last executing test programs:

1m56.507935573s ago: executing program 0 (id=3220):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r2 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000040)=0x31, 0x4)
sendmsg$inet(r1, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0xc000)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x1c)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="7b15000000000000200012800b00010067656e65766500001000028008000b400000000904000600"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40800)

1m56.428647874s ago: executing program 0 (id=3221):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}}, 0x0)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r4}, 0x38)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
close(0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x2, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

1m56.410798461s ago: executing program 0 (id=3223):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@delchain={0x54, 0x65, 0x10, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf, 0xffe0}, {0x0, 0x1}, {0xe, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0xc2, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0xc, 0x83}}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x6c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x90f, 0x7c}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000000000)="2e000000010001", 0x7)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r11, &(0x7f0000001ec0)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x54, r8, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x24, 0x6, 0x60, 0x1, 0x1f, 0xc, 0x9, 0x14, 0x6, 0x1, 0x5, 0x18, 0x60, 0x36, 0x5, 0x11, 0x24, 0x60, 0x60, 0x1, 0x4, 0x60, 0x0, 0x1b, 0x9, 0x1b, 0x24, 0x6b, 0x24, 0x1b]}]}]}]}, 0x54}}, 0x44000)

1m56.198237041s ago: executing program 0 (id=3225):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94)

1m56.131522217s ago: executing program 0 (id=3227):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000001000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461540000000900010073797a310000000040000000050a01020000000000000000010020000c0002400000000000000001200004801400030076657468315f6d6163767461700000000800014000000005140000001100010000000000000000000000000a"], 0xdc}}, 0x0)

1m56.129417308s ago: executing program 0 (id=3229):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
unshare(0x6a040000) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0)
r2 = socket(0x2, 0x80805, 0x0) (async)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000031637f00"/16], 0x48) (async)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) (async)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000002c0)) (async)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) (async)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async, rerun: 64)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)

1m40.981645723s ago: executing program 32 (id=3229):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
unshare(0x6a040000) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0)
r2 = socket(0x2, 0x80805, 0x0) (async)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000031637f00"/16], 0x48) (async)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) (async)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000002c0)) (async)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) (async)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async, rerun: 64)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)

989.027767ms ago: executing program 3 (id=5051):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELSET={0xec, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_EXPRESSIONS={0xc0, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x58, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd4010000}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2a}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

888.401754ms ago: executing program 3 (id=5052):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000e8ffffffffffff5c0400950000000000658c76d32d1344c43c5c89ee1abedd94dff8dae85bd47e5507b0e932de7332f3503a7410ff26bcfc56b91a4b2d72aeaba9bca3b6ed7651b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$key(0xf, 0x3, 0x2)
syz_emit_ethernet(0x5e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaacce39067774286dd200cbb4500283a00fe88000400000000000000cd73d4dc676d508b4f6a490000000001fe8000000000000000000000000000aa020090780000000000000000000000000000000000000000fc0100"/105], 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}]}, 0x2}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040050)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x7, @empty, 'sit0\x00'}}, 0x1e)
r4 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f00000004c0)="2936ac904534139d7e26bcd286252fd1fa3771b93c547f767cc46e79e302ad6023d622098ec085")
connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @empty, 'geneve1\x00'}}, 0x1e)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x91}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094)
r7 = socket$pppoe(0x18, 0x1, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280100001700010028bd7000fddbdf25fc020000000000000000000000000001000004d43c000000fe80000000000000000000000000002be0000001000000000000000000000000ff0200000000000000000000000000014e2100004e2100070e0030202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000000000000000000e00000020000000000000000000000004e2200034e2400000a00a0000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03000000000000000300000000000000050000000000000006c6000000000000f30b000000000000000000000000603d050000000000000004000000100000000000000000000080090000000000000000000100000000002c60ffffffffffff0c000000b96b6e0002010100000000000600000006000000d60a00002dbd7000f8153a51a5c364e63c5824245cf8b6e6b8ebb9594b3c"], 0x128}}, 0x0)
connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth1_virt_wifi\x00'}}, 0x1e)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x8000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x240, 0x0, 0x0, 0xd8, 0xd8, 0xd8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x3, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'gre0\x00', '\x00', {}, {}, 0x6, 0x0, 0x49}, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11}}, @common=@socket0={{0x20}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
close(r1)
sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c405a)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006110040000000000630afcff0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x94)

785.556153ms ago: executing program 3 (id=5055):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
unshare(0x20000400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x20, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94)

679.734905ms ago: executing program 3 (id=5056):
r0 = socket(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001009e49de6d0100040000002400048005000300020000000500030000000000050003000100000005000300020000000800020002000000256c70d0722d636ecf0f908ff461969172827a340af0ad1c9e8927eb2ca0709ac71205a4d632bc0bf8200160651de2cb06eff6abec53203977e20e5c7be544127486d2aaecdeff410e17c8"], 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b8, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x440, 0x2e8, 0x2e8, 0x440, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2d8, 0x318, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x2c, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef)
setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
syz_emit_ethernet(0x96, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c20000030800408b0088006500000101907800000000ac1e000189171c6401010064010100ac1414bb7f000001ffffffff44148781ac1414bb000007ff7f00000100000002940401004410522000000010440c574000000007000000054408f560000000014414ad50000000f8000001010000000f00000fff940400000011009078000000e6"], 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r10}, 0x10)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r11, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)

553.279009ms ago: executing program 3 (id=5060):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={<r1=>0x0, 0x20, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}]}, &(0x7f0000000180)=0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000180)={r5, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x4002}, 0x90)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="350000000000000004000000", @ANYBLOB="86b7601f4aeb45e0acf3a7120dd54e9fe3ae262f698a3cf81688be845be1917fc54e78f239a43b699a37d1dd43922e3ff2e375", @ANYRES64=0x0], 0x20)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={<r7=>r1, 0x5}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000280)={r7, 0x5}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28)
socket$phonet_pipe(0x23, 0x5, 0x2)
unshare(0x20000400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="183000000900000000000b0003000000950000ff00000000"], &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94)

468.517946ms ago: executing program 3 (id=5064):
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0008a5a30000feffffff0100000008000100000000000c0006000100000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x44008090}, 0x2048044)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002000000000000060000000006001500040000001400168004000880"], 0x38}}, 0x0)
unshare(0x22020400)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)
r3 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r3, &(0x7f0000019540)={0x11, 0x2, 0x0, 0x1, 0xff, 0x6, @broadcast}, 0x14)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x1404, 0x10, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
recvmmsg$unix(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000ac0)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000007c0)=""/196, 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1}}], 0x4, 0x400122a0, 0x0)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

465.455141ms ago: executing program 1 (id=5066):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})

389.780177ms ago: executing program 1 (id=5067):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000004000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0)

387.931852ms ago: executing program 1 (id=5069):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000280)={0x0, 0x2710}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0)
connect$vsock_stream(r5, &(0x7f0000000380)={0x28, 0x0, 0x104f49b66ea79a29, @host}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = accept4$unix(r2, &(0x7f0000000440)=@abs, &(0x7f00000004c0)=0x6e, 0x800)
sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x18}, 0x3)
write(r1, &(0x7f0000000400)="617702f3a619e572f5026ad23032cba5f6080ac595d1c8f348b823afc4c40c13ec9ff6488b6d1f81ecfcea", 0x2b)
sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="898b161c27c828", 0x7}, {&(0x7f00000001c0)="c40ad87533155d6db5b08283554490e7e6be088617fbf20fec3ae9cf8b24aaaf60abe02d3cb3684df66b69628c30c84cf44040be16d26d1f87686fa1bac3318da451c44b9cb9e936abc461f59f9868bc8a67e4e0e81213a53cf64429166c4313f67dda8edcc6ed8ae244399c4a4741b525598927397ea485cb906dae031666f41d2096", 0x83}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r4, @ANYRES32=r0], 0x18, 0x10000810}, 0x4000000)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12, 0xffffffffffffffff, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c)
sendmmsg$inet6(r8, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x1f}}], 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f00000003c0)=0x8, 0x4)
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000088f8000000000000aaaac5aaaaaa88a8a00081"], 0x72)

277.035797ms ago: executing program 2 (id=5071):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000080)="580000001500add427323b472545b4562e117fffffff81000e224e237f000001925aa80020007b0009", 0x29}], 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) (async)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000002000010000bd7000400000000a508080000000081600000014000200fc02000000000000000000000000000114000100200100"], 0x44}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400000000001b2347ea000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0)

229.752443ms ago: executing program 1 (id=5072):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
unshare(0x20000400)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x7b)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="391b5a", 0x3}], 0x1}}], 0x1, 0x20041080)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0d0d00000000000000000b00000008000300", @ANYRES32=r9, @ANYBLOB="10006e"], 0x2c}}, 0xc054)
r10 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_STATION(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)={0x1c, r12, 0x101, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, r7, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x2000c804)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x74, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xfffffffffffffe09, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xfffffffffffffe08, 0x1, 0xfffffffb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x401}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x44044)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94)

228.469769ms ago: executing program 2 (id=5073):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000022c0)='`', 0x1}, {&(0x7f00000002c0)="a6f45a67faa3eb40aaebf73283a302a20801036bb9132250ada41a045642b5f6f288f5743dd366916a0923be376a10837b46319d8c785a30d56d7db3640dcd3151331455f3e07194a8f535fdec7f0b44c3cae08b024bb6433481be4c7d6a17f2fcb9d461c51d802b5c58ed72ff5ce8eb09d20c51c06a0146bbddd858a1aebb9a43d2b1456b802a481e2e25588f95f3d6252a70782a8f6e5bf926f06be9533efd35f58968d8a791911cbdd37e73760bef6da5895a74d2e88943745541fb99c092bd3f8d11bfe0741141e5b325392168", 0xcf}], 0x2}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x3, @private2, 0x8}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000280)='1', 0x1}], 0x1}}], 0x2, 0x20000012)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x40, 0x4000, 0x4, 0x9, 0xdcd, 0xc3}, &(0x7f0000000100)=0x20)

168.232732ms ago: executing program 2 (id=5074):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40030)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=<r5=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=<r8=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=<r9=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=<r10=>0x0)
sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r11)
r12 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000500)={<r13=>r3, 0x7, 0x7, 0x8000})
ioctl$TUNSETSTEERINGEBPF(r12, 0x800454e0, &(0x7f0000000540)=r13)
sendmsg$AUDIT_SET_FEATURE(r12, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x3fa, 0x100, 0x70bd2c, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24080041}, 0x40014)
bind$unix(r12, &(0x7f0000000680)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), r0)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r12)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000007c0)={'wlan1\x00', <r15=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(r12, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r14, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000840}, 0x14)
syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r13)
r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r16, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x2c}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r12)
sendmsg$TIPC_NL_MON_GET(r12, &(0x7f0000000d80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)={0x2ac, r17, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x59}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6c}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5561}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x85b}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xccf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x10001, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dvmrp1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @private0, 0xff}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "8eb8151ee7ba7c1345eba0cce47a83aea8d8c8ec469e80bfd8909203084d4c038a9ef482"}}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x38f9cf67}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}]}]}, 0x2ac}}, 0x40000)

167.889573ms ago: executing program 2 (id=5075):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000014000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0)

167.229996ms ago: executing program 1 (id=5076):
r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) (async, rerun: 64)
setsockopt$inet_tcp_int(r0, 0x6, 0x2d, &(0x7f0000000380)=0x8001, 0x4) (rerun: 64)

90.209236ms ago: executing program 2 (id=5077):
recvfrom(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0) (async)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
sendmmsg$inet(r0, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x1, 0x0) (async)
sendmmsg$inet(r0, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6(0xa, 0x5, 0x0) (async)
socket$inet6(0xa, 0x5, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) (async)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

