea66a0d66084b1f31f11", 0xad}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000000480)="4ddd4e5ee77eadea3050965450782b397867bea64f5a0ad94a1e8f3c6e8b39830c033f6e41553455ccfaaf54d47cecd2ccc49b95b6aa96fc4aa34a2b381882c2a88f01ae357d2f4bb785a7e1ec125899f5136bb226b472cfa2d31967e1eb161c98c6b83c7198a27f8a27fbf0b22fd74d5137c55536cc5270ac7097dbd03b1209b9d6b6bcfc3ac768adc429baa58093a0b1cbbd00e542235eaca9d30a5830c4e3058dbd5f1decacea024ad5d97122f60d8ad0e01ca52f6fd22ae16c4c2ca091158063b7d1f70dd0d286b3848058a2c90cc8fe33c341a2bdadab1818f19b4986daa279fbeace33c05d0035378d560b", 0xee}, {&(0x7f0000000580)="ed0e8ddc944160c02bbeb969e3fb24d7e83588ec3f724c83ca9ac513bcf0b62a22200f3ac07c66c015a10f715bd6e09c6e30be61dd7613cb88900a9b617e7ef34db9ef48b502fc47ed9b92", 0x4b}], 0x6}}], 0x2, 0x10) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0)

10.145363389s ago: executing program 1 (id=13720):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}}], 0x1, 0x4)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x39000, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111750000000000851000000200000085000000a0000000951f0000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000000000000140a01030000000000000000020000000900010073797a300000000008000340000000060900020073797a3100000000140000001100010000000000000000000000000a"], 0x98}}, 0x0)

10.071147334s ago: executing program 3 (id=13721):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0xb8, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x8a, 0x6, "bb84d02147650fcff21b198fbbcbaeb523554a10d1ccd0375ca02bc66b66d7d9f9a55d55bc57aec917669b31dd86986d683ccfb982114ca482d3470821196ae0a89c89b7356f935e93d5bdb4c30c0f853e388cfc8e2abf103be8c1f921b27a90cc09599c4b7d42160ff12d2ccfca091b3f9bfe74297cb08ff3d457b1dd1a88f94daec3c40084"}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x64, 0x16, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x68a}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r1, 0x1)
shutdown(r1, 0x1) (async)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r2, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24)
bind$rxrpc(r2, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r4, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) (async)
listen(r2, 0x1005)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe84a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x24}}, 0x24000000)

9.998549518s ago: executing program 3 (id=13723):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x2}, 0x3b24a5eb800e2a0c}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}, 0x1, 0x0, 0x0, 0x4024040}, 0xee)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}}, 0x18, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0xee)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket(0x22, 0x2, 0x3)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x80000000, 0x4)
unshare(0x8040480)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400001006000000aa0b000090040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socket$tipc(0x1e, 0x5, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
unshare(0x2e040400)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20)
ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=0xffffffffffffffff)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
close(0x3)

9.99788217s ago: executing program 1 (id=13724):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c0008"], 0x178}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000140)=0x4323cc45, 0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0)

9.872033977s ago: executing program 1 (id=13725):
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x80)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xda}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x2c}}, 0x4024005)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r0)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000280)={@dev, <r4=>0x0}, &(0x7f00000002c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', <r5=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000340)={'syztnl2\x00', <r6=>0x0, 0x20, 0x7, 0x2, 0x98, {{0x12, 0x4, 0x1, 0x0, 0x48, 0x67, 0x2, 0x5, 0x29, 0x0, @rand_addr=0x64010100, @loopback, {[@noop, @generic={0x86, 0x10, "712ddbcdf7c7126add531ac84b91"}, @cipso={0x86, 0x13, 0x2, [{0x2, 0x5, "c33c5a"}, {0x1, 0x8, "e1706461e627"}]}, @lsrr={0x83, 0xf, 0x4d, [@empty, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback]}, @end]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', <r7=>0x0})
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000440)={@broadcast, @initdev, <r8=>0x0}, &(0x7f0000000480)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', <r9=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000500)={'syztnl0\x00', <r10=>0x0, 0x27, 0x40, 0xfffffffb, 0xb5, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x65, 0x0, 0xf7, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@rr={0x7, 0x13, 0x50, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @empty, @multicast1]}, @generic={0x0, 0x2}, @timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x5, [{@empty, 0x6}, {@remote}, {@private=0xa010101, 0x9}]}, @end, @timestamp={0x44, 0x10, 0xdc, 0x0, 0x4, [0x7, 0x1, 0x8000]}]}}}}})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000005c0)={<r11=>0x0, @private, @remote}, &(0x7f0000000600)=0xc)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'ip6_vti0\x00', <r12=>0x0, 0x4, 0x9, 0x1, 0x3, 0x2, @local, @remote, 0x1, 0x20, 0xffffffff, 0x5d76ef20}})
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000700)={@remote, <r13=>0x0}, &(0x7f0000000740)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', <r14=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'ip6_vti0\x00', <r15=>0x0, 0x4, 0xce, 0x8, 0xe0, 0x4, @private1, @rand_addr=' \x01\x00', 0x80, 0x7, 0xc, 0xa58}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r16=>0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x9e, &(0x7f0000000940)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000b80)={<r17=>0x0, @private, @remote}, &(0x7f0000000bc0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c00)={'team0\x00', <r18=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', <r19=>0x0, 0x2f, 0x9, 0x3f, 0x200, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x20, 0x8, 0x6, 0xea7}})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000d00)={'team0\x00', <r20=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={0xffffffffffffffff, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r21=>0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f0000000e00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001100)={'erspan0\x00', &(0x7f0000001040)={'syztnl0\x00', <r22=>0x0, 0x0, 0x10, 0xfe, 0x5, {{0x1a, 0x4, 0x2, 0x6, 0x68, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010100, @empty, {[@end, @ssrr={0x89, 0xf, 0x86, [@local, @private=0xa010100, @multicast1]}, @timestamp={0x44, 0x1c, 0xc2, 0x0, 0xd, [0x401, 0x4, 0x80000001, 0xb5, 0x0, 0x2]}, @lsrr={0x83, 0x1b, 0xca, [@multicast2, @multicast1, @multicast2, @empty, @empty, @loopback]}, @timestamp_addr={0x44, 0xc, 0x1f, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x14}, 0xf4}]}]}}}}})
getpeername$packet(r0, &(0x7f0000001140)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001180)=0x14)
getsockname$packet(r0, &(0x7f00000011c0)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001200)=0x14)
getsockname$packet(r1, &(0x7f0000001240)={0x11, 0x0, <r25=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001280)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001380)={'syztnl1\x00', &(0x7f00000012c0)={'syztnl1\x00', <r26=>0x0, 0x7, 0x7800, 0x401, 0x6, {{0x1a, 0x4, 0x1, 0x4, 0x68, 0x65, 0x0, 0xe, 0x2f, 0x0, @remote, @multicast1, {[@timestamp_addr={0x44, 0x14, 0xdb, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x10000}, {@private=0xa010102, 0xfffffff7}]}, @noop, @timestamp={0x44, 0x28, 0xb6, 0x0, 0x7, [0xc77, 0x7, 0x9, 0x3, 0x2, 0x7, 0xffff, 0x1, 0x3ff]}, @ssrr={0x89, 0x13, 0x34, [@rand_addr=0x64010100, @empty, @private=0xa010100, @empty]}, @end]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000013c0)={'team0\x00', <r27=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001480)={'ip6gre0\x00', &(0x7f0000001400)={'syztnl0\x00', <r28=>0x0, 0x2f, 0x7, 0x9, 0xff, 0xa0, @ipv4={'\x00', '\xff\xff', @empty}, @remote, 0x20, 0x7, 0x9, 0xb12}})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002a00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000029c0)={&(0x7f0000001a00)={0xfac, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x1c8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x0, 0x7, 0x1000}, {0x8, 0x1, 0x1}, {0xc9f, 0xf0, 0xfe, 0x9}]}}}]}}, {{0x8, 0x1, r7}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe000000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1a29}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r12}, {0x200, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x640}}, {0x8, 0x6, r15}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0x31, 0x1, 0x3}, {0xf, 0xc1, 0x0, 0xe}, {0x8, 0x0, 0x4, 0xd4}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x140, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}]}}, {{0x8, 0x1, r18}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xdd9e}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f33a00}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r24}, {0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r26}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xffff, 0x8, 0x6, 0xe}, {0x1, 0xff, 0x1, 0x5}, {0x8, 0x4, 0x8, 0x3}, {0x0, 0xb2, 0x21, 0xe}]}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r27}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r28}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x71}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0xfac}, 0x1, 0x0, 0x0, 0x20000005}, 0x44000)

9.801670098s ago: executing program 1 (id=13726):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="a2", 0x1}], 0x1}}], 0x2, 0x4000)
shutdown(r0, 0x1) (async)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
socket$packet(0x11, 0x3, 0x300) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100), 0x4) (async)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100), 0x4)
recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd700000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c009900020000002500000008002600800900000800a1000d00000008009f00010000000500180108000000"], 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000827bd700000dbdf251500000208200300", @ANYRES32=r7, @ANYBLOB="0a001a00ffffffffffff00000a00060008021100000100000a00060008021100000100000a001a0008021100000100000a001a0008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a0006000802110000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async)
sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000827bd700000dbdf251500000208200300", @ANYRES32=r7, @ANYBLOB="0a001a00ffffffffffff00000a00060008021100000100000a00060008021100000100000a001a0008021100000100000a001a0008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a0006000802110000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r9, &(0x7f00000008c0)="a8190000000000000059882cb1156c81e0c456ed96021804a26d38cbc88290dfd933747ac894566210ee7c131dd14198a6990637090a925250dd5875d7e81b2c242504186525d8d322cecd41886aefb29950", 0x0}, 0x20)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="29deef21", @ANYBLOB="1f76f9e4df99746dbf6738a5829a711aa685924e", @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYRESOCT=0x0], 0x44}}, 0x0)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)

9.083893706s ago: executing program 0 (id=13728):
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r0=>0x0, 0x2, 0x401, 0x3, 0x4ba0, 0x6}, &(0x7f0000000040)=0x14)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r0, 0x37f22711}, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x7f, 0x5, 0xa, 0x5, 0x10001, 0x200, 0x8f1, 0xa6, r0}, 0x20)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000100)=""/4096, &(0x7f0000001100)=0x1000)
r2 = socket$netlink(0x10, 0x3, 0x2)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001180), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000001380)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f00000011c0)={0x14c, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8b1}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5878123e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x845b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x302745f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000890}, 0x40)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f00000013c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc9, 0xc9, 0x3, [@restrict={0xa, 0x0, 0x0, 0xb, 0x2}, @datasec={0x5, 0xa, 0x0, 0xf, 0x1, [{0x5, 0x1000, 0x3}, {0x3, 0x8, 0x5}, {0x2, 0xfff, 0xfff}, {0x1, 0x4, 0x40}, {0x1, 0x40, 0x779}, {0x2, 0x8, 0x2}, {0x4, 0x5, 0xc}, {0x4, 0x8, 0x94}, {0x1, 0x5e, 0x36ca}, {0x5, 0x40000000, 0x5}], "ac"}, @float={0xb, 0x0, 0x0, 0x10, 0x10}, @float={0x2, 0x0, 0x0, 0x10, 0xc}, @var={0x9, 0x0, 0x0, 0xe, 0x3}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x6}]}, {0x0, [0x5f]}}, &(0x7f00000014c0)=""/208, 0xe7, 0xd0, 0x0, 0x2, 0x10000}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={r4, 0x20, &(0x7f0000001740)={&(0x7f0000001600)=""/102, 0x66, 0x0, &(0x7f0000001680)=""/189, 0xbd}}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000017c0), r2)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x11, r4, 0xdca7d000)
pselect6(0x40, &(0x7f0000001800)={0x6, 0x0, 0x7f, 0x8000000000000000, 0x502fcdba, 0x0, 0x0, 0xffff}, &(0x7f0000001840)={0x6, 0x3dc, 0x7fffffff, 0x3ff, 0x7fffffffffffffff, 0x7, 0x1, 0x3}, &(0x7f0000001880)={0x1, 0x6, 0x7, 0x5, 0x6, 0x4, 0x5, 0x4}, &(0x7f00000018c0), &(0x7f0000001940)={&(0x7f0000001900)={[0xfffffffffffffffe]}, 0x8})
recvmsg(r2, &(0x7f0000001d00)={&(0x7f0000001980)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001a00)=""/31, 0x1f}, {&(0x7f0000001a40)=""/198, 0xc6}, {&(0x7f0000001b40)=""/252, 0xfc}, {&(0x7f0000001c40)=""/108, 0x6c}], 0x4}, 0x10040)
pipe(&(0x7f0000001d40)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), r5)
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000001f80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e00)={0x130, r8, 0x2, 0x70bd25, 0x7, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f9752036c0b3134bef448ca1b9e4990cb11ada3daf797e37"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d264f27383ed9943d65dd1d15d68827814056a93826ad37c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c0d8e6005c49b6fe40ba4f76bc1a078b0165920c7b33a9c0"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d8b296765fcb68d61fe9486243a6a9afad5f3bf2780e1da2"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000800}, 0x81)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000001fc0)={r0, 0x6, 0x10}, &(0x7f0000002000)=0xc)
openat$ppp(0xffffffffffffff9c, &(0x7f0000002040), 0x800, 0x0)
recvmmsg$unix(r6, &(0x7f00000026c0)=[{{&(0x7f0000002080)=@abs, 0x6e, &(0x7f0000002180)=[{&(0x7f0000002100)=""/101, 0x65}], 0x1, &(0x7f00000021c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000002300), 0x6e, &(0x7f0000002400)=[{&(0x7f0000002380)=""/117, 0x75}], 0x1, &(0x7f0000002440)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r13=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [<r14=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000002540), 0x6e, &(0x7f0000002680)=[{&(0x7f00000025c0)=""/73, 0x49}, {&(0x7f0000002640)=""/25, 0x19}], 0x2}}], 0x3, 0x21, &(0x7f0000002780))
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r9, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x38, r8, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4305}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x15}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8034}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000028c0)={0x0, ""/256, <r15=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000002ac0)={{r15, 0x3, 0xf28, 0xfffffffffffffffc, 0x7f, 0x8, 0x9, 0x7, 0x9, 0x800, 0x4, 0xc8, 0x6, 0x2b79, 0xe8d}, 0x8, [0x0]})
sendto$inet6(r13, &(0x7f0000002b40)="22c47cf22496c32fae5bec63d0121e794c6f69977f89834f52a31afc6d02fd39c29ab7939e042e966338136cf343813cb0472e46a16f2a5f25c1fcc88a2f43986480a0b8b501547997e7c1417e6cb94b2a9948dd6278dee8c9ed69292cebd858fd8a2f1e3a53e4f2c61867099495a5b32fed8b33bfb0f05334428464d831699005cc666782607a32f1646bfb9c9cc934477f03e89919a92eefeb573402aa155922bff62c94914115ee253a368239f20d955ca149a273f93a2e7f23b415b8c9a0311e311bf9d6cef3d71c94933aabd69662731a5970f6ce", 0xd7, 0x4004804, &(0x7f0000002c40)={0xa, 0x4e22, 0xfffff5f7, @mcast1, 0x7}, 0x1c)
pselect6(0x40, &(0x7f0000002c80)={0x25be, 0x4, 0x81, 0x100, 0x9e2, 0xa20, 0xde, 0x100000000}, &(0x7f0000002cc0)={0xffffffffffffff44, 0x903, 0x7fffffffffffffff, 0x1, 0x8, 0x4, 0x3ff, 0x34}, &(0x7f0000002d00)={0x8, 0xcb28, 0x9, 0x6ae3, 0x10001, 0x10, 0x3, 0xfffffffffffffffa}, &(0x7f0000002d40)={0x77359400}, &(0x7f0000002dc0)={&(0x7f0000002d80)={[0x8]}, 0x8})
ioctl$BTRFS_IOC_SYNC(r14, 0x9408, 0x0)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e40), r11)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000002e80)={'wlan1\x00', <r17=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r12, &(0x7f0000002f40)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x24, r16, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080)

8.970611951s ago: executing program 0 (id=13729):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000180000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x8d8}, 0x0)
r2 = socket(0x29, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000001ec0)=[{{&(0x7f00000007c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[], 0xe0}}, {{&(0x7f0000000cc0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x2, 0x4000000)
close(r1)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x64, &(0x7f00000000c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred], 0x20}, 0x0)

8.967970521s ago: executing program 0 (id=13730):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e1d, 0x3, @remote, 0x2}, 0x1c)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040810}, 0x850)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r7, 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x8804}, 0x40000)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r6, 0x0, 0x20040000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000001a40), 0x1003}, 0x38)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, 0x0, 0x4000004)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x20008840)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x2, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
r9 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r9, &(0x7f0000000340)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37a08da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80ceed28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x5f)
accept$alg(r8, 0x0, 0x0)

8.837202036s ago: executing program 1 (id=13731):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x20000000, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x13, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x3, 0x7, 0x9, 0x4}}}}]}, 0x48}}, 0x0) (async, rerun: 64)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) (async, rerun: 64)
sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, ["", ""]}, 0x14}}, 0x8000)

