last executing test programs:

18.690813736s ago: executing program 2 (id=4284):
accept(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff}}, &(0x7f0000000100)=0x80)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x40000)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e1d, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000180)=0x10)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000002c0)=ANY=[], 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4, 0x1}, &(0x7f00000000c0)=0x8)

17.840167947s ago: executing program 2 (id=4303):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x710, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x770)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x4}, 0x28)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0x10, 0x214868da, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000200), &(0x7f0000000240)=@udp, 0x1}, 0x20)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
setsockopt(r2, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8)

17.838983736s ago: executing program 1 (id=4304):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, 0x0, 0xffffffed)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async, rerun: 64)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000100000000070800014000000008080001400000000908000140000000080c000180080001400000000a240001"], 0x140}}, 0x0) (async)
r4 = socket(0x18, 0x5, 0x8000)
sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020"], 0x38, 0x4855}, 0x24000052)

17.769193025s ago: executing program 1 (id=4305):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2, 0x3, 0xff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x10, 0x0, 0x0, 0x10, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x1, 0x81, 0x8}})
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000001c00)={@dev={0xac, 0x14, 0x14, 0x12}, @empty}, 0x8)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000ffffffff390000000c009900012000005608000004000d80"], 0x24}, 0x1, 0x0, 0x0, 0x4000065}, 0x8040)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r5=>0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x10001, @remote, 0x7}, @in6={0xa, 0x4e22, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000080)=0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000001c0), &(0x7f0000000300)=0x10)
getsockopt$inet6_tcp_int(r6, 0x6, 0x2d, 0x0, &(0x7f0000000b40))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x2, 0x3, 0xff) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x10, 0x0, 0x0, 0x10, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x1, 0x81, 0x8}}) (async)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) (async)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000001c00)={@dev={0xac, 0x14, 0x14, 0x12}, @empty}, 0x8) (async)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000ffffffff390000000c009900012000005608000004000d80"], 0x24}, 0x1, 0x0, 0x0, 0x4000065}, 0x8040) (async)
shutdown(r0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x10001, @remote, 0x7}, @in6={0xa, 0x4e22, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000080)=0x10) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000001c0), &(0x7f0000000300)=0x10) (async)
getsockopt$inet6_tcp_int(r6, 0x6, 0x2d, 0x0, &(0x7f0000000b40)) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) (async)

17.701151014s ago: executing program 1 (id=4306):
r0 = socket$inet6(0xa, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
readv(r1, 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, <r3=>0x0, 0x0}}, 0x10)
r4 = epoll_create(0x7)
r5 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000014})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r3, 0x4)
close(0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400003000f0800014000000000340005800c0001007061796c6f61640024000280080004400000001c08000340000000b9080001400000000a08000240200000020900010073797a30000000000900020073797a32"], 0xc0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x800)
sendmsg$NFT_MSG_GETSET(r11, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000900)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4000)
sendmsg$IPSET_CMD_SAVE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x14)
ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'wg1\x00'}})
write$cgroup_int(r8, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}], 0x3c)

17.330309789s ago: executing program 0 (id=4307):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000020000000000000003000000180000000300000000000000040000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$inet(0x2b, 0x801, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[], 0x48)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000580)={'wpan0\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000080), 0x8)
sendto$inet6(r5, &(0x7f0000000180)="b8", 0x1, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @loopback, 0xffffffff}, 0x1c)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
sendmsg$nl_route(r7, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a40)=@can_delroute={0x2bc, 0x19, 0x100, 0x70bd2b, 0x25dfdbfe, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x49}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "05ef604c79ee133c"}, 0x6}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "61c9430abc43187f"}, 0x6}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "4cf0456bccfced6d"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0x26, 0x7d, 0x6, 0xb, 0xdf, "5b9b1934ae3340939ad9917ff9f2037f11de8907b846e34a30def3a52f979c84316d34859e3c2be33492fc7f86d0c3933dff6606ca3a69170b860716089fbfbf3219c997db40a95a106463a5d7cd513384229a9ccc4a6c71d00253cc164646cdcdd88fcdc75ef8f32bf9d882f491f7c63a69e541b85cbd8806012f3f4642f3a1a4edf28a656715ec08050e3955add2862e5bf26b49d1a499cf9a34b62e72c01f1f83505c868ef2a8185e9cb9f36162cc1b791d7f0b2b9aa226145d357a03b09354a4ffb39152dc31a4f177e9bd38397dd946a03409ecc138d58198a970373cfd26b9f77c4a0350e50e3620d8dabc36a0a878a52c44e4ee2dd08e65ea1521d15c", 0x0, "b51f85895c4fe098ef2db2118c9f1107739b7136"}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1e, 0x18, 0x3d, 0x6, 0x1, "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", 0x2, "939740e0a352c9c33b790e14018859adfd6fcd45"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "9423f397164b1522"}, 0x7}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x8000}, 0x8040)
bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
sendmsg$802154_dgram(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x8000, r8}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000005c0)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)

16.951288896s ago: executing program 2 (id=4308):
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r2, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x3e, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @typed={0x8, 0x54, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="940000000001010400000000000000000a00000a3c0001802c00018014000300fe8400000000000000000000000000aa14000400ff0100000000000000000400000000010c00028005000100000000003c6b9bfbf108e842d4af6b1f871002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c00028005000100000000000800074000000000"], 0x94}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000000000400200000008000300", @ANYRES32=r10, @ANYBLOB="0c009900d308000079000000080026006c0900000800a08d1d4a2a390800270002"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008094)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x400c0}, 0xc040)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)

16.441123567s ago: executing program 2 (id=4309):
r0 = socket$inet6(0xa, 0x5, 0x0)
listen(r0, 0x80)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=r4, @ANYBLOB="0800c300741300000800c4"], 0x2c}}, 0x40) (async)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000005000000080000000100001300000000030000000100028000000000000000000000000b0100000000615f5f00"], &(0x7f00000013c0)=""/4096, 0x41, 0x1000, 0x0, 0x5}, 0x28) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000100)=0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x44, '\x00', r7, 0x25, r6}, 0x94) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e30000000080001"], 0x40}}, 0x8084) (async)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async, rerun: 64)
connect$inet6(r0, &(0x7f0000000940)={0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfc}, 0x1c) (async, rerun: 64)
listen(r0, 0xbb)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r10 = socket$inet6(0xa, 0x1, 0x0) (async)
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSGL2CALL(r11, 0x89e5, &(0x7f0000000180)=@netrom) (async)
sendmsg$inet6(r10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x4000010) (async)
sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074e204e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)

16.357256056s ago: executing program 0 (id=4310):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000030800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

16.356900606s ago: executing program 1 (id=4311):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000000000000000000000000084000000000000006200000004960c00c83d71416b20ba82da0d19cf586c7a809024090700000071a3370570279058525400e4a36a5262b68caf39eab30b85268ca623a700090bdfad53d50f073b7512de913ab7834f6d020e22cda7fe655200abd8ea2bd19c91a6aa60a02782a0492027da6e75807525c4000000000000"], 0x28}, 0x41)

16.356169181s ago: executing program 2 (id=4312):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00')
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x6d5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f00000004c0), 0x48, 0x820b, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x804)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000204000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000ff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50)
r6 = socket(0x1f, 0x5, 0x3)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500001c00000000000190780a010102ac1414aa11009078000000013f1b92596a642e5c01ed10a3d9421e56cbdf46e136571f976afd375986efd25aefd5b7ee4058c8d3d3a2f51bd7d9046fb4e623b8b7d235e422352fe6675b3eb88c8a51daf59be46642b17dbe636efeb3bb7a342235df5508823a64fbc4c41b1e6e8fc10190a30584558a8bc1b4f2c2"], 0x0)
sendmmsg$inet(r6, &(0x7f0000000a00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000040)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000240)="136c56cb4cd1dbfdf7ffed248e6807b5a474e29c77989ea1ee80e24f171d80bdb93f036ab2a5a37ad38e05df921bce011cdc56e12c27673fbbfc82b44fb49ab28fc632e262b04d06778fbad58dd5b56208abfb8a96b9532d86d66fae4f", &(0x7f0000000000)=""/10, 0x2}, 0x20)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, &(0x7f00000001c0), 0x0}, 0x20)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/72, 0x48}], 0x1}, 0x100}], 0x1, 0x40010000, &(0x7f0000002b80)={0x0, 0x3938700})
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r7, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000140)=""/34, &(0x7f0000000200)=0x22)

16.354894355s ago: executing program 0 (id=4313):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000800000, 0xfffffffffffffffc}, {0x0, 0xa00, 0x4, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1, 0x2, 0x2}}, 0xb8}}, 0x0) (async, rerun: 64)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) (async)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x2}, 0x1c) (async, rerun: 32)
socket$packet(0x11, 0x2, 0x300) (async, rerun: 32)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async)
write(r3, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) (async, rerun: 64)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x8044) (async, rerun: 64)
sendto$inet6(r0, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c)

16.354608043s ago: executing program 1 (id=4314):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0)={0x5}, 0x4)
sendto$inet6(r1, &(0x7f0000000180)="b8", 0x1, 0x40, &(0x7f0000000140)={0xa, 0x4e20, 0x800, @loopback, 0xffffffff}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x44800)
ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @local}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x5, 0x3, 0x9, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x4000010)
sendto$inet6(r1, &(0x7f00000001c0)="fe6138eaa97579f19e401ef3f3d2d166c7b5a52efcf0fb11e614fc07f50761ef9855e07dabac27edfd91b09d8ee1cf53ee5949e32b3e64ff403dcfcd1133ccc6791f864e84eef1dad97fcaa497876995d51d6ebeff9e0508398eeec3a5de7796f5aee6188586f128366e950e8a3e3419cf650bbc8ff6e3a6889bc4e5676ad577b11fa8510901bb8e47793ab03ad0030d769db337ce07e27df3981c22c00dca24ab47176136f1432d491b0200ba0da5353f2ba4b33862ba1198f315627f8dc9f3365715873f3ee6f0b190beff", 0xcc, 0x4c001, &(0x7f0000000000)={0xa, 0x4e1f, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xaa}, 0x1c)

16.346890018s ago: executing program 0 (id=4315):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r3, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14)
setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000040), 0x4)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r5=>0x0, <r6=>0x0, <r7=>0x0}, &(0x7f00000000c0)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004300)={{{@in=@private, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8)
ioctl$SIOCAX25GETUID(r4, 0x89e0, &(0x7f0000000100)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r8})
r9 = getgid()
r10 = getuid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
r12 = accept4$ax25(r4, &(0x7f0000002c00)={{}, [@bcast, @rose, @default, @netrom, @rose, @bcast, @rose, @default]}, &(0x7f0000000280)=0x48, 0x0)
r13 = socket$nl_audit(0x10, 0x3, 0x9)
r14 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000004740)=ANY=[@ANYBLOB="6c0000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000000000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c000800080008000000000008001f000200000008001f0002000000d364c01f51271175e9611eaf22f5c1ecf2297b305ba160c7ea4db461eeed53f8eea647c8ee42a8182a4de025114ad8d536cba4a80a183d1a12874f4c964dbb05b1c8e606a2ca40c54bdef7dea0ec19b34770ca7afbdef4a127ef41d52260f24c75d39466e63d1ae8741ac8af2b43c1cc62375b39bec73c54c0c57aff3f5d462ccc298b1bce4c44606bbf377aec4108faab861935a7ef423c286b9cfce6ec5efedbd9de03b71726ae6082f88173eef0707ed5747c1b48db97bc8137cce9adcf3bffa29c874848650e233990e251effbfbe8eabc7ea8"], 0x6c}}, 0x4004040)
r15 = socket(0x1a, 0x80006, 0xfffffffa)
sendmmsg$unix(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f00000001c0)="320102d74a46ce7ad19a6385d18f2dd51ef753930c1493f81bc7ad2ba0fa64044d154161065b8237d2bd613d358acf63019afb88535fcbcbf9f033cd27597761f1af3cbb42bcdd81ab10b046eba8b65d2773c6b15fb64b1876d41ddfeb188528922fd13eaf7b1d437369515aa431e6492170fdb007be252827d8e5e4dc66290f97619d4088e55a02da56980a7a20eb4de6fbb65478191e1ffae56216128a5ec34320d551928925a6bb1df210dc6a91f8e3d51ccfb675961d18e3", 0xba}, {&(0x7f00000003c0)="08a53e839dd1f693623db3f01259da50d193853ad909d1a73e94eefa11c5422befb3216bf7a312dd1aec3470754bb89d99ef81cc47ef4ab01e2ee137f58fbe5481138e89ada3f7a5da4a", 0x4a}, {&(0x7f0000000440)="56867d804174b9ef4f90b5e0a89da05cb990b0c895f87c69f6b1b61aac8135534ec9b1861da09019c98adc01b390813e0f7f9a7118b705718a14836d7da5b6c676e1013ec3da767ad616ffacafa588972546e7f392673dffa7278fc3f5a5965f0ed192d47da0afd9bd085ca0b7ad75759d4806dcbaa6c931d5d18f382b72d320adefd2a3d4bb3ecdd0c6332c4ce827a73886319319e8e1c2975ed641f243f6e9bb0865df55380435edde5fa42f8b6721d876ffb40c94b7adddadf1e4aa0dc06160a1d1abcb03124af5e4dab5cf5b2c904c13737e8a72c402876dba81ea0403f3bca17a183e3f260b1c44", 0xea}, {&(0x7f0000000540)="3a94e09c5266a0eb7eabfd4ff18b6943ad44d213381fef370035f0e5103485a5656f8267bef99de8b36292f9cf781f3837cee522db3803b221ab0636fdf15fa2ab24ee716ca7b77ea899bb9b8bf77f5e35551a0b04fcb477de6e4bff6b1fb73bdc3dee7797ec33f8f6db7851205dcd26803feb1df6d514c8b05e9193b43b23bb106d438aafcbf6d9cbb5f03bc364dfd88a6ad7b3d3d3d53fbb40c5b928305b03246207eed4484905c66b7b88128211aef8f9d8ee242ee8f1405ca874f614225a681814c8a721ea07e767d5739d597de8a2f4b97c7ca7e6fe2d05b45ee56b170cd1e5a5453d07fabb6265af", 0xeb}, {&(0x7f0000000640)="35b7aab1c49ac7345fcc706e7a56ff87d8a1e4e96609cf2cd8db8160fc5caeceb7e8a65787f179bcf799ce54c7cd066621865b90d8285e41c52dbb9e06e6787271399578c95db7908d22238c6c64a00e0d0e324893274ecaec241e184f191418dd9413216fa60e0596384af089054ba92561962be4d85f860f42018c1142a5456aa8bdc69375f4172da84ae52b090700066ac7ddf87bcdbf6b0d4519544349cfe8a4f164bb0d3c36e99769e47e7b17c5186f59c87a574d44eb8d442dcad93c96ae01baebd9e9ef120c", 0xc9}, {&(0x7f0000000740)="419187be31b6368f1f1ed517c14f2f4004cf03b909c8f1c826e55b7b9f8bb6c125ded03d112a5d1892018258628dc85eda86ed1d9789e0f1929417e0dcb6fa2f35", 0x41}, {&(0x7f00000007c0)="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", 0x1000}], 0x7, &(0x7f0000000140), 0x0, 0x8885}}, {{&(0x7f0000001840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002b80)=[{&(0x7f00000018c0)="fe494fb4b3c2d961ab9199466026f05eb4424e945246d2bf836b6e089697778f52692d0e5c77db48f1b8bf11e1ed48ee1d5d565c2269761d4c828c6f9cff2932423a4ba885d771efde7041274b5e298b8f3299914ff0f3fdca35901a9ade2fee81fd649a7c650be02b878c3612d56e57094dbb7987925a6e55d7d9d70fbe0c786bc01122965d6e31c001a480e25aa518f250a827e799a7d8097ec597377bd6c47251b57318a456b67f5794893aef742645fc28f68518ad2282f40199a97aadf9dd094fd2b6cb1410a182638afebb108499677059f1cc978d77ddad0c565e43", 0xdf}, {&(0x7f00000019c0)="110244eda1d8d86accf6a878dcca4e43b45f5967725046a22c65a6d33b1474f82b62b7055e33e9ee2362ab07f173af78903dc16be53138f1f1efb0347371c9613f5df20b5a85a4e32f8dd2cf7479d15db96d4f15f03f118db95cb1ac4e50ca1629defd297bc1a825f03bd1eb64929b475db0a3394b77e8", 0x77}, {&(0x7f0000001a40)="8239c925120e4faa746dcd3d9dfb7d3a90fadf697fc6a3d06feb36ac201bf5ab26a391fb9e1afd1c4877e2fa0e6fe83d3e0c0c2e713ebfd1ba680cda3c92a52bdd66c16491b2af9760188cca7c5d5343da2a60c132899b99afe919435eb4aa6f2fcba4ccdf49eda6", 0x68}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="3fc000adff2ec092426cd520052efe7f0f3d0d81d2fe659e9af0def2a0e66f89112e2704fa55d6075b6ccd1409195be566057a3c8fc5690e775cfa2f5d356481c051659082f5514a315f5804f3592f636a84c5276a5396b7ad5b002e799e7c35f2e40cb5c416a7ed44a7461f6a19b0dca23ea05ec878d8e2d5a34c77149489eba8e45e180977df611c", 0x89}], 0x5, &(0x7f0000004600)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000c6a1d0e37065eeefe2bf30bb9f020bc4b663806e0f3e0785b48c141d32ecf00742f65dbb68", @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r11, @ANYRESDEC=0x0, @ANYRES8=r1, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r12, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r13, @ANYRES64=r13, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r15, @ANYRES32=r14, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x108, 0x20040840}}, {{&(0x7f0000002dc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002e40)="6ec94714a8542a9b23f18eebe00f751bcb50b2b6f6a734925f7f24bfc553da80b581804b8b0c39101cf100a322e0845d21230167252a6793b893bd8cd42af95622716e3a9311d6574a67e87bcec4b14eb0f3", 0x52}, {&(0x7f0000002ec0)="afff2a96bea8e46e7f5c42785e45cc071cd3d09b4bd30c017bede31344531dccbe10eaa3b59a54afc2774ae612f73998cfebee3d4b36d54b82062990bb0eadb5f1fdf060e26056ffea3115f0b749e9e6e073245bc1ba4785597a855ec47d1ec06466509adb5ad20e220ee51edd1631f7e594775516714dcd0c1f5bdc49f60520ca83c34735db0a93c98385d751fee44eb223f49020339c99d894363e937c61f75516aa1dc664c1176973ec8e81b4d1fbca", 0xb1}, {&(0x7f0000002f80)="eba646c2fe995b6b5f7cd1880105be2309c125b0b370b2733df381928b6c6b4571bbd9043c53bc6c19ba670a27a42f213cdeb28d10236df7abdaeb7c65519ccaeab1a1e1dedced76331cea125922faae110cea455332abb4ce981144056a9a3e9fa05c6b95d4e13201376640b987f3cf861aa27805a5ec315438a408696f9facb965c4", 0x15}, {&(0x7f0000003040)="a64a257eebd41b2c8f80024fd87ee8a75643298e865df047ce7045d929c637299ca6c7c8629f66ccb36bcf235d9bacf71f9971bfb9cad20c47c41e34606cf437f608213cfcc7ff3df35b2b49a0d3536e726f17c66ab4224c98e649c5e9294ea3c3489e338a2d7b4e730f819b6bb95b5f5bcf96f0af6871f5", 0x78}, {&(0x7f0000004140)="91369ab1c14477de2ec79d3c6b1436f39abbdcd5e848f9f5dd65311c98c3e8491676b6a4eed3a5e458027ed40daddd6efa6c1ecc741ca05a73fd40b094ad7caea1aeba5965a1f0544635c09b8e86a3131256d8d2314bb6bd48c53f3df546ec3cfcedfaba6efefb66858fb97898ca19635f65af46158a63b34cc27279c9a4e4d0293d83fc63c70f33", 0x88}, {&(0x7f0000004200)="70fc28336a4639eff6589a18b95f12fdaa7376f7687d1d9c3036584ad1f740355d1bdd8d182a47a9237aa2faec94d07f733668ff3edc25d889900b64ed8e8c77dabdaffc5e73e422e33f1e09005ad5ccb3ed7a3e92019523d97cff2d7dc57c5cb113ac7a479fc4d35a64947b91881a6ba19fa935cac921c433e0be1f4db5b014cfc28f64035ba058a996e0228d0f25ad32b3c02ba84067c8fb30c492effbfe2fb4dfe0f8c354a9403a29c624a3c8a6b5a1c89ecd110a9444b203b3b01dbb6a53575bb274e170b9172d46f323a425", 0xce}], 0x6, &(0x7f0000004480)=ANY=[@ANYBLOB="1c000000000000000100000000000000", @ANYRES32=r5, @ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r11, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r15, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x40081}}], 0x3, 0x8800)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8)
r16 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r16, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff)
close(r1)