86.753635ms ago: executing program 1 (id=5078):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) (async)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2)
sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x0, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) (async)
sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x0, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000806000108"], 0x0) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000806000108"], 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000018000003cea52d8085112a6b020000000003000900000000080005000afbde010c00168005000500070000000426beb02d6f3a141100cca3a1b34e3edbe0be9aa069ed67bf3b7490304c10bc15b0b589db158dd6b25a000000000000"], 0x30}}, 0x9c17431942fd21b8)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000002c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r11, &(0x7f0000000340)="76a97b160dfbd9afbbb0bf03e7ab529637292bf8caaa4a584db62247aff6a962afed292f0cde08d9f6b7de7fef8a983b2d75fb16e645038128020629843534ff148aa9b038a6575b03e87619abb3ea5492d5143985dcd9bd35792ea2", &(0x7f00000003c0)=""/168}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r11, &(0x7f0000000340)="76a97b160dfbd9afbbb0bf03e7ab529637292bf8caaa4a584db62247aff6a962afed292f0cde08d9f6b7de7fef8a983b2d75fb16e645038128020629843534ff148aa9b038a6575b03e87619abb3ea5492d5143985dcd9bd35792ea2", &(0x7f00000003c0)=""/168}, 0x20)

0s ago: executing program 2 (id=5079):
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x20000400) (async)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) (async, rerun: 64)
vmsplice(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x2) (async, rerun: 64)
r2 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100))
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}]}}}]}, 0x48}}, 0x0) (async, rerun: 64)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64)
bind$inet(r4, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000040), 0x4) (async)
r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) (async)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r7, &(0x7f0000002240)=[{{&(0x7f0000001cc0)={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="24000000000000f4acd04e00320000000000000000000000000000fff9004001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x1, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x501c6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', <r8=>0x0, 0x29, 0xff, 0xf9, 0x7f, 0x21, @mcast2, @empty, 0x8, 0x10, 0xfc, 0xd}}) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getqdisc={0x28, 0x26, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x5, 0x7}, {0x8, 0xfff1}, {0x3, 0xfff1}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10)

kernel console output (not intermixed with test programs):