8.770461174s ago: executing program 0 (id=13732):
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 32)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32)
shutdown(r1, 0x0) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async, rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r7 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_msfilter(r7, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) (async, rerun: 64)
r8 = socket(0x10, 0x803, 0x4) (rerun: 64)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r10=>0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r10, 0x1}, &(0x7f0000000100)=0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={<r11=>r1, 0x8, 0x9, 0x3ff})
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="e3000000", @ANYRES16=r13, @ANYBLOB="100029bd7000fbdbdf25030000001c0003800800030000000000080001000001000008000200fb0200002400098008000100060000000800020006000000080001000200000008000100ff00000024000980080001007f0000000800010004000000080002000700000008000200010000004c00038008000100f9ffffff080003000548000008000100070000000800020026225c40080002000100000008000200210000000800020000000000080003000100000008000300010000000400018008000680040002001400038008000300050000000800010008000000"], 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x60004040) (async)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r15=>0x0}) (async)
r16 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x7f, 0x80, 0xb, 0x0, 0xffffffffffffffff, 0x69a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xa}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r17}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x80000010}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x10, 0x10000}, 0x94) (async, rerun: 32)
sendmsg$BATADV_CMD_SET_MESH(r16, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000040000020f00000005002e000100000008000300", @ANYRES32=r15, @ANYBLOB="626e1fd132af6d81e079ee517c66481f626765f43f1a20441474c22d7970cb1e0498ca15fe579a9420aacb9b6b55240810388a88603f48ba8a5e8d55d54f69966e61178ba7639a15ff46"], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (rerun: 32)

8.67187617s ago: executing program 0 (id=13733):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
socket$can_j1939(0x1d, 0x2, 0x7)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_buf(r2, 0x1, 0x38, 0x0, 0x0) (async, rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendto$unix(r4, 0x0, 0x0, 0x800, 0x0, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x5}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x40480d4) (async)
recvfrom(r2, 0x0, 0x0, 0x1, 0x0, 0x0) (async)
sendmsg$802154_raw(r4, 0x0, 0x30008080)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, 0x0, 0x0) (async, rerun: 32)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) (async)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, 0x0, 0x20044080) (async)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r10, 0x0, 0xc840) (async)
connect$netrom(r9, 0x0, 0x0) (async)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, 0x0, 0x0) (async, rerun: 64)
sendmsg$netlink(r7, 0x0, 0x0) (async, rerun: 64)
sendmsg(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000540)="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", 0x577}], 0x1}, 0x40)
close(0x3)

8.670130552s ago: executing program 0 (id=13734):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000480000000000", @ANYRES32=r1, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r4 = socket$kcm(0x10, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r5=>0xffffffffffffffff})
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}, {{&(0x7f0000000500)={0x2, 0x3, @private=0xa010102}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000100)="8600a3", 0x3}], 0x1}}], 0x3, 0x4000000)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000240)={0x0, 0xfffff661}, 0x8)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020afc090700000026bd7000fedbdf2505001a00fe8000000d00000008000000000000002c0030006bbaa30dc8a2151c0a81600ef8e4a9"], 0x38}}, 0x40408c0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {0x10, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x34, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x2}, @TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_TUPDATE={0x8}, @TCA_PIE_BETA={0x8, 0x5, 0x1c}, @TCA_PIE_TARGET={0x8, 0x1, 0x4}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x8}]}}]}, 0x60}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r12 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00'})

0s ago: executing program 1 (id=13735):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0xfffffffc) (async)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r5 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0x12, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) (async)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) (async)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}})
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r7=>r0, 0x3, 0xc9, 0x1}) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000280)={0x5c, r9, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xfffffffd}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x186}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x9, 0x5, 0x6, 0x3, 0x8, 0x2, 0x0, 0x0]}]}]}, 0x5c}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r9, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x26a}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x400c8d4)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x308)

kernel console output (not intermixed with test programs):