16.260822277s ago: executing program 0 (id=4316):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0xffffffff, @remote, 0x6}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)='A(', 0x2}], 0x1}}], 0x1, 0xc010)
shutdown(r0, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18)
r2 = accept4(r0, &(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x80, 0x800)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc)
close(0x3)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000140)=0x4)
close(0x3)
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)

16.260085263s ago: executing program 0 (id=4317):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}], 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x30fae, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}, @IFLA_WEIGHT={0x8, 0xf, 0xc}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MAP={0x24, 0xe, {0x8, 0x7ff, 0x2, 0xf43, 0x2, 0x7}}]}, 0x70}}, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff2, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$unix(0x1, 0x2, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

15.479668551s ago: executing program 2 (id=4318):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}}, 0x4880)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x11}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d4ea966c46c2a922cc1a8d3c92b51fbd"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
r4 = socket$netlink(0x10, 0x3, 0xe)
sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@migrate={0x108, 0x21, 0x20, 0x70bd2c, 0x25dfdbfb, {{@in=@local, @in6=@local, 0x4e20, 0xaa, 0x4e24, 0xb, 0x2, 0x80, 0x80, 0xc, 0x0, 0xffffffffffffffff}, 0x6e6bb0}, [@encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e20, @in=@multicast2}}, @migrate={0x9c, 0x11, [{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in=@remote, 0x0, 0x1, 0x0, 0x3504, 0x2, 0x2}, {@in6=@empty, @in6=@loopback, @in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3, 0x0, 0x3507, 0x2, 0x2}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r4)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], <r6=>0x0, 0x7f, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xe9, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=r6, 0x4)
r8 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r8, &(0x7f0000000980)={0x18, 0x2, {0x3, @private=0xa010100}}, 0x1e)
getsockopt(r8, 0xc73, 0x401, &(0x7f00000009c0)=""/159, &(0x7f0000000a80)=0x9f)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0), 0x8)
ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f0000000b00)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1a})
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x90, r10, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x90}, 0x1, 0x0, 0x0, 0x80804}, 0x880)
socket$tipc(0x1e, 0x2, 0x0)
bind$qrtr(r9, &(0x7f0000000d00)={0x2a, 0xffffffffffffffff, 0x2}, 0xc)
r11 = accept4$inet6(r7, &(0x7f0000000d40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000d80)=0x1c, 0x80800)
setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@local, @in6=@private1, 0x4e20, 0x1, 0x4e21, 0x6, 0xa, 0x60, 0x0, 0x62, 0x0, 0xee00}, {0x66, 0xd, 0x4, 0x4, 0x4, 0x4, 0x5, 0x3}, {0xea, 0x7, 0x100000001, 0x2}, 0x7, 0x6e6bbf, 0x0, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3502, 0x1, 0x1, 0x5, 0xed7, 0x2, 0x7fff}}, 0xe8)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ec0), r1)
socket$pppoe(0x18, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='xen_mmu_alloc_ptpage\x00', r9, 0x0, 0x3}, 0x18)
sendmsg$NL80211_CMD_LEAVE_MESH(r9, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100840}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x761, 0x35}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xd703397d53caec35}, 0x24040000)
syz_genetlink_get_family_id$tipc(&(0x7f0000001080), r9)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r9, &(0x7f00000010c0)="f462d768c9651c9523c5e390949b0d7c1e6d04ccba93cfc58e274c95dd8c7b", &(0x7f0000001100)=@tcp=r9, 0x4}, 0x20)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000013c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001380)={&(0x7f00000011c0)={0x1b4, 0x12, 0x20, 0x70bd29, 0x25dfdbfb, {0x1a, 0xba, 0xc6, 0x2, {0x4e22, 0x4e21, [0x0, 0x1000, 0xfffffff8, 0x80000000], [0x5, 0x80000000, 0xe, 0x3], 0x0, [0x8, 0x80]}, 0x4, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "7717dfc0942e42cf3a995168326d10d3fa087417b6c269bdef8f63451d2b042c810c702c42d1b0988340e949d4aa3e32540442135c83cde925a0d2f2b5c20cac009bb45f763f55698623966e88ee28cb4663eef9faa90c92c750ccc42f84ea1a72578c89be24daea685f70bbd5deb65a9b8b6a04079548540144c1c939a081049f646d9c55f6cffe4e9835a267e66f0a1af1d8ffc7a5803fe0ceeb9e43"}, @INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "ffc1c862a0a8efed775bed64201272c227a9a228751008a3eb968b566e140da1887410a83178b2d71e3b"}, @INET_DIAG_REQ_BYTECODE={0x59, 0x1, "8cf57505e15fd09078928f4d1a7593e3719a2ccf672ced23bf4bc91f5483b19d08acdf6d12b80f5b71d30e340e503dc1fb57e5f402ecd71ff48f0b300cc9c57edf516b440a47831eda35645403921964d23d0452ac"}, @INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "54f93c75f25848c3efe887fecca8143fc656b5ec32dae6e9f3a52dfd4dc19db951f92aa1028039786b"}, @INET_DIAG_REQ_BYTECODE={0x7, 0x1, "bd51b6"}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000800}, 0x44)

15.410922891s ago: executing program 1 (id=4319):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x1000, 0x40, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x44}}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84)
listen(0xffffffffffffffff, 0x0)
ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xfff, 0x84, 0x7, 0x0, 0x91, "e758cae9ffed00000000b24000", "39e80000000000000000e30300"})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$6lowpan_control(r2, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e)

1.040112682s ago: executing program 32 (id=4317):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}], 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x30fae, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}, @IFLA_WEIGHT={0x8, 0xf, 0xc}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MAP={0x24, 0xe, {0x8, 0x7ff, 0x2, 0xf43, 0x2, 0x7}}]}, 0x70}}, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff2, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$unix(0x1, 0x2, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

28.592799ms ago: executing program 33 (id=4319):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x1000, 0x40, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x44}}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84)
listen(0xffffffffffffffff, 0x0)
ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xfff, 0x84, 0x7, 0x0, 0x91, "e758cae9ffed00000000b24000", "39e80000000000000000e30300"})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$6lowpan_control(r2, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e)

0s ago: executing program 34 (id=4318):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}}, 0x4880)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x11}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d4ea966c46c2a922cc1a8d3c92b51fbd"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
r4 = socket$netlink(0x10, 0x3, 0xe)
sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@migrate={0x108, 0x21, 0x20, 0x70bd2c, 0x25dfdbfb, {{@in=@local, @in6=@local, 0x4e20, 0xaa, 0x4e24, 0xb, 0x2, 0x80, 0x80, 0xc, 0x0, 0xffffffffffffffff}, 0x6e6bb0}, [@encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e20, @in=@multicast2}}, @migrate={0x9c, 0x11, [{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in=@remote, 0x0, 0x1, 0x0, 0x3504, 0x2, 0x2}, {@in6=@empty, @in6=@loopback, @in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3, 0x0, 0x3507, 0x2, 0x2}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r4)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], <r6=>0x0, 0x7f, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xe9, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=r6, 0x4)
r8 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r8, &(0x7f0000000980)={0x18, 0x2, {0x3, @private=0xa010100}}, 0x1e)
getsockopt(r8, 0xc73, 0x401, &(0x7f00000009c0)=""/159, &(0x7f0000000a80)=0x9f)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0), 0x8)
ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f0000000b00)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1a})
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x90, r10, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x90}, 0x1, 0x0, 0x0, 0x80804}, 0x880)
socket$tipc(0x1e, 0x2, 0x0)
bind$qrtr(r9, &(0x7f0000000d00)={0x2a, 0xffffffffffffffff, 0x2}, 0xc)
r11 = accept4$inet6(r7, &(0x7f0000000d40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000d80)=0x1c, 0x80800)
setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@local, @in6=@private1, 0x4e20, 0x1, 0x4e21, 0x6, 0xa, 0x60, 0x0, 0x62, 0x0, 0xee00}, {0x66, 0xd, 0x4, 0x4, 0x4, 0x4, 0x5, 0x3}, {0xea, 0x7, 0x100000001, 0x2}, 0x7, 0x6e6bbf, 0x0, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3502, 0x1, 0x1, 0x5, 0xed7, 0x2, 0x7fff}}, 0xe8)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ec0), r1)
socket$pppoe(0x18, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='xen_mmu_alloc_ptpage\x00', r9, 0x0, 0x3}, 0x18)
sendmsg$NL80211_CMD_LEAVE_MESH(r9, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100840}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x761, 0x35}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xd703397d53caec35}, 0x24040000)
syz_genetlink_get_family_id$tipc(&(0x7f0000001080), r9)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r9, &(0x7f00000010c0)="f462d768c9651c9523c5e390949b0d7c1e6d04ccba93cfc58e274c95dd8c7b", &(0x7f0000001100)=@tcp=r9, 0x4}, 0x20)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000013c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001380)={&(0x7f00000011c0)={0x1b4, 0x12, 0x20, 0x70bd29, 0x25dfdbfb, {0x1a, 0xba, 0xc6, 0x2, {0x4e22, 0x4e21, [0x0, 0x1000, 0xfffffff8, 0x80000000], [0x5, 0x80000000, 0xe, 0x3], 0x0, [0x8, 0x80]}, 0x4, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "7717dfc0942e42cf3a995168326d10d3fa087417b6c269bdef8f63451d2b042c810c702c42d1b0988340e949d4aa3e32540442135c83cde925a0d2f2b5c20cac009bb45f763f55698623966e88ee28cb4663eef9faa90c92c750ccc42f84ea1a72578c89be24daea685f70bbd5deb65a9b8b6a04079548540144c1c939a081049f646d9c55f6cffe4e9835a267e66f0a1af1d8ffc7a5803fe0ceeb9e43"}, @INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "ffc1c862a0a8efed775bed64201272c227a9a228751008a3eb968b566e140da1887410a83178b2d71e3b"}, @INET_DIAG_REQ_BYTECODE={0x59, 0x1, "8cf57505e15fd09078928f4d1a7593e3719a2ccf672ced23bf4bc91f5483b19d08acdf6d12b80f5b71d30e340e503dc1fb57e5f402ecd71ff48f0b300cc9c57edf516b440a47831eda35645403921964d23d0452ac"}, @INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "54f93c75f25848c3efe887fecca8143fc656b5ec32dae6e9f3a52dfd4dc19db951f92aa1028039786b"}, @INET_DIAG_REQ_BYTECODE={0x7, 0x1, "bd51b6"}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000800}, 0x44)

kernel console output (not intermixed with test programs):