41] netlink: 'syz.1.3098': attribute type 1 has an invalid length.
[  273.264659][T16141] vcan0: tx drop: invalid da for name 0x0000000000000001
[  273.466131][T16160] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.474839][T16160] syzkaller0: entered promiscuous mode
[  273.476672][T16160] syzkaller0: entered allmulticast mode
[  273.490595][T16160] tipc: Resetting bearer <eth:syzkaller0>
[  273.496521][T16159] tipc: Resetting bearer <eth:syzkaller0>
[  273.510895][T16159] tipc: Disabling bearer <eth:syzkaller0>
[  273.514574][    C1] vcan0: j1939_tp_rxtimer: 0xffff888113c4f400: rx timeout, send abort
[  273.525059][T16157] lo speed is unknown, defaulting to 1000
[  273.690147][T16168] netlink: 'syz.2.3108': attribute type 9 has an invalid length.
[  274.017214][    C1] vcan0: j1939_tp_rxtimer: 0xffff888113c4f400: abort rx timeout. Force session deactivation
[  274.217436][T16197] xt_l2tp: unknown flags: 10
[  274.219987][T16196] x_tables: ip_tables: ah match: only valid for protocol 51
[  274.229301][T16196] __nla_validate_parse: 11 callbacks suppressed
[  274.229317][T16196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3117'.
[  274.463945][T16208] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3122'.
[  274.478652][T16210] lo speed is unknown, defaulting to 1000
[  274.676288][T16220] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  274.806016][T16229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3129'.
[  275.082592][T16243] C: renamed from lo (while UP)
[  275.114905][T16243] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  275.131600][T16247] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  275.242666][T16253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3137'.
[  275.251485][T16253] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  275.256343][T16253] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  275.402924][T16270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3144'.
[  275.864636][T16280] netlink: 'syz.2.3147': attribute type 5 has an invalid length.
[  275.897737][T16282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3148'.
[  275.932105][T16280] netlink: 'syz.2.3147': attribute type 1 has an invalid length.
[  275.968878][T16280] 8021q: adding VLAN 0 to HW filter on device bond13
[  276.046630][T16294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3152'.
[  276.050782][T16294] netlink: 452 bytes leftover after parsing attributes in process `syz.2.3152'.
[  276.421398][T16311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3157'.
[  276.426592][T16311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3157'.
[  276.452003][T16311] macvtap1: entered promiscuous mode
[  276.453998][T16311] batadv0: entered promiscuous mode
[  276.456457][T16311] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  276.469415][T16311] batadv0: left promiscuous mode
[  276.742533][T16325] netlink: 'syz.0.3163': attribute type 4 has an invalid length.
[  276.815342][T16333] netlink: 'syz.0.3163': attribute type 4 has an invalid length.
[  276.937213][T16337] Bluetooth: MGMT ver 1.23
[  277.122526][T16347] netlink: 'syz.0.3171': attribute type 3 has an invalid length.
[  277.195472][T16343] netlink: 'syz.2.3170': attribute type 1 has an invalid length.
[  277.242004][T16353] xfrm3: entered allmulticast mode
[  277.270313][T16343] bond14: (slave bridge9): making interface the new active one
[  277.287391][T16343] bond14: (slave bridge9): Enslaving as an active interface with an up link
[  277.473949][ T5218] Bluetooth: hci2: command 0x0405 tx timeout
[  277.839026][T16403] netlink: 'syz.0.3181': attribute type 3 has an invalid length.
[  278.179001][T16428] syzkaller0: entered allmulticast mode
[  278.559779][T16446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  278.604407][   T60] block nbd0: Possible stuck request ffff888022448000: control (read@0,1024B). Runtime 150 seconds
[  278.608890][   T60] block nbd0: Possible stuck request ffff888022448200: control (read@1024,1024B). Runtime 150 seconds
[  278.613152][   T60] block nbd0: Possible stuck request ffff888022448400: control (read@2048,1024B). Runtime 150 seconds
[  278.618282][   T60] block nbd0: Possible stuck request ffff888022448600: control (read@3072,1024B). Runtime 150 seconds
[  278.790392][T16455] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  279.034651][T16463] C speed is unknown, defaulting to 1000
[  279.199526][T16475] x_tables: unsorted underflow at hook 2
[  279.311876][T16480] ip6tnl4: entered promiscuous mode
[  279.313833][T16480] ip6tnl4: entered allmulticast mode
[  279.316833][T16480] team0: Device ip6tnl4 is of different type
[  279.457577][T16483] tipc: Resetting bearer <eth:team0>
[  279.480471][ T5835] C speed is unknown, defaulting to 1000
[  279.482838][ T5835] s	z2: Port: 1 Link DOWN
[  279.597559][T16500] __nla_validate_parse: 6 callbacks suppressed
[  279.597579][T16500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3198'.
[  279.615649][T16497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3198'.
[  279.895151][T16508] C speed is unknown, defaulting to 1000
[  280.029840][T16516] cgroup: fork rejected by pids controller in /syz2
[  280.566605][T16636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3207'.
[  280.569503][T16636] netlink: 'syz.1.3207': attribute type 1 has an invalid length.
[  280.768129][ T5856] veth0_to_bridge: left allmulticast mode
[  280.777762][ T5856] veth0_to_bridge: left promiscuous mode
[  280.784668][ T5856] bridge0: port 2(veth0_to_bridge) entered disabled state
[  280.800020][ T5856] gretap0: left allmulticast mode
[  280.805308][ T5856] gretap0: left promiscuous mode
[  280.810055][ T5856] bridge0: port 1(gretap0) entered disabled state
[  280.860738][T16647] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3209'.
[  280.866444][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  280.869809][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  280.874276][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  280.878424][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  280.881574][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  281.111716][T16656] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3210'.
[  281.876598][ T5856] bond14 (unregistering): (slave bridge9): Releasing active interface
[  281.976669][ T5856] bond0 (unregistering): Released all slaves
[  282.079385][ T5856] bond1 (unregistering): Released all slaves
[  282.088677][ T5856] bond2 (unregistering): Released all slaves
[  282.097254][ T5856] bond3 (unregistering): Released all slaves
[  282.106071][ T5856] bond4 (unregistering): Released all slaves
[  282.234585][ T5856] bond5 (unregistering): Released all slaves
[  282.242443][ T5856] bond6 (unregistering): Released all slaves
[  282.251858][ T5856] bond7 (unregistering): Released all slaves
[  282.259442][ T5856] bond8 (unregistering): Released all slaves
[  282.380740][ T5856] bond9 (unregistering): Released all slaves
[  282.388809][ T5856] bond10 (unregistering): Released all slaves
[  282.399285][ T5856] bond11 (unregistering): Released all slaves
[  282.545426][ T5856] bond12 (unregistering): Released all slaves
[  282.649155][ T5856] bond13 (unregistering): Released all slaves
[  282.660649][ T5856] bond14 (unregistering): Released all slaves
[  282.685185][T16654] xfrm3: left allmulticast mode
[  282.765517][T16646] C speed is unknown, defaulting to 1000
[  282.815420][ T5856] tipc: Disabling bearer <udp:syz2>
[  282.817626][ T5856] tipc: Left network mode
[  282.918313][ T5830] Bluetooth: hci0: command tx timeout
[  282.940037][T16659] syzkaller0: entered promiscuous mode
[  282.942383][T16659] syzkaller0: entered allmulticast mode
[  284.995696][ T5830] Bluetooth: hci0: command tx timeout
[  285.352408][T16646] chnl_net:caif_netlink_parms(): no params data found
[  285.762332][ T8281] smc: removing ib device syz!
[  286.374941][T16646] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.377194][T16646] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.379597][T16646] bridge_slave_0: entered allmulticast mode
[  286.389342][T16646] bridge_slave_0: entered promiscuous mode
[  286.393013][T16646] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.397623][T16646] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.400549][T16646] bridge_slave_1: entered allmulticast mode
[  286.419385][T16646] bridge_slave_1: entered promiscuous mode
[  286.533110][T16646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.562752][T16646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.689241][T16646] team0: Port device team_slave_0 added
[  286.693291][T16646] team0: Port device team_slave_1 added
[  286.760133][T16646] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.762330][T16646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.773930][T16646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.782636][T16646] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.787624][T16646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.799829][T16646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  286.899147][T16646] hsr_slave_0: entered promiscuous mode
[  286.902058][T16646] hsr_slave_1: entered promiscuous mode
[  287.074266][ T5830] Bluetooth: hci0: command tx timeout
[  287.506387][T16646] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  287.512703][T16646] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  287.519038][T16646] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  287.525554][T16646] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  287.641303][T16646] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.668015][T16646] 8021q: adding VLAN 0 to HW filter on device team0
[  287.679672][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.682521][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.700223][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.703110][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.912713][T16646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.972183][T16646] veth0_vlan: entered promiscuous mode
[  287.983410][T16646] veth1_vlan: entered promiscuous mode
[  288.022720][T16646] veth0_macvtap: entered promiscuous mode
[  288.036283][T16646] veth1_macvtap: entered promiscuous mode
[  288.058104][T16646] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.070375][T16646] batman_adv: batadv0: Interface activated: batadv_slave_1
[  288.082698][T16646] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.087351][T16646] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.090792][T16646] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.099057][T16646] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.210375][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.213495][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.276434][ T8281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.279623][ T8281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.409861][T16736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3206'.
[  289.154188][ T5830] Bluetooth: hci0: command tx timeout
[  308.686020][   T60] block nbd0: Possible stuck request ffff888022448000: control (read@0,1024B). Runtime 180 seconds
[  308.689294][   T60] block nbd0: Possible stuck request ffff888022448200: control (read@1024,1024B). Runtime 180 seconds
[  308.693188][   T60] block nbd0: Possible stuck request ffff888022448400: control (read@2048,1024B). Runtime 180 seconds
[  308.696898][   T60] block nbd0: Possible stuck request ffff888022448600: control (read@3072,1024B). Runtime 180 seconds
[  309.264761][ T5278] udevd[5278]: worker [5896] /devices/virtual/block/nbd0 timeout; kill it
[  309.268299][ T5278] udevd[5278]: seq 12144 '/devices/virtual/block/nbd0' killed
[  310.278798][T16755] C speed is unknown, defaulting to 1000
[  310.389758][T16767] IPv6: NLM_F_REPLACE set, but no existing node found!
[  310.409358][T16769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.667980][T16781] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  310.794044][T16784] Bluetooth: MGMT ver 1.23
[  310.860630][T16791] pim6reg: entered allmulticast mode
[  310.862949][T16791] pim6reg: left allmulticast mode
[  310.969201][T16804] C speed is unknown, defaulting to 1000
[  311.009079][T16805] C speed is unknown, defaulting to 1000
[  311.484090][T16820] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3232'.
[  311.852525][T16828] C speed is unknown, defaulting to 1000
[  312.491618][T16844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3241'.
[  312.495417][T16844] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3241'.
[  312.741292][T16857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3245'.
[  313.600058][T16867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.720215][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3251'.
[  313.756896][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3248'.
[  313.959717][T16887] openvswitch: netlink: Flow key attr not present in new flow.
[  313.962732][T16887] netlink: 'syz.2.3253': attribute type 3 has an invalid length.
[  314.093235][T16892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3255'.
[  314.925054][T16898] openvswitch: netlink: IPv6 tunnel dst address is zero
[  314.934533][T16898] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  315.069802][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3264'.
[  315.072709][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3264'.
[  315.190164][T16917] netlink: 'syz.2.3266': attribute type 1 has an invalid length.
[  315.193274][T16917] netlink: 'syz.2.3266': attribute type 4 has an invalid length.
[  315.198894][T16917] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3266'.
[  315.399663][T16930] netlink: 'syz.1.3272': attribute type 7 has an invalid length.
[  317.197119][T16944] __nla_validate_parse: 2 callbacks suppressed
[  317.197138][T16944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3277'.
[  317.202506][T16942] C speed is unknown, defaulting to 1000
[  317.421662][T16959] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.523179][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3282'.
[  317.898513][T16995] netlink: 'syz.1.3293': attribute type 3 has an invalid length.
[  318.051043][T17008] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20000
[  318.166579][T17010] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3299'.
[  318.296598][T17020] netlink: 'syz.1.3302': attribute type 4 has an invalid length.
[  318.444400][T17025] xt_hashlimit: size too large, truncated to 1048576
[  318.875420][T17031] bridge1: entered allmulticast mode
[  318.997230][T17034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3306'.
[  319.213974][T17045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3310'.