ither incoming nor outgoing policy selected
[ 1046.479051][T17713] netlink: 'syz.1.12031': attribute type 1 has an invalid length.
[ 1046.487892][T17713] netlink: 'syz.1.12031': attribute type 2 has an invalid length.
[ 1046.492943][T17713] netlink: 'syz.1.12031': attribute type 1 has an invalid length.
[ 1046.628290][T17722] netlink: 'syz.0.12034': attribute type 1 has an invalid length.
[ 1047.036275][T17740] netlink: 'syz.0.12039': attribute type 2 has an invalid length.
[ 1047.045553][T17740] : entered promiscuous mode
[ 1047.200508][T17768] netlink: zone id is out of range
[ 1047.205273][T17768] netlink: zone id is out of range
[ 1047.206936][T17768] netlink: zone id is out of range
[ 1047.208534][T17768] netlink: zone id is out of range
[ 1047.210141][T17768] netlink: get zone limit has 8 unknown bytes
[ 1047.477299][T17789] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[ 1047.750346][T17802] "syz.3.12056" (17802) uses obsolete ecb(arc4) skcipher
[ 1047.948346][T17818] netlink: 'syz.3.12061': attribute type 2 has an invalid length.
[ 1047.954941][T17818] k*]: entered promiscuous mode
[ 1047.963627][T17818] veth0_to_team: entered promiscuous mode
[ 1047.966028][T17818] veth0_to_team: entered allmulticast mode
[ 1048.213477][T17827] rose0: entered promiscuous mode
[ 1048.508220][T17860] netlink: 'syz.3.12075': attribute type 1 has an invalid length.
[ 1048.530412][T17860] 8021q: adding VLAN 0 to HW filter on device bond17
[ 1048.594324][T17870] netlink: zone id is out of range
[ 1048.595975][T17870] netlink: zone id is out of range
[ 1048.597663][T17870] netlink: zone id is out of range
[ 1048.602459][T17870] netlink: zone id is out of range
[ 1048.633054][T17872] __nla_validate_parse: 18 callbacks suppressed
[ 1048.633066][T17872] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12078'.
[ 1048.799035][T17890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12081'.
[ 1049.766205][T17915] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12086'.
[ 1049.941337][T17936] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12088'.
[ 1050.011626][T17940] bond0: option primary_reselect: invalid value (17)
[ 1050.197936][T17960] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1050.205088][T17960] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.12091'.
[ 1050.272946][T17965] netlink: 'syz.1.12092': attribute type 10 has an invalid length.
[ 1050.275634][T17965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12092'.
[ 1050.427340][T17980] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1050.445559][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12095'.
[ 1050.487851][T17985] netlink: 'syz.1.12096': attribute type 4 has an invalid length.
[ 1050.505294][T17985] netlink: 'syz.1.12096': attribute type 4 has an invalid length.
[ 1050.926825][T17996] syzkaller1: entered promiscuous mode
[ 1050.928792][T17996] syzkaller1: entered allmulticast mode
[ 1051.158337][T18007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12103'.
[ 1051.162111][T18007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12103'.
[ 1051.187729][T18007] ip6erspan0: entered allmulticast mode
[ 1051.267778][T18016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12105'.
[ 1051.459543][T18030] nbd: couldn't find device at index 536870912
[ 1051.581812][T18045] IPv6: sit3: Disabled Multicast RS
[ 1051.640793][T18050] tipc: Resetting bearer <eth:syzkaller0>
[ 1051.797743][T18069] netlink: 'syz.1.12120': attribute type 1 has an invalid length.
[ 1051.865039][T18069] 8021q: adding VLAN 0 to HW filter on device bond82
[ 1052.056497][T18098] pim6reg: entered allmulticast mode
[ 1052.058909][T18097] pim6reg: left allmulticast mode
[ 1052.141739][T18106] netlink: 'syz.1.12129': attribute type 1 has an invalid length.
[ 1052.174099][T18106] 8021q: adding VLAN 0 to HW filter on device bond83
[ 1052.197139][T18106] bond83: (slave bridge114): making interface the new active one
[ 1052.204103][T18106] bond83: (slave bridge114): Enslaving as an active interface with an up link
[ 1052.214463][T18106] bond83: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1052.346713][T18121] net_ratelimit: 10 callbacks suppressed
[ 1052.346725][T18121] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1052.500554][T18112] syz.0.12131: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1052.507213][T18112] CPU: 0 UID: 0 PID: 18112 Comm: syz.0.12131 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[ 1052.507228][T18112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1052.507234][T18112] Call Trace:
[ 1052.507238][T18112]  <TASK>
[ 1052.507243][T18112]  dump_stack_lvl+0x189/0x250
[ 1052.507258][T18112]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[ 1052.507273][T18112]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1052.507288][T18112]  ? __pfx__printk+0x10/0x10
[ 1052.507300][T18112]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1052.507311][T18112]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1052.507346][T18112]  warn_alloc+0x214/0x310
[ 1052.507361][T18112]  ? __pfx_warn_alloc+0x10/0x10
[ 1052.507378][T18112]  ? __get_vm_area_node+0x28f/0x300
[ 1052.507390][T18112]  ? nf_tables_newset+0x132b/0x2530
[ 1052.507405][T18112]  __vmalloc_node_range_noprof+0x67e/0x12f0
[ 1052.507432][T18112]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1052.507446][T18112]  ? rcu_is_watching+0x15/0xb0
[ 1052.507455][T18112]  ? nf_tables_newset+0x132b/0x2530
[ 1052.507466][T18112]  ? nf_tables_newset+0x132b/0x2530
[ 1052.507477][T18112]  __kvmalloc_node_noprof+0x3b8/0x5f0
[ 1052.507489][T18112]  ? nf_tables_newset+0x132b/0x2530
[ 1052.507501][T18112]  ? nft_table_lookup+0x211/0x230
[ 1052.507508][T18112]  ? nft_set_lookup+0x128/0x150
[ 1052.507516][T18112]  ? nft_hash_privsize+0xcf/0xf0
[ 1052.507529][T18112]  nf_tables_newset+0x132b/0x2530
[ 1052.507547][T18112]  ? __pfx_nf_tables_newset+0x10/0x10
[ 1052.507569][T18112]  ? __nla_parse+0x40/0x60
[ 1052.507583][T18112]  nfnetlink_rcv+0x1132/0x2520
[ 1052.507607][T18112]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1052.507640][T18112]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1052.507659][T18112]  netlink_unicast+0x82f/0x9e0
[ 1052.507673][T18112]  ? __pfx_netlink_unicast+0x10/0x10
[ 1052.507684][T18112]  ? netlink_sendmsg+0x642/0xb30
[ 1052.507693][T18112]  ? skb_put+0x11b/0x210
[ 1052.507706][T18112]  netlink_sendmsg+0x805/0xb30
[ 1052.507721][T18112]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1052.507733][T18112]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1052.507746][T18112]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1052.507756][T18112]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1052.507767][T18112]  __sock_sendmsg+0x21c/0x270
[ 1052.507778][T18112]  ____sys_sendmsg+0x505/0x830
[ 1052.507793][T18112]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1052.507809][T18112]  ? import_iovec+0x74/0xa0
[ 1052.507820][T18112]  ___sys_sendmsg+0x21f/0x2a0
[ 1052.507832][T18112]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1052.507862][T18112]  ? __fget_files+0x2a/0x420
[ 1052.507874][T18112]  ? __fget_files+0x3a0/0x420
[ 1052.507891][T18112]  __x64_sys_sendmsg+0x19b/0x260
[ 1052.507904][T18112]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1052.507921][T18112]  ? rcu_is_watching+0x15/0xb0
[ 1052.507932][T18112]  ? do_syscall_64+0xbe/0x3b0
[ 1052.507944][T18112]  do_syscall_64+0xfa/0x3b0
[ 1052.507954][T18112]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1052.507963][T18112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1052.507972][T18112]  ? exc_page_fault+0x9f/0xf0
[ 1052.507983][T18112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1052.507992][T18112] RIP: 0033:0x7efc8c78ebe9
[ 1052.508001][T18112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1052.508009][T18112] RSP: 002b:00007efc8d546038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1052.508018][T18112] RAX: ffffffffffffffda RBX: 00007efc8c9b6090 RCX: 00007efc8c78ebe9
[ 1052.508024][T18112] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[ 1052.508029][T18112] RBP: 00007efc8c811e19 R08: 0000000000000000 R09: 0000000000000000
[ 1052.508034][T18112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1052.508039][T18112] R13: 00007efc8c9b6128 R14: 00007efc8c9b6090 R15: 00007ffd4a420e68
[ 1052.508057][T18112]  </TASK>
[ 1052.508061][T18112] Mem-Info:
[ 1052.627910][T18112] active_anon:19610 inactive_anon:23 isolated_anon:0
[ 1052.627910][T18112]  active_file:1011 inactive_file:33318 isolated_file:0
[ 1052.627910][T18112]  unevictable:1768 dirty:52 writeback:0
[ 1052.627910][T18112]  slab_reclaimable:15190 slab_unreclaimable:179896
[ 1052.627910][T18112]  mapped:18353 shmem:2435 pagetables:1053
[ 1052.627910][T18112]  sec_pagetables:0 bounce:0
[ 1052.627910][T18112]  kernel_misc_reclaimable:0
[ 1052.627910][T18112]  free:148602 free_pcp:19659 free_cma:0
[ 1052.644457][T18112] Node 0 active_anon:70736kB inactive_anon:72kB active_file:3128kB inactive_file:15164kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:58772kB dirty:112kB writeback:0kB shmem:4896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10692kB pagetables:2368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1052.654561][T18112] Node 1 active_anon:7704kB inactive_anon:20kB active_file:916kB inactive_file:118108kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:14640kB dirty:96kB writeback:0kB shmem:4844kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9836kB pagetables:1776kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1052.664933][T18112] Node 0 DMA free:6408kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:712kB local_pcp:384kB free_cma:0kB
[ 1052.673930][T18112] lowmem_reserve[]: 0 811 811 811 811
[ 1052.675764][T18112] Node 0 DMA32 free:92832kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:70680kB inactive_anon:72kB active_file:3128kB inactive_file:15164kB unevictable:3536kB writepending:112kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:36392kB local_pcp:21396kB free_cma:0kB
[ 1052.685585][T18112] lowmem_reserve[]: 0 0 0 0 0
[ 1052.687449][T18112] Node 1 DMA32 free:335372kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1052.696972][T18112] lowmem_reserve[]: 0 0 854 854 854
[ 1052.699003][T18112] Node 1 Normal free:159808kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7692kB inactive_anon:20kB active_file:916kB inactive_file:118108kB unevictable:3536kB writepending:96kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:41664kB local_pcp:20816kB free_cma:0kB
[ 1052.709035][T18112] lowmem_reserve[]: 0 0 0 0 0
[ 1052.711625][T18112] Node 0 DMA: 2*4kB (UM) 6*8kB (U) 5*16kB (UM) 2*32kB (UM) 5*64kB (UM) 4*128kB (U) 7*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 6408kB
[ 1052.716813][T18112] Node 0 DMA32: 1287*4kB (UM) 609*8kB (UME) 511*16kB (UME) 242*32kB (UME) 154*64kB (UME) 42*128kB (UME) 18*256kB (UME) 10*512kB (UME) 7*1024kB (UM) 7*2048kB (UME) 5*4096kB (UM) = 92884kB
[ 1052.723832][T18112] Node 1 DMA32: 7*4kB (UM) 8*8kB (UME) 13*16kB (UME) 19*32kB (UM) 16*64kB (UME) 15*128kB (UME) 11*256kB (UME) 12*512kB (UME) 9*1024kB (UME) 7*2048kB (UME) 73*4096kB (U) = 335372kB
[ 1052.729613][T18112] Node 1 Normal: 580*4kB (ME) 828*8kB (UME) 425*16kB (UM) 350*32kB (UM) 274*64kB (UM) 77*128kB (UM) 34*256kB (UM) 15*512kB (ME) 17*1024kB (UME) 21*2048kB (UME) 7*4096kB (UM) = 159808kB
[ 1052.735558][T18112] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1052.738473][T18112] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1052.744231][T18112] 36764 total pagecache pages
[ 1052.746109][T18112] 0 pages in swap cache
[ 1052.747857][T18112] Free swap  = 124996kB
[ 1052.749570][T18112] Total swap = 124996kB
[ 1052.751428][T18112] 786301 pages RAM
[ 1052.752956][T18112] 0 pages HighMem/MovableOnly
[ 1052.754902][T18112] 241320 pages reserved
[ 1052.756825][T18112] 0 pages cma reserved
[ 1053.034112][T18163] netlink: 'syz.0.12146': attribute type 11 has an invalid length.
[ 1053.354100][T18189] netlink: 'syz.3.12154': attribute type 1 has an invalid length.
[ 1053.357268][T18189] netlink: 'syz.3.12154': attribute type 1 has an invalid length.
[ 1053.360343][T18189] netlink: 'syz.3.12154': attribute type 1 has an invalid length.
[ 1053.534524][T18208] vxcan3: entered allmulticast mode
[ 1053.621467][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1053.622610][    C0] ip6_tunnel: ip6tnl11 xmit: Routing loop! Remote address found on this node!
[ 1053.769433][T18234] siw: device registration error -23
[ 1053.805774][T18236] svc: failed to register nfsdv3 RPC service (errno 111).
[ 1053.809442][T18236] svc: failed to register nfsaclv3 RPC service (errno 111).
[ 1053.884041][T18246] __nla_validate_parse: 24 callbacks suppressed
[ 1053.884052][T18246] netlink: 88 bytes leftover after parsing attributes in process `syz.3.12172'.
[ 1053.905166][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12173'.
[ 1053.975676][T18246] netlink: 'syz.3.12172': attribute type 10 has an invalid length.
[ 1054.000997][T18246] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1054.007556][T18246] batadv0: entered promiscuous mode
[ 1054.011749][T18246] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1054.042778][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12173'.
[ 1054.092012][T18257] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12174'.
[ 1054.449007][T18279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12180'.
[ 1054.453177][T18279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12180'.
[ 1054.455372][T18278] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[ 1054.517010][T18285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12183'.
[ 1054.699240][T18292] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1054.702945][T18292] syzkaller0: entered allmulticast mode
[ 1054.722852][T18294] 8021q: adding VLAN 0 to HW filter on device bond101
[ 1054.726192][T18294] bridge0: port 1(bond101) entered blocking state
[ 1054.728583][T18294] bridge0: port 1(bond101) entered disabled state
[ 1054.730728][T18294] bond101: entered allmulticast mode
[ 1054.767125][T18291] tipc: Disabling bearer <eth:syzkaller0>
[ 1054.802213][T18299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12187'.
[ 1054.865928][T18305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1054.869489][T18305] syzkaller0: entered promiscuous mode
[ 1054.871936][T18305] syzkaller0: entered allmulticast mode
[ 1054.879444][T18304] tipc: Resetting bearer <eth:syzkaller0>
[ 1054.914556][T18304] tipc: Disabling bearer <eth:syzkaller0>
[ 1054.977426][T18313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12191'.
[ 1054.980975][T18313] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.12191'.
[ 1055.013850][T18315] netlink: 'syz.1.12193': attribute type 12 has an invalid length.
[ 1055.081591][T18321] netlink: 'syz.1.12196': attribute type 5 has an invalid length.
[ 1055.175909][T18328] Bluetooth: hci2: Opcode 0x0401 failed: -22
[ 1055.180765][T18325] IPv6: sit5: Disabled Multicast RS
[ 1055.184319][T18325] sit5: entered allmulticast mode
[ 1055.299780][T18335] lo speed is unknown, defaulting to 1000
[ 1055.306195][T18335] lo speed is unknown, defaulting to 1000
[ 1055.309011][T18335] ip6erspan0 speed is unknown, defaulting to 1000
[ 1055.504973][T18335] wg0 speed is unknown, defaulting to 1000
[ 1055.581667][T18354] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[ 1055.742449][T18361] netlink: 'syz.1.12209': attribute type 1 has an invalid length.
[ 1055.770455][T18361] bond84: (slave bridge115): making interface the new active one
[ 1055.776617][T18361] bond84: (slave bridge115): Enslaving as an active interface with an up link
[ 1056.375823][T18395] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1056.599407][   T33] audit: type=1800 audit(1755312146.450:18): pid=18398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.12221" name="cgroup.controllers" dev="tmpfs" ino=3540 res=0 errno=0
[ 1056.629759][T18407] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1056.835149][T18412] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1056.968202][T18440] 8021q: adding VLAN 0 to HW filter on device bond18
[ 1057.147396][T18456] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1057.221303][ T5960] Bluetooth: hci2: command tx timeout
[ 1057.227389][T18473] netlink: 'syz.0.12241': attribute type 1 has an invalid length.
[ 1057.266536][T18473] 8021q: adding VLAN 0 to HW filter on device bond102
[ 1057.385042][T18484] 8021q: adding VLAN 0 to HW filter on device bond85
[ 1057.387692][T18484] bridge0: port 1(bond85) entered blocking state
[ 1057.389919][T18484] bridge0: port 1(bond85) entered disabled state
[ 1057.394908][T18484] bond85: entered allmulticast mode
[ 1057.397921][T18484] bond85: entered promiscuous mode
[ 1057.484396][T18497] bond0: entered promiscuous mode
[ 1057.487117][T18497] bond0: left promiscuous mode
[ 1057.722208][T18519] syzkaller1: entered promiscuous mode
[ 1057.724475][T18519] syzkaller1: entered allmulticast mode
[ 1057.736622][T18519] netlink: 'syz.1.12251': attribute type 15 has an invalid length.
[ 1057.791882][T18518] netlink: 'syz.3.12252': attribute type 1 has an invalid length.
[ 1057.853489][T18526] netlink: 'syz.0.12255': attribute type 1 has an invalid length.
[ 1057.880850][T18526] workqueue: Failed to create a rescuer kthread for wq "bond103": -EINTR
[ 1058.150295][T18559] netlink: 'syz.1.12263': attribute type 16 has an invalid length.
[ 1058.170554][T18559] netlink: 'syz.1.12263': attribute type 3 has an invalid length.
[ 1058.221839][T18563] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1058.227525][T18559] 0{X: renamed from 31{X
[ 1058.234703][T18559] 0{X: entered allmulticast mode
[ 1058.238102][T18559] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[ 1058.430406][T18577] netlink: 'syz.1.12270': attribute type 20 has an invalid length.
[ 1058.440164][T18575] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1058.775260][T18608] tipc: Resetting bearer <eth:syzkaller0>
[ 1058.874772][T18614] lo speed is unknown, defaulting to 1000
[ 1058.877400][T18614] lo speed is unknown, defaulting to 1000
[ 1058.880091][T18614] ip6erspan0 speed is unknown, defaulting to 1000
[ 1059.052975][T18614] wg0 speed is unknown, defaulting to 1000
[ 1059.198457][T18621] __nla_validate_parse: 35 callbacks suppressed
[ 1059.198473][T18621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12281'.
[ 1059.223726][T18622] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12281'.
[ 1059.245506][T18624] netlink: 'syz.0.12282': attribute type 16 has an invalid length.
[ 1059.248812][T18624] netlink: 'syz.0.12282': attribute type 3 has an invalid length.
[ 1059.252128][T18624] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.12282'.
[ 1059.258423][T18624] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12282'.
[ 1059.266587][T18624] netlink: 5 bytes leftover after parsing attributes in process `syz.0.12282'.
[ 1059.271180][T18624] 1{X: renamed from 30{X
[ 1059.274886][T18624] 1{X: entered allmulticast mode
[ 1059.278431][T18624] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[ 1059.357688][T18621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12281'.
[ 1059.362171][T18629] vlan6: entered promiscuous mode
[ 1059.364446][T18629] bond0: entered promiscuous mode
[ 1059.366548][T18629] vlan6: entered allmulticast mode
[ 1059.368555][T18629] bond0: entered allmulticast mode
[ 1059.404678][T18632] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12285'.
[ 1059.759144][T18637] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[ 1059.804446][T18639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12288'.
[ 1060.014579][T18653] netlink: 'syz.1.12292': attribute type 1 has an invalid length.
[ 1060.117885][T18666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12294'.
[ 1060.212822][T18674] netlink: 140 bytes leftover after parsing attributes in process `syz.0.12296'.
[ 1060.347518][T18682] lo speed is unknown, defaulting to 1000
[ 1060.350249][T18682] lo speed is unknown, defaulting to 1000
[ 1060.360156][T18684] dvmrp0: entered allmulticast mode
[ 1060.371544][T18682] ip6erspan0 speed is unknown, defaulting to 1000
[ 1060.377975][T18686] lo speed is unknown, defaulting to 1000
[ 1060.380702][T18686] lo speed is unknown, defaulting to 1000
[ 1060.495053][T18686] ip6erspan0 speed is unknown, defaulting to 1000
[ 1060.500782][T18682] wg0 speed is unknown, defaulting to 1000
[ 1060.639900][T18686] wg0 speed is unknown, defaulting to 1000
[ 1061.909636][T18729] 8021q: adding VLAN 0 to HW filter on device bond19
[ 1061.916265][T18729] bond0: (slave bond19): Enslaving as an active interface with an up link
[ 1062.432764][T23690] Bluetooth: hci1: command 0x0405 tx timeout
[ 1063.382020][T18783] veth1_to_bond: entered allmulticast mode
[ 1063.899404][T18815] ip6tnl12: entered promiscuous mode
[ 1063.907298][T18815] ip6tnl12: entered allmulticast mode
[ 1064.033680][T18821] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1064.066729][T18823] netlink: 'syz.0.12338': attribute type 11 has an invalid length.
[ 1064.230391][T18782] veth1_to_bond: left allmulticast mode
[ 1064.233896][T18828] __nla_validate_parse: 149 callbacks suppressed
[ 1064.233907][T18828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12340'.
[ 1064.255946][T18828] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1064.258892][T18828] syzkaller0: entered promiscuous mode
[ 1064.260627][T18828] syzkaller0: entered allmulticast mode
[ 1064.288921][T18828] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1064.304839][T18830] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1064.320267][T18828] tipc: Resetting bearer <eth:syzkaller0>
[ 1064.327224][T18827] tipc: Resetting bearer <eth:syzkaller0>
[ 1064.340844][T18827] tipc: Disabling bearer <eth:syzkaller0>
[ 1064.384373][T18840] lo speed is unknown, defaulting to 1000
[ 1064.386912][T18840] lo speed is unknown, defaulting to 1000
[ 1064.389432][T18840] ip6erspan0 speed is unknown, defaulting to 1000
[ 1064.501824][T18856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12345'.
[ 1064.529560][T18847] IPVS: Scheduler module ip_vs_ not found
[ 1064.615921][T18840] wg0 speed is unknown, defaulting to 1000
[ 1064.626192][T18866] vlan7: entered promiscuous mode
[ 1064.688614][T18868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12348'.
[ 1064.693974][T18868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12348'.
[ 1064.729650][T18870] netlink: 256 bytes leftover after parsing attributes in process `syz.0.12350'.
[ 1064.746410][T18870] dvmrp1: entered allmulticast mode
[ 1064.755677][T18870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12350'.
[ 1064.775688][T18870] dvmrp0: left allmulticast mode
[ 1064.777433][T18870] dvmrp1: left allmulticast mode
[ 1064.898351][T18872] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[ 1064.995566][T18874] lo speed is unknown, defaulting to 1000
[ 1064.998343][T18874] lo speed is unknown, defaulting to 1000
[ 1065.000970][T18874] ip6erspan0 speed is unknown, defaulting to 1000
[ 1065.099649][T18874] wg0 speed is unknown, defaulting to 1000
[ 1065.517548][T18884] validate_nla: 3 callbacks suppressed
[ 1065.517560][T18884] netlink: 'syz.3.12355': attribute type 32 has an invalid length.
[ 1065.579433][T18884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12355'.
[ 1065.579447][T18892] netlink: 'syz.0.12356': attribute type 2 has an invalid length.
[ 1065.584024][T18884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12355'.
[ 1065.609948][T18889] 1{X: left allmulticast mode
[ 1065.635132][T18889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1065.643892][ T9339] lo speed is unknown, defaulting to 1000
[ 1065.645876][ T9339] sz1: Port: 1 Link ACTIVE
[ 1066.121558][T18918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12363'.
[ 1066.124493][T18917] netlink: 404 bytes leftover after parsing attributes in process `syz.0.12363'.
[ 1066.439233][T18946] tap1: tun_chr_ioctl cmd 35108
[ 1066.672234][T18954] vlan0: entered promiscuous mode
[ 1066.673978][T18954] bridge0: entered promiscuous mode
[ 1066.952324][T18972] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20002
[ 1066.994398][T18975] lo speed is unknown, defaulting to 1000
[ 1066.998612][T18975] lo speed is unknown, defaulting to 1000
[ 1067.003019][T18975] ip6erspan0 speed is unknown, defaulting to 1000
[ 1067.062121][   T61] block nbd2: Possible stuck request ffff888030000000: control (read@0,1024B). Runtime 810 seconds
[ 1067.066288][   T61] block nbd2: Possible stuck request ffff888030000200: control (read@1024,1024B). Runtime 810 seconds
[ 1067.070662][   T61] block nbd2: Possible stuck request ffff888030000400: control (read@2048,1024B). Runtime 810 seconds
[ 1067.076370][   T61] block nbd2: Possible stuck request ffff888030000600: control (read@3072,1024B). Runtime 810 seconds
[ 1067.181832][T18982] netlink: 'syz.1.12376': attribute type 13 has an invalid length.
[ 1067.185095][T18982] netlink: 'syz.1.12376': attribute type 17 has an invalid length.