[  265.375153][T14028] nbd1: detected capacity change from 0 to 63
[  265.392782][   T58] block nbd1: Receive control failed (result -104)
[  265.443184][T14032] netlink: 'syz.2.2393': attribute type 1 has an invalid length.
[  265.482640][T14048] vlan0: entered allmulticast mode
[  265.484458][T14048] bridge_slave_0: entered allmulticast mode
[  265.510019][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2397'.
[  265.516076][T14050] netlink: 'syz.1.2397': attribute type 1 has an invalid length.
[  265.530860][T14050] bond18: entered promiscuous mode
[  265.532716][T14050] 8021q: adding VLAN 0 to HW filter on device bond18
[  265.546135][T14050] 8021q: adding VLAN 0 to HW filter on device bond18
[  265.549227][T14050] bond18: (slave gre3): The slave device specified does not support setting the MAC address
[  265.554447][T14050] bond18: (slave gre3): Setting fail_over_mac to active for active-backup mode
[  265.557937][T14050] bond18: (slave gre3): Opening slave failed
[  265.593155][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2397'.
[  265.774011][T14078] netlink: 'syz.1.2403': attribute type 1 has an invalid length.
[  265.789005][T14078] bond19: entered promiscuous mode
[  265.790795][T14078] 8021q: adding VLAN 0 to HW filter on device bond19
[  265.969344][T14097] netlink: 'syz.0.2405': attribute type 11 has an invalid length.
[  266.456352][T14116] netlink: 'syz.1.2410': attribute type 1 has an invalid length.
[  266.478555][T14116] bond20: (slave vxcan17): The slave device specified does not support setting the MAC address
[  266.482143][T14116] bond20: (slave vxcan17): Error -95 calling set_mac_address
[  268.426431][T14170] geneve4: entered promiscuous mode
[  268.429326][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.432438][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.436789][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.439926][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.451983][T14172] syzkaller1: entered promiscuous mode
[  268.453928][T14172] syzkaller1: entered allmulticast mode
[  268.508055][T14178] x_tables: duplicate underflow at hook 2
[  269.335198][T14189] veth0_to_bond: entered allmulticast mode
[  269.472765][T14206] veth0_to_bridge: entered promiscuous mode
[  269.476924][T14205] veth0_to_bridge: left promiscuous mode
[  269.745956][T14221] netlink: 'syz.0.2445': attribute type 6 has an invalid length.
[  270.599644][T14246] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  270.618250][T14246] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  270.621013][T14246] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  271.363439][T14253] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  271.647667][T14274] lo speed is unknown, defaulting to 1000
[  271.649467][T14274] lo speed is unknown, defaulting to 1000
[  271.651707][T14274] lo speed is unknown, defaulting to 1000
[  271.662719][T14274] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  271.679185][T14274] lo speed is unknown, defaulting to 1000
[  271.682161][T14274] lo speed is unknown, defaulting to 1000
[  271.693426][T14274] lo speed is unknown, defaulting to 1000
[  271.926504][T14289] __nla_validate_parse: 12 callbacks suppressed
[  271.926521][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2471'.
[  272.512515][T14295] veth0_to_bond: left allmulticast mode
[  272.608834][T14297] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2473'.
[  272.622417][T14297] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2473'.
[  274.153950][T14345] bond17: left promiscuous mode
[  274.155622][T14345] bond17: left allmulticast mode
[  274.162421][T14345] bond19: left promiscuous mode
[  274.171781][T14345] geneve4: left promiscuous mode
[  274.177983][ T5840] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.180814][ T5840] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.183698][ T5840] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.186931][ T5840] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.416992][T14370] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  274.435666][T14370] lo speed is unknown, defaulting to 1000
[  275.192343][T14387] netlink: 'syz.2.2501': attribute type 7 has an invalid length.
[  275.196642][T14387] netlink: 'syz.2.2501': attribute type 8 has an invalid length.
[  276.287857][T14410] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  276.743232][T14441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2518'.
[  276.747090][T14441] netlink: 'syz.1.2518': attribute type 20 has an invalid length.
[  276.750202][T14441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2518'.
[  276.753593][T14441] netlink: 'syz.1.2518': attribute type 20 has an invalid length.
[  276.965043][T14447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2519'.
[  277.003198][T14447] lo speed is unknown, defaulting to 1000
[  277.948732][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2528'.
[  277.954761][T14472] netlink: 'syz.0.2528': attribute type 1 has an invalid length.
[  277.969664][T14472] bond13: entered promiscuous mode
[  277.971285][T14472] 8021q: adding VLAN 0 to HW filter on device bond13
[  277.976176][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2528'.
[  277.978989][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2528'.
[  277.981742][T14472] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2528'.
[  278.063248][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2530'.
[  278.066759][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2530'.
[  278.107329][T14485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  278.932235][T14503] netlink: 'syz.1.2537': attribute type 64 has an invalid length.
[  278.999226][T14505] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2538'.
[  279.203170][T14513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2540'.
[  280.054376][T14526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2543'.
[  280.170044][T14538] syzkaller0: entered promiscuous mode
[  280.171833][T14538] syzkaller0: entered allmulticast mode
[  280.570865][T14561] netlink: 'syz.1.2553': attribute type 33 has an invalid length.
[  280.593033][T14561] lo speed is unknown, defaulting to 1000
[  280.712121][T14572] netlink: 'syz.1.2555': attribute type 6 has an invalid length.
[  280.717720][T14572] netlink: 'syz.1.2555': attribute type 5 has an invalid length.
[  280.731515][T14572] netlink: 'syz.1.2555': attribute type 4 has an invalid length.
[  280.738595][T14572] netlink: 'syz.1.2555': attribute type 4 has an invalid length.
[  281.039591][T14588] netlink: 'syz.2.2560': attribute type 6 has an invalid length.
[  281.042073][T14588] netlink: 'syz.2.2560': attribute type 5 has an invalid length.
[  281.046906][T14588] netlink: 'syz.2.2560': attribute type 4 has an invalid length.
[  281.123661][T14594] lo speed is unknown, defaulting to 1000
[  281.372852][T14608] lo speed is unknown, defaulting to 1000
[  281.591540][T14617] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  282.011407][T14636] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  282.115387][T14643] __nla_validate_parse: 10 callbacks suppressed
[  282.115400][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2583'.
[  282.120976][T14643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2583'.
[  282.446331][T14663] lo speed is unknown, defaulting to 1000
[  282.975632][T14674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2592'.
[  282.975632][T14675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2592'.
[  283.000086][T14676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2591'.
[  283.608387][T14690] syz.1.2597: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  283.614404][T14690] CPU: 1 UID: 0 PID: 14690 Comm: syz.1.2597 Not tainted syzkaller #0 PREEMPT(full) 
[  283.614417][T14690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  283.614424][T14690] Call Trace:
[  283.614429][T14690]  <TASK>
[  283.614434][T14690]  dump_stack_lvl+0x189/0x250
[  283.614452][T14690]  ? __pfx_dump_stack_lvl+0x10/0x10
[  283.614463][T14690]  ? __pfx__printk+0x10/0x10
[  283.614472][T14690]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  283.614484][T14690]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  283.614495][T14690]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  283.614507][T14690]  warn_alloc+0x214/0x310
[  283.614524][T14690]  ? __pfx_warn_alloc+0x10/0x10
[  283.614539][T14690]  ? __get_vm_area_node+0x28f/0x300
[  283.614551][T14690]  ? hash_mac_create+0x332/0xe80
[  283.614566][T14690]  __vmalloc_node_range_noprof+0x690/0x12d0
[  283.614589][T14690]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  283.614599][T14690]  ? hash_mac_create+0x332/0xe80
[  283.614612][T14690]  ? rcu_is_watching+0x15/0xb0
[  283.614622][T14690]  ? hash_mac_create+0x332/0xe80
[  283.614633][T14690]  __kvmalloc_node_noprof+0x674/0x910
[  283.614645][T14690]  ? hash_mac_create+0x332/0xe80
[  283.614655][T14690]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  283.614666][T14690]  ? hash_mac_create+0x2d7/0xe80
[  283.614678][T14690]  hash_mac_create+0x332/0xe80
[  283.614692][T14690]  ? __nla_parse+0x40/0x60
[  283.614701][T14690]  ? __pfx_hash_mac_create+0x10/0x10
[  283.614713][T14690]  ip_set_create+0xa97/0x1940
[  283.614724][T14690]  ? ip_set_create+0x4a2/0x1940
[  283.614739][T14690]  ? __pfx_ip_set_create+0x10/0x10
[  283.614765][T14690]  nfnetlink_rcv_msg+0xb4d/0x1130
[  283.614777][T14690]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  283.614798][T14690]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  283.614829][T14690]  netlink_rcv_skb+0x208/0x470
[  283.614842][T14690]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  283.614853][T14690]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  283.614869][T14690]  ? bpf_lsm_capable+0x9/0x20
[  283.614881][T14690]  ? security_capable+0x7e/0x2e0
[  283.614895][T14690]  nfnetlink_rcv+0x282/0x2590
[  283.614907][T14690]  ? is_bpf_text_address+0x26/0x2b0
[  283.614920][T14690]  ? __kernel_text_address+0xd/0x40
[  283.614947][T14690]  ? unwind_get_return_address+0x4d/0x90
[  283.614957][T14690]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  283.614969][T14690]  ? arch_stack_walk+0xfc/0x150
[  283.614985][T14690]  ? stack_trace_save+0x9c/0xe0
[  283.614997][T14690]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  283.615007][T14690]  ? stack_depot_save_flags+0x40/0x860
[  283.615021][T14690]  ? __lock_acquire+0xab9/0xd20
[  283.615040][T14690]  ? __lock_acquire+0xab9/0xd20
[  283.615052][T14690]  ? netlink_deliver_tap+0x2e/0x1b0
[  283.615066][T14690]  ? netlink_deliver_tap+0x2e/0x1b0
[  283.615081][T14690]  netlink_unicast+0x82f/0x9e0
[  283.615096][T14690]  ? __pfx_netlink_unicast+0x10/0x10
[  283.615107][T14690]  ? netlink_sendmsg+0x642/0xb30
[  283.615113][T14690]  ? skb_put+0x11b/0x210
[  283.615122][T14690]  netlink_sendmsg+0x805/0xb30
[  283.615133][T14690]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.615142][T14690]  ? aa_sock_msg_perm+0xf1/0x1d0
[  283.615156][T14690]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  283.615164][T14690]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.615171][T14690]  __sock_sendmsg+0x21c/0x270
[  283.615183][T14690]  ____sys_sendmsg+0x505/0x830
[  283.615194][T14690]  ? __pfx_____sys_sendmsg+0x10/0x10
[  283.615233][T14690]  ? import_iovec+0x74/0xa0
[  283.615256][T14690]  ___sys_sendmsg+0x21f/0x2a0
[  283.615267][T14690]  ? __pfx____sys_sendmsg+0x10/0x10
[  283.615290][T14690]  ? __fget_files+0x2a/0x420
[  283.615300][T14690]  ? __fget_files+0x3a0/0x420
[  283.615312][T14690]  __x64_sys_sendmsg+0x19b/0x260
[  283.615321][T14690]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  283.615336][T14690]  ? do_syscall_64+0xbe/0xfa0
[  283.615348][T14690]  do_syscall_64+0xfa/0xfa0
[  283.615357][T14690]  ? lockdep_hardirqs_on+0x9c/0x150
[  283.615367][T14690]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.615375][T14690]  ? exc_page_fault+0xab/0x100
[  283.615385][T14690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.615393][T14690] RIP: 0033:0x7f043c18efc9
[  283.615403][T14690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.615411][T14690] RSP: 002b:00007f043d00b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  283.615420][T14690] RAX: ffffffffffffffda RBX: 00007f043c3e6090 RCX: 00007f043c18efc9
[  283.615426][T14690] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  283.615431][T14690] RBP: 00007f043c211f91 R08: 0000000000000000 R09: 0000000000000000
[  283.615436][T14690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  283.615442][T14690] R13: 00007f043c3e6128 R14: 00007f043c3e6090 R15: 00007ffceb455528
[  283.615455][T14690]  </TASK>
[  283.774355][T14690] Mem-Info:
[  283.781740][T14690] active_anon:13511 inactive_anon:0 isolated_anon:0
[  283.781740][T14690]  active_file:1632 inactive_file:38347 isolated_file:0
[  283.781740][T14690]  unevictable:1768 dirty:88 writeback:0
[  283.781740][T14690]  slab_reclaimable:10984 slab_unreclaimable:87515
[  283.781740][T14690]  mapped:18283 shmem:2407 pagetables:1099
[  283.781740][T14690]  sec_pagetables:0 bounce:0
[  283.781740][T14690]  kernel_misc_reclaimable:0
[  283.781740][T14690]  free:1126724 free_pcp:23351 free_cma:0
[  283.795634][T14690] Node 0 active_anon:10016kB inactive_anon:0kB active_file:2412kB inactive_file:9724kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44736kB dirty:124kB writeback:0kB shmem:4740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5816kB pagetables:2564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  283.806269][T14690] Node 1 active_anon:44028kB inactive_anon:0kB active_file:4116kB inactive_file:143664kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28396kB dirty:228kB writeback:0kB shmem:4888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7756kB pagetables:1732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  283.816937][T14690] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  283.826173][T14690] lowmem_reserve[]: 0 1597 2129 2129 2129
[  283.828207][T14690] Node 0 DMA32 free:1605988kB boost:0kB min:25140kB low:31424kB high:37708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1635836kB mlocked:0kB bounce:0kB free_pcp:24904kB local_pcp:15712kB free_cma:0kB
[  283.842859][T14690] lowmem_reserve[]: 0 0 531 531 531
[  283.844859][T14690] Node 0 Normal free:24468kB boost:0kB min:8516kB low:10644kB high:12772kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10000kB inactive_anon:0kB active_file:2412kB inactive_file:9716kB unevictable:3536kB writepending:124kB zspages:0kB present:1572868kB managed:544644kB mlocked:0kB bounce:0kB free_pcp:13164kB local_pcp:12908kB free_cma:0kB
[  283.858119][T14690] lowmem_reserve[]: 0 0 0 0 0
[  283.859938][T14690] Node 1 Normal free:2861080kB boost:0kB min:56212kB low:70264kB high:84316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44028kB inactive_anon:0kB active_file:4116kB inactive_file:143664kB unevictable:3536kB writepending:228kB zspages:0kB present:3670012kB managed:3594692kB mlocked:0kB bounce:0kB free_pcp:54964kB local_pcp:31852kB free_cma:0kB
[  283.871954][T14690] lowmem_reserve[]: 0 0 0 0 0
[  283.873679][T14690] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  283.878702][T14690] Node 0 DMA32: 55*4kB (UM) 51*8kB (UM) 37*16kB (UM) 51*32kB (UM) 35*64kB (UM) 45*128kB (UM) 7*256kB (UM) 12*512kB (UM) 24*1024kB (UM) 15*2048kB (UM) 374*4096kB (UM) = 1605988kB
[  283.885334][T14690] Node 0 Normal: 357*4kB (UM) 389*8kB (UME) 277*16kB (UME) 131*32kB (UME) 17*64kB (UME) 19*128kB (UM) 17*256kB (UME) 5*512kB (UME) 0*1024kB 1*2048kB (U) 0*4096kB = 25644kB
[  283.891807][T14690] Node 1 Normal: 134*4kB (UME) 404*8kB (UME) 802*16kB (UME) 576*32kB (UME) 123*64kB (UME) 67*128kB (UM) 45*256kB (UM) 27*512kB (UME) 19*1024kB (UM) 2*2048kB (UM) 674*4096kB (M) = 2861080kB
[  283.899393][T14690] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  283.902707][T14690] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  283.906097][T14690] 42386 total pagecache pages
[  283.907779][T14690] 0 pages in swap cache
[  283.909295][T14690] Free swap  = 124996kB
[  283.911087][T14690] Total swap = 124996kB
[  283.912599][T14690] 1834877 pages RAM
[  283.913974][T14690] 0 pages HighMem/MovableOnly
[  283.916311][T14690] 387244 pages reserved
[  283.918234][T14690] 0 pages cma reserved
[  283.979463][T14701] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2601'.
[  284.074091][T14706] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  284.080322][T14706] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  284.211298][T14715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2604'.
[  285.064343][T14739] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2612'.
[  285.121311][T14740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2612'.
[  285.188055][T14741] vlan2: entered allmulticast mode
[  285.808777][T14750] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2616'.
[  285.811320][T14750] netlink: 'syz.0.2616': attribute type 6 has an invalid length.
[  285.813605][T14750] netlink: 'syz.0.2616': attribute type 5 has an invalid length.
[  285.818697][T14750] netlink: 'syz.0.2616': attribute type 4 has an invalid length.
[  285.823282][T14750] netlink: 'syz.0.2616': attribute type 4 has an invalid length.
[  285.828702][ T6539] lo speed is unknown, defaulting to 1000
[  285.830674][ T6539] syz1: Port: 1 Link ACTIVE
[  286.019732][T14756] only policy match revision 0 supported
[  286.019746][T14756] unable to load match
[  286.595434][T14785] netlink: 'syz.2.2628': attribute type 11 has an invalid length.
[  287.876631][T14806] __nla_validate_parse: 4 callbacks suppressed
[  287.876643][T14806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2634'.
[  288.214651][T14841] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  288.227214][T14841] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2643'.
[  288.230433][T14841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2643'.
[  288.312966][T14843] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2644'.
[  288.513424][T14850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2646'.
[  288.520003][T14850] netlink: 'syz.2.2646': attribute type 1 has an invalid length.
[  288.544227][T14850] bond16: entered promiscuous mode
[  288.549119][T14850] 8021q: adding VLAN 0 to HW filter on device bond16
[  288.562278][T14850] 8021q: adding VLAN 0 to HW filter on device bond16
[  288.565759][T14850] bond16: (slave gre2): The slave device specified does not support setting the MAC address
[  288.569321][T14850] bond16: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  288.573345][T14850] bond16: (slave gre2): Opening slave failed
[  288.607140][T14852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2646'.
[  288.611344][T14852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2646'.
[  288.711642][T14858] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2647'.
[  288.717111][T14857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2647'.
[  288.789403][T14857] lo speed is unknown, defaulting to 1000
[  288.809251][T14858] lo speed is unknown, defaulting to 1000
[  288.881079][T14865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2648'.
[  289.210037][T14886] netlink: 'syz.2.2654': attribute type 1 has an invalid length.
[  289.239530][T14886] bond17: (slave vxcan17): The slave device specified does not support setting the MAC address
[  289.242977][T14886] bond17: (slave vxcan17): Error -95 calling set_mac_address
[  289.294224][T14888] vlan4: entered allmulticast mode
[  289.296391][T14888] bond17: (slave vlan4): Opening slave failed
[  289.699766][T14890] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  292.105758][T14989] lo speed is unknown, defaulting to 1000
[  292.107734][T14994] IPVS: set_ctl: invalid protocol: 59 172.30.0.1:20002
[  292.156703][T15000] dvmrp1: tun_chr_ioctl cmd 1074025677
[  292.159714][T15000] dvmrp1: linktype set to 769
[  292.165085][T15000] netlink: 'syz.0.2676': attribute type 6 has an invalid length.
[  292.167552][T15000] netlink: 'syz.0.2676': attribute type 5 has an invalid length.
[  292.173152][T15000] netlink: 'syz.0.2676': attribute type 4 has an invalid length.
[  292.181239][ T6546] lo speed is unknown, defaulting to 1000
[  292.182248][T15000] netlink: 'syz.0.2676': attribute type 4 has an invalid length.
[  292.183435][ T6546] syz1: Port: 1 Link DOWN
[  292.190844][ T5841] lo speed is unknown, defaulting to 1000
[  292.195207][ T5841] syz1: Port: 1 Link ACTIVE
[  292.770971][T15034] Bluetooth: MGMT ver 1.23
[  292.948517][T15044] __nla_validate_parse: 5 callbacks suppressed
[  292.948538][T15044] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2690'.
[  293.951079][T15064] bond13: left promiscuous mode
[  293.954829][ T5810] lo speed is unknown, defaulting to 1000
[  293.957314][ T5810] syz1: Port: 1 Link DOWN
[  294.255813][T15070] lo speed is unknown, defaulting to 1000
[  294.525144][T15094] lo speed is unknown, defaulting to 1000
[  294.872608][T15106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2707'.
[  295.454249][T15121] lo speed is unknown, defaulting to 1000
[  295.666165][   T55] block nbd1: Possible stuck request ffff88810a5e0000: control (read@0,1024B). Runtime 30 seconds
[  295.671098][   T55] block nbd1: Possible stuck request ffff88810a5e0200: control (read@1024,1024B). Runtime 30 seconds
[  295.675243][   T55] block nbd1: Possible stuck request ffff88810a5e0400: control (read@2048,1024B). Runtime 30 seconds
[  295.678772][   T55] block nbd1: Possible stuck request ffff88810a5e0600: control (read@3072,1024B). Runtime 30 seconds
[  295.710108][T15134] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2714'.
[  295.713056][T15134] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2714'.
[  295.719475][T15134] netlink: 'syz.2.2714': attribute type 6 has an invalid length.
[  295.722061][T15134] netlink: 'syz.2.2714': attribute type 5 has an invalid length.
[  295.724696][T15134] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2714'.
[  295.729860][T15134] netlink: 'syz.2.2714': attribute type 4 has an invalid length.
[  295.732631][T15136] xt_cgroup: xt_cgroup: no path or classid specified
[  295.732634][T15134] netlink: 'syz.2.2714': attribute type 4 has an invalid length.
[  295.788963][T15138] lo speed is unknown, defaulting to 1000
[  295.987914][T15160] smc: net device bond0 applied user defined pnetid SYZ0
[  296.214378][T15179] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2728'.
[  296.310139][T15191] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  297.251901][T15220] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 68
[  297.309540][T15221] lo speed is unknown, defaulting to 1000
[  297.416843][T15225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2738'.
[  297.533339][T15229] xt_ecn: cannot match TCP bits for non-tcp packets
[  298.125803][T15234] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  298.132580][T15234] netlink: 'syz.0.2744': attribute type 10 has an invalid length.
[  298.141841][T15234] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  298.153503][T15234] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  298.660944][T15274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2751'.
[  298.666270][T15274] netlink: 'syz.1.2751': attribute type 6 has an invalid length.
[  298.851712][T15280] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2754'.
[  299.031393][T15285] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2756'.
[  299.148956][T15289] No such timeout policy "syz1"
[  299.204643][T15291] netlink: 'syz.1.2759': attribute type 3 has an invalid length.
[  299.351563][T15300] can: request_module (can-proto-0) failed.
[  299.465309][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'.
[  299.758857][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2767'.
[  299.766912][T15319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2767'.
[  299.768796][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2768'.
[  299.777851][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2767'.
[  299.923702][T15334] syzkaller1: entered promiscuous mode
[  299.926709][T15334] syzkaller1: entered allmulticast mode
[  300.452443][T15349] netlink: 'syz.0.2776': attribute type 10 has an invalid length.
[  300.992713][T15386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2785'.
[  301.067128][T15393] netlink: 'syz.2.2787': attribute type 1 has an invalid length.
[  301.096450][T15393] vlan4: entered allmulticast mode
[  301.098704][T15393] bond18: (slave vlan4): Opening slave failed
[  301.918070][T15407] erspan0 speed is unknown, defaulting to 1000
[  301.922565][T15407] erspan0 speed is unknown, defaulting to 1000
[  301.931546][T15407] erspan0 speed is unknown, defaulting to 1000
[  302.047065][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2795'.
[  302.081411][T15407] infiniband syz2: set down
[  302.087504][ T5841] erspan0 speed is unknown, defaulting to 1000
[  302.090574][T15407] infiniband syz2: added erspan0
[  302.139813][T15407] RDS/IB: syz2: added
[  302.142078][T15407] smc: adding ib device syz2 with port count 1
[  302.144518][ T5840] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  302.144550][T15407] smc:    ib device syz2 port 1 has no pnetid