[  319.279995][T17045] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  319.489957][T17066] netlink: 'syz.1.3316': attribute type 3 has an invalid length.
[  319.501834][T17066] netlink: 'syz.1.3316': attribute type 3 has an invalid length.
[  320.167830][T17112] C speed is unknown, defaulting to 1000
[  320.189748][T17114] netlink: 'syz.1.3332': attribute type 9 has an invalid length.
[  320.508997][T17123] C speed is unknown, defaulting to 1000
[  320.590123][T17126] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  320.593216][T17126] CPU: 1 UID: 0 PID: 17126 Comm: syz.2.3334 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  320.593244][T17126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  320.593256][T17126] Call Trace:
[  320.593263][T17126]  <TASK>
[  320.593272][T17126]  dump_stack_lvl+0x189/0x250
[  320.593304][T17126]  ? __pfx_dump_stack_lvl+0x10/0x10
[  320.593321][T17126]  ? __pfx__printk+0x10/0x10
[  320.593340][T17126]  ? kernfs_path_from_node+0x2c/0x260
[  320.593357][T17126]  ? kernfs_path_from_node+0x2c/0x260
[  320.593369][T17126]  ? kernfs_path_from_node+0x2c/0x260
[  320.593382][T17126]  ? kernfs_path_from_node+0x22c/0x260
[  320.593396][T17126]  ? kernfs_path_from_node+0x2c/0x260
[  320.593415][T17126]  sysfs_warn_dup+0x8e/0xa0
[  320.593434][T17126]  sysfs_do_create_link_sd+0xc0/0x110
[  320.593448][T17126]  device_add_class_symlinks+0x1cf/0x240
[  320.593473][T17126]  device_add+0x475/0xb50
[  320.593530][T17126]  wiphy_register+0x199a/0x26b0
[  320.593563][T17126]  ? __pfx_wiphy_register+0x10/0x10
[  320.593599][T17126]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  320.593628][T17126]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  320.593649][T17126]  ieee80211_register_hw+0x33e1/0x4120
[  320.593684][T17126]  ? ieee80211_register_hw+0x14d1/0x4120
[  320.593707][T17126]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  320.593731][T17126]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  320.593757][T17126]  ? __hrtimer_setup+0x187/0x210
[  320.593774][T17126]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  320.593804][T17126]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  320.593850][T17126]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  320.593868][T17126]  ? trace_kmalloc+0x1f/0xd0
[  320.593889][T17126]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  320.593909][T17126]  ? kstrndup+0xbf/0x160
[  320.593929][T17126]  hwsim_new_radio_nl+0xea4/0x1b10
[  320.593951][T17126]  ? __pfx___nla_validate_parse+0x10/0x10
[  320.593981][T17126]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  320.594008][T17126]  ? __nla_parse+0x40/0x60
[  320.594034][T17126]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  320.594062][T17126]  genl_family_rcv_msg_doit+0x215/0x300
[  320.594085][T17126]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  320.594111][T17126]  ? bpf_lsm_capable+0x9/0x20
[  320.594133][T17126]  ? security_capable+0x7e/0x2e0
[  320.594153][T17126]  genl_rcv_msg+0x60e/0x790
[  320.594168][T17126]  ? __pfx_genl_rcv_msg+0x10/0x10
[  320.594177][T17126]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  320.594198][T17126]  netlink_rcv_skb+0x208/0x470
[  320.594213][T17126]  ? __pfx_genl_rcv_msg+0x10/0x10
[  320.594223][T17126]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  320.594245][T17126]  ? down_read+0x1ad/0x2e0
[  320.594256][T17126]  genl_rcv+0x28/0x40
[  320.594264][T17126]  netlink_unicast+0x75c/0x8e0
[  320.594280][T17126]  netlink_sendmsg+0x805/0xb30
[  320.594297][T17126]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.594310][T17126]  ? aa_sock_msg_perm+0x94/0x160
[  320.594321][T17126]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  320.594331][T17126]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.594342][T17126]  __sock_sendmsg+0x21c/0x270
[  320.594355][T17126]  ____sys_sendmsg+0x505/0x830
[  320.594370][T17126]  ? __pfx_____sys_sendmsg+0x10/0x10
[  320.594387][T17126]  ? import_iovec+0x74/0xa0
[  320.594400][T17126]  ___sys_sendmsg+0x21f/0x2a0
[  320.594413][T17126]  ? __pfx____sys_sendmsg+0x10/0x10
[  320.594444][T17126]  ? __fget_files+0x2a/0x420
[  320.594452][T17126]  ? __fget_files+0x3a0/0x420
[  320.594464][T17126]  __x64_sys_sendmsg+0x19b/0x260
[  320.594478][T17126]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  320.594525][T17126]  ? rcu_is_watching+0x15/0xb0
[  320.594540][T17126]  ? do_syscall_64+0xbe/0x3b0
[  320.594551][T17126]  do_syscall_64+0xfa/0x3b0
[  320.594560][T17126]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.594568][T17126]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.594578][T17126]  ? exc_page_fault+0x9f/0xf0
[  320.594587][T17126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.594597][T17126] RIP: 0033:0x7fe1d178e9a9
[  320.594608][T17126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.594618][T17126] RSP: 002b:00007fe1cf5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  320.594629][T17126] RAX: ffffffffffffffda RBX: 00007fe1d19b5fa0 RCX: 00007fe1d178e9a9
[  320.594636][T17126] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  320.594642][T17126] RBP: 00007fe1d1810d69 R08: 0000000000000000 R09: 0000000000000000
[  320.594648][T17126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  320.594653][T17126] R13: 0000000000000000 R14: 00007fe1d19b5fa0 R15: 00007ffc26d26878
[  320.594668][T17126]  </TASK>
[  321.060194][T17136] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3338'.
[  321.362224][T17142] netem: change failed
[  321.462751][T17146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3343'.
[  321.591913][T17150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3344'.
[  322.549949][T17163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3348'.
[  322.559590][T17163] openvswitch: netlink: Flow key attr not present in new flow.
[  322.579932][T17165] vcan0: tx drop: invalid da for name 0x0000000000000001
[  322.707856][T17172] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3352'.
[  322.713749][T17172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3352'.
[  322.866601][T17180] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3355'.
[  322.902245][T17180] xt_socket: unknown flags 0xfc
[  322.906934][T17182] netlink: 'syz.1.3356': attribute type 13 has an invalid length.
[  322.938664][T17182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  323.077167][T17188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3359'.
[  323.104761][T17191] syzkaller1: entered promiscuous mode
[  323.106916][T17191] syzkaller1: entered allmulticast mode
[  323.257630][T17202] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  323.268115][T17202] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  323.296580][T17205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3363'.
[  323.398338][T17209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3365'.
[  323.705745][T17242] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3376'.
[  323.715747][T17243] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3377'.
[  324.679797][T17273] C speed is unknown, defaulting to 1000
[  324.912103][T17277] xt_l2tp: missing protocol rule (udp|l2tpip)
[  325.040228][T17283] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3385'.
[  325.042996][T17283] netlink: 'syz.2.3385': attribute type 1 has an invalid length.
[  325.085042][T17292] pim6reg1: entered promiscuous mode
[  325.087102][T17292] pim6reg1: entered allmulticast mode
[  325.311288][T17312] tipc: Enabling of bearer <et:g> rejected, media not registered
[  325.368766][T17315] netlink: 'syz.2.3393': attribute type 1 has an invalid length.
[  325.422282][T17317] batadv_slave_0: entered promiscuous mode
[  325.429460][T17316] batadv_slave_0: left promiscuous mode
[  325.806929][T17339] C speed is unknown, defaulting to 1000
[  326.244024][T17349] IPv6: NLM_F_REPLACE set, but no existing node found!
[  326.414213][ T5218] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  326.418807][ T5218] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  326.422590][ T5218] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  326.426295][ T5218] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  326.429712][ T5218] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  326.491988][T17362] C speed is unknown, defaulting to 1000
[  326.513104][T17366] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  326.669880][T17362] chnl_net:caif_netlink_parms(): no params data found
[  326.766341][T17362] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.769270][T17362] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.772822][T17362] bridge_slave_0: entered allmulticast mode
[  326.777433][T17362] bridge_slave_0: entered promiscuous mode
[  326.782451][T17362] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.787049][T17362] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.791017][T17362] bridge_slave_1: entered allmulticast mode
[  326.795886][T17362] bridge_slave_1: entered promiscuous mode
[  326.839695][T17362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  326.846951][T17362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  326.877969][T17389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  326.887004][T17388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  326.888510][T17362] team0: Port device team_slave_0 added
[  326.897469][T17362] team0: Port device team_slave_1 added
[  326.970296][T17362] batman_adv: batadv0: Adding interface: batadv_slave_0
[  326.975567][T17362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  326.990445][T17362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  326.998213][T17362] batman_adv: batadv0: Adding interface: batadv_slave_1
[  327.001373][T17362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.016101][T17362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  327.075646][T17362] hsr_slave_0: entered promiscuous mode
[  327.079713][T17362] hsr_slave_1: entered promiscuous mode
[  327.082940][T17362] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  327.088712][T17362] Cannot create hsr debugfs directory
[  327.092832][T17405] x_tables: duplicate underflow at hook 2
[  327.260178][T17412] No such timeout policy "syz0"
[  327.289478][T17414] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  327.292470][T17414] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  327.426999][T17362] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  327.437718][T17362] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  327.447353][T17362] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  327.461993][T17362] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  327.647425][T17432] netlink: 'syz.2.3424': attribute type 10 has an invalid length.
[  327.681746][T17432] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.706555][T17432] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  327.726942][T17362] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.811720][T17362] 8021q: adding VLAN 0 to HW filter on device team0
[  327.852255][ T8281] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.855580][ T8281] bridge0: port 1(bridge_slave_0) entered forwarding state
[  327.872197][ T8281] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.875323][ T8281] bridge0: port 2(bridge_slave_1) entered forwarding state
[  328.215629][T17442] RDS: rds_bind could not find a transport for ::ffff:8.1.1.0, load rds_tcp or rds_rdma?
[  328.247447][T17362] 8021q: adding VLAN 0 to HW filter on device batadv0
[  328.331818][T17362] veth0_vlan: entered promiscuous mode
[  328.344872][T17362] veth1_vlan: entered promiscuous mode
[  328.426282][T17362] veth0_macvtap: entered promiscuous mode
[  328.432047][T17362] veth1_macvtap: entered promiscuous mode
[  328.473262][T17362] batman_adv: batadv0: Interface activated: batadv_slave_0
[  328.491360][T17362] batman_adv: batadv0: Interface activated: batadv_slave_1
[  328.514938][ T5830] Bluetooth: hci3: command tx timeout
[  328.530039][T17362] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  328.533489][T17362] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  328.542465][T17362] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.548153][T17362] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.672388][  T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.676880][  T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.717468][  T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.720145][  T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  329.016985][T17486] __nla_validate_parse: 11 callbacks suppressed
[  329.016999][T17486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3437'.
[  329.036406][T17486] wg1 speed is unknown, defaulting to 1000
[  329.038291][T17486] wg1 speed is unknown, defaulting to 1000
[  329.050706][T17486] wg1 speed is unknown, defaulting to 1000
[  329.072551][T17486] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  329.100334][T17486] wg1 speed is unknown, defaulting to 1000
[  329.109400][T17486] wg1 speed is unknown, defaulting to 1000
[  329.116379][T17486] wg1 speed is unknown, defaulting to 1000
[  329.120508][T17486] wg1 speed is unknown, defaulting to 1000
[  329.125039][T17486] wg1 speed is unknown, defaulting to 1000
[  329.130525][T17486] wg1 speed is unknown, defaulting to 1000
[  329.135788][T17486] wg1 speed is unknown, defaulting to 1000
[  329.140619][T17486] wg1 speed is unknown, defaulting to 1000
[  329.143561][T17486] wg1 speed is unknown, defaulting to 1000
[  329.146760][T17486] wg1 speed is unknown, defaulting to 1000
[  329.149589][T17486] wg1 speed is unknown, defaulting to 1000
[  329.152569][T17486] wg1 speed is unknown, defaulting to 1000
[  329.155873][T17486] wg1 speed is unknown, defaulting to 1000
[  329.288079][T17499] veth0: entered promiscuous mode
[  329.294747][T17499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3441'.
[  329.451153][T17509] xt_ecn: cannot match TCP bits for non-tcp packets
[  329.458982][T17509] pimreg: entered allmulticast mode
[  329.461700][T17509] pimreg: left allmulticast mode
[  329.654183][T17514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3445'.
[  330.010849][T17534] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3452'.
[  330.046122][T17540] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.107631][ T5877] IPVS: starting estimator thread 0...
[  330.194415][T17545] IPVS: using max 61 ests per chain, 146400 per kthread
[  330.229289][T17552] netlink: 'syz.2.3457': attribute type 1 has an invalid length.
[  330.277839][T17552] bond1: entered promiscuous mode
[  330.285974][T17552] 8021q: adding VLAN 0 to HW filter on device bond1
[  330.308385][T17557] 8021q: adding VLAN 0 to HW filter on device bond1