[ 1067.190629][T18982] 0{X: left allmulticast mode
[ 1067.214185][T18982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1067.322024][T18981] lo speed is unknown, defaulting to 1000
[ 1067.327585][T18981] lo speed is unknown, defaulting to 1000
[ 1067.374978][T18981] ip6erspan0 speed is unknown, defaulting to 1000
[ 1067.376737][T18975] wg0 speed is unknown, defaulting to 1000
[ 1067.728984][T18981] wg0 speed is unknown, defaulting to 1000
[ 1068.128851][T18990] nbd1: detected capacity change from 0 to 63
[ 1068.143800][T18992] block nbd0: NBD_DISCONNECT
[ 1068.154398][T18992] block nbd0: Send disconnect failed -32
[ 1068.156771][T18992] block nbd0: shutting down sockets
[ 1068.205485][   T56] block nbd1: Receive control failed (result -32)
[ 1068.351387][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1068.473354][T19011] pim6reg9: entered allmulticast mode
[ 1068.661894][T19031] netlink: 'syz.3.12387': attribute type 1 has an invalid length.
[ 1068.917412][T19047] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[ 1069.035415][T19056] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1069.292837][T19077] __nla_validate_parse: 15 callbacks suppressed
[ 1069.292849][T19077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12399'.
[ 1069.298453][T19077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12399'.
[ 1069.403522][T19081] netlink: 'syz.0.12402': attribute type 10 has an invalid length.
[ 1069.621428][    C0] ip6_tunnel: ip6tnl11 xmit: Routing loop! Remote address found on this node!
[ 1069.798724][T19089] netlink: 'syz.0.12404': attribute type 5 has an invalid length.
[ 1070.107252][T19091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12405'.
[ 1070.137546][T19093] netlink: 260 bytes leftover after parsing attributes in process `syz.1.12406'.
[ 1070.141360][T19094] netlink: 260 bytes leftover after parsing attributes in process `syz.1.12406'.
[ 1070.446163][T19116] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1070.449363][T19116] syzkaller0: entered promiscuous mode
[ 1070.453791][T19116] syzkaller0: entered allmulticast mode
[ 1070.541883][T19116] tipc: Resetting bearer <eth:syzkaller0>
[ 1070.549004][T19116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12412'.
[ 1070.550648][T19122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12414'.
[ 1070.556250][T19115] tipc: Resetting bearer <eth:syzkaller0>
[ 1070.571333][T19115] tipc: Disabling bearer <eth:syzkaller0>
[ 1070.587093][T19118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12413'.
[ 1070.848815][T19132] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12417'.
[ 1070.860950][T19138] vlan0: entered promiscuous mode
[ 1070.868353][T19138] bond0: entered promiscuous mode
[ 1070.870959][T19138] bond19: entered promiscuous mode
[ 1070.875033][T19138] vlan0: entered allmulticast mode
[ 1070.877191][T19138] bond0: entered allmulticast mode
[ 1070.879180][T19138] mac80211_hwsim hwsim103 wlan1: entered allmulticast mode
[ 1070.882299][T19138] batadv0: entered allmulticast mode
[ 1070.884667][T19138] bond19: entered allmulticast mode
[ 1071.678265][T19157] lo speed is unknown, defaulting to 1000
[ 1071.688330][T19157] lo speed is unknown, defaulting to 1000
[ 1071.693668][T19157] ip6erspan0 speed is unknown, defaulting to 1000
[ 1071.821755][T19171] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1071.912804][T19177] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12426'.
[ 1071.945673][T19157] wg0 speed is unknown, defaulting to 1000
[ 1073.145628][T19216] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1073.292776][T19224] syzkaller1: entered promiscuous mode
[ 1073.295098][T19224] syzkaller1: entered allmulticast mode
[ 1073.323146][T19224] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1073.325833][T19224] syzkaller0: entered promiscuous mode
[ 1073.327647][T19224] syzkaller0: entered allmulticast mode
[ 1073.335696][T19223] tipc: Resetting bearer <eth:syzkaller0>
[ 1073.359026][T19223] tipc: Disabling bearer <eth:syzkaller0>
[ 1073.663394][T19247] netlink: 'syz.3.12446': attribute type 21 has an invalid length.
[ 1073.667408][T19247] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1073.838311][T19258] syzkaller1: entered promiscuous mode
[ 1073.840405][T19258] syzkaller1: entered allmulticast mode
[ 1073.954239][T19265] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1074.053362][T19268] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[ 1074.069187][T19268] rdma_rxe: rxe_newlink: failed to add lo
[ 1074.089520][T19268] veth0_to_team: left promiscuous mode
[ 1074.091843][T19268] veth0_to_team: left allmulticast mode
[ 1074.138423][T19268] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[ 1074.149659][T19275] vlan0: entered promiscuous mode
[ 1074.152271][T19275] bridge0: entered promiscuous mode
[ 1074.155265][T19275] bond101: entered promiscuous mode
[ 1074.378477][T19284] syzkaller0: entered promiscuous mode
[ 1074.380150][T19284] syzkaller0: entered allmulticast mode
[ 1076.397282][   T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1076.400497][   T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1076.473355][T10313] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1076.477547][T10313] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1076.646700][T19313] __nla_validate_parse: 22 callbacks suppressed
[ 1076.646719][T19313] netlink: 6 bytes leftover after parsing attributes in process `syz.1.12465'.
[ 1076.666953][T19313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1076.730074][T19322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12466'.
[ 1076.748263][T19322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12466'.
[ 1076.754029][T19322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12466'.
[ 1076.880638][T19328] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[ 1077.239757][   T33] audit: type=1107 audit(1755312167.090:19): pid=19346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1077.302903][T19348] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12475'.
[ 1077.384071][ T9342] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1078.019843][T19360] netlink: 'syz.0.12479': attribute type 1 has an invalid length.
[ 1078.042360][T19360] 8021q: adding VLAN 0 to HW filter on device bond103
[ 1078.223494][T19378] netlink: 348 bytes leftover after parsing attributes in process `syz.1.12484'.
[ 1078.398157][T19387] mac80211_hwsim hwsim4 ": renamed from wlan0
[ 1078.448018][T19392] lo speed is unknown, defaulting to 1000
[ 1078.450908][T19392] lo speed is unknown, defaulting to 1000
[ 1078.455748][T19392] ip6erspan0 speed is unknown, defaulting to 1000
[ 1078.586457][T19402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12490'.
[ 1078.589596][T19402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12490'.
[ 1078.635323][T19392] wg0 speed is unknown, defaulting to 1000
[ 1078.757131][T19406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12491'.
[ 1078.782698][T19406] bond86: entered promiscuous mode
[ 1078.784732][T19406] 8021q: adding VLAN 0 to HW filter on device bond86
[ 1078.904370][T19406] bond86 (unregistering): Released all slaves
[ 1079.083964][T19412] syzkaller1: entered promiscuous mode
[ 1079.085728][T19412] syzkaller1: entered allmulticast mode
[ 1079.176928][T19419] netlink: 'syz.3.12496': attribute type 13 has an invalid length.
[ 1079.179541][T19419] netlink: 'syz.3.12496': attribute type 17 has an invalid length.
[ 1079.522097][T19419] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[ 1079.535445][T19421] lo speed is unknown, defaulting to 1000
[ 1079.542821][   T24] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1079.558811][T19421] lo speed is unknown, defaulting to 1000
[ 1079.567703][T19421] ip6erspan0 speed is unknown, defaulting to 1000
[ 1079.567809][T19422] lo speed is unknown, defaulting to 1000
[ 1079.574151][T19422] lo speed is unknown, defaulting to 1000
[ 1079.575254][T19430] lo speed is unknown, defaulting to 1000
[ 1079.584881][T19430] lo speed is unknown, defaulting to 1000
[ 1079.672053][   T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1079.675989][   T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1079.688471][T19422] ip6erspan0 speed is unknown, defaulting to 1000
[ 1079.691435][T19421] wg0 speed is unknown, defaulting to 1000
[ 1079.882602][ T9339] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1080.013801][T19430] ip6erspan0 speed is unknown, defaulting to 1000
[ 1080.126988][T19440] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12500'.
[ 1080.151480][ T9339] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1080.156222][T19430] wg0 speed is unknown, defaulting to 1000
[ 1080.167058][T19440] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[ 1080.172002][T19440] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[ 1080.296508][T19449] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1080.323942][T19422] wg0 speed is unknown, defaulting to 1000
[ 1080.630504][T19462] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input19
[ 1080.664564][T19462] netlink: 'syz.0.12507': attribute type 4 has an invalid length.
[ 1081.767885][T19488] __nla_validate_parse: 5 callbacks suppressed
[ 1081.767901][T19488] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12514'.
[ 1081.776822][T19488] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12514'.
[ 1081.780823][T19488] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12514'.
[ 1081.848541][T19489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12514'.
[ 1082.322713][T19508] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1082.325847][T19508] syzkaller0: entered promiscuous mode
[ 1082.327536][T19508] syzkaller0: entered allmulticast mode
[ 1082.362374][T19508] tipc: Resetting bearer <eth:syzkaller0>
[ 1082.415246][T19508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12518'.
[ 1082.432932][T19507] tipc: Resetting bearer <eth:syzkaller0>
[ 1082.475354][T19514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12520'.
[ 1082.487747][T19507] tipc: Disabling bearer <eth:syzkaller0>
[ 1082.497709][T19517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12520'.
[ 1082.579290][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12522'.
[ 1082.840434][T19535] netlink: 1 bytes leftover after parsing attributes in process `syz.3.12524'.
[ 1083.781410][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1083.857485][T19471] Set syz1 is full, maxelem 65536 reached
[ 1084.012646][T19562] netlink: 'syz.1.12532': attribute type 21 has an invalid length.
[ 1084.070697][T19569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12534'.
[ 1084.078389][T19569] IPVS: length: 150 != 84136430776
[ 1084.174341][T19576] netlink: 'syz.1.12537': attribute type 1 has an invalid length.
[ 1084.539577][T19608] sctp: [Deprecated]: syz.0.12544 (pid 19608) Use of int in maxseg socket option.
[ 1084.539577][T19608] Use struct sctp_assoc_value instead
[ 1084.704127][T19620] openvswitch: netlink: Tunnel attr 226 out of range max 16
[ 1084.706863][T19621] netlink: 'syz.1.12550': attribute type 11 has an invalid length.
[ 1085.053347][T19656] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1085.093386][T19661] netlink: 'syz.0.12558': attribute type 1 has an invalid length.
[ 1085.105447][T19660] lo speed is unknown, defaulting to 1000
[ 1085.109797][T19660] lo speed is unknown, defaulting to 1000
[ 1085.130982][T19660] ip6erspan0 speed is unknown, defaulting to 1000
[ 1085.270302][T19660] wg0 speed is unknown, defaulting to 1000
[ 1085.311725][T19672] netlink: 'syz.1.12559': attribute type 5 has an invalid length.
[ 1085.320139][T19672] netlink: 'syz.1.12559': attribute type 7 has an invalid length.
[ 1085.324407][T19672] netlink: 'syz.1.12559': attribute type 8 has an invalid length.
[ 1085.415918][T19674] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[ 1085.768975][T19695] lo speed is unknown, defaulting to 1000
[ 1085.775720][T19695] lo speed is unknown, defaulting to 1000
[ 1085.778683][T19695] ip6erspan0 speed is unknown, defaulting to 1000
[ 1086.040706][T19695] wg0 speed is unknown, defaulting to 1000
[ 1086.074858][T19712] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1086.533618][T19734] netlink: 'syz.3.12572': attribute type 4 has an invalid length.
[ 1086.540073][T19734] netlink: 'syz.3.12572': attribute type 4 has an invalid length.
[ 1086.960018][T19749] __nla_validate_parse: 48 callbacks suppressed
[ 1086.960038][T19749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12576'.
[ 1087.055873][T19757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12577'.
[ 1087.212764][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12577'.
[ 1087.277128][T19757] netlink: 428 bytes leftover after parsing attributes in process `syz.0.12577'.
[ 1087.280640][T19757] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12577'.
[ 1087.430354][T19791] netlink: 'syz.1.12582': attribute type 11 has an invalid length.
[ 1087.435775][T19791] netlink: 'syz.1.12582': attribute type 11 has an invalid length.
[ 1087.438461][T19791] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12582'.
[ 1087.479831][T19800] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12583'.
[ 1087.487004][T19799] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[ 1087.505864][T19799] bond86: entered promiscuous mode
[ 1087.507541][T19799] bond86: entered allmulticast mode
[ 1087.509408][T19799] 8021q: adding VLAN 0 to HW filter on device bond86
[ 1087.556836][T19800] bond13: (slave wlan0): Releasing active interface
[ 1087.897821][T19814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12587'.
[ 1088.067820][T19829] netlink: 'syz.0.12590': attribute type 22 has an invalid length.
[ 1088.087253][T19829] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12590'.
[ 1088.130957][T19831] vlan1: entered promiscuous mode
[ 1088.133699][T19831] bridge0: entered promiscuous mode
[ 1088.195395][T19833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12592'.
[ 1088.328887][T19844] unsupported nlmsg_type 40
[ 1088.341805][T19845] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[ 1088.349277][T19845] CPU: 0 UID: 0 PID: 19845 Comm: syz.0.12594 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[ 1088.349292][T19845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1088.349299][T19845] Call Trace:
[ 1088.349304][T19845]  <TASK>
[ 1088.349310][T19845]  dump_stack_lvl+0x189/0x250
[ 1088.349328][T19845]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1088.349340][T19845]  ? __pfx__printk+0x10/0x10
[ 1088.349356][T19845]  ? kernfs_path_from_node+0x2f/0x290
[ 1088.349367][T19845]  ? kernfs_path_from_node+0x250/0x290
[ 1088.349376][T19845]  ? kernfs_path_from_node+0x2f/0x290
[ 1088.349388][T19845]  sysfs_warn_dup+0x8e/0xa0
[ 1088.349398][T19845]  sysfs_do_create_link_sd+0xc0/0x110
[ 1088.349409][T19845]  device_add_class_symlinks+0x1cf/0x240
[ 1088.349425][T19845]  device_add+0x475/0xb50
[ 1088.349440][T19845]  wiphy_register+0x1ba6/0x28d0
[ 1088.349460][T19845]  ? __pfx_wiphy_register+0x10/0x10
[ 1088.349470][T19845]  ? minstrel_ht_alloc+0x6dd/0x7e0
[ 1088.349487][T19845]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[ 1088.349504][T19845]  ieee80211_register_hw+0x3425/0x4080
[ 1088.349526][T19845]  ? ieee80211_register_hw+0x14c1/0x4080
[ 1088.349543][T19845]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1088.349558][T19845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1088.349573][T19845]  ? __hrtimer_setup+0x187/0x210
[ 1088.349587][T19845]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1088.349600][T19845]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[ 1088.349626][T19845]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1088.349635][T19845]  ? trace_kmalloc+0x1f/0xd0
[ 1088.349647][T19845]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[ 1088.349660][T19845]  ? kstrndup+0xbf/0x160
[ 1088.349674][T19845]  hwsim_new_radio_nl+0xea4/0x1b10
[ 1088.349686][T19845]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1088.349705][T19845]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1088.349722][T19845]  ? __nla_parse+0x40/0x60
[ 1088.349734][T19845]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1088.349748][T19845]  genl_family_rcv_msg_doit+0x215/0x300
[ 1088.349761][T19845]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1088.349778][T19845]  ? bpf_lsm_capable+0x9/0x20
[ 1088.349789][T19845]  ? security_capable+0x7e/0x2e0
[ 1088.349803][T19845]  genl_rcv_msg+0x60e/0x790
[ 1088.349815][T19845]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1088.349823][T19845]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1088.349840][T19845]  netlink_rcv_skb+0x208/0x470
[ 1088.349850][T19845]  ? __lock_acquire+0xab9/0xd20
[ 1088.349888][T19845]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1088.349898][T19845]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1088.349920][T19845]  ? down_read+0x1ad/0x2e0
[ 1088.349934][T19845]  genl_rcv+0x28/0x40
[ 1088.349946][T19845]  netlink_unicast+0x82f/0x9e0
[ 1088.349961][T19845]  ? __pfx_netlink_unicast+0x10/0x10
[ 1088.349973][T19845]  ? netlink_sendmsg+0x642/0xb30
[ 1088.349982][T19845]  ? skb_put+0x11b/0x210
[ 1088.349996][T19845]  netlink_sendmsg+0x805/0xb30
[ 1088.350012][T19845]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1088.350025][T19845]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1088.350037][T19845]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1088.350046][T19845]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1088.350058][T19845]  __sock_sendmsg+0x21c/0x270
[ 1088.350070][T19845]  ____sys_sendmsg+0x505/0x830
[ 1088.350086][T19845]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1088.350103][T19845]  ? import_iovec+0x74/0xa0
[ 1088.350114][T19845]  ___sys_sendmsg+0x21f/0x2a0
[ 1088.350127][T19845]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1088.350143][T19845]  ? futex_wake+0x4b2/0x560
[ 1088.350177][T19845]  __x64_sys_sendmsg+0x19b/0x260
[ 1088.350190][T19845]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1088.350208][T19845]  ? rcu_is_watching+0x15/0xb0
[ 1088.350220][T19845]  ? do_syscall_64+0xbe/0x3b0
[ 1088.350234][T19845]  do_syscall_64+0xfa/0x3b0
[ 1088.350244][T19845]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1088.350254][T19845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1088.350263][T19845]  ? exc_page_fault+0x9f/0xf0
[ 1088.350274][T19845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1088.350284][T19845] RIP: 0033:0x7efc8c78ebe9
[ 1088.350310][T19845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1088.350319][T19845] RSP: 002b:00007efc8d546038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1088.350329][T19845] RAX: ffffffffffffffda RBX: 00007efc8c9b6090 RCX: 00007efc8c78ebe9
[ 1088.350336][T19845] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a
[ 1088.350342][T19845] RBP: 00007efc8c811e19 R08: 0000000000000000 R09: 0000000000000000
[ 1088.350347][T19845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1088.350353][T19845] R13: 00007efc8c9b6128 R14: 00007efc8c9b6090 R15: 00007ffd4a420e68
[ 1088.350368][T19845]  </TASK>
[ 1088.633471][T19853] syzkaller1: entered promiscuous mode
[ 1088.635386][T19853] syzkaller1: entered allmulticast mode
[ 1089.975807][T19905] bond101: left allmulticast mode
[ 1089.978609][T19905] bond101: left promiscuous mode
[ 1089.986891][T19905] bridge0: port 1(bond101) entered disabled state
[ 1090.175657][T19908] bridge110: left allmulticast mode
[ 1090.178867][T19910] sctp: [Deprecated]: syz.1.12616 (pid 19910) Use of int in max_burst socket option.
[ 1090.178867][T19910] Use struct sctp_assoc_value instead
[ 1090.186813][T19908] bond78: left promiscuous mode
[ 1090.188602][T19908] bond78: left allmulticast mode
[ 1090.190522][T19908] vlan0: left promiscuous mode
[ 1090.197050][T19908] bridge0: left promiscuous mode
[ 1090.199890][T19908] bond81: left promiscuous mode
[ 1090.201953][T19908] bridge113: left promiscuous mode
[ 1090.210700][T19908] bond86: left promiscuous mode
[ 1090.216740][T19908] bond86: left allmulticast mode
[ 1090.734882][T19935] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1090.803765][T19941] netlink: 'syz.3.12626': attribute type 4 has an invalid length.
[ 1090.910000][T19950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1091.177193][T19967] netlink: 'syz.0.12634': attribute type 5 has an invalid length.
[ 1091.496299][T19996] "syz.3.12644" (19996) uses obsolete ecb(arc4) skcipher
[ 1091.748967][T19996] ip6erspan0: left allmulticast mode
[ 1091.761725][T19996] vlan0: left promiscuous mode
[ 1091.763273][T19996] bond0: left promiscuous mode
[ 1091.765302][T19996] batadv0: left promiscuous mode
[ 1091.767424][T19996] bond19: left promiscuous mode
[ 1091.769762][T19996] vlan0: left allmulticast mode
[ 1091.771995][T19996] bond0: left allmulticast mode
[ 1091.773562][T19996] mac80211_hwsim hwsim103 wlan1: left allmulticast mode
[ 1091.775700][T19996] batadv0: left allmulticast mode
[ 1091.777296][T19996] bond19: left allmulticast mode
[ 1091.782580][   T12] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1091.785191][   T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.790506][   T12] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[ 1091.795813][   T12] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1091.807468][   T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.810120][   T12] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[ 1091.815889][   T12] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1091.818666][   T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.824556][   T12] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[ 1091.827083][   T12] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1091.835507][   T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.838203][   T12] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[ 1092.016695][T20023] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1092.035924][T20024] netlink: 'syz.1.12652': attribute type 9 has an invalid length.
[ 1092.041987][T20024] netlink: 'syz.1.12652': attribute type 6 has an invalid length.
[ 1092.214623][T20030] __nla_validate_parse: 18 callbacks suppressed
[ 1092.214633][T20030] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12655'.
[ 1092.455152][T20037] netlink: 184 bytes leftover after parsing attributes in process `syz.0.12658'.
[ 1092.483745][T20037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12658'.
[ 1092.581644][T19930] Bluetooth: hci1: command 0x0405 tx timeout
[ 1093.098021][T20056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12664'.
[ 1093.136623][T20058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12665'.
[ 1093.458817][T20074] netlink: 260 bytes leftover after parsing attributes in process `syz.1.12671'.
[ 1093.612290][T20079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12672'.
[ 1093.723281][T20085] netlink: 'syz.0.12674': attribute type 1 has an invalid length.
[ 1093.933431][T20097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12676'.
[ 1093.936411][T20097] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1093.956239][T20103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12677'.
[ 1094.288223][T20128] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1094.307993][T20131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12683'.
[ 1094.311020][T20131] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[ 1094.317372][T20131] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[ 1094.355647][T20129] tipc: Disabling bearer <eth:syzkaller0>
[ 1094.538632][T20145] lo speed is unknown, defaulting to 1000
[ 1094.547880][T20148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1094.553407][T20145] lo speed is unknown, defaulting to 1000
[ 1094.556767][T20145] ip6erspan0 speed is unknown, defaulting to 1000
[ 1094.585411][T20149] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input20
[ 1094.690019][T20145] wg0 speed is unknown, defaulting to 1000
[ 1094.745453][T20160] lo speed is unknown, defaulting to 1000
[ 1094.747962][T20160] sch_fq: defrate 4 ignored.
[ 1094.788152][T20161] netlink: 'syz.1.12691': attribute type 3 has an invalid length.
[ 1094.807787][T20161] sit0: entered allmulticast mode
[ 1094.818743][T20161] dvmrp1: left allmulticast mode
[ 1094.867516][T20163] siw: device registration error -23
[ 1094.883773][T20163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1095.564612][T20158] sit0: left allmulticast mode
[ 1095.977667][T20217] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001
[ 1096.919558][T20248] bond97: (slave bridge81): Releasing backup interface
[ 1096.922807][T20248] bridge81: left promiscuous mode
[ 1096.926493][T20248] bond98: (slave veth73): Releasing active interface
[ 1097.149288][   T61] block nbd2: Possible stuck request ffff888030000000: control (read@0,1024B). Runtime 840 seconds
[ 1097.154087][   T61] block nbd2: Possible stuck request ffff888030000200: control (read@1024,1024B). Runtime 840 seconds