[  302.148047][ T5840] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  302.148083][ T5840] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  302.148110][ T5840] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  302.162661][ T6546] erspan0 speed is unknown, defaulting to 1000
[  302.166790][T15407] erspan0 speed is unknown, defaulting to 1000
[  302.292714][T15407] erspan0 speed is unknown, defaulting to 1000
[  302.410283][T15407] erspan0 speed is unknown, defaulting to 1000
[  302.891648][T15439] netlink: 'syz.2.2802': attribute type 16 has an invalid length.
[  302.894008][T15439] netlink: 'syz.2.2802': attribute type 17 has an invalid length.
[  302.918451][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  302.924241][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  302.930926][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  302.937760][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  302.971783][T15441] lo speed is unknown, defaulting to 1000
[  302.978537][T15441] erspan0 speed is unknown, defaulting to 1000
[  304.024788][T15466] 8021q: adding VLAN 0 to HW filter on device team0
[  304.142067][T15469] lo speed is unknown, defaulting to 1000
[  304.144720][T15469] erspan0 speed is unknown, defaulting to 1000
[  304.156731][T15474] __nla_validate_parse: 4 callbacks suppressed
[  304.156744][T15474] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2814'.
[  304.161454][T15474] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2814'.
[  304.164186][T15474] netlink: 'syz.0.2814': attribute type 6 has an invalid length.
[  304.168944][T15474] netlink: 'syz.0.2814': attribute type 5 has an invalid length.
[  304.171290][T15474] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2814'.
[  304.186817][T15474] netlink: 'syz.0.2814': attribute type 4 has an invalid length.
[  304.191986][T15474] netlink: 'syz.0.2814': attribute type 4 has an invalid length.
[  304.205273][ T6539] lo speed is unknown, defaulting to 1000
[  304.206960][ T6539] syz1: Port: 1 Link ACTIVE
[  304.293945][T15483] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2817'.
[  304.303214][T15483] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2817'.
[  304.494433][T15499] netlink: 'syz.2.2822': attribute type 3 has an invalid length.
[  304.663251][T15516] netlink: 'syz.0.2826': attribute type 4 has an invalid length.
[  304.669567][T15516] netlink: 'syz.0.2826': attribute type 21 has an invalid length.
[  304.672616][T15516] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2826'.
[  304.678270][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2826'.
[  304.682400][T15516] netlink: 'syz.0.2826': attribute type 2 has an invalid length.
[  304.714500][T15518] lo speed is unknown, defaulting to 1000
[  304.717842][T15518] erspan0 speed is unknown, defaulting to 1000
[  304.821915][T15528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2830'.
[  304.872016][T15530] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  305.045743][T15546] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  305.051412][T15546] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  305.088021][T15546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2835'.
[  305.099280][T15546] netlink: 'syz.2.2835': attribute type 10 has an invalid length.
[  305.102340][T15546] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  305.117257][T15546] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  305.120203][T15546] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  305.150837][T15549] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  305.165153][ T5841] lo speed is unknown, defaulting to 1000
[  305.175260][ T5841] syz1: Port: 1 Link DOWN
[  305.521385][T15556] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2838'.
[  305.525582][T15556] netlink: 'syz.1.2838': attribute type 1 has an invalid length.
[  305.602144][T15567] syzkaller1: entered promiscuous mode
[  305.604029][T15567] syzkaller1: entered allmulticast mode
[  306.169140][T15599] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  306.548889][T15622] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.327211][T15643] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  309.179112][T15713] __nla_validate_parse: 6 callbacks suppressed
[  309.179124][T15713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2889'.
[  309.279434][T15724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2891'.
[  309.306605][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2891'.
[  309.310508][T15724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2891'.
[  309.326636][T15726] validate_nla: 6 callbacks suppressed
[  309.326659][T15726] netlink: 'syz.0.2892': attribute type 1 has an invalid length.
[  309.331753][T15726] netlink: 'syz.0.2892': attribute type 2 has an invalid length.
[  309.337260][T15728] netlink: 'syz.0.2892': attribute type 1 has an invalid length.
[  309.340023][T15728] netlink: 'syz.0.2892': attribute type 2 has an invalid length.
[  309.553518][T15743] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  310.016056][T15747] lo speed is unknown, defaulting to 1000
[  310.018915][T15747] erspan0 speed is unknown, defaulting to 1000
[  310.452128][T15765] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2904'.
[  310.462736][T15765] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.485417][T15768] lo speed is unknown, defaulting to 1000
[  310.490785][T15768] erspan0 speed is unknown, defaulting to 1000
[  310.805333][T15784] netlink: 'syz.1.2909': attribute type 1 has an invalid length.
[  311.018530][T15796] nbd: must specify a size in bytes for the device
[  311.086393][T15796] nbd2: detected capacity change from 0 to 127
[  311.091010][T15797] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2913'.
[  311.095230][T15797] nbd: couldn't find a device at index 0
[  311.103960][   T58] block nbd2: Receive control failed (result -104)
[  311.321657][T15811] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2917'.
[  311.326354][T15811] smc: net device bond0 erased user defined pnetid SYZ0
[  311.472390][T15821] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  312.081112][T15840] netlink: zone id is out of range
[  312.083284][T15840] netlink: zone id is out of range
[  312.086030][T15840] netlink: zone id is out of range
[  312.087765][T15840] netlink: zone id is out of range
[  312.089700][T15840] netlink: zone id is out of range
[  312.091370][T15840] netlink: zone id is out of range
[  312.092997][T15840] netlink: zone id is out of range
[  312.094561][T15840] netlink: zone id is out of range
[  312.096408][T15840] netlink: zone id is out of range
[  312.638367][T15872] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  312.691637][T15878] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  312.713641][T15880] lo speed is unknown, defaulting to 1000
[  312.717392][T15880] erspan0 speed is unknown, defaulting to 1000
[  312.739506][T15878] lo speed is unknown, defaulting to 1000
[  312.809809][T15878] erspan0 speed is unknown, defaulting to 1000
[  313.184552][T15903] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2947'.
[  313.259644][T15900] lo speed is unknown, defaulting to 1000
[  313.262403][T15900] erspan0 speed is unknown, defaulting to 1000
[  313.499586][T15912] x_tables: ip_tables: osf match: only valid for protocol 6
[  313.505288][ T5815] Bluetooth: hci0: command tx timeout
[  313.587985][T15913] x_tables: ip_tables: osf match: only valid for protocol 6
[  313.961874][T15929] netlink: 'syz.1.2955': attribute type 5 has an invalid length.
[  313.973612][T15929] netlink: 'syz.1.2955': attribute type 23 has an invalid length.
[  314.165296][T15942] xt_TCPMSS: Only works on TCP SYN packets
[  314.203826][T15942] lo speed is unknown, defaulting to 1000
[  314.207246][T15942] erspan0 speed is unknown, defaulting to 1000
[  314.221832][T15945] netlink: 'syz.0.2959': attribute type 39 has an invalid length.
[  314.391365][   T55] block nbd2: Connection timed out, retrying (0/1 alive)
[  314.394303][   T55] block nbd2: Connection timed out, retrying (0/1 alive)
[  314.398180][   T55] block nbd2: Connection timed out, retrying (0/1 alive)
[  314.401700][   T55] block nbd2: Connection timed out, retrying (0/1 alive)
[  314.404514][   T55] block nbd2: Dead connection, failed to find a fallback
[  314.407755][   T55] block nbd2: shutting down sockets
[  314.410620][   T55] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  314.414728][   T55] Buffer I/O error on dev nbd2, logical block 3, async page read
[  314.418756][   T55] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  314.421800][   T55] Buffer I/O error on dev nbd2, logical block 2, async page read
[  314.425753][   T55] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  314.429606][   T55] Buffer I/O error on dev nbd2, logical block 1, async page read
[  314.432084][   T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  314.434869][   T55] Buffer I/O error on dev nbd2, logical block 0, async page read
[  314.440501][T14279] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  314.444153][T14279] Buffer I/O error on dev nbd2, logical block 0, async page read
[  314.449277][T14279] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  314.455917][T14279] Buffer I/O error on dev nbd2, logical block 1, async page read
[  314.458761][T14279] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  314.461912][T14279] Buffer I/O error on dev nbd2, logical block 2, async page read
[  314.464631][T14279] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  314.467777][T14279] Buffer I/O error on dev nbd2, logical block 3, async page read
[  314.479063][T14279] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  314.482284][T14279] Buffer I/O error on dev nbd2, logical block 0, async page read
[  314.484765][T14279] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  314.488201][T14279] Buffer I/O error on dev nbd2, logical block 1, async page read
[  314.493940][T14279] ldm_validate_partition_table(): Disk read failed.
[  314.497344][T14279] Dev nbd2: unable to read RDB block 0
[  314.500390][T14279]  nbd2: unable to read partition table
[  314.514299][T14279] ldm_validate_partition_table(): Disk read failed.
[  314.522213][T14279] Dev nbd2: unable to read RDB block 0
[  314.527512][T14279]  nbd2: unable to read partition table
[  314.613584][T15957] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2963'.
[  315.436694][T15970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2967'.
[  315.439844][T15970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2967'.
[  315.443482][T15970] xt_cgroup: invalid path, errno=-2
[  315.466688][T15972] lo speed is unknown, defaulting to 1000
[  315.469329][T15972] erspan0 speed is unknown, defaulting to 1000
[  315.863153][T16009] lo speed is unknown, defaulting to 1000
[  315.872175][T16009] erspan0 speed is unknown, defaulting to 1000
[  316.018202][T16017] net_ratelimit: 8 callbacks suppressed
[  316.018217][T16017] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  316.042801][T16017] netlink: 'syz.2.2981': attribute type 10 has an invalid length.
[  316.066869][T16017] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  316.070426][T16017] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  316.147540][T16020] syzkaller0: entered promiscuous mode
[  316.149274][T16020] syzkaller0: entered allmulticast mode
[  316.588237][T16025] netlink: 'syz.0.2984': attribute type 58 has an invalid length.
[  316.590694][T16025] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2984'.
[  316.620962][T16027] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  316.797158][T16035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2987'.
[  316.881958][T16046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2989'.
[  316.888700][T16046] netlink: 'syz.0.2989': attribute type 6 has an invalid length.
[  316.913676][T16049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2990'.
[  316.919805][T16049] netlink: 'syz.2.2990': attribute type 1 has an invalid length.
[  316.937327][T16049] bond20: entered promiscuous mode
[  316.939129][T16049] 8021q: adding VLAN 0 to HW filter on device bond20
[  316.944596][T16049] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2990'.
[  316.950767][T16049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2990'.
[  316.953813][T16049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2990'.
[  317.006387][T16062] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  317.254068][T16085] bond20: left promiscuous mode
[  318.390669][T16113] syzkaller0: entered promiscuous mode
[  318.392288][T16113] syzkaller0: entered allmulticast mode
[  319.552710][T16121] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  319.555236][T16124] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  319.561556][T16123] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  320.548064][T16159] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  320.647344][   T33] audit: type=1800 audit(1762142658.052:2): pid=16161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3024" name="memory.events" dev="tmpfs" ino=4923 res=0 errno=0
[  320.866684][T16180] __nla_validate_parse: 4 callbacks suppressed
[  320.866695][T16180] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3028'.
[  320.871001][T16180] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3028'.
[  320.873531][T16180] netlink: 'syz.2.3028': attribute type 6 has an invalid length.
[  320.881399][T16180] netlink: 'syz.2.3028': attribute type 5 has an invalid length.
[  320.885421][T16180] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3028'.
[  320.889231][T16183] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3029'.
[  320.895688][T16180] netlink: 'syz.2.3028': attribute type 4 has an invalid length.
[  320.895728][T16179] netlink: 'syz.2.3028': attribute type 4 has an invalid length.
[  321.072454][T16198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3034'.
[  321.075621][T16198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3034'.
[  321.438197][T16207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3037'.
[  322.223283][T16233] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3048'.
[  322.227905][T16233] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3048'.
[  322.230599][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3048'.
[  322.317096][T16240] lo speed is unknown, defaulting to 1000
[  322.319840][T16240] erspan0 speed is unknown, defaulting to 1000
[  322.441829][T16245] lo speed is unknown, defaulting to 1000
[  322.448751][T16245] erspan0 speed is unknown, defaulting to 1000
[  322.686070][T16258] netlink: 'syz.1.3056': attribute type 1 has an invalid length.
[  322.725866][T16258] 8021q: adding VLAN 0 to HW filter on device bond22
[  322.788944][T16263] openvswitch: netlink: Flow actions attr not present in new flow.
[  322.974389][T16285] sctp: [Deprecated]: syz.2.3064 (pid 16285) Use of struct sctp_assoc_value in delayed_ack socket option.
[  322.974389][T16285] Use struct sctp_sack_info instead
[  323.072713][T16295] lo speed is unknown, defaulting to 1000
[  323.081082][T16295] erspan0 speed is unknown, defaulting to 1000
[  323.177016][T16279] tipc: Can't bind to reserved service type 2
[  323.461376][T16324] sctp: [Deprecated]: syz.0.3074 (pid 16324) Use of struct sctp_assoc_value in delayed_ack socket option.
[  323.461376][T16324] Use struct sctp_sack_info instead
[  323.817165][T16351] sctp: [Deprecated]: syz.2.3082 (pid 16351) Use of struct sctp_assoc_value in delayed_ack socket option.
[  323.817165][T16351] Use struct sctp_sack_info instead
[  323.930702][T16361] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  323.934605][T16361] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  323.949795][T16361] netlink: 'syz.2.3086': attribute type 10 has an invalid length.
[  323.952174][T16361] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  323.961325][T16361] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  323.964178][T16361] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  323.970785][T16359] lo speed is unknown, defaulting to 1000
[  323.973229][T16359] erspan0 speed is unknown, defaulting to 1000
[  325.533709][T16396] netlink: 'syz.0.3098': attribute type 6 has an invalid length.
[  325.535118][T16397] netlink: 'syz.0.3098': attribute type 6 has an invalid length.
[  325.694276][T16403] IPVS: set_ctl: invalid protocol: 24930 100.118.95.115:27745
[  325.745411][   T55] block nbd1: Possible stuck request ffff88810a5e0000: control (read@0,1024B). Runtime 60 seconds
[  325.748486][   T55] block nbd1: Possible stuck request ffff88810a5e0200: control (read@1024,1024B). Runtime 60 seconds
[  325.751855][   T55] block nbd1: Possible stuck request ffff88810a5e0400: control (read@2048,1024B). Runtime 60 seconds
[  325.755557][   T55] block nbd1: Possible stuck request ffff88810a5e0600: control (read@3072,1024B). Runtime 60 seconds
[  326.227678][T16442] x_tables: ip_tables: osf match: only valid for protocol 6
[  326.689745][T16459] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  326.693495][T16459] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  326.700096][T16459] netlink: 'syz.0.3116': attribute type 10 has an invalid length.
[  326.702331][T16459] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  326.706087][T16459] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  326.708731][T16459] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  327.087045][T16474] xt_bpf: check failed: parse error
[  327.095702][T16474] xt_bpf: check failed: parse error
[  327.269254][T16484] netlink: 'syz.1.3124': attribute type 1 has an invalid length.
[  327.334640][T16485] vlan2: entered allmulticast mode
[  327.619195][T16488] __nla_validate_parse: 6 callbacks suppressed
[  327.619215][T16488] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3125'.
[  328.041275][T16492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3127'.
[  328.100120][T16493] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3127'.
[  328.151443][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3129'.
[  328.157034][T16500] netlink: 'syz.2.3129': attribute type 1 has an invalid length.
[  328.179742][T16500] bond21: entered promiscuous mode
[  328.182149][T16500] 8021q: adding VLAN 0 to HW filter on device bond21
[  328.187647][T16500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3129'.
[  328.190918][T16500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3129'.
[  328.833275][T16541] sctp: [Deprecated]: syz.0.3136 (pid 16541) Use of struct sctp_assoc_value in delayed_ack socket option.
[  328.833275][T16541] Use struct sctp_sack_info instead
[  329.030837][T16544] netlink: 'syz.1.3137': attribute type 1 has an invalid length.
[  329.057439][T16544] bond23: (slave vxcan19): The slave device specified does not support setting the MAC address
[  329.062788][T16544] bond23: (slave vxcan19): Error -95 calling set_mac_address
[  329.077360][T16545] bond23: (slave vxcan19): The slave device specified does not support setting the MAC address
[  329.080958][T16545] bond23: (slave vxcan19): Error -95 calling set_mac_address
[  329.183388][T16551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3139'.
[  329.289037][T16564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3143'.
[  329.609205][T16583] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3146'.
[  329.698721][T16591] lo speed is unknown, defaulting to 1000
[  329.701310][T16591] erspan0 speed is unknown, defaulting to 1000
[  330.134892][T16604] IPVS: ip_vs_edit_dest(): server weight less than zero
[  330.179108][T16606] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  330.187184][T16606] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3153'.
[  330.192725][T16606] netlink: 'syz.2.3153': attribute type 10 has an invalid length.
[  331.270052][T16624] netlink: 'syz.2.3160': attribute type 6 has an invalid length.
[  331.272740][T16624] netlink: 'syz.2.3160': attribute type 5 has an invalid length.
[  331.297016][T16624] netlink: 'syz.2.3160': attribute type 5 has an invalid length.
[  331.300202][T16624] netlink: 'syz.2.3160': attribute type 5 has an invalid length.
[  331.303632][T16624] netlink: 'syz.2.3160': attribute type 4 has an invalid length.
[  331.306917][T16624] netlink: 'syz.2.3160': attribute type 4 has an invalid length.
[  331.359032][T16626] openvswitch: netlink: Message has -2 unknown bytes.
[  331.361388][T16626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.644845][T16648] lo speed is unknown, defaulting to 1000
[  331.647511][T16648] erspan0 speed is unknown, defaulting to 1000
[  331.748674][T16660] warn_alloc: 1 callbacks suppressed
[  331.748686][T16660] syz.1.3173: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  331.755660][T16660] CPU: 1 UID: 0 PID: 16660 Comm: syz.1.3173 Not tainted syzkaller #0 PREEMPT(full) 
[  331.755674][T16660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  331.755681][T16660] Call Trace:
[  331.755685][T16660]  <TASK>
[  331.755690][T16660]  dump_stack_lvl+0x189/0x250
[  331.755710][T16660]  ? __pfx_dump_stack_lvl+0x10/0x10
[  331.755722][T16660]  ? __pfx__printk+0x10/0x10
[  331.755733][T16660]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  331.755745][T16660]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  331.755757][T16660]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  331.755771][T16660]  warn_alloc+0x214/0x310
[  331.755783][T16660]  ? stack_depot_save_flags+0x40/0x860
[  331.755826][T16660]  ? __pfx_warn_alloc+0x10/0x10
[  331.755842][T16660]  ? kasan_save_track+0x3e/0x80
[  331.755863][T16660]  ? __kasan_kmalloc+0x93/0xb0
[  331.755876][T16660]  ? xsk_setsockopt+0x4dc/0x8d0
[  331.755886][T16660]  ? do_sock_setsockopt+0x17c/0x1b0
[  331.755896][T16660]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  331.755903][T16660]  ? do_syscall_64+0xfa/0xfa0
[  331.755913][T16660]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.755926][T16660]  __vmalloc_node_range_noprof+0x125/0x12d0
[  331.755954][T16660]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  331.755967][T16660]  ? __kasan_kmalloc+0x93/0xb0
[  331.755981][T16660]  vmalloc_user_noprof+0xad/0xf0
[  331.755992][T16660]  ? xskq_create+0xbf/0x170
[  331.756001][T16660]  xskq_create+0xbf/0x170
[  331.756012][T16660]  xsk_init_queue+0xb0/0x110
[  331.756021][T16660]  xsk_setsockopt+0x4dc/0x8d0
[  331.756031][T16660]  ? __pfx_xsk_setsockopt+0x10/0x10
[  331.756041][T16660]  ? __pfx_aa_sk_perm+0x10/0x10
[  331.756053][T16660]  ? aa_sock_opt_perm+0xff/0x1b0
[  331.756066][T16660]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  331.756075][T16660]  ? __pfx_xsk_setsockopt+0x10/0x10
[  331.756084][T16660]  do_sock_setsockopt+0x17c/0x1b0
[  331.756093][T16660]  __x64_sys_setsockopt+0x13f/0x1b0
[  331.756103][T16660]  do_syscall_64+0xfa/0xfa0
[  331.756112][T16660]  ? lockdep_hardirqs_on+0x9c/0x150
[  331.756123][T16660]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.756131][T16660]  ? exc_page_fault+0xab/0x100
[  331.756141][T16660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.756149][T16660] RIP: 0033:0x7f043c18efc9
[  331.756164][T16660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  331.756177][T16660] RSP: 002b:00007f043d02c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  331.756196][T16660] RAX: ffffffffffffffda RBX: 00007f043c3e5fa0 RCX: 00007f043c18efc9
[  331.756207][T16660] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  331.756217][T16660] RBP: 00007f043c211f91 R08: 0000000000000004 R09: 0000000000000000
[  331.756227][T16660] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  331.756238][T16660] R13: 00007f043c3e6038 R14: 00007f043c3e5fa0 R15: 00007ffceb455528
[  331.756261][T16660]  </TASK>
[  331.756268][T16660] Mem-Info:
[  331.861267][T16660] active_anon:13547 inactive_anon:0 isolated_anon:0
[  331.861267][T16660]  active_file:1653 inactive_file:38365 isolated_file:0
[  331.861267][T16660]  unevictable:1768 dirty:60 writeback:0
[  331.861267][T16660]  slab_reclaimable:11243 slab_unreclaimable:90343
[  331.861267][T16660]  mapped:18347 shmem:2407 pagetables:1090
[  331.861267][T16660]  sec_pagetables:0 bounce:0
[  331.861267][T16660]  kernel_misc_reclaimable:0
[  331.861267][T16660]  free:1127555 free_pcp:17887 free_cma:0
[  331.876618][T16660] Node 0 active_anon:10068kB inactive_anon:0kB active_file:2496kB inactive_file:9784kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44972kB dirty:20kB writeback:0kB shmem:4740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5848kB pagetables:2384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  331.896758][T16660] Node 1 active_anon:44220kB inactive_anon:0kB active_file:4116kB inactive_file:143676kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28416kB dirty:220kB writeback:0kB shmem:4888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7888kB pagetables:2076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  331.909700][T16660] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  331.920189][T16669] syzkaller1: entered promiscuous mode
[  331.922052][T16669] syzkaller1: entered allmulticast mode
[  331.924898][T16660] lowmem_reserve[]: 0 1597 2129 2129 2129