[  330.310757][T17557] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  330.315722][T17557] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  330.332384][T17557] bond1: (slave vcan1): making interface the new active one
[  330.335611][T17557] vcan1: entered promiscuous mode
[  330.339878][T17557] bond1: (slave vcan1): Enslaving as an active interface with an up link
[  330.344432][T17560] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  330.594136][ T5830] Bluetooth: hci3: command tx timeout
[  331.361139][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3465'.
[  331.377522][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3465'.
[  331.393129][T17586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3465'.
[  331.425854][T17586] syzkaller1: entered promiscuous mode
[  331.427966][T17586] syzkaller1: entered allmulticast mode
[  331.507642][T17593] C speed is unknown, defaulting to 1000
[  331.511124][T17593] wg1 speed is unknown, defaulting to 1000
[  331.916323][T17608] 8021q: adding VLAN 0 to HW filter on device bond0
[  332.086045][T17621] sctp: [Deprecated]: syz.1.3475 (pid 17621) Use of struct sctp_assoc_value in delayed_ack socket option.
[  332.086045][T17621] Use struct sctp_sack_info instead
[  332.287873][T17640] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3482'.
[  332.366821][T17648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3485'.
[  332.428581][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3486'.
[  332.686380][ T5830] Bluetooth: hci3: command tx timeout
[  332.787061][T17677] delete_channel: no stack
[  332.876465][T17681] C speed is unknown, defaulting to 1000
[  332.879099][T17681] wg1 speed is unknown, defaulting to 1000
[  332.896738][T17686] netlink: 'syz.2.3498': attribute type 1 has an invalid length.
[  332.986807][T17698] sctp: [Deprecated]: syz.2.3499 (pid 17698) Use of int in maxseg socket option.
[  332.986807][T17698] Use struct sctp_assoc_value instead
[  333.206368][T17713] C speed is unknown, defaulting to 1000
[  333.209576][T17713] wg1 speed is unknown, defaulting to 1000
[  333.467482][T17720] netlink: 'syz.3.3504': attribute type 4 has an invalid length.
[  333.481520][T17720] netlink: 'syz.3.3504': attribute type 4 has an invalid length.
[  333.609324][T17732] netlink: 'syz.2.3508': attribute type 1 has an invalid length.
[  333.643487][T17732] 8021q: adding VLAN 0 to HW filter on device bond2
[  334.267574][T17768] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  334.270382][ T5742] IPVS: starting estimator thread 0...
[  334.280812][T17772] netlink: 'syz.1.3520': attribute type 1 has an invalid length.
[  334.283459][T17772] __nla_validate_parse: 68 callbacks suppressed
[  334.283473][T17772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3520'.
[  334.375274][T17773] IPVS: using max 62 ests per chain, 148800 per kthread
[  334.400727][T17778] netlink: 'syz.3.3521': attribute type 1 has an invalid length.
[  334.403404][T17778] netlink: 'syz.3.3521': attribute type 3 has an invalid length.
[  334.406546][T17778] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3521'.
[  334.410538][T17778] NCSI netlink: No device for ifindex 246
[  334.631826][T17791] netlink: 'syz.3.3527': attribute type 1 has an invalid length.
[  334.665483][T17793] netlink: 'syz.1.3528': attribute type 1 has an invalid length.
[  334.674199][ T8281] wlan0: Trigger new scan to find an IBSS to join
[  334.683924][T17793] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3528'.
[  334.732307][T17795] C speed is unknown, defaulting to 1000
[  334.736696][T17795] wg1 speed is unknown, defaulting to 1000
[  334.754514][ T5830] Bluetooth: hci3: command tx timeout
[  335.019240][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3534'.
[  335.133065][T17810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3536'.
[  335.555806][T17842] xt_ecn: cannot match TCP bits for non-tcp packets
[  335.777431][T17858] bridge2: entered promiscuous mode
[  335.779714][T17858] bridge2: entered allmulticast mode
[  335.864681][T17862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  335.867396][T17862] IPv6: NLM_F_CREATE should be set when creating new route
[  335.870060][T17862] IPv6: NLM_F_CREATE should be set when creating new route
[  335.872869][T17862] IPv6: NLM_F_CREATE should be set when creating new route
[  335.895146][T17862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  336.062538][T17875] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  336.211985][T17877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  336.219740][T17890] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3559'.
[  336.305791][T17895] netlink: 'syz.2.3561': attribute type 1 has an invalid length.
[  336.385109][T17899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3563'.
[  336.385620][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3564'.
[  336.391342][T17902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3564'.
[  336.394610][T17902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3564'.
[  336.463332][T17905] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.088602][T17954] C speed is unknown, defaulting to 1000
[  337.092016][T17954] wg1 speed is unknown, defaulting to 1000
[  337.221819][T17959] xt_CT: No such helper "snmp"
[  337.436314][T17962] netlink: 'syz.1.3581': attribute type 7 has an invalid length.
[  337.478691][T17962] : entered promiscuous mode
[  337.506035][T17969] C speed is unknown, defaulting to 1000
[  337.508817][T17969] wg1 speed is unknown, defaulting to 1000
[  337.605166][T17973] syzkaller0: entered promiscuous mode
[  337.606946][T17973] syzkaller0: entered allmulticast mode
[  337.719132][ T8281] wlan0: Trigger new scan to find an IBSS to join
[  338.757210][   T60] block nbd0: Possible stuck request ffff888022448000: control (read@0,1024B). Runtime 210 seconds
[  338.760949][   T60] block nbd0: Possible stuck request ffff888022448200: control (read@1024,1024B). Runtime 210 seconds
[  338.766345][   T60] block nbd0: Possible stuck request ffff888022448400: control (read@2048,1024B). Runtime 210 seconds
[  338.769892][   T60] block nbd0: Possible stuck request ffff888022448600: control (read@3072,1024B). Runtime 210 seconds
[  339.410181][T17981] tipc: Started in network mode
[  339.412378][T17981] tipc: Node identity d254e9f1c40c, cluster identity 4711
[  339.419375][T17981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.422012][T17981] syzkaller0: entered promiscuous mode
[  339.436601][T17981] syzkaller0: entered allmulticast mode
[  339.471456][T17981] tipc: Resetting bearer <eth:syzkaller0>
[  339.482470][T17980] tipc: Resetting bearer <eth:syzkaller0>
[  339.498091][T17980] tipc: Disabling bearer <eth:syzkaller0>
[  339.645613][T17998] netlink: 'syz.2.3594': attribute type 1 has an invalid length.
[  339.660410][T17994] ip_vti0: left allmulticast mode
[  339.720047][T17994] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  339.755771][T17994] ip6gretap0: left allmulticast mode
[  339.758285][T17994] macsec2: left promiscuous mode
[  339.760414][T17994] macsec2: left allmulticast mode
[  339.769124][T17994] bond10: left promiscuous mode
[  339.780495][T17994] macsec4: left promiscuous mode
[  339.782634][T17994] macsec4: left allmulticast mode
[  339.794505][T17994] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  339.797438][T17994] macsec6: left promiscuous mode
[  339.799463][T17994] macsec6: left allmulticast mode
[  339.804238][T17994] ip6tnl2: left promiscuous mode
[  339.951779][T18009] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  339.977578][T18009] netlink: 'syz.3.3598': attribute type 21 has an invalid length.
[  339.981816][T18009] __nla_validate_parse: 3 callbacks suppressed
[  339.981831][T18009] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3598'.
[  340.039792][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3600'.
[  340.138440][T18018] C speed is unknown, defaulting to 1000
[  340.142808][T18018] wg1 speed is unknown, defaulting to 1000
[  340.174869][T18016] nbd3: detected capacity change from 0 to 63
[  340.179293][T18022] block nbd3: NBD_DISCONNECT
[  340.187310][T18022] block nbd3: Disconnected due to user request.
[  340.195308][T18022] block nbd3: shutting down sockets
[  340.227066][    C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  340.230519][    C1] Buffer I/O error on dev nbd3, logical block 0, async page read
[  340.233083][    C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  340.236189][    C1] Buffer I/O error on dev nbd3, logical block 1, async page read
[  340.239090][    C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  340.242240][    C1] Buffer I/O error on dev nbd3, logical block 2, async page read
[  340.244861][    C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  340.248015][    C1] Buffer I/O error on dev nbd3, logical block 3, async page read
[  340.254969][ T9151] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  340.258751][ T9151] Buffer I/O error on dev nbd3, logical block 0, async page read
[  340.261891][ T9151] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  340.282964][ T9151] Buffer I/O error on dev nbd3, logical block 1, async page read
[  340.290694][ T9151] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  340.308057][ T9151] Buffer I/O error on dev nbd3, logical block 2, async page read
[  340.325916][ T9151] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  340.337383][ T9151] Buffer I/O error on dev nbd3, logical block 3, async page read
[  340.351084][ T9151] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  340.366303][ T9151] Buffer I/O error on dev nbd3, logical block 0, async page read
[  340.377925][ T9151] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  340.392709][ T9151] Buffer I/O error on dev nbd3, logical block 1, async page read
[  340.409460][ T9151] ldm_validate_partition_table(): Disk read failed.
[  340.418453][ T9151] Dev nbd3: unable to read RDB block 0
[  340.422926][ T9151]  nbd3: unable to read partition table
[  340.456725][ T9151] ldm_validate_partition_table(): Disk read failed.
[  340.471746][ T9151] Dev nbd3: unable to read RDB block 0
[  340.479376][ T9151]  nbd3: unable to read partition table
[  340.799761][T18049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3610'.
[  340.890904][T18049] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.3610'.
[  340.977445][T18057] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component
[  341.028953][T18061] syzkaller0: tun_chr_ioctl cmd 1074025675
[  341.033695][T18061] syzkaller0: persist disabled
[  341.053872][T18066] xt_cgroup: xt_cgroup: no path or classid specified
[  341.093140][T18068] syzkaller0: tun_chr_ioctl cmd 1074812118
[  342.593099][T18079] netlink: 201916 bytes leftover after parsing attributes in process `syz.3.3622'.
[  342.619121][T18079] syzkaller1: entered promiscuous mode
[  342.620837][T18079] syzkaller1: entered allmulticast mode
[  342.729599][T18090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3626'.
[  342.733119][T18086] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3626'.
[  342.836700][T18098] veth0_vlan: entered allmulticast mode
[  342.949945][T18107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3632'.
[  343.017852][T18109] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  343.166185][T18118] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3636'.
[  343.171252][T18115] xt_TCPMSS: Only works on TCP SYN packets
[  343.226868][T18120] C speed is unknown, defaulting to 1000
[  343.230635][T18120] wg1 speed is unknown, defaulting to 1000
[  343.441365][T18120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3638'.
[  343.607020][T18139] syzkaller1: entered promiscuous mode
[  343.609337][T18139] syzkaller1: entered allmulticast mode
[  343.690065][T18141] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  343.826322][T18149] GUP no longer grows the stack in syz.3.3651 (18149): 200000006000-20000000a000 (200000005000)
[  343.830478][T18149] CPU: 1 UID: 0 PID: 18149 Comm: syz.3.3651 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  343.830501][T18149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  343.830510][T18149] Call Trace:
[  343.830518][T18149]  <TASK>
[  343.830527][T18149]  dump_stack_lvl+0x189/0x250
[  343.830552][T18149]  ? __pfx_dump_stack_lvl+0x10/0x10
[  343.830567][T18149]  ? __pfx__printk+0x10/0x10
[  343.830605][T18149]  ? find_vma+0xe7/0x160
[  343.830634][T18149]  __get_user_pages+0x2a60/0x30b0
[  343.830677][T18149]  ? __pfx___get_user_pages+0x10/0x10
[  343.830694][T18149]  ? __gup_longterm_locked+0xbf7/0x15b0
[  343.830709][T18149]  ? down_read_killable+0x1d1/0x350
[  343.830725][T18149]  ? try_get_folio+0x633/0x660
[  343.830745][T18149]  __gup_longterm_locked+0xd66/0x15b0
[  343.830765][T18149]  ? try_grab_folio_fast+0x1be/0x4f0
[  343.830787][T18149]  ? gup_fast_fallback+0x1afc/0x2260
[  343.830804][T18149]  gup_fast_fallback+0x1cd4/0x2260
[  343.830842][T18149]  ? __pfx_gup_fast_fallback+0x10/0x10
[  343.830858][T18149]  ? trace_contention_end+0x39/0x120
[  343.830879][T18149]  ? __mutex_lock+0x330/0xe80
[  343.830895][T18149]  ? is_valid_gup_args+0x11f/0x200
[  343.830912][T18149]  ? get_user_pages_fast+0x4d/0xb0
[  343.830927][T18149]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  343.830948][T18149]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  343.830959][T18149]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  343.830979][T18149]  ? wait_for_space+0x24d/0x2d0
[  343.831000][T18149]  iov_iter_get_pages2+0x5e/0xa0
[  343.831016][T18149]  __se_sys_vmsplice+0x548/0x10d0
[  343.831040][T18149]  ? wake_up_q+0xca/0x110
[  343.831057][T18149]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  343.831078][T18149]  ? __pfx_futex_wake+0x10/0x10
[  343.831097][T18149]  ? __lock_acquire+0xab9/0xd20
[  343.831132][T18149]  ? do_pipe2+0xf7/0x170
[  343.831147][T18149]  ? rcu_is_watching+0x15/0xb0
[  343.831167][T18149]  ? do_syscall_64+0xbe/0x3b0
[  343.831186][T18149]  do_syscall_64+0xfa/0x3b0
[  343.831202][T18149]  ? lockdep_hardirqs_on+0x9c/0x150
[  343.831217][T18149]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.831232][T18149]  ? exc_page_fault+0x9f/0xf0
[  343.831245][T18149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.831257][T18149] RIP: 0033:0x7fbc7e38e9a9
[  343.831271][T18149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  343.831318][T18149] RSP: 002b:00007fbc7f29d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  343.831332][T18149] RAX: ffffffffffffffda RBX: 00007fbc7e5b5fa0 RCX: 00007fbc7e38e9a9
[  343.831343][T18149] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  343.831352][T18149] RBP: 00007fbc7e410d69 R08: 0000000000000000 R09: 0000000000000000