[ 1097.158387][   T61] block nbd2: Possible stuck request ffff888030000400: control (read@2048,1024B). Runtime 840 seconds
[ 1097.164896][   T61] block nbd2: Possible stuck request ffff888030000600: control (read@3072,1024B). Runtime 840 seconds
[ 1097.170592][T20268] netlink: 'syz.1.12716': attribute type 13 has an invalid length.
[ 1097.175334][T20268] netlink: 'syz.1.12716': attribute type 17 has an invalid length.
[ 1097.183719][T20268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1097.273760][T20280] netlink: 'syz.3.12720': attribute type 11 has an invalid length.
[ 1097.276601][T20280] netlink: 'syz.3.12720': attribute type 11 has an invalid length.
[ 1097.279128][T20280] __nla_validate_parse: 3 callbacks suppressed
[ 1097.279137][T20280] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12720'.
[ 1097.324229][T20284] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12721'.
[ 1097.364943][T20286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12722'.
[ 1097.368070][T20286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12722'.
[ 1097.574674][T20310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12728'.
[ 1097.730774][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12733'.
[ 1097.827506][T20340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12734'.
[ 1097.987348][T20351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12737'.
[ 1098.050362][T20355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12738'.
[ 1098.139025][T20361] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[ 1098.355981][T20375] netlink: 'syz.1.12744': attribute type 21 has an invalid length.
[ 1098.358669][T20375] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12744'.
[ 1098.361732][T20375] netlink: 'syz.1.12744': attribute type 5 has an invalid length.
[ 1098.397655][T20377] netlink: 'syz.1.12745': attribute type 16 has an invalid length.
[ 1098.400163][T20377] netlink: 'syz.1.12745': attribute type 17 has an invalid length.
[ 1098.589968][T20389] lo speed is unknown, defaulting to 1000
[ 1098.596372][T20389] lo speed is unknown, defaulting to 1000
[ 1098.599210][T20389] ip6erspan0 speed is unknown, defaulting to 1000
[ 1098.694177][T20389] wg0 speed is unknown, defaulting to 1000
[ 1098.795717][T20398] netlink: 'syz.3.12751': attribute type 10 has an invalid length.
[ 1099.515173][T20406] netlink: 'syz.0.12755': attribute type 1 has an invalid length.
[ 1100.063891][T20435] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[ 1100.125006][T20440] netlink: 'syz.0.12763': attribute type 10 has an invalid length.
[ 1100.137304][T20440] syzkaller0: left promiscuous mode
[ 1100.144512][T20440] syzkaller0: left allmulticast mode
[ 1100.223181][T20444] netem: change failed
[ 1100.233147][T20444] vlan0: entered allmulticast mode
[ 1100.235157][T20444] bridge0: entered allmulticast mode
[ 1100.284425][T20446] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode
[ 1100.866766][T20471] Set syz0 is full, maxelem 0 reached
[ 1100.955980][T20477] netlink: 'syz.0.12771': attribute type 22 has an invalid length.
[ 1101.015972][T20483] 8021q: adding VLAN 0 to HW filter on device bond35
[ 1101.066342][T20481] ip6gre10: entered allmulticast mode
[ 1101.097750][T20488] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1101.180046][T20497] bond0: (slave batadv0): Releasing backup interface
[ 1101.188359][T20497] bond0: (slave wlan1): Releasing backup interface
[ 1101.191999][T20497] bond0: (slave bond19): Releasing backup interface
[ 1101.252322][T20502] rose0: left promiscuous mode
[ 1101.653437][T20538] syzkaller0: entered promiscuous mode
[ 1101.655672][T20538] syzkaller0: entered allmulticast mode
[ 1101.708076][T20543] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1102.184029][T20567] lo speed is unknown, defaulting to 1000
[ 1102.187264][T20567] lo speed is unknown, defaulting to 1000
[ 1102.190269][T20567] ip6erspan0 speed is unknown, defaulting to 1000
[ 1102.295238][T20567] wg0 speed is unknown, defaulting to 1000
[ 1102.540695][T20576] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check.
[ 1102.567006][T20545] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1102.933988][T20598] __nla_validate_parse: 21 callbacks suppressed
[ 1102.933999][T20598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12805'.
[ 1103.067152][T20601] pim6reg1: entered promiscuous mode
[ 1103.068971][T20601] pim6reg1: entered allmulticast mode
[ 1103.228442][T20608] sock: sock_set_timeout: `syz.1.12809' (pid 20608) tries to set negative timeout
[ 1103.230856][T20610] Can't find ip_set type hash:p,mark
[ 1103.338683][T20621] siw: device registration error -23
[ 1103.434428][T20625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12812'.
[ 1103.513837][T20629] IPv6: Can't replace route, no match found
[ 1103.538078][T20628] lo speed is unknown, defaulting to 1000
[ 1103.546035][T20628] lo speed is unknown, defaulting to 1000
[ 1103.549216][T20628] ip6erspan0 speed is unknown, defaulting to 1000
[ 1103.695765][T20628] wg0 speed is unknown, defaulting to 1000
[ 1103.703905][T20637] netlink: 216 bytes leftover after parsing attributes in process `syz.0.12816'.
[ 1103.707497][T20637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12816'.
[ 1103.712357][T20637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12816'.
[ 1103.718996][T20637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12816'.
[ 1103.733252][T20639] netlink: 264 bytes leftover after parsing attributes in process `syz.3.12817'.
[ 1103.741025][T20639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12817'.
[ 1103.848561][T20644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12819'.
[ 1103.887310][T20647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12820'.
[ 1104.456126][T20673] bridge0: port 1(erspan0) entered blocking state
[ 1104.459145][T20673] bridge0: port 1(erspan0) entered disabled state
[ 1104.463126][T20673] erspan0: entered allmulticast mode
[ 1104.475914][T20673] erspan0: entered promiscuous mode
[ 1104.482934][T20673] erspan0: left allmulticast mode
[ 1104.486198][T20673] erspan0: left promiscuous mode
[ 1104.488934][T20673] bridge0: port 1(erspan0) entered disabled state
[ 1104.608818][T20680] syzkaller1: entered promiscuous mode
[ 1104.618191][T20680] syzkaller1: entered allmulticast mode
[ 1104.758940][T20694] bond81: (slave bridge113): Releasing backup interface
[ 1104.764139][T20694] bond83: (slave bridge114): Releasing active interface
[ 1104.772418][T20694] bond84: (slave bridge115): Releasing active interface
[ 1104.776824][T20694] bond85: left allmulticast mode
[ 1104.778950][T20694] bond85: left promiscuous mode
[ 1104.781947][T20694] bridge0: port 1(bond85) entered disabled state
[ 1104.810503][T20696] lo speed is unknown, defaulting to 1000
[ 1104.816465][T20696] lo speed is unknown, defaulting to 1000
[ 1104.820212][T20696] ip6erspan0 speed is unknown, defaulting to 1000
[ 1104.956355][T20706] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[ 1105.069145][T20714] validate_nla: 1 callbacks suppressed
[ 1105.069158][T20714] netlink: 'syz.0.12840': attribute type 1 has an invalid length.
[ 1105.200664][T20696] wg0 speed is unknown, defaulting to 1000
[ 1105.210724][T20723] lo speed is unknown, defaulting to 1000
[ 1105.222044][T20723] lo speed is unknown, defaulting to 1000
[ 1105.226636][T20723] ip6erspan0 speed is unknown, defaulting to 1000
[ 1105.507994][T20723] wg0 speed is unknown, defaulting to 1000
[ 1106.360064][T20796] netlink: 'syz.1.12861': attribute type 1 has an invalid length.
[ 1106.440799][T20802] openvswitch: netlink: IPv4 tun info is not correct
[ 1106.477556][T20804] netlink: 'syz.3.12863': attribute type 12 has an invalid length.
[ 1107.053523][T20855] netlink: 'syz.3.12877': attribute type 1 has an invalid length.
[ 1107.075597][T20855] 8021q: adding VLAN 0 to HW filter on device bond20
[ 1107.097134][T20855] bond20: (slave bridge14): making interface the new active one
[ 1107.102272][T20855] bond20: (slave bridge14): Enslaving as an active interface with an up link
[ 1107.114570][T20855] bond20: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1107.746248][T20912] openvswitch: netlink: Missing key (keys=40, expected=80)
[ 1108.322723][T20943] __nla_validate_parse: 83 callbacks suppressed
[ 1108.322734][T20943] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12900'.
[ 1108.407997][T20952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12901'.
[ 1108.448228][T20954] sit0: entered allmulticast mode
[ 1108.456126][T20954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12903'.
[ 1108.475850][T20954] dvmrp1: entered allmulticast mode
[ 1108.480607][T20953] sit0: left allmulticast mode
[ 1108.495888][T20956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12904'.
[ 1108.523059][T20959] sctp: [Deprecated]: syz.1.12905 (pid 20959) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1108.523059][T20959] Use struct sctp_sack_info instead
[ 1108.777355][T20981] lo speed is unknown, defaulting to 1000
[ 1108.780389][T20981] lo speed is unknown, defaulting to 1000
[ 1108.783365][T20981] ip6erspan0 speed is unknown, defaulting to 1000
[ 1108.882949][T20981] wg0 speed is unknown, defaulting to 1000
[ 1109.297253][T20994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12913'.
[ 1109.301007][T20994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12913'.
[ 1109.331516][T20994] netlink: 'syz.3.12913': attribute type 5 has an invalid length.
[ 1109.547051][T21016] lo speed is unknown, defaulting to 1000
[ 1109.550055][T21016] lo speed is unknown, defaulting to 1000
[ 1109.553049][T21016] ip6erspan0 speed is unknown, defaulting to 1000
[ 1109.572011][T21022] netlink: 192 bytes leftover after parsing attributes in process `syz.1.12919'.
[ 1109.575839][T21022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12919'.
[ 1109.616497][T21022] netlink: 'syz.1.12919': attribute type 2 has an invalid length.
[ 1109.619206][T21022] netlink: 'syz.1.12919': attribute type 2 has an invalid length.
[ 1109.715368][T21026] lo speed is unknown, defaulting to 1000
[ 1109.719401][T21026] lo speed is unknown, defaulting to 1000
[ 1109.725473][T21016] wg0 speed is unknown, defaulting to 1000
[ 1109.728183][T21026] ip6erspan0 speed is unknown, defaulting to 1000
[ 1109.758154][T21032] netlink: 'syz.3.12922': attribute type 13 has an invalid length.
[ 1109.764976][T21032] netlink: 'syz.3.12922': attribute type 17 has an invalid length.
[ 1109.818387][T21032] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1109.842481][T21032] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1109.878928][T21037] sctp: [Deprecated]: syz.0.12924 (pid 21037) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1109.878928][T21037] Use struct sctp_sack_info instead
[ 1109.909402][T21032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1109.920985][T21032] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 1109.957767][T21037] ip6gre6: entered allmulticast mode
[ 1109.966890][ T5912] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.969469][ T5912] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.973280][T21026] wg0 speed is unknown, defaulting to 1000
[ 1109.992369][ T5912] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.995132][ T5912] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1110.096775][T21044] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12926'.
[ 1110.104889][T21044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1110.476824][T21059] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1110.486091][T21057] netlink: 'syz.1.12928': attribute type 41 has an invalid length.
[ 1110.595229][T21067] netlink: 'syz.3.12931': attribute type 1 has an invalid length.
[ 1110.660114][T21067] 8021q: adding VLAN 0 to HW filter on device bond21
[ 1110.809303][T21079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12934'.
[ 1111.093230][T21099] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode
[ 1111.095372][T21099] mac80211_hwsim hwsim45 wlan0: left allmulticast mode
[ 1111.097395][T21099] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1111.277099][T21115] netlink: 'syz.0.12942': attribute type 2 has an invalid length.
[ 1111.282423][T21115] netlink: 'syz.0.12942': attribute type 1 has an invalid length.
[ 1111.304065][T21115] 8021q: adding VLAN 0 to HW filter on device bond105
[ 1111.619365][T21144] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1111.625302][T21145] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1112.203942][T21154] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1112.299499][T21156] netlink: 'syz.3.12953': attribute type 1 has an invalid length.
[ 1112.375497][T21164] netlink: 'syz.0.12954': attribute type 13 has an invalid length.
[ 1112.378079][T21164] netlink: 'syz.0.12954': attribute type 17 has an invalid length.
[ 1112.391284][T21166] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1112.395802][T21164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1112.447299][T21161] lo speed is unknown, defaulting to 1000
[ 1112.450162][T21161] lo speed is unknown, defaulting to 1000
[ 1112.454260][T21161] ip6erspan0 speed is unknown, defaulting to 1000
[ 1112.585937][T21161] wg0 speed is unknown, defaulting to 1000
[ 1112.758814][T21185] netlink: 'syz.1.12959': attribute type 1 has an invalid length.
[ 1112.915985][T21201] lo speed is unknown, defaulting to 1000
[ 1112.918731][T21201] lo speed is unknown, defaulting to 1000
[ 1112.930016][T21201] ip6erspan0 speed is unknown, defaulting to 1000
[ 1112.943663][T21204] netlink: 'syz.1.12965': attribute type 4 has an invalid length.
[ 1112.951318][T21203] netlink: 'syz.1.12965': attribute type 4 has an invalid length.
[ 1112.977929][T21203] nbd: couldn't find a device at index 0
[ 1113.062904][T21201] wg0 speed is unknown, defaulting to 1000
[ 1113.726213][T21215] __nla_validate_parse: 12 callbacks suppressed
[ 1113.726224][T21215] netlink: 184 bytes leftover after parsing attributes in process `syz.0.12967'.
[ 1113.789044][T21217] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12968'.
[ 1113.958869][T21221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12969'.
[ 1113.962758][T21221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12969'.
[ 1114.323871][T21238] netlink: 3 bytes leftover after parsing attributes in process `syz.1.12974'.
[ 1114.330964][T21238] batadv0: entered promiscuous mode
[ 1114.338868][T21238] batadv0: entered allmulticast mode
[ 1114.396761][T21239] netlink: 232 bytes leftover after parsing attributes in process `syz.0.12973'.
[ 1114.399782][T21239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12973'.
[ 1114.466621][T21239] tipc: Resetting bearer <eth:syzkaller0>
[ 1114.470478][T21239] syzkaller0: left promiscuous mode
[ 1114.472919][T21239] syzkaller0: left allmulticast mode
[ 1114.476395][T21238] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12974'.
[ 1114.482613][T21239] mac80211_hwsim hwsim45 wlan0: left promiscuous mode
[ 1114.504150][T21239] bond97: left promiscuous mode
[ 1114.507378][T21239] vlan6: left promiscuous mode
[ 1114.509559][T21239] bond0: left promiscuous mode
[ 1114.511816][T21239] vlan6: left allmulticast mode
[ 1114.513695][T21239] bond0: left allmulticast mode
[ 1114.527469][T21239] ip6gre6: left allmulticast mode
[ 1114.532906][T21247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12973'.
[ 1114.538811][   T24] lo speed is unknown, defaulting to 1000
[ 1114.541798][   T24] sz1: Port: 1 Link DOWN
[ 1114.771906][T21256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12977'.
[ 1115.135552][T17894] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1115.138429][T17894] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1115.155103][T21282] hsr_slave_0: left promiscuous mode
[ 1115.180239][T17894] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1115.183919][T17894] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1116.261968][T21298] validate_nla: 3 callbacks suppressed
[ 1116.261983][T21298] netlink: 'syz.1.12988': attribute type 10 has an invalid length.
[ 1116.437071][T21307] netlink: 'syz.0.12992': attribute type 1 has an invalid length.
[ 1116.666193][T19930] Bluetooth: hci1: command 0x0405 tx timeout
[ 1116.713686][T21339] bpq0: entered promiscuous mode
[ 1116.799332][T21342] netlink: 'syz.1.13001': attribute type 1 has an invalid length.
[ 1116.867515][T21343] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1116.893173][T21347] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1116.970029][T21342] ip6gre10: left allmulticast mode
[ 1117.099982][T21351] lo speed is unknown, defaulting to 1000
[ 1117.103051][T21351] lo speed is unknown, defaulting to 1000
[ 1117.105621][T21351] ip6erspan0 speed is unknown, defaulting to 1000
[ 1117.242876][T21360] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1117.246814][T21360] syzkaller0: entered promiscuous mode
[ 1117.249039][T21360] syzkaller0: entered allmulticast mode
[ 1117.260099][T21351] wg0 speed is unknown, defaulting to 1000
[ 1118.418094][T21432] sctp: [Deprecated]: syz.3.13025 (pid 21432) Use of int in max_burst socket option.
[ 1118.418094][T21432] Use struct sctp_assoc_value instead
[ 1118.729493][T21460] geneve6: entered promiscuous mode
[ 1118.734783][T21460] geneve6: entered allmulticast mode
[ 1118.738117][ T6310] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 51935 - 0
[ 1118.741055][ T6310] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 43800 - 0
[ 1118.751915][T21463] __nla_validate_parse: 18 callbacks suppressed
[ 1118.751952][T21463] netlink: 6 bytes leftover after parsing attributes in process `syz.3.13033'.
[ 1118.767092][T21463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1118.775040][ T6310] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 51935 - 0
[ 1118.778051][T21467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13036'.
[ 1118.778738][ T6310] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 43800 - 0
[ 1118.787637][ T6310] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 51935 - 0
[ 1118.790707][ T6310] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 43800 - 0
[ 1118.793843][ T6310] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 51935 - 0
[ 1118.796834][ T6310] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 43800 - 0
[ 1118.849169][T21478] netlink: 'syz.0.13040': attribute type 1 has an invalid length.
[ 1118.869264][T21478] 8021q: adding VLAN 0 to HW filter on device bond106
[ 1118.925155][T21485] pim6reg1: entered promiscuous mode
[ 1118.926886][T21485] pim6reg1: entered allmulticast mode
[ 1118.993888][T21492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13044'.
[ 1119.179770][T21516] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1119.200782][T21516] lo speed is unknown, defaulting to 1000
[ 1119.206639][T21516] lo speed is unknown, defaulting to 1000
[ 1119.210993][T21516] ip6erspan0 speed is unknown, defaulting to 1000
[ 1119.223356][T21519] netlink: 'syz.1.13048': attribute type 2 has an invalid length.
[ 1119.231423][T21519] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13048'.
[ 1119.261323][T21519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13048'.
[ 1119.349905][T21516] wg0 speed is unknown, defaulting to 1000
[ 1119.513873][T21536] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13049'.
[ 1119.550801][T21538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13050'.
[ 1119.566916][T21540] sctp: [Deprecated]: syz.3.13051 (pid 21540) Use of int in max_burst socket option.
[ 1119.566916][T21540] Use struct sctp_assoc_value instead
[ 1119.747011][T21547] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1119.749655][T21547] syzkaller0: entered promiscuous mode
[ 1119.751776][T21547] syzkaller0: entered allmulticast mode
[ 1119.881441][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1119.899188][T21552] netlink: 165 bytes leftover after parsing attributes in process `syz.3.13055'.
[ 1119.917638][T21552] veth11: entered allmulticast mode
[ 1119.922236][T21547] tipc: Resetting bearer <eth:syzkaller0>
[ 1119.924922][T21547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1119.929670][T21554] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[ 1119.943331][T21546] tipc: Resetting bearer <eth:syzkaller0>
[ 1119.960915][T21546] tipc: Disabling bearer <eth:syzkaller0>
[ 1120.105485][T21566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13062'.
[ 1120.217084][T21576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13066'.
[ 1120.316132][T21591] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1120.319608][T21591] syzkaller0: entered promiscuous mode
[ 1120.322168][T21591] syzkaller0: entered allmulticast mode
[ 1120.397591][T21591] tipc: Resetting bearer <eth:syzkaller0>
[ 1120.438357][T21591] tipc: Resetting bearer <eth:syzkaller0>
[ 1120.456339][T21591] tipc: Disabling bearer <eth:syzkaller0>
[ 1120.543187][T21617] bond107: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 1120.550092][T21617] bond107: (slave vxcan1): Error -95 calling set_mac_address
[ 1120.565240][T21615] netlink: 'syz.1.13076': attribute type 13 has an invalid length.
[ 1120.568233][T21615] netlink: 'syz.1.13076': attribute type 17 has an invalid length.
[ 1120.606800][T21615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1120.663095][T21615] lo speed is unknown, defaulting to 1000
[ 1120.666425][T21615] lo speed is unknown, defaulting to 1000
[ 1120.669522][T21615] ip6erspan0 speed is unknown, defaulting to 1000
[ 1120.867707][T21630] netlink: 'syz.3.13081': attribute type 4 has an invalid length.
[ 1120.871096][T21615] wg0 speed is unknown, defaulting to 1000
[ 1120.982573][T21634] tun0: tun_chr_ioctl cmd 2147767520
[ 1121.362400][T21646] netlink: 'syz.1.13085': attribute type 10 has an invalid length.
[ 1121.370343][T21646] netlink: 'syz.1.13085': attribute type 10 has an invalid length.
[ 1121.912320][T21668] tipc: Resetting bearer <eth:syzkaller0>
[ 1121.914826][T21668] syzkaller0: left promiscuous mode
[ 1121.916467][T21668] syzkaller0: left allmulticast mode
[ 1121.959571][T21668] geneve6: left promiscuous mode
[ 1121.966924][T21668] geneve6: left allmulticast mode
[ 1121.990001][T21219] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 51935 - 0
[ 1121.995268][T21219] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 43800 - 0
[ 1121.997938][T21219] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 51935 - 0
[ 1122.000652][T21219] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 43800 - 0
[ 1122.027934][T21219] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 51935 - 0
[ 1122.030624][T21219] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 43800 - 0
[ 1122.040448][T21219] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 51935 - 0
[ 1122.046687][T21219] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 43800 - 0
[ 1122.152946][T21681] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1122.155647][T21681] syzkaller0: entered promiscuous mode
[ 1122.157370][T21681] syzkaller0: entered allmulticast mode
[ 1122.179104][T21681] tipc: Resetting bearer <eth:syzkaller0>
[ 1122.199625][T21680] tipc: Resetting bearer <eth:syzkaller0>
[ 1122.236775][T21680] tipc: Disabling bearer <eth:syzkaller0>
[ 1122.379682][T21704] sctp: [Deprecated]: syz.0.13103 (pid 21704) Use of int in maxseg socket option.
[ 1122.379682][T21704] Use struct sctp_assoc_value instead
[ 1122.388519][T21703] sctp: [Deprecated]: syz.0.13103 (pid 21703) Use of int in maxseg socket option.
[ 1122.388519][T21703] Use struct sctp_assoc_value instead
[ 1122.414984][T21709] netlink: 'syz.3.13105': attribute type 1 has an invalid length.
[ 1122.442454][T21709] 8021q: adding VLAN 0 to HW filter on device bond22
[ 1122.755591][T21759] vxcan1: entered allmulticast mode
[ 1122.757837][T21759] vxcan1: left allmulticast mode
[ 1123.280632][T21825] netlink: 'syz.1.13132': attribute type 4 has an invalid length.
[ 1123.334035][T21827] siw: device registration error -23
[ 1123.420040][T21834] netlink: 'syz.1.13135': attribute type 29 has an invalid length.
[ 1123.424297][T21834] netlink: 'syz.1.13135': attribute type 29 has an invalid length.
[ 1123.770521][T21852] openvswitch: netlink: Duplicate or invalid key (type 0).
[ 1123.774051][T21851] openvswitch: netlink: Duplicate or invalid key (type 0).
[ 1123.776314][T21852] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1123.777150][T21851] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1123.790874][T21851] __nla_validate_parse: 29 callbacks suppressed
[ 1123.790884][T21851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13140'.
[ 1123.798044][T21852] netlink: 'syz.1.13140': attribute type 7 has an invalid length.
[ 1123.801034][T21852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13140'.
[ 1123.887738][T21857] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13142'.
[ 1123.888459][T21859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13143'.
[ 1123.896351][T21859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13143'.
[ 1123.903760][T21859] netlink: 1152 bytes leftover after parsing attributes in process `syz.0.13143'.