[  331.927970][T16660] Node 0 DMA32 free:1599072kB boost:0kB min:25140kB low:31424kB high:37708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1635836kB mlocked:0kB bounce:0kB free_pcp:27620kB local_pcp:13596kB free_cma:0kB
[  331.956630][T16660] lowmem_reserve[]: 0 0 531 531 531
[  331.958746][T16660] Node 0 Normal free:51188kB boost:0kB min:8516kB low:10644kB high:12772kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10120kB inactive_anon:0kB active_file:2480kB inactive_file:9776kB unevictable:3536kB writepending:20kB zspages:0kB present:1572868kB managed:544644kB mlocked:0kB bounce:0kB free_pcp:888kB local_pcp:64kB free_cma:0kB
[  331.969101][T16660] lowmem_reserve[]: 0 0 0 0 0
[  331.970657][T16660] Node 1 Normal free:2844952kB boost:0kB min:56212kB low:70264kB high:84316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44220kB inactive_anon:0kB active_file:4116kB inactive_file:143676kB unevictable:3536kB writepending:220kB zspages:0kB present:3670012kB managed:3594692kB mlocked:0kB bounce:0kB free_pcp:43036kB local_pcp:13132kB free_cma:0kB
[  331.980556][T16660] lowmem_reserve[]: 0 0 0 0 0
[  331.982144][T16660] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  331.986472][T16660] Node 0 DMA32: 52*4kB (U) 4*8kB (UM) 3*16kB (UM) 20*32kB (UM) 5*64kB (UM) 37*128kB (UM) 15*256kB (UM) 12*512kB (UM) 24*1024kB (UM) 13*2048kB (UM) 374*4096kB (UM) = 1599072kB
[  331.992130][T16660] Node 0 Normal: 99*4kB (UME) 415*8kB (UME) 323*16kB (UME) 502*32kB (UME) 159*64kB (UME) 37*128kB (UM) 28*256kB (UME) 8*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 51124kB
[  331.997327][T16660] Node 1 Normal: 743*4kB (UE) 459*8kB (UE) 83*16kB (U) 64*32kB (UE) 196*64kB (UE) 92*128kB (UME) 47*256kB (UME) 26*512kB (UME) 22*1024kB (UME) 3*2048kB (UME) 673*4096kB (M) = 2844964kB
[  332.003185][T16660] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  332.006203][T16660] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  332.008935][T16660] 42425 total pagecache pages
[  332.015317][T16660] 0 pages in swap cache
[  332.016586][T16660] Free swap  = 124996kB
[  332.017946][T16660] Total swap = 124996kB
[  332.021048][T16660] 1834877 pages RAM
[  332.022316][T16660] 0 pages HighMem/MovableOnly
[  332.023994][T16660] 387244 pages reserved
[  332.026631][T16660] 0 pages cma reserved
[  332.239701][T16681] lo speed is unknown, defaulting to 1000
[  332.242938][T16681] erspan0 speed is unknown, defaulting to 1000
[  332.277710][T16682] xt_bpf: check failed: parse error
[  332.688703][T16697] __nla_validate_parse: 7 callbacks suppressed
[  332.688719][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3184'.
[  332.825847][T16707] xt_hashlimit: max too large, truncated to 1048576
[  333.488969][T16749] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3195'.
[  334.140852][T16756] lo speed is unknown, defaulting to 1000
[  334.143752][T16756] erspan0 speed is unknown, defaulting to 1000
[  334.268483][T16760] veth0_to_bond: entered allmulticast mode
[  334.625926][T16785] syzkaller0: entered promiscuous mode
[  334.628118][T16785] syzkaller0: entered allmulticast mode
[  335.877487][T16796] lo speed is unknown, defaulting to 1000
[  335.880254][T16796] erspan0 speed is unknown, defaulting to 1000
[  335.980444][T16805] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3211'.
[  336.092153][T16814] veth0_to_bond: left allmulticast mode
[  336.099987][T16814] bond21: left promiscuous mode
[  336.240838][T16829] netlink: 'syz.1.3221': attribute type 1 has an invalid length.
[  336.243635][T16829] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3221'.
[  336.243688][T16827] netlink: 'syz.2.3219': attribute type 10 has an invalid length.
[  336.348063][T16835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3224'.
[  336.366343][T16836] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3223'.
[  336.407866][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3226'.
[  336.448865][T16846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.509090][T16848] lo speed is unknown, defaulting to 1000
[  336.512099][T16848] erspan0 speed is unknown, defaulting to 1000
[  337.623139][T16875] sctp: [Deprecated]: syz.1.3235 (pid 16875) Use of struct sctp_assoc_value in delayed_ack socket option.
[  337.623139][T16875] Use struct sctp_sack_info instead
[  338.167629][T16903] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3243'.
[  339.031133][T16919] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3249'.
[  339.219300][T16924] netlink: 'syz.2.3251': attribute type 1 has an invalid length.
[  339.281196][T16924] bond22: (slave vxcan21): The slave device specified does not support setting the MAC address
[  339.286459][T16924] bond22: (slave vxcan21): Error -95 calling set_mac_address
[  339.309158][T16925] bond22: (slave vxcan21): The slave device specified does not support setting the MAC address
[  339.313181][T16925] bond22: (slave vxcan21): Error -95 calling set_mac_address
[  339.700870][T16946] lo speed is unknown, defaulting to 1000
[  339.703562][T16946] erspan0 speed is unknown, defaulting to 1000
[  339.741112][T16947] xt_bpf: check failed: parse error
[  339.990545][T16952] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  339.998763][T16952] netlink: 'syz.1.3260': attribute type 10 has an invalid length.
[  340.002527][T16952] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  340.006968][T16952] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  340.525572][T16971] lo speed is unknown, defaulting to 1000
[  340.528436][T16971] erspan0 speed is unknown, defaulting to 1000
[  340.558880][T16972] xt_bpf: check failed: parse error
[  340.750793][T16975] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  341.024084][T16988] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3271'.
[  341.083556][T16988] lo speed is unknown, defaulting to 1000
[  341.087635][T16988] erspan0 speed is unknown, defaulting to 1000
[  341.200814][T16994] lo speed is unknown, defaulting to 1000
[  341.243930][T16994] erspan0 speed is unknown, defaulting to 1000
[  341.664875][T17008] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3277'.
[  342.639918][T17047] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3287'.
[  342.641305][T17048] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3287'.
[  342.776295][T17059] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3289'.
[  342.780916][T17056] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3289'.
[  342.826399][T17056] lo speed is unknown, defaulting to 1000
[  342.828956][T17056] erspan0 speed is unknown, defaulting to 1000
[  343.080079][T17067] lo speed is unknown, defaulting to 1000
[  343.084103][T17067] erspan0 speed is unknown, defaulting to 1000
[  343.486698][T17100] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3300'.
[  343.622762][T17108] dvmrp12: entered allmulticast mode
[  343.629566][T17107] dvmrp12: left allmulticast mode
[  343.848500][T17123] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  343.854747][T17123] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  343.918522][T17128] netlink: 'syz.1.3310': attribute type 10 has an invalid length.
[  343.922338][T17128] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  344.272262][T17142] xt_TPROXY: Can be used only with -p tcp or -p udp
[  344.274892][T17142] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  344.280248][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3317'.
[  344.282975][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3317'.
[  344.401813][T17150] xt_HMARK: proto mask must be zero with L3 mode
[  344.483186][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3321'.
[  345.003905][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3326'.
[  345.184191][T17176] 8021q: VLANs not supported on bond0
[  345.853094][T17186] can: request_module (can-proto-3) failed.
[  345.897311][T17192] netlink: 'syz.0.3333': attribute type 6 has an invalid length.
[  347.073570][T17235] netlink: 'syz.2.3348': attribute type 4 has an invalid length.
[  347.078558][T17234] netlink: 'syz.2.3348': attribute type 4 has an invalid length.
[  347.174861][T17243] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  347.200383][T17249] netlink: 'syz.1.3347': attribute type 12 has an invalid length.
[  347.266634][T17249] netlink: 'syz.1.3347': attribute type 4 has an invalid length.
[  347.407835][T17266] syzkaller0: entered promiscuous mode
[  347.409961][T17266] syzkaller0: entered allmulticast mode
[  347.416992][T17266] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  347.450354][T17271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3359'.
[  347.486270][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3357'.
[  347.758126][T17289] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  347.763126][T17289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3364'.
[  347.771496][T17289] netlink: 'syz.0.3364': attribute type 10 has an invalid length.
[  347.773749][T17289] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  347.777662][T17289] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  347.780415][T17289] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  348.388178][T17300] netlink: 'syz.2.3367': attribute type 1 has an invalid length.
[  348.417284][T17300] bond23: (slave vxcan21): The slave device specified does not support setting the MAC address
[  348.421419][T17300] bond23: (slave vxcan21): Error -95 calling set_mac_address
[  349.067288][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3371'.
[  349.209791][T17321] lo speed is unknown, defaulting to 1000
[  349.212298][T17321] erspan0 speed is unknown, defaulting to 1000
[  349.274539][T17325] bridge0: port 1(erspan0) entered blocking state
[  349.277840][T17325] bridge0: port 1(erspan0) entered disabled state
[  349.280663][T17325] erspan0: entered allmulticast mode
[  349.291707][T17325] erspan0: left allmulticast mode
[  349.402258][T17321] rose0: entered allmulticast mode
[  349.474508][T17332] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  349.482378][T17332] netlink: 'syz.0.3376': attribute type 10 has an invalid length.
[  349.488194][T17332] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  349.490914][T17332] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  350.149755][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3378'.
[  350.223056][T17341] lo speed is unknown, defaulting to 1000
[  350.233273][T17341] erspan0 speed is unknown, defaulting to 1000
[  350.253184][T17342] xt_bpf: check failed: parse error
[  350.440205][T17350] xt_recent: Unsupported userspace flags (000000b1)
[  350.473619][T17352] sctp: [Deprecated]: syz.1.3382 (pid 17352) Use of struct sctp_assoc_value in delayed_ack socket option.
[  350.473619][T17352] Use struct sctp_sack_info instead
[  350.818340][T17371] lo speed is unknown, defaulting to 1000
[  350.821216][T17371] erspan0 speed is unknown, defaulting to 1000
[  350.853261][T17377] xt_bpf: check failed: parse error
[  351.092210][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3392'.
[  351.910344][T17395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3395'.
[  352.113217][T17399] netlink: 'syz.0.3396': attribute type 1 has an invalid length.
[  352.114194][T17401] sctp: [Deprecated]: syz.0.3396 (pid 17401) Use of int in max_burst socket option.
[  352.114194][T17401] Use struct sctp_assoc_value instead
[  352.897509][T17425] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  353.090009][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3408'.
[  353.097837][T17446] netlink: 'syz.0.3408': attribute type 1 has an invalid length.
[  353.136116][T17446] bond14: entered promiscuous mode
[  353.139162][T17446] 8021q: adding VLAN 0 to HW filter on device bond14
[  353.711623][T17465] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  354.026550][T17467] pimreg: entered allmulticast mode
[  354.029464][T17467] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20003
[  354.324050][T17479] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3418'.
[  354.368581][T17479] lo speed is unknown, defaulting to 1000
[  354.371090][T17479] erspan0 speed is unknown, defaulting to 1000
[  354.629630][T17494] lo speed is unknown, defaulting to 1000
[  354.632145][T17494] erspan0 speed is unknown, defaulting to 1000
[  354.668254][T17495] xt_bpf: check failed: parse error
[  355.284755][T17513] lo speed is unknown, defaulting to 1000
[  355.288963][T17513] erspan0 speed is unknown, defaulting to 1000
[  355.830927][   T55] block nbd1: Possible stuck request ffff88810a5e0000: control (read@0,1024B). Runtime 90 seconds
[  355.835652][   T55] block nbd1: Possible stuck request ffff88810a5e0200: control (read@1024,1024B). Runtime 90 seconds
[  355.839388][   T55] block nbd1: Possible stuck request ffff88810a5e0400: control (read@2048,1024B). Runtime 90 seconds
[  355.842721][   T55] block nbd1: Possible stuck request ffff88810a5e0600: control (read@3072,1024B). Runtime 90 seconds
[  356.154407][T17555] netlink: 'syz.1.3436': attribute type 3 has an invalid length.
[  356.421676][T17576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3444'.
[  356.426761][T17576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3444'.
[  357.760560][T17628] netlink: 'syz.2.3463': attribute type 21 has an invalid length.
[  357.763167][T17628] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3463'.
[  357.862889][T17636] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  358.041419][T17654] netlink: 'syz.0.3471': attribute type 4 has an invalid length.
[  358.049042][T17654] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3471'.
[  358.052512][T17654] nbd: couldn't find a device at index 0
[  358.680583][T17664] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  358.694502][T17664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3474'.
[  358.816524][T17669] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3477'.
[  358.860185][ T5260] udevd[5260]: worker [13890] /devices/virtual/block/nbd1 is taking a long time
[  359.978100][T17716] lo speed is unknown, defaulting to 1000
[  359.981364][T17716] erspan0 speed is unknown, defaulting to 1000
[  360.201600][T17721] netlink: 'syz.2.3494': attribute type 1 has an invalid length.
[  360.302731][T17726] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  360.310588][T17726] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  360.342827][T17727] netlink: 'syz.2.3496': attribute type 10 has an invalid length.
[  360.346489][T17726] netlink: 'syz.2.3496': attribute type 10 has an invalid length.
[  360.349402][T17726] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  360.355947][T17727] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  360.359536][T17727] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  361.223319][T17740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3500'.
[  361.839706][T17755] netlink: 'syz.0.3505': attribute type 6 has an invalid length.
[  361.929663][T17762] xt_ecn: cannot match TCP bits for non-tcp packets
[  362.220449][T17788] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3517'.
[  362.488353][T17798] netlink: 648 bytes leftover after parsing attributes in process `syz.2.3521'.
[  362.888050][T17802] bond14: left promiscuous mode
[  363.207822][T17806] sctp: [Deprecated]: syz.1.3524 (pid 17806) Use of struct sctp_assoc_value in delayed_ack socket option.
[  363.207822][T17806] Use struct sctp_sack_info instead
[  363.753948][T17828] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3529'.
[  364.132790][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3530'.
[  364.132883][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3530'.
[  364.452623][T17849] netlink: 'syz.2.3535': attribute type 1 has an invalid length.
[  364.482182][T17849] bond24: (slave vxcan21): The slave device specified does not support setting the MAC address
[  364.487091][T17849] bond24: (slave vxcan21): Error -95 calling set_mac_address
[  364.989250][T17877] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3545'.
[  366.076475][T17908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3554'.
[  366.282039][T17920] netlink: 'syz.0.3558': attribute type 18 has an invalid length.
[  366.461973][T17939] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  367.233851][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3574'.
[  367.290561][   T33] audit: type=1800 audit(1762142704.692:3): pid=17970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3573" name="memory.events" dev="tmpfs" ino=6181 res=0 errno=0
[  367.467461][T18002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3580'.
[  367.470304][T18002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3580'.
[  367.537217][T18005] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3581'.
[  367.574173][T18005] lo speed is unknown, defaulting to 1000
[  367.577246][T18005] erspan0 speed is unknown, defaulting to 1000
[  367.914236][T18029] syzkaller0: entered promiscuous mode
[  367.916866][T18029] syzkaller0: entered allmulticast mode
[  368.519834][T18043] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3592'.
[  368.576131][T18042] lo speed is unknown, defaulting to 1000
[  368.578847][T18042] erspan0 speed is unknown, defaulting to 1000
[  368.803122][T18046] lo speed is unknown, defaulting to 1000
[  368.807608][T18046] erspan0 speed is unknown, defaulting to 1000
[  369.184071][T18068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3599'.
[  370.145809][T18088] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  370.246780][T18091] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3606'.
[  370.396275][T18097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3609'.
[  370.437973][T18099] syzkaller0: entered promiscuous mode
[  370.441051][T18099] syzkaller0: entered allmulticast mode
[  370.454820][T18100] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3608'.
[  370.458142][T18100] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3608'.
[  370.618776][T18104] lo speed is unknown, defaulting to 1000
[  370.622307][T18104] erspan0 speed is unknown, defaulting to 1000
[  370.643736][T18110] x_tables: duplicate underflow at hook 2
[  371.067604][T18137] lo speed is unknown, defaulting to 1000
[  371.072044][T18137] erspan0 speed is unknown, defaulting to 1000
[  371.073610][T18136] lo speed is unknown, defaulting to 1000
[  371.181709][T18136] erspan0 speed is unknown, defaulting to 1000
[  378.869951][ T1362] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  385.911656][   T55] block nbd1: Possible stuck request ffff88810a5e0000: control (read@0,1024B). Runtime 120 seconds
[  385.916278][   T55] block nbd1: Possible stuck request ffff88810a5e0200: control (read@1024,1024B). Runtime 120 seconds
[  385.920097][   T55] block nbd1: Possible stuck request ffff88810a5e0400: control (read@2048,1024B). Runtime 120 seconds
[  385.924084][   T55] block nbd1: Possible stuck request ffff88810a5e0600: control (read@3072,1024B). Runtime 120 seconds
[  403.063397][T18206] __nla_validate_parse: 5 callbacks suppressed
[  403.063410][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3639'.
[  403.107184][T18212] netlink: 'syz.2.3641': attribute type 6 has an invalid length.
[  403.110970][T18212] netlink: 'syz.2.3641': attribute type 6 has an invalid length.
[  403.316826][T18244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3651'.
[  403.340866][T18244] nbd: socks must be embedded in a SOCK_ITEM attr
[  403.389146][T18240] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3649'.
[  403.402130][T18247] x_tables: duplicate underflow at hook 2
[  403.480437][T18257] netlink: 'syz.0.3654': attribute type 7 has an invalid length.
[  403.535880][T18262] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  403.749644][T18270] syzkaller1: entered promiscuous mode
[  403.751488][T18270] syzkaller1: entered allmulticast mode
[  404.506782][T18291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3663'.
[  404.519183][T18293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3663'.
[  404.523439][T18279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3660'.
[  404.573711][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3664'.
[  404.579986][T18295] netlink: 'syz.0.3664': attribute type 30 has an invalid length.
[  404.591844][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  404.591890][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3664'.
[  404.595096][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  404.602398][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  404.606482][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  404.606736][T18295] netlink: 'syz.0.3664': attribute type 30 has an invalid length.
[  404.880190][T18332] syzkaller0: entered promiscuous mode
[  404.882263][T18332] syzkaller0: entered allmulticast mode
[  404.895742][T18334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  405.032652][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.036022][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.038714][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.041301][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.332848][T18358] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3685'.
[  405.463050][T18377] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3691'.
[  405.469517][T18377] netlink: 'syz.2.3691': attribute type 6 has an invalid length.
[  405.472261][T18377] netlink: 'syz.2.3691': attribute type 5 has an invalid length.
[  405.491080][T18377] netlink: 'syz.2.3691': attribute type 4 has an invalid length.
[  405.493941][T18378] netlink: 'syz.2.3691': attribute type 4 has an invalid length.
[  405.498934][T18377] netlink: 'syz.2.3691': attribute type 4 has an invalid length.
[  405.607095][T18385] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  405.625050][T18387] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  407.397017][T18449] syzkaller0: entered promiscuous mode
[  407.398917][T18449] syzkaller0: entered allmulticast mode
[  408.723938][T18480] syzkaller0: entered promiscuous mode
[  408.726353][T18480] syzkaller0: entered allmulticast mode
[  410.418881][T18510] __nla_validate_parse: 6 callbacks suppressed
[  410.418952][T18510] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3731'.
[  410.429021][T18510] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  410.941962][T18538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  410.950836][T18538] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  412.739792][T18581] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  412.967116][T18594] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  413.167460][T18605] lo speed is unknown, defaulting to 1000
[  413.170719][T18605] erspan0 speed is unknown, defaulting to 1000
[  413.204533][T18607] xt_bpf: check failed: parse error
[  414.003469][T18621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3767'.
[  414.074170][T18628] lo speed is unknown, defaulting to 1000
[  414.077140][T18628] erspan0 speed is unknown, defaulting to 1000
[  414.138031][T18631] xt_bpf: check failed: parse error
[  414.283394][T18636] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3770'.
[  414.295411][T18636] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3770'.
[  414.299696][T18636] netlink: 'syz.1.3770': attribute type 6 has an invalid length.
[  414.301954][T18636] netlink: 'syz.1.3770': attribute type 5 has an invalid length.
[  414.304191][T18636] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3770'.
[  414.679341][T18667] netlink: 'syz.1.3778': attribute type 5 has an invalid length.
[  415.677510][T18695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3786'.
[  415.793772][T18701] lo speed is unknown, defaulting to 1000
[  415.796649][T18701] erspan0 speed is unknown, defaulting to 1000
[  415.820896][T18707] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3792'.
[  415.823712][T18707] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3792'.
[  415.836449][T18707] netlink: 'syz.1.3792': attribute type 6 has an invalid length.
[  415.839817][T18707] netlink: 'syz.1.3792': attribute type 5 has an invalid length.
[  415.843256][T18707] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3792'.
[  415.850489][T18708] xt_bpf: check failed: parse error
[  415.854736][T18707] netlink: 'syz.1.3792': attribute type 4 has an invalid length.
[  415.858346][T18707] netlink: 'syz.1.3792': attribute type 4 has an invalid length.
[  415.940437][T18712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3794'.
[  415.961018][T18712] 8021q: adding VLAN 0 to HW filter on device bond24
[  415.994187][   T55] block nbd1: Possible stuck request ffff88810a5e0000: control (read@0,1024B). Runtime 150 seconds
[  415.997658][   T55] block nbd1: Possible stuck request ffff88810a5e0200: control (read@1024,1024B). Runtime 150 seconds
[  416.001171][   T55] block nbd1: Possible stuck request ffff88810a5e0400: control (read@2048,1024B). Runtime 150 seconds
[  416.004508][   T55] block nbd1: Possible stuck request ffff88810a5e0600: control (read@3072,1024B). Runtime 150 seconds
[  416.723019][T18740] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3802'.
[  417.178923][T18760] lo speed is unknown, defaulting to 1000