[  343.831361][T18149] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  343.831369][T18149] R13: 0000000000000000 R14: 00007fbc7e5b5fa0 R15: 00007ffe1a8b5e08
[  343.831390][T18149]  </TASK>
[  344.397405][T18176] IPv6: addrconf: prefix option has invalid lifetime
[  344.984443][T18209] __nla_validate_parse: 7 callbacks suppressed
[  344.984455][T18209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3668'.
[  344.994784][T18209] pim6reg: entered allmulticast mode
[  345.024937][T18216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3672'.
[  345.284215][T18242] bond0: Device is already in use.
[  345.312240][T18246] tipc: Started in network mode
[  345.315451][T18246] tipc: Node identity 72182fc3a649, cluster identity 4711
[  345.317713][T18246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.322327][T18246] syzkaller0: entered promiscuous mode
[  345.326169][T18246] syzkaller0: entered allmulticast mode
[  345.345903][T18246] tipc: Resetting bearer <eth:syzkaller0>
[  345.349740][T18245] tipc: Resetting bearer <eth:syzkaller0>
[  345.378074][T18245] tipc: Disabling bearer <eth:syzkaller0>
[  345.521302][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3683'.
[  345.568469][T18260] _Z`Ԁ@: entered promiscuous mode
[  345.681079][   T33] audit: type=1107 audit(1752856009.994:6): pid=18267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  345.785812][T18278] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3690'.
[  345.790324][T18278] netlink: 'syz.2.3690': attribute type 12 has an invalid length.
[  345.793348][T18278] netlink: 'syz.2.3690': attribute type 29 has an invalid length.
[  345.797390][T18278] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3690'.
[  345.801206][T18278] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3690'.
[  345.889625][T18287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3693'.
[  345.890468][T18285] netlink: 'syz.2.3692': attribute type 9 has an invalid length.
[  345.892809][T18287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3693'.
[  346.133014][T18296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3696'.
[  346.136318][T18296] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  346.169688][T18298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3698'.
[  346.233768][T18303] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  346.248433][T18303] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  348.012182][T18396] IPVS: length: 38 != 8
[  348.400784][T18417] netlink: 'syz.3.3740': attribute type 10 has an invalid length.
[  349.257831][T18441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  349.285514][T18441] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.289345][T18441] syzkaller0: entered promiscuous mode
[  349.291585][T18441] syzkaller0: entered allmulticast mode
[  349.313471][T18441] tipc: Resetting bearer <eth:syzkaller0>
[  349.327310][T18440] tipc: Resetting bearer <eth:syzkaller0>
[  349.347332][T18440] tipc: Disabling bearer <eth:syzkaller0>
[  349.358614][T18443] netlink: 'syz.3.3749': attribute type 4 has an invalid length.
[  349.365458][T18443] netlink: 'syz.3.3749': attribute type 4 has an invalid length.
[  349.445040][T18445] delete_channel: no stack
[  349.449676][T18444] delete_channel: no stack
[  349.777467][T18460] netlink: 'syz.3.3756': attribute type 1 has an invalid length.
[  349.791074][T18461] netlink: 'syz.2.3754': attribute type 10 has an invalid length.
[  350.190732][T18474] __nla_validate_parse: 13 callbacks suppressed
[  350.190749][T18474] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3761'.
[  350.334619][T18484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  350.557137][T18500] netlink: 'syz.1.3769': attribute type 1 has an invalid length.
[  350.569000][T18500] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  350.635337][T18507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.677024][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3774'.
[  350.740702][T18507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.818901][T18507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.836724][T18521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3775'.
[  350.845898][T18521] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3775'.
[  350.848825][T18521] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3775'.
[  350.851941][T18521] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3775'.
[  350.855096][T18521] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3775'.
[  350.909534][T18507] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.922549][T18524] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3776'.
[  350.936647][T18529] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3777'.
[  351.104825][T18507] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  351.122017][T18507] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  351.139760][T18507] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  351.159421][T18507] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  351.232425][T18550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3782'.
[  351.610959][T18566] syzkaller0: entered promiscuous mode
[  351.623497][T18566] syzkaller0: entered allmulticast mode
[  353.154913][ T5218] Bluetooth: hci3: command 0x0405 tx timeout
[  353.292186][ T5876] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  355.208399][T18644] __nla_validate_parse: 7 callbacks suppressed
[  355.208412][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3814'.
[  355.849407][T18697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3833'.
[  356.051379][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3839'.
[  356.116194][T18719] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3842'.
[  356.143932][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3841'.
[  356.155849][T18717] syzkaller1: entered promiscuous mode
[  356.157595][T18717] syzkaller1: entered allmulticast mode
[  356.176237][T18722] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  356.292456][T18728] netlink: 'syz.3.3846': attribute type 2 has an invalid length.
[  356.325279][T18732] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  356.369835][T18734] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  356.682694][T18753] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3854'.
[  357.022149][T18773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3859'.
[  357.069065][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3861'.
[  357.296900][T18787] C speed is unknown, defaulting to 1000
[  357.300456][T18787] wg1 speed is unknown, defaulting to 1000
[  357.312129][T18791] netlink: 'syz.1.3865': attribute type 13 has an invalid length.
[  357.316908][T18791] netlink: 'syz.1.3865': attribute type 17 has an invalid length.
[  357.336570][T18791] erspan0: left promiscuous mode
[  357.342033][T18791] ip6gretap0: left promiscuous mode
[  357.351061][T18791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  357.478789][T18796] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3868'.
[  357.575970][T18798] netlink: 'syz.3.3869': attribute type 1 has an invalid length.
[  357.579126][T18798] netlink: 'syz.3.3869': attribute type 1 has an invalid length.
[  357.583109][T18798] netlink: 'syz.3.3869': attribute type 1 has an invalid length.
[  357.592543][T18798] block nbd1: shutting down sockets
[  357.875790][T18815] netlink: 'syz.3.3872': attribute type 8 has an invalid length.
[  358.702784][T18839] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  359.029628][T18860] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.032764][T18860] syzkaller0: entered promiscuous mode
[  359.035191][T18860] syzkaller0: entered allmulticast mode
[  359.041809][T18864] netlink: 136784 bytes leftover after parsing attributes in process `syz.3.3889'.
[  359.044994][T18864] netlink: zone id is out of range
[  359.046747][T18864] netlink: zone id is out of range
[  359.048345][T18864] netlink: zone id is out of range
[  359.049926][T18864] netlink: zone id is out of range
[  359.051516][T18864] netlink: zone id is out of range
[  359.053100][T18864] netlink: zone id is out of range
[  359.067828][T18860] tipc: Resetting bearer <eth:syzkaller0>
[  359.074989][T18858] tipc: Resetting bearer <eth:syzkaller0>
[  359.089937][T18858] tipc: Disabling bearer <eth:syzkaller0>
[  359.253429][T18881] netlink: 'syz.2.3898': attribute type 5 has an invalid length.
[  360.427683][T18916] netlink: 'syz.2.3908': attribute type 1 has an invalid length.
[  360.448975][T18916] gretap1: entered promiscuous mode
[  360.606339][T18927] __nla_validate_parse: 3 callbacks suppressed
[  360.606355][T18927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3911'.
[  360.957830][T18943] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  360.965548][T18943] netlink: 'syz.3.3916': attribute type 1 has an invalid length.
[  360.969085][T18943] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3916'.
[  360.972533][T18943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3916'.
[  361.053323][T18949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3918'.
[  361.057981][T18952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3918'.
[  361.070839][T18950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3918'.
[  361.212826][T18963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3923'.
[  361.290319][T18968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3925'.
[  361.296503][T18968] netlink: 'syz.2.3925': attribute type 7 has an invalid length.
[  361.299443][T18968] netlink: 'syz.2.3925': attribute type 8 has an invalid length.
[  361.303194][T18968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3925'.
[  361.310693][T18968] erspan0: entered promiscuous mode
[  361.317056][T18968] batadv_slave_1: entered promiscuous mode
[  361.622048][T18997] netlink: 'syz.2.3933': attribute type 10 has an invalid length.
[  361.625460][T18997] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3933'.
[  361.629202][T18997] dummy0: entered promiscuous mode
[  361.641024][T18997] bridge0: port 3(dummy0) entered blocking state
[  361.645241][T18997] bridge0: port 3(dummy0) entered disabled state
[  361.647991][T18997] dummy0: entered allmulticast mode
[  361.652732][T18997] bridge0: port 3(dummy0) entered blocking state
[  361.655822][T18997] bridge0: port 3(dummy0) entered forwarding state
[  361.830998][T19010] lo speed is unknown, defaulting to 1000
[  361.831014][T19008] tipc: Cannot configure node identity twice
[  361.838010][T19010] lo speed is unknown, defaulting to 1000
[  361.838568][T19008] xt_recent: hitcount (262143) is larger than allowed maximum (65535)
[  361.840445][T19010] lo speed is unknown, defaulting to 1000
[  361.862933][T19010] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  361.905461][T19010] lo speed is unknown, defaulting to 1000
[  361.914993][T19010] lo speed is unknown, defaulting to 1000
[  361.917800][T19010] lo speed is unknown, defaulting to 1000
[  361.925047][T19010] lo speed is unknown, defaulting to 1000
[  361.935856][T19010] lo speed is unknown, defaulting to 1000
[  361.938494][T19010] lo speed is unknown, defaulting to 1000
[  361.941122][T19010] lo speed is unknown, defaulting to 1000
[  361.944432][T19010] lo speed is unknown, defaulting to 1000
[  361.959182][T19010] lo speed is unknown, defaulting to 1000
[  361.964532][T19010] lo speed is unknown, defaulting to 1000
[  361.967191][T19010] lo speed is unknown, defaulting to 1000
[  361.982448][T19010] lo speed is unknown, defaulting to 1000
[  361.993038][T19010] lo speed is unknown, defaulting to 1000
[  361.999209][T19010] lo speed is unknown, defaulting to 1000
[  362.001891][T19010] lo speed is unknown, defaulting to 1000
[  362.004893][T19010] lo speed is unknown, defaulting to 1000
[  362.007498][T19010] lo speed is unknown, defaulting to 1000
[  362.010081][T19010] lo speed is unknown, defaulting to 1000
[  362.012676][T19010] lo speed is unknown, defaulting to 1000
[  362.026288][T19024] netlink: 'syz.3.3942': attribute type 1 has an invalid length.
[  362.028828][T19024] netlink: 'syz.3.3942': attribute type 11 has an invalid length.
[  362.043466][T19010] lo speed is unknown, defaulting to 1000
[  362.046666][T19010] lo speed is unknown, defaulting to 1000
[  362.049454][T19010] lo speed is unknown, defaulting to 1000
[  362.102014][T19028] netlink: 'syz.1.3944': attribute type 10 has an invalid length.
[  362.107035][T19028] net_ratelimit: 4066 callbacks suppressed
[  362.107046][T19028] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  362.242808][T19036] C speed is unknown, defaulting to 1000
[  362.248636][T19036] wg1 speed is unknown, defaulting to 1000
[  362.252002][T19036] lo speed is unknown, defaulting to 1000
[  362.296700][T19043] netlink: 'syz.2.3948': attribute type 1 has an invalid length.
[  362.315991][T19043] syzkaller1: entered promiscuous mode
[  362.317865][T19043] syzkaller1: entered allmulticast mode
[  363.073804][T19070] netlink: 'syz.2.3958': attribute type 11 has an invalid length.
[  363.370017][T19080] bridge: RTM_NEWNEIGH with invalid state 0x1
[  363.900562][T19124] dvmrp2: entered allmulticast mode
[  364.045195][T19127] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.201600][T19147] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  364.219809][T19145] netlink: 'syz.2.3978': attribute type 2 has an invalid length.
[  364.316568][T19151] xt_CT: No such helper "snmp_trap"
[  364.796348][T19201] netlink: 'syz.1.3996': attribute type 1 has an invalid length.
[  364.812329][T19199] dvmrp1: entered allmulticast mode
[  364.869375][T19206] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  366.495003][T19230] netlink: 'syz.2.4007': attribute type 14 has an invalid length.
[  366.715424][T19248] tipc: Enabling of bearer <et:g> rejected, media not registered
[  366.762820][T19255] netlink: 'syz.1.4018': attribute type 1 has an invalid length.
[  366.988702][T19280] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.001382][T19280] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.004831][T19280] syzkaller0: entered promiscuous mode
[  367.007065][T19280] syzkaller0: entered allmulticast mode
[  367.016257][T19280] tipc: Resetting bearer <eth:syzkaller0>
[  367.021969][T19279] tipc: Resetting bearer <eth:syzkaller0>
[  367.048404][T19279] tipc: Disabling bearer <eth:syzkaller0>
[  367.054120][T19283] __nla_validate_parse: 84 callbacks suppressed
[  367.054136][T19283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4025'.
[  367.303193][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4033'.
[  367.330828][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4034'.
[  367.421746][T19306] C speed is unknown, defaulting to 1000
[  367.427713][T19306] wg1 speed is unknown, defaulting to 1000