[ 1123.907070][T21859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13143'.
[ 1123.910738][T21859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13143'.
[ 1123.914129][T21859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13143'.
[ 1123.917368][T21859] netlink: 5 bytes leftover after parsing attributes in process `syz.0.13143'.
[ 1123.957280][T21863] netlink: zone id is out of range
[ 1123.958990][T21863] netlink: zone id is out of range
[ 1123.960631][T21863] netlink: zone id is out of range
[ 1123.965487][T21863] netlink: zone id is out of range
[ 1123.967104][T21863] netlink: zone id is out of range
[ 1123.968940][T21863] netlink: zone id is out of range
[ 1124.118299][T21870] mac80211_hwsim hwsim161 wlan0: entered allmulticast mode
[ 1124.262933][T21883] netlink: 'syz.1.13150': attribute type 10 has an invalid length.
[ 1124.393434][T21893] lo speed is unknown, defaulting to 1000
[ 1124.396570][T21893] lo speed is unknown, defaulting to 1000
[ 1124.399205][T21893] ip6erspan0 speed is unknown, defaulting to 1000
[ 1124.546676][T21893] wg0 speed is unknown, defaulting to 1000
[ 1124.827636][T21919] netlink: 'syz.1.13155': attribute type 10 has an invalid length.
[ 1124.830249][T21919] netlink: 'syz.1.13155': attribute type 10 has an invalid length.
[ 1125.480941][T21966] macvtap0: entered promiscuous mode
[ 1126.313765][T21973] siw: device registration error -23
[ 1126.328957][T21974] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input21
[ 1126.344983][T21975] veth0_to_team: entered promiscuous mode
[ 1126.347156][T21975] veth0_to_team: entered allmulticast mode
[ 1126.402869][T21978] validate_nla: 3 callbacks suppressed
[ 1126.402886][T21978] netlink: 'syz.0.13172': attribute type 4 has an invalid length.
[ 1126.539264][T21995] delete_channel: no stack
[ 1126.774280][T22008] lo speed is unknown, defaulting to 1000
[ 1126.778600][T22008] lo speed is unknown, defaulting to 1000
[ 1126.783082][T22008] ip6erspan0 speed is unknown, defaulting to 1000
[ 1126.978797][T22008] wg0 speed is unknown, defaulting to 1000
[ 1127.227238][   T61] block nbd2: Possible stuck request ffff888030000000: control (read@0,1024B). Runtime 870 seconds
[ 1127.231924][   T61] block nbd2: Possible stuck request ffff888030000200: control (read@1024,1024B). Runtime 870 seconds
[ 1127.236404][   T61] block nbd2: Possible stuck request ffff888030000400: control (read@2048,1024B). Runtime 870 seconds
[ 1127.240908][   T61] block nbd2: Possible stuck request ffff888030000600: control (read@3072,1024B). Runtime 870 seconds
[ 1127.350664][T22016] ip6gre2: entered allmulticast mode
[ 1128.146531][T22063] netlink: 'syz.0.13193': attribute type 1 has an invalid length.
[ 1128.235519][T22068] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1128.239340][T22068] syzkaller0: entered promiscuous mode
[ 1128.241535][T22068] syzkaller0: entered allmulticast mode
[ 1128.697822][T22102] netlink: 'syz.3.13203': attribute type 4 has an invalid length.
[ 1128.704674][T22102] netlink: 'syz.3.13203': attribute type 4 has an invalid length.
[ 1128.762522][T22106] rdma_rxe: rxe_newlink: failed to add lo
[ 1128.790278][T22106] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1128.798103][T22106] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1128.827918][T22106] net_ratelimit: 19 callbacks suppressed
[ 1128.827932][T22106] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 1128.859003][T17894] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.862151][T17894] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.865800][T17894] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.868467][T17894] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.017790][T22109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1129.028048][T22109] syzkaller0: entered promiscuous mode
[ 1129.030286][T22109] syzkaller0: entered allmulticast mode
[ 1129.081598][T22109] tipc: Resetting bearer <eth:syzkaller0>
[ 1129.135741][T22108] tipc: Resetting bearer <eth:syzkaller0>
[ 1129.151179][T22108] tipc: Disabling bearer <eth:syzkaller0>
[ 1129.510292][T22148] __nla_validate_parse: 26 callbacks suppressed
[ 1129.510303][T22148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13213'.
[ 1129.523859][T22148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13213'.
[ 1129.582225][T22150] syz_tun: entered allmulticast mode
[ 1129.594042][T22150] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13214'.
[ 1129.611626][T22153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13215'.
[ 1129.633941][T22150] dvmrp1: entered allmulticast mode
[ 1129.741437][T22155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13216'.
[ 1129.857494][T22163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13217'.
[ 1129.872461][T22163] netlink: 'syz.0.13217': attribute type 2 has an invalid length.
[ 1129.874894][T22163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13217'.
[ 1129.878698][T22163] netlink: 190724 bytes leftover after parsing attributes in process `syz.0.13217'.
[ 1130.083094][T22149] syz_tun: left allmulticast mode
[ 1130.195809][T22180] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13221'.
[ 1130.200539][T22180] "syz.1.13221" (22180) uses obsolete ecb(arc4) skcipher
[ 1130.245695][T22183] netlink: 'syz.0.13222': attribute type 1 has an invalid length.
[ 1130.254999][T22183] netlink: 144 bytes leftover after parsing attributes in process `syz.0.13222'.
[ 1130.280933][T22180] veth0_to_team: left promiscuous mode
[ 1130.294199][T22180] veth0_to_team: left allmulticast mode
[ 1130.309184][T22180] macvtap0: left promiscuous mode
[ 1130.355762][T22180] mac80211_hwsim hwsim161 wlan0: left allmulticast mode
[ 1130.766468][T22217] lo speed is unknown, defaulting to 1000
[ 1130.769407][T22217] lo speed is unknown, defaulting to 1000
[ 1130.773657][T22217] ip6erspan0 speed is unknown, defaulting to 1000
[ 1130.867164][T22217] wg0 speed is unknown, defaulting to 1000
[ 1131.354882][T22222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1131.358687][T22222] syzkaller0: entered promiscuous mode
[ 1131.361092][T22222] syzkaller0: entered allmulticast mode
[ 1131.392527][T22222] tipc: Resetting bearer <eth:syzkaller0>
[ 1131.397512][T22221] tipc: Resetting bearer <eth:syzkaller0>
[ 1131.414346][T22221] tipc: Disabling bearer <eth:syzkaller0>
[ 1131.538039][T22230] netlink: 'syz.3.13237': attribute type 1 has an invalid length.
[ 1131.540360][T22230] netlink: 'syz.3.13237': attribute type 8 has an invalid length.
[ 1131.694130][T22239] lo speed is unknown, defaulting to 1000
[ 1131.696758][T22239] lo speed is unknown, defaulting to 1000
[ 1131.699383][T22239] ip6erspan0 speed is unknown, defaulting to 1000
[ 1131.750522][T22243] netlink: 'syz.0.13241': attribute type 1 has an invalid length.
[ 1131.753394][T22244] netlink: 'syz.0.13241': attribute type 1 has an invalid length.
[ 1131.810418][T22243] bond109: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 1131.811773][T22237] Bluetooth: MGMT ver 1.23
[ 1131.815151][T22243] bond109: (slave vxcan1): Error -95 calling set_mac_address
[ 1131.988889][T22235] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1132.005828][T22260] netlink: 'syz.3.13243': attribute type 13 has an invalid length.
[ 1132.009236][T22260] netlink: 'syz.3.13243': attribute type 17 has an invalid length.
[ 1132.010434][T22239] wg0 speed is unknown, defaulting to 1000
[ 1132.049480][T22260] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 1132.103005][T22253] lo speed is unknown, defaulting to 1000
[ 1132.106195][T22253] lo speed is unknown, defaulting to 1000
[ 1132.139690][T22253] ip6erspan0 speed is unknown, defaulting to 1000
[ 1132.252017][T22269] syzkaller0: left promiscuous mode
[ 1132.253721][T22269] syzkaller0: left allmulticast mode
[ 1132.595737][T22253] wg0 speed is unknown, defaulting to 1000
[ 1132.937040][T22281] netlink: 'syz.1.13249': attribute type 1 has an invalid length.
[ 1133.025434][T22281] 8021q: adding VLAN 0 to HW filter on device bond87
[ 1133.125873][T22285] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1133.129729][T22285] syzkaller0: entered promiscuous mode
[ 1133.132352][T22285] syzkaller0: entered allmulticast mode
[ 1133.532674][T22291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1133.915841][T22328] syzkaller0: left promiscuous mode
[ 1133.920732][T22328] syzkaller0: left allmulticast mode
[ 1134.226518][T22354] dvmrp1: entered allmulticast mode
[ 1134.725805][T22358] __nla_validate_parse: 22 callbacks suppressed
[ 1134.725807][T22359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13269'.
[ 1134.725818][T22358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13269'.
[ 1134.807236][T22361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13270'.
[ 1134.810816][T22361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13270'.
[ 1134.821039][T22368] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[ 1134.888519][T17894] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1134.895145][T17894] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1134.913517][T11946] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1134.966280][T22378] 8021q: VLANs not supported on vcan0
[ 1135.017190][T22381] bond20: (slave bridge14): Releasing active interface
[ 1135.147059][T22381] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[ 1135.276073][   T24] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1135.322839][T22395] ip6gre3: entered allmulticast mode
[ 1135.436891][T22395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13278'.
[ 1135.547885][T22403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13280'.
[ 1135.659777][T22413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13279'.
[ 1135.861753][T22175] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1136.535204][T22455] netlink: 'syz.3.13294': attribute type 4 has an invalid length.
[ 1136.640767][T22459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1136.743135][T22460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13295'.
[ 1136.747917][T22460] veth0_to_team: entered promiscuous mode
[ 1136.749835][T22460] veth0_to_team: entered allmulticast mode
[ 1136.997084][T22464] netlink: 'syz.3.13296': attribute type 1 has an invalid length.
[ 1137.000297][T22464] netlink: 'syz.3.13296': attribute type 1 has an invalid length.
[ 1137.053078][T22468] netlink: 1444 bytes leftover after parsing attributes in process `syz.1.13297'.
[ 1137.058123][T22468] netlink: 'syz.1.13297': attribute type 7 has an invalid length.
[ 1137.101490][T22476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13298'.
[ 1137.359856][T22493] netlink: 'syz.1.13305': attribute type 13 has an invalid length.
[ 1137.364243][T22493] netlink: 'syz.1.13305': attribute type 13 has an invalid length.
[ 1138.364447][T22513] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1138.367363][T22513] IPv6: NLM_F_CREATE should be set when creating new route
[ 1138.370323][T22513] IPv6: NLM_F_CREATE should be set when creating new route
[ 1138.716975][T22528] bond0: entered promiscuous mode
[ 1138.821470][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1139.663252][T22569] netlink: 'syz.0.13324': attribute type 1 has an invalid length.
[ 1139.777104][T22573] __nla_validate_parse: 44 callbacks suppressed
[ 1139.777116][T22573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13327'.
[ 1139.837883][T22575] netlink: 92 bytes leftover after parsing attributes in process `syz.1.13328'.
[ 1139.849055][T22575] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13328'.
[ 1139.869151][T22577] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1139.875663][T22577] syzkaller0: entered promiscuous mode
[ 1139.877766][T22577] syzkaller0: entered allmulticast mode
[ 1139.915770][T22577] tipc: Resetting bearer <eth:syzkaller0>
[ 1139.927876][T22576] tipc: Resetting bearer <eth:syzkaller0>
[ 1139.949184][T22576] tipc: Disabling bearer <eth:syzkaller0>
[ 1140.170380][T22604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13335'.
[ 1140.213103][T22604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13335'.
[ 1140.267282][T22609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13335'.
[ 1140.280147][T22606] netlink: 'syz.1.13336': attribute type 21 has an invalid length.
[ 1140.287122][T22608] ipvlan0: entered promiscuous mode
[ 1140.290264][T22608] bridge0: port 1(ipvlan0) entered blocking state
[ 1140.294468][T22608] bridge0: port 1(ipvlan0) entered disabled state
[ 1140.297507][T22608] ipvlan0: entered allmulticast mode
[ 1140.299463][T22608] 0{X: entered allmulticast mode
[ 1140.302802][T22608] ipvlan0: left allmulticast mode
[ 1140.304618][T22608] 0{X: left allmulticast mode
[ 1140.457016][T22618] netlink: 'syz.0.13339': attribute type 1 has an invalid length.
[ 1140.489486][ T6310] nci: nci_ntf_packet: unknown ntf opcode 0x127
[ 1140.512804][T22624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13338'.
[ 1140.516351][T22624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13338'.
[ 1141.324513][T22651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13345'.
[ 1141.356043][T22655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13347'.
[ 1141.449205][T22663] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20001
[ 1141.463084][T22663] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[ 1141.465895][T22663] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1141.724943][T22701] netlink: 'syz.3.13359': attribute type 10 has an invalid length.
[ 1141.728607][T22701] bond0: (slave wlan1): Opening slave failed
[ 1141.836219][T22723] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1141.839266][T22723] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1141.966101][T22735] netlink: 'syz.1.13368': attribute type 5 has an invalid length.
[ 1142.063779][T22746] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001
[ 1147.061438][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1157.315104][   T61] block nbd2: Possible stuck request ffff888030000000: control (read@0,1024B). Runtime 900 seconds
[ 1157.319033][   T61] block nbd2: Possible stuck request ffff888030000200: control (read@1024,1024B). Runtime 900 seconds
[ 1157.323189][   T61] block nbd2: Possible stuck request ffff888030000400: control (read@2048,1024B). Runtime 900 seconds
[ 1157.327075][   T61] block nbd2: Possible stuck request ffff888030000600: control (read@3072,1024B). Runtime 900 seconds
[ 1163.061449][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1170.012111][T22754] __nla_validate_parse: 6 callbacks suppressed
[ 1170.012125][T22754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13374'.
[ 1170.021897][T22753] netlink: 'syz.1.13373': attribute type 2 has an invalid length.
[ 1170.267052][T22781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13379'.
[ 1170.270634][T22781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13379'.
[ 1170.276748][T22781] netlink: 'syz.1.13379': attribute type 18 has an invalid length.
[ 1170.282384][T22781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13379'.
[ 1170.414513][T22790] netlink: 'syz.0.13381': attribute type 2 has an invalid length.
[ 1170.517444][T22800] syzkaller1: entered promiscuous mode
[ 1170.519763][T22800] syzkaller1: entered allmulticast mode
[ 1170.565831][T22802] netlink: 100 bytes leftover after parsing attributes in process `syz.1.13385'.
[ 1170.607224][T22802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13385'.
[ 1170.616042][T22806] syzkaller0: entered promiscuous mode
[ 1170.617960][T22806] syzkaller0: entered allmulticast mode
[ 1170.624346][T22802] netlink: 100 bytes leftover after parsing attributes in process `syz.1.13385'.
[ 1170.789606][T22819] netlink: 212892 bytes leftover after parsing attributes in process `syz.1.13389'.
[ 1170.805219][T22814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13389'.
[ 1170.948152][T22822] lo speed is unknown, defaulting to 1000
[ 1170.953221][T22822] lo speed is unknown, defaulting to 1000
[ 1170.955932][T22822] ip6erspan0 speed is unknown, defaulting to 1000
[ 1170.978150][T22825] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13391'.
[ 1171.062151][T22828] netlink: 'syz.3.13392': attribute type 1 has an invalid length.
[ 1171.093420][T22828] 8021q: adding VLAN 0 to HW filter on device bond23
[ 1171.133119][T22828] 8021q: adding VLAN 0 to HW filter on device bond23
[ 1171.135834][T22828] bond23: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1171.140327][T22828] bond23: (slave vxcan3): Error -95 calling set_mac_address
[ 1171.167397][T22830] bond23: (slave bridge15): Enslaving as an active interface with a down link
[ 1171.205119][T22822] wg0 speed is unknown, defaulting to 1000
[ 1171.373116][T22174] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[ 1171.375975][T22174] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[ 1171.389212][T22174] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 1171.568541][T22850] netlink: 'syz.3.13396': attribute type 4 has an invalid length.
[ 1171.729629][T22861] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[ 1171.790987][T22866] lo speed is unknown, defaulting to 1000
[ 1171.822644][T22866] lo speed is unknown, defaulting to 1000
[ 1171.835478][T22866] ip6erspan0 speed is unknown, defaulting to 1000
[ 1171.843664][T22870] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1171.848422][T22870] syzkaller0: entered promiscuous mode
[ 1171.850219][T22870] syzkaller0: entered allmulticast mode
[ 1171.865579][T22870] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1171.917490][T22870] tipc: Resetting bearer <eth:syzkaller0>
[ 1171.937452][T22869] tipc: Resetting bearer <eth:syzkaller0>
[ 1171.972253][T22869] tipc: Disabling bearer <eth:syzkaller0>
[ 1172.037541][T22866] wg0 speed is unknown, defaulting to 1000
[ 1172.254056][T22892] bond0: left promiscuous mode
[ 1172.316826][T22892] veth0_to_team: left promiscuous mode
[ 1172.318786][T22892] veth0_to_team: left allmulticast mode
[ 1172.384650][T22892] veth11: left allmulticast mode
[ 1172.390694][T22892] ip6gre2: left allmulticast mode
[ 1172.410279][T22892] ip6gre3: left allmulticast mode
[ 1172.425653][T17894] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1172.430090][T17894] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1172.448471][T17894] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1172.466325][T17894] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1172.651952][T22912] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20001
[ 1172.883832][T22920] lo speed is unknown, defaulting to 1000
[ 1172.886540][T22920] lo speed is unknown, defaulting to 1000
[ 1172.890143][T22920] ip6erspan0 speed is unknown, defaulting to 1000
[ 1172.967423][T22930] netlink: 'syz.1.13416': attribute type 30 has an invalid length.
[ 1172.981472][T21219] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1172.984295][T21219] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1172.987105][T21219] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1172.989919][T21219] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1173.020109][T22933] netlink: 'syz.1.13417': attribute type 1 has an invalid length.
[ 1173.072825][T22933] bond88: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 1173.078269][T22933] bond88: (slave vxcan1): Error -95 calling set_mac_address
[ 1173.087942][T22920] wg0 speed is unknown, defaulting to 1000
[ 1173.386786][T22950] netlink: 'syz.0.13423': attribute type 21 has an invalid length.
[ 1173.389912][T22950] netlink: 'syz.0.13423': attribute type 22 has an invalid length.
[ 1173.399268][T22950] netlink: 'syz.0.13423': attribute type 23 has an invalid length.
[ 1173.747860][T22964] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1173.759966][T22965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1173.766678][T22965] syzkaller0: entered promiscuous mode
[ 1173.787500][T22965] syzkaller0: entered allmulticast mode
[ 1173.887422][T22965] tipc: Resetting bearer <eth:syzkaller0>
[ 1173.903967][T22963] tipc: Resetting bearer <eth:syzkaller0>
[ 1173.950302][T22963] tipc: Disabling bearer <eth:syzkaller0>
[ 1173.974087][T22972] workqueue: Failed to create a rescuer kthread for wq "bond112": -EINTR
[ 1173.974625][T22974] lo speed is unknown, defaulting to 1000
[ 1174.120461][T22988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1174.124135][T22988] syzkaller0: entered promiscuous mode
[ 1174.126426][T22988] syzkaller0: entered allmulticast mode
[ 1174.197539][T22988] tipc: Resetting bearer <eth:syzkaller0>
[ 1174.203052][T22987] tipc: Resetting bearer <eth:syzkaller0>
[ 1174.223418][T22987] tipc: Disabling bearer <eth:syzkaller0>
[ 1174.236605][T22983] lo speed is unknown, defaulting to 1000
[ 1174.240767][T22983] lo speed is unknown, defaulting to 1000
[ 1174.248389][T22983] ip6erspan0 speed is unknown, defaulting to 1000
[ 1174.549290][T22983] wg0 speed is unknown, defaulting to 1000
[ 1175.114682][T23035] __nla_validate_parse: 29 callbacks suppressed
[ 1175.114699][T23035] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13449'.
[ 1175.124255][T23035] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13449'.
[ 1175.127825][T23037] validate_nla: 3 callbacks suppressed
[ 1175.127840][T23037] netlink: 'syz.1.13450': attribute type 4 has an invalid length.
[ 1175.146006][T23035] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1175.152678][T23038] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13449'.
[ 1175.156416][T23038] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13449'.
[ 1175.181924][T23035] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1175.267335][T23042] netlink: 'syz.1.13451': attribute type 13 has an invalid length.
[ 1175.269770][T23042] netlink: 'syz.1.13451': attribute type 17 has an invalid length.
[ 1175.299039][T23042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1175.372944][T23044] tun0: tun_chr_ioctl cmd 2147767520
[ 1175.437254][T23053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13454'.
[ 1175.607574][T23057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13456'.
[ 1175.613996][T23057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13456'.
[ 1175.641916][T23057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13456'.
[ 1175.700575][T23066] Bluetooth: hci2: Opcode 0x0401 failed: -22
[ 1175.786386][T23073] macsec0: entered promiscuous mode
[ 1175.788256][T23073] mac80211_hwsim hwsim161 wlan0: entered promiscuous mode
[ 1175.790597][T23073] macsec0: entered allmulticast mode
[ 1175.792754][T23073] mac80211_hwsim hwsim161 wlan0: entered allmulticast mode
[ 1175.798049][T23073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1175.832774][T23075] netlink: 256 bytes leftover after parsing attributes in process `syz.3.13460'.
[ 1175.835615][T23075] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13460'.
[ 1175.859390][T23075] dvmrp1: left allmulticast mode
[ 1175.974233][T23075] rdma_rxe: rxe_newlink: failed to add lo
[ 1176.027730][T23075] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1176.039990][T23075] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1176.078618][T23075] mac80211_hwsim hwsim103 wlan1: left promiscuous mode
[ 1176.116737][T23075] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1176.120866][T23075] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1176.127525][T23075] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1176.132930][T23075] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1176.136257][T23075] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1176.142713][T23075] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1176.145732][T23075] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1176.148767][T23075] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1176.156555][T23075] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[ 1176.188099][T16221] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1176.192365][T16221] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[ 1176.212405][T16221] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1176.215817][T16221] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[ 1176.219511][T16221] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1176.230490][T16221] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[ 1176.248718][T16221] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1176.253010][T16221] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[ 1176.304302][T23085] vlan3: entered promiscuous mode
[ 1176.306430][T23085] bond0: entered promiscuous mode
[ 1176.602695][T23075] syz.3.13460 (23075) used greatest stack depth: 18880 bytes left
[ 1176.989791][T23095] syzkaller1: entered promiscuous mode
[ 1176.998346][T23095] syzkaller1: entered allmulticast mode
[ 1177.014408][T23095] netlink: 'syz.0.13467': attribute type 15 has an invalid length.
[ 1177.096372][T23102] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[ 1177.169804][T23106] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1177.405469][T23121] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1177.412867][T23121] syzkaller0: entered promiscuous mode