[  417.181659][T18760] erspan0 speed is unknown, defaulting to 1000
[  417.219622][T18765] xt_bpf: check failed: parse error
[  417.288458][T18771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3812'.
[  417.510001][T18786] bond25: Removing last arp target with arp_interval on
[  417.523936][T18786] bond25: entered promiscuous mode
[  417.526879][T18786] bond25: entered allmulticast mode
[  417.529891][T18786] 8021q: adding VLAN 0 to HW filter on device bond25
[  417.716543][T18801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3819'.
[  418.439253][T18809] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20003
[  418.529928][T18815] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  418.627733][T18826] bond25: left promiscuous mode
[  418.629558][T18826] bond25: left allmulticast mode
[  418.690990][T18832] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3829'.
[  418.728388][T18836] openvswitch: netlink: Key type 283 is out of range max 32
[  418.797006][T18840] netlink: 'syz.0.3832': attribute type 7 has an invalid length.
[  418.799570][T18840] netlink: 'syz.0.3832': attribute type 8 has an invalid length.
[  418.856041][T18841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3832'.
[  418.915305][T18844] syzkaller0: entered promiscuous mode
[  418.918038][T18844] syzkaller0: entered allmulticast mode
[  419.689354][T18856] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  419.826476][T18860] netlink: 'syz.0.3840': attribute type 4 has an invalid length.
[  419.832070][ T5810] lo speed is unknown, defaulting to 1000
[  419.834498][ T5810] syz1: Port: 1 Link ACTIVE
[  420.059062][ T6536] lo speed is unknown, defaulting to 1000
[  420.061440][ T6536] syz1: Port: 1 Link DOWN
[  420.393450][T18882] lo speed is unknown, defaulting to 1000
[  420.396440][T18882] erspan0 speed is unknown, defaulting to 1000
[  420.830214][T18897] tipc: Resetting bearer <eth:gre0>
[  421.020600][T18913] lo speed is unknown, defaulting to 1000
[  421.023038][T18913] erspan0 speed is unknown, defaulting to 1000
[  421.059035][T18914] xt_bpf: check failed: parse error
[  421.242456][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3857'.
[  421.527227][T18938] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3862'.
[  421.530154][T18938] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3862'.
[  421.533162][T18938] netlink: 'syz.0.3862': attribute type 6 has an invalid length.
[  421.536166][T18938] netlink: 'syz.0.3862': attribute type 5 has an invalid length.
[  421.538985][T18938] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3862'.
[  421.544888][T18938] netlink: 'syz.0.3862': attribute type 4 has an invalid length.
[  421.553500][T18938] netlink: 'syz.0.3862': attribute type 4 has an invalid length.
[  421.559383][ T5810] lo speed is unknown, defaulting to 1000
[  421.561864][ T5810] syz1: Port: 1 Link ACTIVE
[  421.581368][T18938] bond15: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5)
[  421.586819][T18938] bond15 (unregistering): Released all slaves
[  421.701517][T18942] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  422.040912][T18977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3873'.
[  422.069899][T18979] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  422.918629][T18997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3878'.
[  422.920013][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3878'.
[  423.900404][T19018] netlink: 'syz.0.3887': attribute type 11 has an invalid length.
[  423.903724][T19018] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3887'.
[  423.999727][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3890'.
[  424.060039][T19037] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3893'.
[  424.126500][T19043] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  424.852917][T19074] netlink: 'syz.1.3905': attribute type 13 has an invalid length.
[  424.855453][T19074] netlink: 'syz.1.3905': attribute type 17 has an invalid length.
[  425.230984][T19080] lo speed is unknown, defaulting to 1000
[  425.234824][T19080] erspan0 speed is unknown, defaulting to 1000
[  425.235328][T19081] lo speed is unknown, defaulting to 1000
[  425.343323][T19081] erspan0 speed is unknown, defaulting to 1000
[  425.909176][T19111] xt_policy: too many policy elements
[  425.913494][T19109] lo speed is unknown, defaulting to 1000
[  425.916847][T19109] erspan0 speed is unknown, defaulting to 1000
[  425.922931][T19113] xt_policy: too many policy elements
[  425.972427][T19117] xt_bpf: check failed: parse error
[  426.351906][T19148] lo speed is unknown, defaulting to 1000
[  426.366572][T19148] erspan0 speed is unknown, defaulting to 1000
[  426.531714][T19162] netlink: 'syz.1.3924': attribute type 2 has an invalid length.
[  426.534087][T19162] netlink: 'syz.1.3924': attribute type 8 has an invalid length.
[  426.537172][T19162] __nla_validate_parse: 10 callbacks suppressed
[  426.537179][T19162] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3924'.
[  427.137551][T19175] lo speed is unknown, defaulting to 1000
[  427.151753][T19175] erspan0 speed is unknown, defaulting to 1000
[  427.156261][T19178] xt_bpf: check failed: parse error
[  427.235069][ T6539] lo speed is unknown, defaulting to 1000
[  427.236956][ T6539] syz1: Port: 1 Link DOWN
[  427.577965][T19190] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3933'.
[  427.854857][T19205] lo speed is unknown, defaulting to 1000
[  427.857558][T19205] erspan0 speed is unknown, defaulting to 1000
[  427.880908][T19206] xt_bpf: check failed: parse error
[  427.968341][T19208] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3939'.
[  427.971347][T19208] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3939'.
[  427.974152][T19208] netlink: 'syz.1.3939': attribute type 6 has an invalid length.
[  427.977051][T19208] netlink: 'syz.1.3939': attribute type 5 has an invalid length.
[  427.979608][T19208] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3939'.
[  427.986876][T19208] netlink: 'syz.1.3939': attribute type 4 has an invalid length.
[  427.991032][T19208] netlink: 'syz.1.3939': attribute type 4 has an invalid length.
[  428.103186][T19223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3943'.
[  428.134119][T19227] netlink: 'syz.2.3942': attribute type 1 has an invalid length.
[  428.155958][T19230] IPv6: NLM_F_CREATE should be specified when creating new route
[  428.193494][T19236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3942'.
[  428.386593][T19244] netlink: 'syz.0.3948': attribute type 6 has an invalid length.
[  428.935388][T19247] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3949'.
[  428.938839][T19247] tc_dump_action: action bad kind
[  429.039199][T19251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3950'.
[  429.193947][T19259] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3952'.
[  429.287618][T19255] lo speed is unknown, defaulting to 1000
[  429.290403][T19255] erspan0 speed is unknown, defaulting to 1000
[  429.656772][T19291] sctp: [Deprecated]: syz.1.3960 (pid 19291) Use of struct sctp_assoc_value in delayed_ack socket option.
[  429.656772][T19291] Use struct sctp_sack_info instead
[  429.694351][T19294] 8021q: VLANs not supported on bond0
[  430.211116][T19296] syzkaller1: entered promiscuous mode
[  430.215147][T19296] syzkaller1: entered allmulticast mode
[  430.442128][T19314] validate_nla: 1 callbacks suppressed
[  430.442141][T19314] netlink: 'syz.0.3969': attribute type 1 has an invalid length.
[  430.952661][T19330] lo speed is unknown, defaulting to 1000
[  430.956041][T19330] erspan0 speed is unknown, defaulting to 1000
[  431.865329][T19346] __nla_validate_parse: 8 callbacks suppressed
[  431.865341][T19346] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3978'.
[  431.870716][T19345] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3978'.
[  432.067382][T19355] sctp: [Deprecated]: syz.0.3981 (pid 19355) Use of struct sctp_assoc_value in delayed_ack socket option.
[  432.067382][T19355] Use struct sctp_sack_info instead
[  432.157489][T19363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3984'.
[  432.176055][T19363] 8021q: adding VLAN 0 to HW filter on device bond15
[  432.220489][T19372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3986'.
[  432.270608][T19374] netlink: 'syz.0.3987': attribute type 4 has an invalid length.
[  432.322103][T19374] lo speed is unknown, defaulting to 1000
[  432.324799][T19374] erspan0 speed is unknown, defaulting to 1000
[  433.076171][T19389] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  433.079962][T19389] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  433.094573][T19389] netlink: 'syz.1.3990': attribute type 10 has an invalid length.
[  433.097479][T19389] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  433.100760][T19389] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  433.103573][T19389] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  433.239702][T19394] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  433.243181][T19394] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  433.979557][T19399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3994'.
[  434.130768][T19403] rdma_op ffff8881764f29f0 conn xmit_rdma 0000000000000000
[  434.140879][T19403] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3995'.
[  434.332964][T19420] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4000'.
[  434.408822][T19425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4002'.
[  434.458943][T19431] x_tables: duplicate underflow at hook 2
[  434.576854][T19447] netlink: 'syz.1.4010': attribute type 83 has an invalid length.
[  434.695898][T19457] lo speed is unknown, defaulting to 1000
[  434.698377][T19457] erspan0 speed is unknown, defaulting to 1000
[  434.726010][T19463] xt_bpf: check failed: parse error
[  434.804470][T19465] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4015'.
[  434.810179][T19465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4015'.
[  434.839409][T19476] openvswitch: netlink: Flow actions attr not present in new flow.
[  436.928103][T19545] __nla_validate_parse: 5 callbacks suppressed
[  436.928120][T19545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4043'.
[  436.933304][T19545] netlink: 'syz.2.4043': attribute type 1 has an invalid length.
[  436.974500][T19542] "syz.1.4042" (19542) uses obsolete ecb(arc4) skcipher
[  436.980636][T19551] netlink: 'syz.2.4044': attribute type 6 has an invalid length.
[  437.068846][T19563] netlink: 'syz.2.4047': attribute type 4 has an invalid length.
[  437.073339][T19563] netlink: 'syz.2.4047': attribute type 4 has an invalid length.
[  437.280513][T19586] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  437.477764][T19598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4057'.
[  437.480586][T19598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4057'.
[  437.483663][T19600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4057'.
[  437.551232][T19608] netlink: 'syz.2.4059': attribute type 6 has an invalid length.
[  437.591039][T19605] x_tables: ip_tables: osf match: only valid for protocol 6
[  438.072001][T19640] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  438.081978][T19640] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  438.092954][T19640] netlink: 'syz.2.4069': attribute type 10 has an invalid length.
[  438.096525][T19640] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  438.253552][T19651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4074'.
[  438.348600][T19654] tipc: Invalid UDP bearer configuration
[  438.348634][T19654] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  438.830821][T19676] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4083'.
[  438.987259][T19689] lo speed is unknown, defaulting to 1000
[  438.990362][T19689] erspan0 speed is unknown, defaulting to 1000
[  439.122026][T19695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4088'.
[  439.233316][T19700] netlink: 'syz.2.4090': attribute type 1 has an invalid length.
[  439.237275][T19697] syzkaller1: entered promiscuous mode
[  439.238970][T19697] syzkaller1: entered allmulticast mode
[  439.584337][T19734] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4101'.
[  439.588253][T19734] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4101'.
[  439.591741][T19734] netlink: 'syz.0.4101': attribute type 6 has an invalid length.
[  439.594734][T19734] netlink: 'syz.0.4101': attribute type 5 has an invalid length.
[  439.597940][T19734] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4101'.
[  439.610142][T19734] netlink: 'syz.0.4101': attribute type 4 has an invalid length.
[  439.616919][T18861] lo speed is unknown, defaulting to 1000
[  439.618838][T18861] syz1: Port: 1 Link ACTIVE
[  439.686879][T19739] openvswitch: netlink: IP tunnel dst address not specified
[  440.308871][ T1362] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  440.331425][T19770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  441.570061][T19827] xt_policy: too many policy elements
[  441.602164][T19827] bond26: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  441.606554][T19827] bond26: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  441.683566][T19835] lo speed is unknown, defaulting to 1000
[  441.686629][T19835] erspan0 speed is unknown, defaulting to 1000
[  441.977987][T19276] lo speed is unknown, defaulting to 1000
[  441.979786][T19276] syz1: Port: 1 Link DOWN
[  442.631676][T19854] __nla_validate_parse: 4 callbacks suppressed
[  442.631690][T19854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4139'.
[  442.664893][T19854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4139'.
[  442.808183][T19859] syzkaller0: entered promiscuous mode
[  442.811439][T19859] syzkaller0: entered allmulticast mode
[  442.819909][T19861] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4142'.
[  443.063836][T19884] validate_nla: 1 callbacks suppressed
[  443.063857][T19884] netlink: 'syz.0.4147': attribute type 2 has an invalid length.
[  443.068664][T19884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4147'.
[  443.080280][T19884] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4147'.
[  443.172350][T19890] xt_l2tp: invalid flags combination: 0
[  443.267472][T19894] netlink: 'syz.0.4150': attribute type 1 has an invalid length.
[  443.270337][T19894] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4150'.
[  443.275256][T19894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4150'.
[  443.305331][T19894] can: request_module (can-proto-5) failed.
[  443.412560][   T33] audit: type=1800 audit(1762142780.812:4): pid=19899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4151" name="memory.events" dev="tmpfs" ino=7084 res=0 errno=0
[  443.423193][   T33] audit: type=1804 audit(1762142780.822:5): pid=19899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4151" name="/newroot/1389/memory.events" dev="tmpfs" ino=7084 res=1 errno=0
[  443.522440][T19913] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  443.529626][T19912] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  443.569383][T19921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4157'.
[  443.884654][T19947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4166'.
[  444.804230][T19969] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  445.714910][T19983] syzkaller0: entered promiscuous mode
[  445.717179][T19983] syzkaller0: entered allmulticast mode
[  445.777424][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4178'.
[  445.870340][T19991] lo speed is unknown, defaulting to 1000
[  445.874048][T19991] erspan0 speed is unknown, defaulting to 1000
[  446.065693][   T55] block nbd1: Possible stuck request ffff88810a5e0000: control (read@0,1024B). Runtime 180 seconds
[  446.069141][   T55] block nbd1: Possible stuck request ffff88810a5e0200: control (read@1024,1024B). Runtime 180 seconds
[  446.073464][   T55] block nbd1: Possible stuck request ffff88810a5e0400: control (read@2048,1024B). Runtime 180 seconds
[  446.078265][   T55] block nbd1: Possible stuck request ffff88810a5e0600: control (read@3072,1024B). Runtime 180 seconds
[  446.203192][T20013] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  446.251121][T20019] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  446.457773][T20040] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  446.696555][T20050] lo speed is unknown, defaulting to 1000
[  446.700009][T20050] erspan0 speed is unknown, defaulting to 1000
[  447.598005][T20082] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  447.719506][T20089] __nla_validate_parse: 8 callbacks suppressed
[  447.719518][T20089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4206'.
[  447.962812][T20098] netlink: 'syz.1.4210': attribute type 1 has an invalid length.
[  447.968160][T20098] netlink: 'syz.1.4210': attribute type 3 has an invalid length.
[  447.971134][T20098] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4210'.
[  448.430955][T20151] lo: entered promiscuous mode
[  448.439817][T20151] lo: entered allmulticast mode
[  448.443532][T20151] tunl0: entered promiscuous mode
[  448.446064][T20151] tunl0: entered allmulticast mode
[  448.448139][T20151] gre0: entered promiscuous mode
[  448.450113][T20151] gre0: entered allmulticast mode
[  448.451795][T20151] gretap0: entered promiscuous mode
[  448.453584][T20151] gretap0: entered allmulticast mode
[  448.455870][T20151] erspan0: entered promiscuous mode
[  448.457373][T20151] erspan0: entered allmulticast mode
[  448.458946][T20151] ip_vti0: entered promiscuous mode
[  448.460761][T20151] ip_vti0: entered allmulticast mode
[  448.463824][T20151] ip6_vti0: entered promiscuous mode
[  448.466213][T20151] ip6_vti0: entered allmulticast mode
[  448.468231][T20151] sit0: entered promiscuous mode
[  448.470022][T20151] sit0: entered allmulticast mode
[  448.472203][T20151] ip6tnl0: entered promiscuous mode
[  448.474108][T20151] ip6tnl0: entered allmulticast mode
[  448.476817][T20151] ip6gre0: entered promiscuous mode
[  448.478763][T20151] ip6gre0: entered allmulticast mode
[  448.480663][T20151] ip6gretap0: entered promiscuous mode
[  448.482727][T20151] ip6gretap0: entered allmulticast mode
[  448.484509][T20151] bridge0: entered promiscuous mode
[  448.487401][T20151] bond0: entered promiscuous mode
[  448.488876][T20151] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  448.492295][T20151] bond0: entered allmulticast mode
[  448.495506][T20151] team0: entered promiscuous mode
[  448.497489][T20151] team0: entered allmulticast mode
[  448.499491][T20151] dummy0: entered promiscuous mode
[  448.501653][T20151] dummy0: entered allmulticast mode
[  448.503620][T20151] nlmon0: entered promiscuous mode
[  448.508768][T20151] nlmon0: entered allmulticast mode
[  448.510843][T20151] caif0: entered promiscuous mode
[  448.512720][T20151] caif0: entered allmulticast mode
[  448.515492][T20151] batadv0: entered promiscuous mode
[  448.518138][T20151] batadv0: entered allmulticast mode
[  448.520048][T20151] vxcan0: entered promiscuous mode
[  448.520801][T20159] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4229'.
[  448.521604][T20151] vxcan0: entered allmulticast mode
[  448.521704][T20151] vxcan1: entered promiscuous mode
[  448.524788][T20159] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4229'.
[  448.526706][T20151] vxcan1: entered allmulticast mode
[  448.528341][T20159] netlink: 'syz.0.4229': attribute type 6 has an invalid length.
[  448.531135][T20151] veth0: entered promiscuous mode
[  448.532925][T20159] netlink: 'syz.0.4229': attribute type 5 has an invalid length.
[  448.535698][T20151] veth0: entered allmulticast mode
[  448.535795][T20151] veth1: entered promiscuous mode
[  448.535802][T20151] veth1: entered allmulticast mode
[  448.535876][T20151] wg0: entered promiscuous mode
[  448.535883][T20151] wg0: entered allmulticast mode
[  448.535956][T20151] wg1: entered promiscuous mode
[  448.535962][T20151] wg1: entered allmulticast mode
[  448.536062][T20151] wg2: entered promiscuous mode
[  448.536069][T20151] wg2: entered allmulticast mode
[  448.536136][T20151] veth0_to_bridge: entered promiscuous mode
[  448.536143][T20151] veth0_to_bridge: entered allmulticast mode
[  448.536214][T20151] bridge_slave_0: entered promiscuous mode
[  448.536220][T20151] bridge_slave_0: entered allmulticast mode
[  448.536290][T20151] veth1_to_bridge: entered promiscuous mode
[  448.536298][T20151] veth1_to_bridge: entered allmulticast mode
[  448.536394][T20151] bridge_slave_1: entered promiscuous mode
[  448.536401][T20151] bridge_slave_1: entered allmulticast mode
[  448.536482][T20151] veth0_to_bond: entered promiscuous mode
[  448.536489][T20151] veth0_to_bond: entered allmulticast mode
[  448.536587][T20151] bond_slave_0: entered promiscuous mode
[  448.536594][T20151] bond_slave_0: entered allmulticast mode
[  448.536666][T20151] veth1_to_bond: entered promiscuous mode
[  448.536673][T20151] veth1_to_bond: entered allmulticast mode
[  448.536765][T20151] bond_slave_1: entered promiscuous mode
[  448.536773][T20151] bond_slave_1: entered allmulticast mode
[  448.536840][T20151] veth0_to_team: entered promiscuous mode
[  448.536846][T20151] veth0_to_team: entered allmulticast mode
[  448.536928][T20151] team_slave_0: entered promiscuous mode
[  448.536935][T20151] team_slave_0: entered allmulticast mode
[  448.537002][T20151] veth1_to_team: entered promiscuous mode
[  448.537008][T20151] veth1_to_team: entered allmulticast mode
[  448.537097][T20151] team_slave_1: entered promiscuous mode
[  448.537103][T20151] team_slave_1: entered allmulticast mode
[  448.537172][T20151] veth0_to_batadv: entered promiscuous mode
[  448.537178][T20151] veth0_to_batadv: entered allmulticast mode
[  448.537246][T20151] batadv_slave_0: entered promiscuous mode
[  448.537252][T20151] batadv_slave_0: entered allmulticast mode
[  448.537318][T20151] veth1_to_batadv: entered promiscuous mode
[  448.537324][T20151] veth1_to_batadv: entered allmulticast mode
[  448.537408][T20151] batadv_slave_1: entered promiscuous mode
[  448.537423][T20151] batadv_slave_1: entered allmulticast mode
[  448.537490][T20151] xfrm0: entered promiscuous mode
[  448.537498][T20151] xfrm0: entered allmulticast mode
[  448.537588][T20151] veth0_to_hsr: entered promiscuous mode
[  448.537596][T20151] veth0_to_hsr: entered allmulticast mode
[  448.537667][T20151] hsr_slave_0: entered allmulticast mode
[  448.537767][T20151] veth1_to_hsr: entered promiscuous mode
[  448.537780][T20151] veth1_to_hsr: entered allmulticast mode
[  448.537892][T20151] hsr_slave_1: entered allmulticast mode
[  448.538033][T20151] : entered promiscuous mode
[  448.538047][T20151] : entered allmulticast mode
[  448.538163][T20151] veth1_virt_wifi: entered promiscuous mode
[  448.538177][T20151] veth1_virt_wifi: entered allmulticast mode
[  448.538322][T20151] veth0_virt_wifi: entered promiscuous mode
[  448.538333][T20151] veth0_virt_wifi: entered allmulticast mode
[  448.538456][T20151] veth1_vlan: entered allmulticast mode
[  448.540436][T20159] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4229'.
[  448.543501][T20151] veth0_vlan: entered allmulticast mode
[  448.657862][T20151] vlan0: entered promiscuous mode
[  448.659725][T20151] vlan0: entered allmulticast mode
[  448.661453][T20151] vlan1: entered promiscuous mode
[  448.663226][T20151] vlan1: entered allmulticast mode
[  448.665169][T20151] macvlan0: entered promiscuous mode
[  448.666872][T20151] macvlan0: entered allmulticast mode
[  448.668712][T20151] macvlan1: entered promiscuous mode
[  448.670346][T20151] macvlan1: entered allmulticast mode
[  448.672230][T20151] ipvlan0: entered promiscuous mode
[  448.673981][T20151] ipvlan0: entered allmulticast mode
[  448.675940][T20151] ipvlan1: entered promiscuous mode
[  448.677599][T20151] ipvlan1: entered allmulticast mode
[  448.679374][T20151] veth1_macvtap: entered allmulticast mode
[  448.681299][T20151] veth0_macvtap: entered allmulticast mode
[  448.683240][T20151] macvtap0: entered promiscuous mode
[  448.684855][T20151] macvtap0: entered allmulticast mode
[  448.686973][T20151] macsec0: entered promiscuous mode
[  448.688575][T20151] macsec0: entered allmulticast mode
[  448.690231][T20151] geneve0: entered promiscuous mode
[  448.691798][T20151] geneve0: entered allmulticast mode
[  448.693606][T20151] geneve1: entered promiscuous mode
[  448.695628][T20151] geneve1: entered allmulticast mode
[  448.697309][T20151] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  448.699651][T20151] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  448.702106][T20151] ip6tnl1: entered promiscuous mode
[  448.703979][T20151] ip6tnl1: entered allmulticast mode
[  448.706107][T20151] macsec1: entered promiscuous mode
[  448.707706][T20151] macsec1: entered allmulticast mode
[  448.709389][T20151] vlan2: entered promiscuous mode
[  448.711077][T20151] vlan2: entered allmulticast mode
[  448.712727][T20151] bond1: entered promiscuous mode
[  448.714678][T20151] bond1: entered allmulticast mode
[  448.717021][T20151] ip6tnl2: entered promiscuous mode
[  448.718834][T20151] ip6tnl2: entered allmulticast mode
[  448.720733][T20151] bond2: entered promiscuous mode