[  367.431881][T19306] lo speed is unknown, defaulting to 1000
[  367.628113][T19316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4040'.
[  367.862990][T19328] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4044'.
[  368.131306][T19348] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4056'.
[  368.850260][   T60] block nbd0: Possible stuck request ffff888022448000: control (read@0,1024B). Runtime 240 seconds
[  368.854292][   T60] block nbd0: Possible stuck request ffff888022448200: control (read@1024,1024B). Runtime 240 seconds
[  368.857717][   T60] block nbd0: Possible stuck request ffff888022448400: control (read@2048,1024B). Runtime 240 seconds
[  368.863972][   T60] block nbd0: Possible stuck request ffff888022448600: control (read@3072,1024B). Runtime 240 seconds
[  368.927193][T19352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4052'.
[  368.935552][T19352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4052'.
[  369.027763][T19361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4054'.
[  369.048635][T19357] xt_CT: No such helper "snmp"
[  369.112578][T19365] C speed is unknown, defaulting to 1000
[  369.130678][T19365] wg1 speed is unknown, defaulting to 1000
[  369.144324][T19365] lo speed is unknown, defaulting to 1000
[  369.151780][T19367] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4059'.
[  369.239010][T19372] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  369.310625][T19375] vlan1: entered allmulticast mode
[  369.312761][T19375] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode
[  369.359610][   T33] audit: type=1107 audit(1752856033.674:7): pid=19371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  369.863090][T19401] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  370.359077][T19423] netlink: 'syz.3.4075': attribute type 2 has an invalid length.
[  370.433914][T19427] netlink: 'syz.3.4077': attribute type 1 has an invalid length.
[  370.436513][T19427] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.527638][T19436] x_tables: duplicate underflow at hook 1
[  370.635499][T19437] bond0: (slave bond_slave_1): Releasing backup interface
[  370.690595][T19443] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  370.877112][T19464] netlink: 'syz.1.4088': attribute type 13 has an invalid length.
[  371.162663][T19476] netlink: 'syz.1.4091': attribute type 2 has an invalid length.
[  371.231402][T19480] IPv6: sit2: Disabled Multicast RS
[  371.518199][T19506] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  371.518210][T19504] C speed is unknown, defaulting to 1000
[  371.519056][T19504] wg1 speed is unknown, defaulting to 1000
[  371.527398][T19504] lo speed is unknown, defaulting to 1000
[  371.838500][T19527] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7
[  371.982247][T19534] netlink: 'syz.1.4112': attribute type 1 has an invalid length.
[  372.018757][T19534] 8021q: adding VLAN 0 to HW filter on device bond14
[  372.138862][T19538] __nla_validate_parse: 15 callbacks suppressed
[  372.138880][T19538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4113'.
[  372.144228][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4114'.
[  372.153708][T19538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4113'.
[  372.276646][T19550] pim6reg9: entered allmulticast mode
[  372.423235][T19555] bridge0: entered promiscuous mode
[  372.427614][T19555] bridge0: port 4(macvlan2) entered blocking state
[  372.430375][T19555] bridge0: port 4(macvlan2) entered disabled state
[  372.433287][T19555] macvlan2: entered allmulticast mode
[  372.435438][T19555] bridge0: entered allmulticast mode
[  372.439168][T19555] macvlan2: left allmulticast mode
[  372.440856][T19555] bridge0: left allmulticast mode
[  372.444828][T19555] bridge0: left promiscuous mode
[  372.694662][T19571] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  372.738421][T19571] bond0: entered promiscuous mode
[  372.740188][T19571] bond_slave_0: entered promiscuous mode
[  372.742172][T19571] batadv0: entered promiscuous mode
[  372.812288][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4129'.
[  372.817012][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4129'.
[  372.845883][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4129'.
[  372.865098][T19588] bridge0: entered allmulticast mode
[  372.952884][T19598] netlink: 'syz.1.4135': attribute type 9 has an invalid length.
[  372.988292][T19598] netlink: 'syz.1.4135': attribute type 9 has an invalid length.
[  373.422797][T19630] C speed is unknown, defaulting to 1000
[  373.432590][T19636] pimreg: entered allmulticast mode
[  373.438894][T19630] wg1 speed is unknown, defaulting to 1000
[  373.449401][T19630] lo speed is unknown, defaulting to 1000
[  373.555261][T19640] netlink: 'syz.2.4147': attribute type 13 has an invalid length.
[  373.558177][T19640] netlink: 'syz.2.4147': attribute type 17 has an invalid length.
[  373.571678][T19645] netlink: 'syz.3.4145': attribute type 11 has an invalid length.
[  373.584026][T19645] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4145'.
[  373.586220][T19640] bridge0: left allmulticast mode
[  373.589728][T19645] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4145'.
[  373.591381][T19640] bond0: left promiscuous mode
[  373.595979][T19640] bond_slave_0: left promiscuous mode
[  373.598230][T19640] batadv0: left promiscuous mode
[  373.601615][T19640] 8021q: adding VLAN 0 to HW filter on device bond0
[  373.614836][T19640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  373.619957][   T47] lo speed is unknown, defaulting to 1000
[  374.030641][T19665] netlink: 'syz.2.4154': attribute type 32 has an invalid length.
[  374.036450][T19665] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4154'.
[  374.045396][T19665] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4154'.
[  374.081337][T19667] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20003
[  374.188061][T19674] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  374.191438][T19674] openvswitch: netlink: Duplicate key (type 0).
[  374.343500][T19684] sctp: [Deprecated]: syz.3.4162 (pid 19684) Use of int in max_burst socket option.
[  374.343500][T19684] Use struct sctp_assoc_value instead
[  374.440894][T19693] netlink: 'syz.3.4166': attribute type 1 has an invalid length.
[  374.460034][T19692] netlink: 'syz.2.4163': attribute type 8 has an invalid length.
[  374.481028][T19693] 8021q: adding VLAN 0 to HW filter on device bond1
[  374.509539][T19693] bond1: (slave bridge1): making interface the new active one
[  374.517113][T19693] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  374.538292][T19693] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  374.811626][T19721] netlink: 'syz.1.4175': attribute type 13 has an invalid length.
[  374.821453][T19721] netlink: 'syz.1.4175': attribute type 17 has an invalid length.
[  374.935301][T19721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  374.988648][T19724] C speed is unknown, defaulting to 1000
[  374.992564][T19724] wg1 speed is unknown, defaulting to 1000
[  375.020661][T19724] lo speed is unknown, defaulting to 1000
[  375.043456][T19734] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  375.047674][T19734] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  375.489951][T19755] xt_CT: No such helper "snmp"
[  375.524684][T19754] xt_CT: No such helper "snmp"
[  377.063349][T19820] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004
[  377.141674][T19829] validate_nla: 3 callbacks suppressed
[  377.141694][T19829] netlink: 'syz.2.4207': attribute type 4 has an invalid length.
[  377.166200][   T10] lo speed is unknown, defaulting to 1000
[  377.168731][   T10] syz2: Port: 1 Link DOWN
[  377.170238][T19831] netlink: 'syz.1.4208': attribute type 1 has an invalid length.
[  377.177890][T19831] netlink: 'syz.1.4208': attribute type 2 has an invalid length.
[  377.178532][T19829] netlink: 'syz.2.4207': attribute type 4 has an invalid length.
[  377.190174][ T5877] lo speed is unknown, defaulting to 1000
[  377.192527][ T5877] syz2: Port: 1 Link ACTIVE
[  377.348978][T19840] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  377.352286][T19840] syzkaller0: entered promiscuous mode
[  377.356414][T19840] syzkaller0: entered allmulticast mode
[  377.450394][T19847] __nla_validate_parse: 14 callbacks suppressed
[  377.450409][T19847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4212'.
[  377.486606][T19841] tipc: Resetting bearer <eth:syzkaller0>
[  377.507206][T19841] tipc: Disabling bearer <eth:syzkaller0>
[  377.859786][T19872] netlink: 'syz.3.4219': attribute type 1 has an invalid length.
[  377.885389][T19872] 8021q: adding VLAN 0 to HW filter on device bond2
[  377.920820][T19872] 8021q: adding VLAN 0 to HW filter on device bond2
[  377.924100][T19872] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  377.929730][T19872] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  377.978549][T19878] veth3: entered promiscuous mode
[  377.989365][T19878] bond2: (slave veth3): Enslaving as an active interface with a down link
[  378.002249][T19872] erspan0: entered allmulticast mode
[  378.018867][T19872] bond2: (slave erspan0): making interface the new active one
[  378.022042][T19872] bond2: (slave erspan0): Enslaving as an active interface with an up link
[  378.040901][T19880] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4222'.
[  378.758179][T19900] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4227'.
[  379.127524][T19920] netlink: zone id is out of range
[  379.129751][T19920] netlink: zone id is out of range
[  379.131514][T19920] netlink: zone id is out of range
[  379.133339][T19920] netlink: zone id is out of range
[  379.137286][T19920] netlink: zone id is out of range
[  379.139164][T19920] netlink: zone id is out of range
[  379.141008][T19920] netlink: zone id is out of range
[  379.142927][T19920] netlink: zone id is out of range
[  379.146887][T19920] netlink: zone id is out of range
[  379.147534][T19906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  379.155060][ T5835] lo speed is unknown, defaulting to 1000
[  379.157411][ T5835] syz2: Port: 1 Link DOWN
[  379.212610][T19921] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4230'.
[  379.266508][T19924] syzkaller1: entered promiscuous mode
[  379.268648][T19924] syzkaller1: entered allmulticast mode
[  379.601150][T19944] set match dimension is over the limit!
[  379.694570][T19951] batadv1: entered allmulticast mode
[  379.699055][T19951] 8021q: adding VLAN 0 to HW filter on device batadv1
[  379.702334][T19951] netlink: 'syz.2.4243': attribute type 1 has an invalid length.
[  379.833374][T19961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4246'.
[  379.887075][T19964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4247'.
[  379.928992][T19966] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4248'.
[  380.078561][T19970] C speed is unknown, defaulting to 1000
[  380.082261][T19970] wg1 speed is unknown, defaulting to 1000
[  380.086779][T19970] lo speed is unknown, defaulting to 1000
[  380.167918][T19972] bond15 (unregistering): Released all slaves
[  380.362016][T19988] tipc: Cannot configure node identity twice
[  380.468793][T19995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4256'.
[  380.472636][T19995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4256'.
[  380.475688][T19995] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4256'.
[  380.943276][T20020] netlink: 'syz.2.4263': attribute type 2 has an invalid length.
[  381.587258][T20051] bond15: entered promiscuous mode
[  381.589828][T20051] 8021q: adding VLAN 0 to HW filter on device bond15
[  381.736572][T20051] bond15 (unregistering): Released all slaves
[  381.756436][T20053] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  382.763865][ T5835] tipc: Node number set to 2705767946
[  383.509026][T20100] __nla_validate_parse: 5 callbacks suppressed
[  383.509039][T20100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4283'.
[  383.521590][T20100] sch_tbf: burst 0 is lower than device bridge5 mtu (1514) !
[  383.532154][T20101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4283'.
[  383.672184][T20109] netlink: 185416 bytes leftover after parsing attributes in process `syz.1.4286'.
[  383.740938][T20112] bridge6: entered promiscuous mode
[  383.980431][T20127] C speed is unknown, defaulting to 1000
[  383.985173][T20127] wg1 speed is unknown, defaulting to 1000
[  383.988860][T20127] lo speed is unknown, defaulting to 1000
[  384.587944][T20153] Cannot find del_set index 286 as target
[  384.878871][T20164] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4305'.
[  385.597445][T20173] C speed is unknown, defaulting to 1000
[  385.600491][T20173] wg1 speed is unknown, defaulting to 1000
[  385.603524][T20173] lo speed is unknown, defaulting to 1000
[  385.777377][T20179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4308'.
[  385.782636][T20179] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4308'.
[  386.199542][T20200] C speed is unknown, defaulting to 1000
[  386.204019][T20200] wg1 speed is unknown, defaulting to 1000
[  386.207912][T20200] lo speed is unknown, defaulting to 1000
[  386.464735][T20204] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4316'.
[  386.744766][T20212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4320'.
[  386.761668][T20212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4320'.
[  386.912924][T20215] unknown channel width for channel at 909000KHz?
[  386.918788][T20215] unknown channel width for channel at 909000KHz?
[  386.920765][T20215] unknown channel width for channel at 909000KHz?
[  387.306848][T20229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4326'.
[  387.424849][T20232] netlink: 'syz.1.4326': attribute type 4 has an invalid length.
[  387.946352][T20260] netlink: 'syz.3.4338': attribute type 2 has an invalid length.
[  388.020127][T20264] netlink: 'syz.3.4340': attribute type 1 has an invalid length.
[  388.142936][T20269] C speed is unknown, defaulting to 1000
[  388.146740][T20269] wg1 speed is unknown, defaulting to 1000
[  388.150546][T20269] lo speed is unknown, defaulting to 1000
[  388.519964][T20274] C speed is unknown, defaulting to 1000
[  388.525173][T20274] wg1 speed is unknown, defaulting to 1000
[  388.528814][T20274] lo speed is unknown, defaulting to 1000
[  388.784078][T20289] __nla_validate_parse: 5 callbacks suppressed
[  388.784089][T20289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4346'.
[  388.799659][T20289] netlink: 'syz.2.4346': attribute type 2 has an invalid length.
[  389.041751][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4354'.
[  389.116685][T20314] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4355'.