[ 1177.415040][T23121] syzkaller0: entered allmulticast mode
[ 1177.482511][T23120] tipc: Resetting bearer <eth:syzkaller0>
[ 1177.505958][T23120] tipc: Disabling bearer <eth:syzkaller0>
[ 1177.560532][T23131] netlink: 'syz.0.13475': attribute type 18 has an invalid length.
[ 1177.564203][T23131] netlink: 'syz.0.13475': attribute type 18 has an invalid length.
[ 1177.701728][T19930] Bluetooth: hci2: command tx timeout
[ 1177.708520][T23137] netlink: 'syz.1.13478': attribute type 1 has an invalid length.
[ 1177.729027][T23139] tap0: tun_chr_ioctl cmd 1074025678
[ 1177.739067][T23139] tap0: group set to 0
[ 1177.749689][T23139] netlink: 'syz.0.13479': attribute type 1 has an invalid length.
[ 1177.759392][T23139] netlink: 'syz.0.13479': attribute type 2 has an invalid length.
[ 1178.059836][T23160] netlink: 'syz.1.13484': attribute type 1 has an invalid length.
[ 1178.112167][T23160] 8021q: adding VLAN 0 to HW filter on device bond89
[ 1178.144070][T23166] 8021q: adding VLAN 0 to HW filter on device bond89
[ 1178.147316][T23166] bond89: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 1178.152862][T23166] bond89: (slave vxcan1): Error -95 calling set_mac_address
[ 1178.205386][T23160] bond89: (slave bridge128): Enslaving as an active interface with a down link
[ 1178.353508][T23182] netlink: 'syz.0.13491': attribute type 11 has an invalid length.
[ 1180.006754][T23235] mac80211_hwsim hwsim161 wlan0: left allmulticast mode
[ 1180.009123][T23235] mac80211_hwsim hwsim161 wlan0: left promiscuous mode
[ 1180.012747][T23235] macsec0: left promiscuous mode
[ 1180.023247][T23235] macsec0: left allmulticast mode
[ 1180.035324][T16221] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1180.057818][T16221] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1180.066848][T16221] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1180.070615][T23240] sctp: [Deprecated]: syz.0.13503 (pid 23240) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1180.070615][T23240] Use struct sctp_sack_info instead
[ 1180.073536][T16221] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1180.169627][T23245] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[ 1180.180059][T23245] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[ 1180.224979][T23251] __nla_validate_parse: 13 callbacks suppressed
[ 1180.225050][T23251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13507'.
[ 1180.537773][T23261] sctp: [Deprecated]: syz.0.13510 (pid 23261) Use of int in max_burst socket option.
[ 1180.537773][T23261] Use struct sctp_assoc_value instead
[ 1180.545269][T23261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13510'.
[ 1180.812928][T23278] lo speed is unknown, defaulting to 1000
[ 1180.836023][T23278] lo speed is unknown, defaulting to 1000
[ 1180.843060][T23278] ip6erspan0 speed is unknown, defaulting to 1000
[ 1180.859107][T23295] validate_nla: 1 callbacks suppressed
[ 1180.859125][T23295] netlink: 'syz.0.13518': attribute type 62 has an invalid length.
[ 1180.879088][T23297] netlink: 'syz.0.13518': attribute type 62 has an invalid length.
[ 1181.095633][T23278] wg0 speed is unknown, defaulting to 1000
[ 1181.245689][T23309] bond0: entered promiscuous mode
[ 1181.417046][T23315] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13523'.
[ 1181.865476][T23333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13527'.
[ 1181.889438][T23338] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13531'.
[ 1181.894711][T23338] netlink: 80 bytes leftover after parsing attributes in process `syz.1.13531'.
[ 1182.031520][T23333] openvswitch: netlink: IP tunnel dst address not specified
[ 1182.086028][T23345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13527'.
[ 1182.653381][T23347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13532'.
[ 1182.759700][T23351] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13533'.
[ 1182.850368][T23356] netlink: 'syz.0.13535': attribute type 3 has an invalid length.
[ 1182.854113][T23356] netlink: 666 bytes leftover after parsing attributes in process `syz.0.13535'.
[ 1183.048405][T23376] nbd: must specify a device to reconfigure
[ 1183.054353][T23376] openvswitch: netlink: Unknown VXLAN extension attribute 0
[ 1183.520289][T23426] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1183.559534][T23418] can: request_module (can-proto-0) failed.
[ 1184.305512][T23486] netlink: 'syz.1.13564': attribute type 4 has an invalid length.
[ 1184.350647][T23492] 8021q: VLANs not supported on wlan1
[ 1184.437548][T23499] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1184.492150][T23504] tipc: Resetting bearer <eth:syzkaller0>
[ 1184.556290][T23498] tipc: Disabling bearer <eth:syzkaller0>
[ 1185.000921][T23543] nbd: must specify at least one socket
[ 1185.190786][T23558] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1186.022040][ T5960] Bluetooth: hci1: command 0x0405 tx timeout
[ 1186.034185][T23565] netlink: 'syz.3.13584': attribute type 4 has an invalid length.
[ 1186.208934][T23572] __nla_validate_parse: 22 callbacks suppressed
[ 1186.209066][T23572] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13586'.
[ 1186.274466][T23575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13588'.
[ 1186.277657][T23575] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[ 1186.280576][T23575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1186.358667][T23586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13590'.
[ 1186.363088][T23586] netlink: 19 bytes leftover after parsing attributes in process `syz.3.13590'.
[ 1186.385213][T23586] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[ 1186.388975][T23586] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[ 1186.665273][T23596] netlink: 'syz.3.13592': attribute type 5 has an invalid length.
[ 1186.714358][T23598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13593'.
[ 1186.778548][T23600] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1186.782595][T23600] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1186.865346][T23603] sctp: [Deprecated]: syz.1.13595 (pid 23603) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1186.865346][T23603] Use struct sctp_sack_info instead
[ 1186.870883][T23603] sctp: [Deprecated]: syz.1.13595 (pid 23603) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1186.870883][T23603] Use struct sctp_sack_info instead
[ 1186.915830][T23605] bpq0: left promiscuous mode
[ 1186.954681][T23607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13597'.
[ 1187.034163][T23607] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[ 1187.069870][T23611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13598'.
[ 1187.277940][T23623] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1187.392043][   T61] block nbd2: Possible stuck request ffff888030000000: control (read@0,1024B). Runtime 930 seconds
[ 1187.396398][   T61] block nbd2: Possible stuck request ffff888030000200: control (read@1024,1024B). Runtime 930 seconds
[ 1187.400168][   T61] block nbd2: Possible stuck request ffff888030000400: control (read@2048,1024B). Runtime 930 seconds
[ 1187.404073][   T61] block nbd2: Possible stuck request ffff888030000600: control (read@3072,1024B). Runtime 930 seconds
[ 1187.687180][T23641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13607'.
[ 1187.690165][T23641] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13607'.
[ 1187.736915][T23646] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13608'.
[ 1188.030745][T23657] lo speed is unknown, defaulting to 1000
[ 1188.034623][T23657] lo speed is unknown, defaulting to 1000
[ 1188.037603][T23657] ip6erspan0 speed is unknown, defaulting to 1000
[ 1188.155733][T23659] netlink: 'syz.0.13613': attribute type 1 has an invalid length.
[ 1188.159420][T23657] wg0 speed is unknown, defaulting to 1000
[ 1188.522809][T23677] netlink: 'syz.1.13617': attribute type 10 has an invalid length.
[ 1188.539938][T23677] netlink: 'syz.1.13617': attribute type 10 has an invalid length.
[ 1189.378792][T23705] netlink: 'syz.1.13626': attribute type 1 has an invalid length.
[ 1189.397936][T23705] 8021q: adding VLAN 0 to HW filter on device bond90
[ 1189.419051][T23705] bond90: (slave veth91): Enslaving as an active interface with a down link
[ 1189.902679][T23732] netlink: 'syz.3.13631': attribute type 1 has an invalid length.
[ 1189.966980][T23734] x9: renamed from bridge_slave_0 (while UP)
[ 1190.280727][T23752] openvswitch: netlink: IP tunnel TTL not specified.
[ 1190.337575][T23756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1190.370007][T23761] rdma_op ffff88803eba21f0 conn xmit_rdma 0000000000000000
[ 1190.497899][T23774] netlink: 'syz.1.13644': attribute type 1 has an invalid length.
[ 1190.523299][T23774] 8021q: adding VLAN 0 to HW filter on device bond91
[ 1190.643350][T23789] rose0: entered promiscuous mode
[ 1190.779271][T23809] netlink: 'syz.0.13653': attribute type 1 has an invalid length.
[ 1191.066655][T23848] netlink: 'syz.1.13662': attribute type 11 has an invalid length.
[ 1191.267635][T23866] __nla_validate_parse: 57 callbacks suppressed
[ 1191.267647][T23866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13666'.
[ 1191.294234][T23861] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13666'.
[ 1191.367809][T23868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13667'.
[ 1191.372688][T23868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13667'.
[ 1191.894600][T23876] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1192.006685][T23879] netlink: 'syz.0.13670': attribute type 10 has an invalid length.
[ 1192.010386][T23879] netlink: 'syz.0.13670': attribute type 10 has an invalid length.
[ 1192.456276][T23904] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13676'.
[ 1192.472650][T23907] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13677'.
[ 1192.499839][T23911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13678'.
[ 1192.617783][T23919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13679'.
[ 1192.643235][T23918] lo speed is unknown, defaulting to 1000
[ 1192.646394][T23918] lo speed is unknown, defaulting to 1000
[ 1192.649526][T23918] ip6erspan0 speed is unknown, defaulting to 1000
[ 1192.839857][T23918] wg0 speed is unknown, defaulting to 1000
[ 1192.930560][T23932] netlink: 6 bytes leftover after parsing attributes in process `syz.0.13682'.
[ 1192.931678][T23930] netlink: 'syz.3.13683': attribute type 13 has an invalid length.
[ 1192.937291][T23932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1192.961975][T23930] netlink: 'syz.3.13683': attribute type 17 has an invalid length.
[ 1192.989090][T23933] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13683'.
[ 1192.989370][T23930] bond0: left promiscuous mode
[ 1192.995415][T23930] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1193.089096][T23930] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[ 1193.147084][T23939] lo speed is unknown, defaulting to 1000
[ 1193.165220][T23939] lo speed is unknown, defaulting to 1000
[ 1193.171343][T23939] ip6erspan0 speed is unknown, defaulting to 1000
[ 1193.263957][T23942] netlink: 'syz.0.13685': attribute type 21 has an invalid length.
[ 1193.355094][T23939] wg0 speed is unknown, defaulting to 1000
[ 1193.749630][T23968] IPVS: Scheduler module ip_vs_sip not found
[ 1193.781352][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1193.984153][T23984] netlink: 'syz.0.13695': attribute type 10 has an invalid length.
[ 1193.987833][T23984] netlink: 'syz.0.13695': attribute type 10 has an invalid length.
[ 1194.653372][T23996] lo speed is unknown, defaulting to 1000
[ 1194.656828][T23996] lo speed is unknown, defaulting to 1000
[ 1194.660349][T23996] ip6erspan0 speed is unknown, defaulting to 1000
[ 1194.866125][T23996] wg0 speed is unknown, defaulting to 1000
[ 1195.003014][T24009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1195.006271][T24009] syzkaller0: entered promiscuous mode
[ 1195.008226][T24009] syzkaller0: entered allmulticast mode
[ 1195.018485][T24009] tipc: Resetting bearer <eth:syzkaller0>
[ 1195.021031][T24009] netlink: 'syz.1.13703': attribute type 1 has an invalid length.
[ 1195.042742][T24008] tipc: Resetting bearer <eth:syzkaller0>
[ 1195.066201][T24008] tipc: Disabling bearer <eth:syzkaller0>
[ 1195.182705][T24019] netlink: 'syz.0.13706': attribute type 1 has an invalid length.
[ 1196.319984][T24075] vxcan1: entered allmulticast mode
[ 1196.628621][T24087] validate_nla: 4 callbacks suppressed
[ 1196.628638][T24087] netlink: 'syz.1.13726': attribute type 13 has an invalid length.
[ 1196.634978][T24087] netlink: 'syz.1.13726': attribute type 17 has an invalid length.
[ 1196.663976][T24087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1196.701501][T24086] lo speed is unknown, defaulting to 1000
[ 1196.705066][T24086] lo speed is unknown, defaulting to 1000
[ 1196.708710][T24086] ip6erspan0 speed is unknown, defaulting to 1000
[ 1196.821090][T24086] wg0 speed is unknown, defaulting to 1000
[ 1197.220165][T24092] __nla_validate_parse: 19 callbacks suppressed
[ 1197.220182][T24092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13727'.
[ 1197.498806][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13731'.
[ 1197.504295][T24101] netlink: 15 bytes leftover after parsing attributes in process `syz.1.13731'.
[ 1197.518962][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13731'.
[ 1197.540271][T24101] netlink: 15 bytes leftover after parsing attributes in process `syz.1.13731'.
[ 1197.557661][T24106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13732'.
[ 1197.559037][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13731'.
[ 1197.565668][T24101] netlink: 15 bytes leftover after parsing attributes in process `syz.1.13731'.
[ 1197.571438][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13731'.
[ 1197.575142][T24101] netlink: 15 bytes leftover after parsing attributes in process `syz.1.13731'.
[ 1197.686402][T24116] mac80211_hwsim hwsim160 wlan1: entered allmulticast mode
[ 1206.341769][    C0] vcan0: j1939_tp_rxtimer: 0xffff888048af8800: Timeout. Failed to send simple message.
[ 1206.553771][T24127] netlink: 'syz.3.13736': attribute type 5 has an invalid length.
[ 1213.842013][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1213.848160][ T5960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1213.856441][ T5960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1213.861435][ T5960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1213.864602][ T5960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1213.907865][T19930] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1213.919002][T19930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1213.923295][T19930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1213.926947][T19930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1213.930284][T19930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1215.941637][T19930] Bluetooth: hci3: command tx timeout
[ 1216.021777][T19930] Bluetooth: hci4: command tx timeout
[ 1217.468940][   T61] block nbd2: Possible stuck request ffff888030000000: control (read@0,1024B). Runtime 960 seconds
[ 1217.473275][   T61] block nbd2: Possible stuck request ffff888030000200: control (read@1024,1024B). Runtime 960 seconds
[ 1217.477581][   T61] block nbd2: Possible stuck request ffff888030000400: control (read@2048,1024B). Runtime 960 seconds
[ 1217.482252][   T61] block nbd2: Possible stuck request ffff888030000600: control (read@3072,1024B). Runtime 960 seconds
[ 1218.021648][T19930] Bluetooth: hci3: command tx timeout
[ 1218.101643][T19930] Bluetooth: hci4: command tx timeout
[ 1220.101410][T19930] Bluetooth: hci3: command tx timeout
[ 1220.181531][T19930] Bluetooth: hci4: command tx timeout
[ 1222.181999][ T5960] Bluetooth: hci3: command tx timeout
[ 1222.271702][ T5960] Bluetooth: hci4: command tx timeout
[ 1222.532817][ T5960] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1222.538712][ T5960] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1222.542451][ T5960] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1222.546549][ T5960] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1222.549707][ T5960] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1224.581438][ T5960] Bluetooth: hci5: command tx timeout
[ 1226.661328][ T5960] Bluetooth: hci5: command tx timeout
[ 1228.741563][ T5960] Bluetooth: hci5: command tx timeout
[ 1230.826860][ T5960] Bluetooth: hci5: command tx timeout
[ 1247.556776][   T61] block nbd2: Possible stuck request ffff888030000000: control (read@0,1024B). Runtime 990 seconds
[ 1247.561076][   T61] block nbd2: Possible stuck request ffff888030000200: control (read@1024,1024B). Runtime 990 seconds
[ 1247.565809][   T61] block nbd2: Possible stuck request ffff888030000400: control (read@2048,1024B). Runtime 990 seconds
[ 1247.570197][   T61] block nbd2: Possible stuck request ffff888030000600: control (read@3072,1024B). Runtime 990 seconds
[ 1259.061332][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1275.272358][T19930] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1275.278810][T19930] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1275.282269][T19930] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1275.285188][T19930] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1275.288624][T19930] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1275.902544][ T5960] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1275.908277][ T5960] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1275.912356][ T5960] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1275.915134][ T5960] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1275.917706][ T5960] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1277.381885][ T5960] Bluetooth: hci6: command tx timeout
[ 1277.635436][   T61] block nbd2: Possible stuck request ffff888030000000: control (read@0,1024B). Runtime 1020 seconds
[ 1277.639189][   T61] block nbd2: Possible stuck request ffff888030000200: control (read@1024,1024B). Runtime 1020 seconds
[ 1277.642807][   T61] block nbd2: Possible stuck request ffff888030000400: control (read@2048,1024B). Runtime 1020 seconds
[ 1277.646764][   T61] block nbd2: Possible stuck request ffff888030000600: control (read@3072,1024B). Runtime 1020 seconds
[ 1277.941985][ T5960] Bluetooth: hci7: command tx timeout
[ 1279.461918][ T5960] Bluetooth: hci6: command tx timeout
[ 1280.021563][ T5960] Bluetooth: hci7: command tx timeout
[ 1281.541480][ T5960] Bluetooth: hci6: command tx timeout
[ 1282.101655][ T5960] Bluetooth: hci7: command tx timeout
[ 1282.747149][T19930] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1282.756257][T19930] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1282.760203][T19930] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1282.763905][T19930] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1282.767425][T19930] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1283.621564][T19930] Bluetooth: hci6: command tx timeout
[ 1284.181339][T19930] Bluetooth: hci7: command tx timeout
[ 1284.821808][T19930] Bluetooth: hci8: command tx timeout
[ 1286.901752][T19930] Bluetooth: hci8: command tx timeout
[ 1288.981428][T19930] Bluetooth: hci8: command tx timeout
[ 1291.061457][ T5960] Bluetooth: hci8: command tx timeout
[ 1302.751145][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[ 1302.753256][    C1] rcu: 	1-....: (1 GPs behind) idle=919c/1/0x4000000000000000 softirq=346361/346362 fqs=5190
[ 1302.758796][    C1] rcu: 	         hardirqs   softirqs   csw/system
[ 1302.761341][    C1] rcu: 	 number:     7061          0            0
[ 1302.763385][    C1] rcu: 	cputime:      281          0        52196   ==> 52480(ms)
[ 1302.766002][    C1] rcu: 	(t=10500 jiffies g=234297 q=32288 ncpus=2)
[ 1302.768036][    C1] CPU: 1 UID: 0 PID: 24116 Comm: syz.0.13734 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[ 1302.768053][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1302.768060][    C1] RIP: 0010:__sanitizer_cov_trace_switch+0xb3/0x130
[ 1302.768079][    C1] Code: 77 4e 8b 54 ce 10 65 44 8b 1d 69 3e e0 10 41 81 e3 00 01 ff 00 74 13 41 81 fb 00 01 00 00 75 d9 41 83 b8 3c 16 00 00 00 74 cf <45> 8b 98 18 16 00 00 41 83 fb 03 75 c2 4d 8b 98 20 16 00 00 45 8b
[ 1302.768087][    C1] RSP: 0018:ffffc90002bbf020 EFLAGS: 00000246
[ 1302.768096][    C1] RAX: 0000000000000002 RBX: ffff88802d3bf83c RCX: 0000000000000005
[ 1302.768101][    C1] RDX: ffffffff8983b7ce RSI: ffffffff8f57ca40 RDI: 00000000fffffff1
[ 1302.768107][    C1] RBP: dffffc0000000000 R08: ffff88812aed3980 R09: 0000000000000000
[ 1302.768112][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fffffff1
[ 1302.768117][    C1] R13: ffff88802d3bf948 R14: dffffc0000000000 R15: ffff88802d3bf800
[ 1302.768124][    C1] FS:  00007efc8d5676c0(0000) GS:ffff8881a3c21000(0000) knlGS:0000000000000000
[ 1302.768130][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1302.768135][    C1] CR2: 0000200000001200 CR3: 0000000044448000 CR4: 00000000000006f0
[ 1302.768158][    C1] Call Trace:
[ 1302.768197][    C1]  <TASK>
[ 1302.768205][    C1]  qdisc_tree_reduce_backlog+0x10e/0x480
[ 1302.768217][    C1]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[ 1302.768228][    C1]  pie_change+0x96d/0xca0
[ 1302.768243][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1302.768254][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1302.768264][    C1]  ? __pfx_pie_change+0x10/0x10
[ 1302.768272][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1302.768287][    C1]  ? timer_init_key+0x171/0x2d0
[ 1302.768298][    C1]  ? __pfx_pie_init+0x10/0x10
[ 1302.768306][    C1]  pie_init+0x2a3/0x3f0
[ 1302.768315][    C1]  qdisc_create+0x7ac/0xea0
[ 1302.768327][    C1]  tc_modify_qdisc+0x1538/0x20e0
[ 1302.768344][    C1]  ? __pfx_tc_modify_qdisc+0x10/0x10
[ 1302.768366][    C1]  ? __pfx_tc_modify_qdisc+0x10/0x10
[ 1302.768373][    C1]  rtnetlink_rcv_msg+0x77c/0xb70
[ 1302.768385][    C1]  ? __lock_acquire+0xab9/0xd20
[ 1302.768397][    C1]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1302.768407][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1302.768424][    C1]  netlink_rcv_skb+0x208/0x470
[ 1302.768434][    C1]  ? __lock_acquire+0xab9/0xd20
[ 1302.768445][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1302.768455][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1302.768471][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1302.768484][    C1]  netlink_unicast+0x82f/0x9e0
[ 1302.768498][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[ 1302.768508][    C1]  ? netlink_sendmsg+0x642/0xb30
[ 1302.768517][    C1]  ? skb_put+0x11b/0x210
[ 1302.768530][    C1]  netlink_sendmsg+0x805/0xb30
[ 1302.768544][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1302.768556][    C1]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1302.768568][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1302.768578][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1302.768588][    C1]  __sock_sendmsg+0x21c/0x270
[ 1302.768600][    C1]  ____sys_sendmsg+0x505/0x830
[ 1302.768614][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1302.768630][    C1]  ? import_iovec+0x74/0xa0
[ 1302.768640][    C1]  ___sys_sendmsg+0x21f/0x2a0
[ 1302.768652][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1302.768680][    C1]  ? __fget_files+0x2a/0x420
[ 1302.768692][    C1]  ? __fget_files+0x3a0/0x420
[ 1302.768708][    C1]  __x64_sys_sendmsg+0x19b/0x260
[ 1302.768720][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1302.768737][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1302.768748][    C1]  ? do_syscall_64+0xbe/0x3b0
[ 1302.768760][    C1]  do_syscall_64+0xfa/0x3b0
[ 1302.768769][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1302.768778][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1302.768787][    C1]  ? exc_page_fault+0x9f/0xf0
[ 1302.768798][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1302.768806][    C1] RIP: 0033:0x7efc8c78ebe9
[ 1302.768816][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1302.768824][    C1] RSP: 002b:00007efc8d567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1302.768832][    C1] RAX: ffffffffffffffda RBX: 00007efc8c9b5fa0 RCX: 00007efc8c78ebe9
[ 1302.768837][    C1] RDX: 0000000000000040 RSI: 0000200000001200 RDI: 000000000000000d
[ 1302.768842][    C1] RBP: 00007efc8c811e19 R08: 0000000000000000 R09: 0000000000000000
[ 1302.768847][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1302.768852][    C1] R13: 00007efc8c9b6038 R14: 00007efc8c9b5fa0 R15: 00007ffd4a420e68
[ 1302.768865][    C1]  </TASK>
[ 1307.718136][   T61] block nbd2: Possible stuck request ffff888030000000: control (read@0,1024B). Runtime 1050 seconds
[ 1307.722549][   T61] block nbd2: Possible stuck request ffff888030000200: control (read@1024,1024B). Runtime 1050 seconds
[ 1307.726849][   T61] block nbd2: Possible stuck request ffff888030000400: control (read@2048,1024B). Runtime 1050 seconds
[ 1307.737247][   T61] block nbd2: Possible stuck request ffff888030000600: control (read@3072,1024B). Runtime 1050 seconds