[  448.722438][T20151] bond2: entered allmulticast mode
[  448.724366][T20151] bond3: entered promiscuous mode
[  448.726557][T20151] bond3: entered allmulticast mode
[  448.728502][T20151] sit1: entered promiscuous mode
[  448.730309][T20151] sit1: entered allmulticast mode
[  448.732186][T20151] gre1: entered promiscuous mode
[  448.733909][T20151] gre1: entered allmulticast mode
[  448.736120][T20151] : entered allmulticast mode
[  448.737875][T20151] bond4: entered promiscuous mode
[  448.739646][T20151] bond4: entered allmulticast mode
[  448.741431][T20151] vlan3: entered promiscuous mode
[  448.743435][T20151] vlan3: entered allmulticast mode
[  448.745824][T20151] bridge1: entered promiscuous mode
[  448.747482][T20151] bridge1: entered allmulticast mode
[  448.749319][T20151] bond5: entered promiscuous mode
[  448.750947][T20151] bond5: entered allmulticast mode
[  448.752711][T20151] bond6: entered promiscuous mode
[  448.754333][T20151] bond6: entered allmulticast mode
[  448.756596][T20151] veth2: entered promiscuous mode
[  448.758306][T20151] veth2: entered allmulticast mode
[  448.760231][T20151] veth3: entered promiscuous mode
[  448.762126][T20151] veth3: entered allmulticast mode
[  448.764043][T20151] bond7: entered promiscuous mode
[  448.766105][T20151] bond7: entered allmulticast mode
[  448.767815][T20151] ip6tnl3: entered promiscuous mode
[  448.769469][T20151] ip6tnl3: entered allmulticast mode
[  448.771209][T20151] gtp0: entered promiscuous mode
[  448.772818][T20151] gtp0: entered allmulticast mode
[  448.774601][T20151] vxcan2: entered promiscuous mode
[  448.776635][T20151] vxcan2: entered allmulticast mode
[  448.778378][T20151] vxcan3: entered promiscuous mode
[  448.779940][T20151] vxcan3: entered allmulticast mode
[  448.781643][T20151] syztnl1: entered promiscuous mode
[  448.783255][T20151] syztnl1: entered allmulticast mode
[  448.785495][T20151] vti0: entered promiscuous mode
[  448.787017][T20151] vti0: entered allmulticast mode
[  448.788680][T20151] veth4: entered promiscuous mode
[  448.790164][T20151] veth4: entered allmulticast mode
[  448.791926][T20151] veth5: entered promiscuous mode
[  448.793729][T20151] veth5: entered allmulticast mode
[  448.795786][T20151] bond8: entered promiscuous mode
[  448.797326][T20151] bond8: entered allmulticast mode
[  448.798968][T20151] bond9: entered promiscuous mode
[  448.800436][T20151] bond9: entered allmulticast mode
[  448.801987][T20151] vxcan4: entered promiscuous mode
[  448.803619][T20151] vxcan4: entered allmulticast mode
[  448.806044][T20151] vxcan5: entered promiscuous mode
[  448.807956][T20151] vxcan5: entered allmulticast mode
[  448.810050][T20151] bond10: entered promiscuous mode
[  448.811988][T20151] bond10: entered allmulticast mode
[  448.814083][T20151] bond11: entered promiscuous mode
[  448.816603][T20151] bond11: entered allmulticast mode
[  448.818632][T20151] bond12: entered promiscuous mode
[  448.820492][T20151] bond12: entered allmulticast mode
[  448.822511][T20151] vxcan6: entered promiscuous mode
[  448.823682][T20168] netlink: 'syz.0.4229': attribute type 4 has an invalid length.
[  448.824336][T20151] vxcan6: entered allmulticast mode
[  448.824451][T20151] vxcan7: entered promiscuous mode
[  448.829922][T20151] vxcan7: entered allmulticast mode
[  448.831507][T20151] bond13: entered promiscuous mode
[  448.833086][T20151] bond13: entered allmulticast mode
[  448.834678][T20151] sit2: entered promiscuous mode
[  448.836474][T20151] sit2: entered allmulticast mode
[  448.838063][T20151] sit3: entered promiscuous mode
[  448.839904][T20151] sit3: entered allmulticast mode
[  448.842134][T20151] bond14: entered promiscuous mode
[  448.844153][T20151] bond14: entered allmulticast mode
[  448.846968][T20151] vxcan8: entered promiscuous mode
[  448.848544][T20151] vxcan8: entered allmulticast mode
[  448.850175][T20151] vxcan9: entered promiscuous mode
[  448.851672][T20151] vxcan9: entered allmulticast mode
[  448.853475][T20151] vxcan10: entered promiscuous mode
[  448.855823][T20151] vxcan10: entered allmulticast mode
[  448.857612][T20151] vxcan11: entered promiscuous mode
[  448.859191][T20151] vxcan11: entered allmulticast mode
[  448.860993][T20151] ip6tnl4: entered promiscuous mode
[  448.862575][T20151] ip6tnl4: entered allmulticast mode
[  448.864462][T20151] vxcan12: entered promiscuous mode
[  448.866615][T20151] vxcan12: entered allmulticast mode
[  448.868426][T20151] vxcan13: entered promiscuous mode
[  448.870366][T20151] vxcan13: entered allmulticast mode
[  448.872628][T20151] syztnl2: entered promiscuous mode
[  448.874558][T20151] syztnl2: entered allmulticast mode
[  448.877312][T20151] vxcan14: entered promiscuous mode
[  448.879117][T20151] vxcan14: entered allmulticast mode
[  448.880971][T20151] vxcan15: entered promiscuous mode
[  448.882647][T20151] vxcan15: entered allmulticast mode
[  448.884723][T20151] bond15: entered promiscuous mode
[  448.887124][T20151] bond15: entered allmulticast mode
[  448.889182][T20151] gretap1: entered promiscuous mode
[  448.890945][T20151] gretap1: entered allmulticast mode
[  448.892698][T20151] xfrm1: entered promiscuous mode
[  448.894360][T20151] xfrm1: entered allmulticast mode
[  448.896453][T20151] bond16: entered promiscuous mode
[  448.898056][T20151] bond16: entered allmulticast mode
[  448.899694][T20151] bond17: entered promiscuous mode
[  448.901284][T20151] bond17: entered allmulticast mode
[  448.902998][T20151] bridge2: entered promiscuous mode
[  448.904871][T20151] bridge2: entered allmulticast mode
[  448.906971][T20151] bond18: entered promiscuous mode
[  448.908553][T20151] bond18: entered allmulticast mode
[  448.910212][T20151] ip6tnl5: entered promiscuous mode
[  448.911800][T20151] ip6tnl5: entered allmulticast mode
[  448.913628][T20151] @: entered promiscuous mode
[  448.915800][T20151] @: entered allmulticast mode
[  448.917690][T20151] bond19: entered promiscuous mode
[  448.919596][T20151] bond19: entered allmulticast mode
[  448.921592][T20151] vxcan16: entered promiscuous mode
[  448.923290][T20151] vxcan16: entered allmulticast mode
[  448.925590][T20151] vxcan17: entered promiscuous mode
[  448.927461][T20151] vxcan17: entered allmulticast mode
[  448.929350][T20151] bond20: entered promiscuous mode
[  448.931047][T20151] bond20: entered allmulticast mode
[  448.932682][T20170] netlink: 'syz.0.4229': attribute type 4 has an invalid length.
[  448.933003][T20151] syztnl0: entered promiscuous mode
[  448.937229][T20151] syztnl0: entered allmulticast mode
[  448.938969][T20151] bond21: entered promiscuous mode
[  448.940484][T20151] bond21: entered allmulticast mode
[  448.942145][T20151] vxcan18: entered promiscuous mode
[  448.943756][T20151] vxcan18: entered allmulticast mode
[  448.945792][T20151] vxcan19: entered promiscuous mode
[  448.947345][T20151] vxcan19: entered allmulticast mode
[  448.949051][T20151] bridge3: entered promiscuous mode
[  448.950618][T20151] bridge3: entered allmulticast mode
[  448.952315][T20151] netdevsim netdevsim2 eth0: entered promiscuous mode
[  448.954536][T20151] netdevsim netdevsim2 eth0: entered allmulticast mode
[  448.956825][T20151] netdevsim netdevsim2 eth1: entered promiscuous mode
[  448.958779][T20151] netdevsim netdevsim2 eth1: entered allmulticast mode
[  448.960862][T20151] netdevsim netdevsim2 eth2: entered promiscuous mode
[  448.962810][T20151] netdevsim netdevsim2 eth2: entered allmulticast mode
[  448.964859][T20151] netdevsim netdevsim2 eth3: entered promiscuous mode
[  448.966931][T20151] netdevsim netdevsim2 eth3: entered allmulticast mode
[  448.969151][T20151] bond22: entered promiscuous mode
[  448.970637][T20151] bond22: entered allmulticast mode
[  448.972196][T20151] bond23: entered promiscuous mode
[  448.973665][T20151] bond23: entered allmulticast mode
[  448.975533][T20151] bond24: entered promiscuous mode
[  448.976983][T20151] bond24: entered allmulticast mode
[  448.978546][T20151] bridge4: entered promiscuous mode
[  448.980021][T20151] bridge4: entered allmulticast mode
[  448.981561][T20151] bond25: entered promiscuous mode
[  448.982959][T20151] bond25: entered allmulticast mode
[  448.984585][T20151] bridge5: entered promiscuous mode
[  448.986438][T20151] bridge5: entered allmulticast mode
[  449.021064][T20164] syzkaller0: entered promiscuous mode
[  449.022819][T20164] syzkaller0: entered allmulticast mode
[  449.030572][T19276] lo speed is unknown, defaulting to 1000
[  449.032405][T19276] syz1: Port: 1 Link ACTIVE
[  450.041617][T20180] lo speed is unknown, defaulting to 1000
[  450.045410][T20180] erspan0 speed is unknown, defaulting to 1000
[  450.114394][T20189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4233'.
[  450.185519][T20193] netlink: 'syz.0.4236': attribute type 13 has an invalid length.
[  450.254726][T20197] openvswitch: netlink: IP tunnel dst address not specified
[  450.441188][T20203] netlink: 'syz.1.4240': attribute type 10 has an invalid length.
[  452.042541][T20243] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  452.172641][T20249] vlan4: entered allmulticast mode
[  452.644581][T20262] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4259'.
[  452.663089][T20262] x_tables: duplicate underflow at hook 4
[  452.922518][T20266] lo speed is unknown, defaulting to 1000
[  452.931099][T20266] erspan0 speed is unknown, defaulting to 1000
[  453.105848][T20273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4263'.
[  453.110209][T20271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4263'.
[  454.311267][T20295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4268'.
[  454.538250][T20303] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4271'.
[  454.541615][T20304] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4271'.
[  454.544700][T20303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4271'.
[  454.892353][T20311] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4273'.
[  454.956419][T20316] lo speed is unknown, defaulting to 1000
[  454.959450][T20316] erspan0 speed is unknown, defaulting to 1000
[  455.188375][T20322] IPVS: Unknown mcast interface: hsr0
[  455.343863][T20327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4278'.
[  456.390195][T20331] lo speed is unknown, defaulting to 1000
[  456.393481][T20331] erspan0 speed is unknown, defaulting to 1000
[  456.734613][T20350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4285'.
[  456.749312][T20350] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[  456.824781][   T33] audit: type=1800 audit(1762142794.222:6): pid=20357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4287" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=7424 res=0 errno=0
[  457.062388][T20380] netlink: 'syz.0.4293': attribute type 1 has an invalid length.
[  457.066843][T20380] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[  457.141788][T20395] syzkaller0: entered promiscuous mode
[  457.147420][T20395] syzkaller0: entered allmulticast mode
[  457.507487][T20407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4304'.
[  457.570053][T20410] netlink: 'syz.1.4305': attribute type 13 has an invalid length.
[  458.361189][T20432] __nla_validate_parse: 2 callbacks suppressed
[  458.361200][T20432] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4308'.
[  458.883858][T20436] netlink: 'syz.2.4309': attribute type 4 has an invalid length.
[  458.892380][T20436] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4309'.
[  459.102738][T20460] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  459.162387][T20461] netlink: 'syz.0.4317': attribute type 10 has an invalid length.
[  459.859188][ T5260] udevd[5260]: worker [13890] /devices/virtual/block/nbd1 timeout; kill it
[  459.863048][ T5260] udevd[5260]: seq 19576 '/devices/virtual/block/nbd1' killed
[  474.491672][ T5201] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  474.496050][ T5201] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  474.499188][ T5201] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  474.501804][ T5201] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  474.504230][ T5201] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  474.525818][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  474.528066][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  474.530238][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  474.533395][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  474.536150][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  475.654782][   T57] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  475.659070][   T57] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  475.661665][   T57] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  475.664219][   T57] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  475.668123][   T57] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  475.686859][   T57] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  475.691801][   T57] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  475.695765][   T57] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  475.698599][   T57] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  475.701313][   T57] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  476.146741][   T55] block nbd1: Possible stuck request ffff88810a5e0000: control (read@0,1024B). Runtime 210 seconds
[  476.150982][   T55] block nbd1: Possible stuck request ffff88810a5e0200: control (read@1024,1024B). Runtime 210 seconds
[  476.156324][   T55] block nbd1: Possible stuck request ffff88810a5e0400: control (read@2048,1024B). Runtime 210 seconds
[  476.160742][   T55] block nbd1: Possible stuck request ffff88810a5e0600: control (read@3072,1024B). Runtime 210 seconds
[  476.625545][ T5811] Bluetooth: hci3: command tx timeout
[  477.745439][   T57] Bluetooth: hci4: command tx timeout
[  477.747659][ T5811] Bluetooth: hci5: command tx timeout
[  478.705493][   T57] Bluetooth: hci3: command tx timeout
[  479.825394][   T57] Bluetooth: hci4: command tx timeout
[  479.827004][   T57] Bluetooth: hci5: command tx timeout
[  480.785545][ T5811] Bluetooth: hci3: command tx timeout
[  481.905647][ T5811] Bluetooth: hci5: command tx timeout
[  481.907320][ T5811] Bluetooth: hci4: command tx timeout
[  482.865316][   T57] Bluetooth: hci3: command tx timeout
[  483.985623][   T57] Bluetooth: hci4: command tx timeout
[  483.987756][   T57] Bluetooth: hci5: command tx timeout
[  506.225658][   T55] block nbd1: Possible stuck request ffff88810a5e0000: control (read@0,1024B). Runtime 240 seconds
[  506.228882][   T55] block nbd1: Possible stuck request ffff88810a5e0200: control (read@1024,1024B). Runtime 240 seconds
[  506.232061][   T55] block nbd1: Possible stuck request ffff88810a5e0400: control (read@2048,1024B). Runtime 240 seconds
[  506.236152][   T55] block nbd1: Possible stuck request ffff88810a5e0600: control (read@3072,1024B). Runtime 240 seconds
[  535.501404][   T57] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  535.507029][   T57] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  535.510351][   T57] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  535.513092][   T57] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  535.515751][   T57] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  536.305472][   T55] block nbd1: Possible stuck request ffff88810a5e0000: control (read@0,1024B). Runtime 270 seconds
[  536.309396][   T55] block nbd1: Possible stuck request ffff88810a5e0200: control (read@1024,1024B). Runtime 270 seconds
[  536.313245][   T55] block nbd1: Possible stuck request ffff88810a5e0400: control (read@2048,1024B). Runtime 270 seconds
[  536.325531][   T55] block nbd1: Possible stuck request ffff88810a5e0600: control (read@3072,1024B). Runtime 270 seconds
[  536.803178][ T5815] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  536.807681][ T5815] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  536.811023][ T5815] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  536.813983][ T5815] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  536.817398][ T5815] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  536.856113][   T57] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  536.860558][   T57] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  536.863528][   T57] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  536.866723][   T57] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  536.869261][   T57] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  537.586215][   T57] Bluetooth: hci6: command tx timeout
[  538.865659][   T57] Bluetooth: hci7: command tx timeout
[  538.945574][   T57] Bluetooth: hci8: command tx timeout
[  539.665400][   T57] Bluetooth: hci6: command tx timeout
[  540.945229][   T57] Bluetooth: hci7: command tx timeout
[  541.025275][   T57] Bluetooth: hci8: command tx timeout
[  541.745926][   T57] Bluetooth: hci6: command tx timeout
[  543.025505][   T57] Bluetooth: hci7: command tx timeout
[  543.105295][   T57] Bluetooth: hci8: command tx timeout
[  543.825377][   T57] Bluetooth: hci6: command tx timeout
[  545.105494][   T57] Bluetooth: hci7: command tx timeout
[  545.185608][   T57] Bluetooth: hci8: command tx timeout
[  564.114972][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  564.116958][    C1] rcu: 	1-...!: (10501 ticks this GP) idle=161c/1/0x4000000000000000 softirq=90793/90793 fqs=0
[  564.121916][    C1] rcu: 	(t=10501 jiffies g=76513 q=2728 ncpus=2)
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  564.124289][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10500 jiffies! g76513 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  564.129073][    C1] rcu: 	Possible timer handling issue on cpu=1 timer-softirq=34923
[  564.131956][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g76513 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
[  564.136000][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  564.139725][    C1] rcu: RCU grace-period kthread stack dump:
[  564.141603][    C1] task:rcu_preempt     state:I stack:27224 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  564.145804][    C1] Call Trace:
[  564.146819][    C1]  <TASK>
[  564.147708][    C1]  __schedule+0x1798/0x4cc0
[  564.149185][    C1]  ? __lock_acquire+0xab9/0xd20
[  564.150599][    C1]  ? __pfx___schedule+0x10/0x10
[  564.152003][    C1]  ? schedule+0x91/0x360
[  564.153224][    C1]  schedule+0x165/0x360
[  564.154426][    C1]  schedule_timeout+0x12b/0x270
[  564.155815][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  564.157444][    C1]  ? __pfx_process_timeout+0x10/0x10
[  564.159286][    C1]  ? prepare_to_swait_event+0x341/0x380
[  564.160911][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[  564.162310][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  564.163904][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  564.165549][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  564.167461][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  564.169424][    C1]  ? finish_swait+0xcd/0x1f0
[  564.171115][    C1]  rcu_gp_kthread+0x99/0x390
[  564.172647][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  564.174532][    C1]  ? __kthread_parkme+0x7b/0x200
[  564.176294][    C1]  ? __kthread_parkme+0x1a1/0x200
[  564.178148][    C1]  kthread+0x711/0x8a0
[  564.179686][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  564.181603][    C1]  ? __pfx_kthread+0x10/0x10
[  564.183351][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  564.185308][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  564.187032][    C1]  ? __pfx_kthread+0x10/0x10
[  564.188533][    C1]  ret_from_fork+0x4bc/0x870
[  564.190168][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  564.192093][    C1]  ? __switch_to_asm+0x39/0x70
[  564.193660][    C1]  ? __switch_to_asm+0x33/0x70
[  564.195038][    C1]  ? __pfx_kthread+0x10/0x10
[  564.196406][    C1]  ret_from_fork_asm+0x1a/0x30
[  564.197829][    C1]  </TASK>
[  564.199008][    C1] CPU: 1 UID: 0 PID: 20460 Comm: syz.0.4317 Not tainted syzkaller #0 PREEMPT(full) 
[  564.199025][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  564.199034][    C1] RIP: 0010:lock_is_held_type+0x137/0x190
[  564.199054][    C1] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 09 fa 27 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
[  564.199066][    C1] RSP: 0018:ffffc90005c96ec8 EFLAGS: 00000206
[  564.199079][    C1] RAX: 8db8b9069a3d8c00 RBX: 0000000000000001 RCX: 8db8b9069a3d8c00
[  564.199089][    C1] RDX: ffff8881084d3a00 RSI: ffffffff8d8f2bf3 RDI: ffffffff8bbf0460
[  564.199098][    C1] RBP: 00000000ffffffff R08: ffff8881084d3a00 R09: 0000000000000002
[  564.199107][    C1] R10: 00000000ffffffff R11: 0000000000000002 R12: 0000000000000246
[  564.199115][    C1] R13: ffff8881084d3a00 R14: ffffffff8df3d2e0 R15: 0000000000000002
[  564.199124][    C1] FS:  00007fefe83896c0(0000) GS:ffff8882a9f40000(0000) knlGS:0000000000000000
[  564.199134][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  564.199143][    C1] CR2: 00007fefe7574f00 CR3: 00000001b05ec000 CR4: 00000000000006f0
[  564.199189][    C1] Call Trace:
[  564.199197][    C1]  <TASK>
[  564.199207][    C1]  qdisc_lookup_rcu+0x68/0x6d0
[  564.199227][    C1]  qdisc_tree_reduce_backlog+0x1b2/0x480
[  564.199243][    C1]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  564.199267][    C1]  fq_change+0xeba/0x2030
[  564.199284][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  564.199310][    C1]  ? __pfx_fq_change+0x10/0x10
[  564.199340][    C1]  ? __hrtimer_setup+0x187/0x210
[  564.199360][    C1]  fq_init+0x699/0x960
[  564.199378][    C1]  ? __pfx_fq_init+0x10/0x10
[  564.199433][    C1]  ? lockdep_rtnl_is_held+0x26/0x40
[  564.199447][    C1]  ? qdisc_lookup+0x590/0x6d0
[  564.199461][    C1]  ? __pfx_fq_init+0x10/0x10
[  564.199475][    C1]  qdisc_create+0x7ac/0xea0
[  564.199498][    C1]  tc_modify_qdisc+0x1538/0x20e0
[  564.199527][    C1]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  564.199564][    C1]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  564.199580][    C1]  rtnetlink_rcv_msg+0x77c/0xb70
[  564.199598][    C1]  ? __lock_acquire+0xab9/0xd20
[  564.199612][    C1]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  564.199629][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  564.199660][    C1]  netlink_rcv_skb+0x208/0x470
[  564.199678][    C1]  ? __lock_acquire+0xab9/0xd20
[  564.199691][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  564.199710][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  564.199737][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  564.199762][    C1]  netlink_unicast+0x82f/0x9e0
[  564.199786][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  564.199806][    C1]  ? netlink_sendmsg+0x642/0xb30
[  564.199816][    C1]  ? skb_put+0x11b/0x210
[  564.199831][    C1]  netlink_sendmsg+0x805/0xb30
[  564.199850][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  564.199865][    C1]  ? aa_sock_msg_perm+0xf1/0x1d0
[  564.199887][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  564.199901][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  564.199914][    C1]  __sock_sendmsg+0x21c/0x270
[  564.199934][    C1]  ____sys_sendmsg+0x505/0x830
[  564.199952][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  564.199973][    C1]  ? import_iovec+0x74/0xa0
[  564.199994][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  564.200009][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  564.200048][    C1]  ? __fget_files+0x2a/0x420
[  564.200062][    C1]  ? __fget_files+0x3a0/0x420
[  564.200081][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  564.200098][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  564.200123][    C1]  ? do_syscall_64+0xbe/0xfa0
[  564.200143][    C1]  do_syscall_64+0xfa/0xfa0
[  564.200158][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  564.200173][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.200187][    C1]  ? exc_page_fault+0xab/0x100
[  564.200204][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.200216][    C1] RIP: 0033:0x7fefe758efc9
[  564.200230][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  564.200241][    C1] RSP: 002b:00007fefe8389038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  564.200254][    C1] RAX: ffffffffffffffda RBX: 00007fefe77e5fa0 RCX: 00007fefe758efc9
[  564.200268][    C1] RDX: 0000000000000040 RSI: 0000200000001200 RDI: 000000000000000c
[  564.200276][    C1] RBP: 00007fefe7611f91 R08: 0000000000000000 R09: 0000000000000000
[  564.200284][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  564.200292][    C1] R13: 00007fefe77e6038 R14: 00007fefe77e5fa0 R15: 00007ffd3161b738
[  564.200315][    C1]  </TASK>
[  566.385900][   T55] block nbd1: Possible stuck request ffff88810a5e0000: control (read@0,1024B). Runtime 300 seconds
[  566.389345][   T55] block nbd1: Possible stuck request ffff88810a5e0200: control (read@1024,1024B). Runtime 300 seconds
[  566.392685][   T55] block nbd1: Possible stuck request ffff88810a5e0400: control (read@2048,1024B). Runtime 300 seconds
[  566.396842][   T55] block nbd1: Possible stuck request ffff88810a5e0600: control (read@3072,1024B). Runtime 300 seconds