VM DIAGNOSIS:
02:46:32  Registers:
info registers vcpu 0

CPU#0
RAX=aaac6fd3c9a99200 RBX=ffffffff81968308 RCX=aaac6fd3c9a99200 RDX=0000000000000001
RSI=ffffffff8d9b4938 RDI=ffffffff8be32680 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34730 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcefaee5000 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f9c4e587d20
XMM02=ffffffff00000025 ed0802d000000000 XMM03=80820002e2036d69 7376656474656e01
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000003bf12
XMM06=00100004d0030010 0004c00300000027 XMM07=b003781000000000 00000008080602f0
XMM08=030296040002ec03 1004000200000026 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002f RBX=000000000000002f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e0450
R8 =ffff888021880237 R9 =1ffff11004310046 R10=dffffc0000000000 R11=ffffffff854e7250
R12=dffffc0000000000 R13=ffffffff99af4900 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e72cc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007efc8d5676c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001200 CR3=0000000044448000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007efc8d4ed100 00007efc8c987460 XMM05=00007efc8c987478 00007efc8c9874c0
XMM06=00007efc8c9874b8 00007efc8c9874b0 XMM07=00007efc8c9874a8 00007efc8c9874a0
XMM08=0000000000000000 00007efc8c812ee7 XMM09=0000000000000000 00007efc8c812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