VM DIAGNOSIS:
04:08:21  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff8213002d RBX=ffffea0006fd39c0 RCX=ffff888112ae1d00 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc9000245f530
R8 =ffffea0006fd39c7 R9 =1ffffd4000dfa738 R10=dffffc0000000000 R11=fffff94000dfa739
R12=dffffc0000000000 R13=000000000001271f R14=ffffea0006fd39c0 R15=ffffea0006fd39c0
RIP=ffffffff81c003f8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818eb40000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f826ff17d60 CR3=000000000dd38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f826f3b76c3 00007f826f3b76c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=fedb7025e740e2cb 7b44fc1f0000002f XMM07=4b279cea00000000 352d52ec141c0a3d
XMM08=77081ce1b7494389 adbfe5350000002e XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff85147fc5 RBX=1ffffffff335d000 RCX=0000000000010000 RDX=ffff8881084d3a00
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc90000a08750 RSP=ffffc90000a085a0
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000141090
R12=0000000000000000 R13=0000000000000000 R14=ffffffff99ae8000 R15=0000000000000000
RIP=ffffffff851480fc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fefe83896c0 ffffffff 00c00000
GS =0000 ffff8882a9f40000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fefe7574f00 CR3=00000001b05ec000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fefe831d100 00007fefe77b7460 XMM05=00007fefe77b7478 00007fefe77b74c0
XMM06=00007fefe77b74b8 00007fefe77b74b0 XMM07=00007fefe77b74a8 00007fefe77b74a0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fefe761315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