[  389.428318][T20331] C speed is unknown, defaulting to 1000
[  389.431632][T20331] wg1 speed is unknown, defaulting to 1000
[  389.438501][T20331] lo speed is unknown, defaulting to 1000
[  389.655067][T20347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4363'.
[  389.807092][T20353] C speed is unknown, defaulting to 1000
[  389.814780][T20353] wg1 speed is unknown, defaulting to 1000
[  389.817487][T20353] lo speed is unknown, defaulting to 1000
[  389.933118][T20359] netlink: 4452 bytes leftover after parsing attributes in process `syz.1.4365'.
[  390.115669][T20369] netlink: 4452 bytes leftover after parsing attributes in process `syz.3.4367'.
[  390.216671][T20377] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4368'.
[  390.220133][T20377] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4368'.
[  390.223014][T20377] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4368'.
[  390.226476][T20377] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4368'.
[  390.615588][T20402] wg1: entered promiscuous mode
[  390.617618][T20402] wg1: entered allmulticast mode
[  390.625955][ T5877] wg1 speed is unknown, defaulting to 1000
[  390.973120][T20406] syzkaller1: entered promiscuous mode
[  390.978749][T20406] syzkaller1: entered allmulticast mode
[  391.096528][T20411] netlink: 'syz.1.4374': attribute type 1 has an invalid length.
[  391.099251][T20412] netlink: 'syz.1.4374': attribute type 1 has an invalid length.
[  391.345892][T20423] netlink: 'syz.1.4379': attribute type 1 has an invalid length.
[  391.623853][T20442] netlink: 'syz.3.4385': attribute type 5 has an invalid length.
[  391.683147][T20450] syzkaller0: entered promiscuous mode
[  391.688319][T20450] syzkaller0: entered allmulticast mode
[  391.691658][ T5839] syzkaller0: tun_net_xmit 70
[  391.695399][T20450] syzkaller0: tun_chr_ioctl cmd 1074025677
[  391.697709][T20450] syzkaller0: Linktype set failed because interface is up
[  391.842384][T20460] C speed is unknown, defaulting to 1000
[  391.846505][T20460] wg1 speed is unknown, defaulting to 1000
[  391.849613][T20460] lo speed is unknown, defaulting to 1000
[  391.858331][T20465] netlink: 'syz.1.4393': attribute type 1 has an invalid length.
[  391.966671][T20470] macsec7: entered promiscuous mode
[  391.968551][T20470] macsec7: entered allmulticast mode
[  392.083950][T20474] netlink: 'syz.1.4396': attribute type 2 has an invalid length.
[  392.221996][T20480] C speed is unknown, defaulting to 1000
[  392.230300][T20480] wg1 speed is unknown, defaulting to 1000
[  392.239346][T20481] C speed is unknown, defaulting to 1000
[  392.243899][T20480] lo speed is unknown, defaulting to 1000
[  392.249661][T20481] wg1 speed is unknown, defaulting to 1000
[  392.252422][T20481] lo speed is unknown, defaulting to 1000
[  392.702377][T20490] 8021q: adding VLAN 0 to HW filter on device bond3
[  392.858910][T20506] netlink: 'syz.2.4403': attribute type 2 has an invalid length.
[  393.307943][T20522] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  393.756363][T20541] syzkaller1: entered promiscuous mode
[  393.758771][T20541] syzkaller1: entered allmulticast mode
[  393.957711][T20548] netlink: 'syz.2.4418': attribute type 7 has an invalid length.
[  394.266352][T20566] __nla_validate_parse: 73 callbacks suppressed
[  394.266373][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4424'.
[  394.470809][T20568] net_ratelimit: 164 callbacks suppressed
[  394.470831][T20568] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  394.805689][T20579] x_tables: duplicate underflow at hook 2
[  394.879214][T20580] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4430'.
[  395.068323][T20599] netlink: 'syz.2.4436': attribute type 3 has an invalid length.
[  395.071452][T20599] netlink: 'syz.2.4436': attribute type 6 has an invalid length.
[  395.715153][ T1094] wlan0: Trigger new scan to find an IBSS to join
[  396.016160][T20627] C speed is unknown, defaulting to 1000
[  396.020260][T20627] wg1 speed is unknown, defaulting to 1000
[  396.031320][T20627] lo speed is unknown, defaulting to 1000
[  396.560247][T20634] C speed is unknown, defaulting to 1000
[  396.565186][T20634] wg1 speed is unknown, defaulting to 1000
[  396.569071][T20634] lo speed is unknown, defaulting to 1000
[  396.775014][T20640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4446'.
[  396.935283][T20648] netlink: 'syz.3.4448': attribute type 2 has an invalid length.
[  396.943147][T20643] can: request_module (can-proto-0) failed.
[  397.104927][T20659] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4453'.
[  397.206356][T20665] bond2: (slave erspan0): Releasing active interface
[  397.238809][T20665] bridge_slave_0: left allmulticast mode
[  397.241111][T20665] bridge_slave_0: left promiscuous mode
[  397.243497][T20665] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.272170][T20671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4454'.
[  397.278707][T20665] bridge_slave_1: left allmulticast mode
[  397.284540][T20665] bridge_slave_1: left promiscuous mode
[  397.292028][T20665] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.306262][T20665] bond0: (slave bond_slave_0): Releasing backup interface
[  397.332785][T20665] bond0: (slave bond_slave_1): Releasing backup interface
[  397.366785][T20665] team0: Port device team_slave_0 removed
[  397.379460][T20665] team0: Port device team_slave_1 removed
[  397.382953][T20665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  397.387650][T20665] batman_adv: batadv0: Removing interface: batadv_slave_0
[  397.392666][T20665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  397.397803][T20665] batman_adv: batadv0: Removing interface: batadv_slave_1
[  397.424962][T20665] bond1: (slave bridge1): Releasing active interface
[  397.438673][T20665] bond2: (slave veth3): Releasing active interface
[  397.599779][T20685] netlink: 'syz.2.4460': attribute type 1 has an invalid length.
[  397.603142][T20685] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4460'.
[  397.679380][T20690] netlink: 'syz.2.4461': attribute type 1 has an invalid length.
[  397.733227][T20690] veth5: entered promiscuous mode
[  397.825802][T20697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4463'.
[  398.072418][T20719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4470'.
[  398.250611][T20731] IPVS: persistence engine module ip_vs_pe_ not found
[  398.263270][T20727] IPVS: persistence engine module ip_vs_pe_ not found
[  398.360959][T20742] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4477'.
[  398.378052][T20743] bond0: entered promiscuous mode
[  398.382378][T20743] batadv0: entered promiscuous mode
[  398.389583][T20743] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  398.392746][T20743] Cannot create hsr debugfs directory
[  398.395096][T20743] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  398.398949][T20743] hsr1: entered allmulticast mode
[  398.400928][T20743] bond0: entered allmulticast mode
[  398.403091][T20743] batadv0: entered allmulticast mode
[  398.406144][T20743] 8021q: adding VLAN 0 to HW filter on device hsr1
[  398.410760][T20743] bond0: left promiscuous mode
[  398.414442][T20743] batadv0: left promiscuous mode
[  398.689700][ T8275] wlan0: Trigger new scan to find an IBSS to join
[  398.885355][T20757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4480'.
[  398.910098][T20759] netlink: 'syz.1.4482': attribute type 7 has an invalid length.
[  398.915898][   T60] block nbd0: Possible stuck request ffff888022448000: control (read@0,1024B). Runtime 270 seconds
[  398.919952][   T60] block nbd0: Possible stuck request ffff888022448200: control (read@1024,1024B). Runtime 270 seconds
[  398.924397][   T60] block nbd0: Possible stuck request ffff888022448400: control (read@2048,1024B). Runtime 270 seconds
[  398.928338][   T60] block nbd0: Possible stuck request ffff888022448600: control (read@3072,1024B). Runtime 270 seconds
[  399.031202][T20765] netlink: 'syz.1.4483': attribute type 2 has an invalid length.
[  399.148653][T20767] netlink: 'syz.1.4484': attribute type 10 has an invalid length.
[  399.359608][T20778] __nla_validate_parse: 3 callbacks suppressed
[  399.359621][T20778] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4487'.
[  399.569705][T20786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4491'.
[  399.683323][T20793] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8
[  399.882406][T20804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4494'.
[  400.156336][T20827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4502'.
[  400.449361][T20847] C speed is unknown, defaulting to 1000
[  400.451980][T20847] wg1 speed is unknown, defaulting to 1000
[  400.454984][T20847] lo speed is unknown, defaulting to 1000
[  400.614403][T20854] pim6reg1: entered promiscuous mode
[  400.616122][T20854] pim6reg1: entered allmulticast mode
[  400.670055][T20856] netlink: 'syz.2.4511': attribute type 2 has an invalid length.
[  400.747274][T20860] openvswitch: netlink: Flow actions attr not present in new flow.
[  401.011927][T20875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4516'.
[  401.015907][T20875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4516'.
[  401.090276][T20877] netlink: zone id is out of range
[  401.092423][T20877] netlink: zone id is out of range
[  401.094714][T20877] netlink: zone id is out of range
[  401.097941][T20877] netlink: zone id is out of range
[  401.099997][T20877] netlink: zone id is out of range
[  401.102092][T20877] netlink: zone id is out of range
[  401.108811][T20877] netlink: zone id is out of range
[  401.110854][T20877] netlink: zone id is out of range
[  401.112935][T20877] netlink: zone id is out of range
[  401.249789][T20882] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4521'.
[  401.314926][T20884] netlink: 'syz.2.4522': attribute type 1 has an invalid length.
[  401.318368][T20884] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4522'.
[  401.322201][T20884] netlink: 'syz.2.4522': attribute type 1 has an invalid length.
[  401.329426][T20884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4522'.
[  401.386035][T20886] syzkaller0: entered promiscuous mode
[  401.388306][T20886] syzkaller0: entered allmulticast mode
[  401.400516][T20886] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  401.405565][T20885] tipc: Resetting bearer <eth:syzkaller0>
[  401.432632][T20885] tipc: Disabling bearer <eth:syzkaller0>
[  401.660828][T20894] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4527'.
[  401.669008][T20894] Unknown options in mask 700
[  401.716037][ T8281] wlan0: Trigger new scan to find an IBSS to join
[  401.771660][T20899] C speed is unknown, defaulting to 1000
[  401.775977][T20899] wg1 speed is unknown, defaulting to 1000
[  401.776250][T20904] C speed is unknown, defaulting to 1000
[  401.778760][T20899] lo speed is unknown, defaulting to 1000
[  401.800207][T20904] wg1 speed is unknown, defaulting to 1000
[  401.816380][T20904] lo speed is unknown, defaulting to 1000
[  401.850431][T20908] netlink: 'syz.1.4532': attribute type 2 has an invalid length.
[  402.157356][T20923] ipt_rpfilter: unknown options
[  402.408044][T20945] netlink: 'syz.2.4542': attribute type 6 has an invalid length.
[  402.414919][T20945] netlink: 'syz.2.4542': attribute type 6 has an invalid length.
[  402.426698][T20949] C speed is unknown, defaulting to 1000
[  402.429712][T20949] wg1 speed is unknown, defaulting to 1000
[  402.432448][T20949] lo speed is unknown, defaulting to 1000
[  402.438691][T20944] delete_channel: no stack
[  402.502566][T20954] dvmrp1: entered allmulticast mode
[  402.508284][T20954] pimreg: left allmulticast mode
[  402.509960][T20954] dvmrp1: left allmulticast mode
[  402.511517][T20954] dvmrp2: left allmulticast mode
[  402.558830][T20956] netlink: 'syz.2.4546': attribute type 3 has an invalid length.
[  402.599386][  T170] wlan0: Creating new IBSS network, BSSID 42:28:79:94:f7:37
[  402.684242][T20960] C speed is unknown, defaulting to 1000
[  402.687204][T20960] wg1 speed is unknown, defaulting to 1000
[  402.689919][T20960] lo speed is unknown, defaulting to 1000
[  402.788424][T20949] xt_hashlimit: max too large, truncated to 1048576
[  403.062853][T20989] xt_CT: No such helper "syz0"
[  403.598128][T21011] team0: entered promiscuous mode
[  403.600269][T21011] team_slave_0: entered promiscuous mode
[  403.607994][T21011] team_slave_1: entered promiscuous mode
[  403.669731][T21010] team0: left promiscuous mode
[  403.672070][T21010] team_slave_0: left promiscuous mode
[  403.685155][T21010] team_slave_1: left promiscuous mode
[  404.108710][T21027] validate_nla: 4 callbacks suppressed
[  404.108725][T21027] netlink: 'syz.2.4568': attribute type 26 has an invalid length.
[  404.737191][T21078] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  404.739589][T21078] CPU: 0 UID: 0 PID: 21078 Comm: syz.1.4583 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  404.739604][T21078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  404.739611][T21078] Call Trace:
[  404.739616][T21078]  <TASK>
[  404.739622][T21078]  dump_stack_lvl+0x189/0x250
[  404.739643][T21078]  ? __pfx_dump_stack_lvl+0x10/0x10
[  404.739657][T21078]  ? __pfx__printk+0x10/0x10
[  404.739671][T21078]  ? kernfs_path_from_node+0x2c/0x260
[  404.739680][T21078]  ? kernfs_path_from_node+0x2c/0x260
[  404.739687][T21078]  ? kernfs_path_from_node+0x2c/0x260
[  404.739696][T21078]  ? kernfs_path_from_node+0x22c/0x260
[  404.739703][T21078]  ? kernfs_path_from_node+0x2c/0x260
[  404.739713][T21078]  sysfs_warn_dup+0x8e/0xa0
[  404.739726][T21078]  sysfs_do_create_link_sd+0xc0/0x110
[  404.739736][T21078]  device_add_class_symlinks+0x1cf/0x240
[  404.739751][T21078]  device_add+0x475/0xb50
[  404.739767][T21078]  wiphy_register+0x199a/0x26b0
[  404.739788][T21078]  ? __pfx_wiphy_register+0x10/0x10
[  404.739803][T21078]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  404.739821][T21078]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  404.739838][T21078]  ieee80211_register_hw+0x33e1/0x4120
[  404.739861][T21078]  ? ieee80211_register_hw+0x14d1/0x4120
[  404.739877][T21078]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  404.739891][T21078]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  404.739909][T21078]  ? __hrtimer_setup+0x187/0x210
[  404.739919][T21078]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  404.739951][T21078]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  404.739981][T21078]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  404.739993][T21078]  ? trace_kmalloc+0x1f/0xd0
[  404.740007][T21078]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  404.740020][T21078]  ? kstrndup+0xbf/0x160
[  404.740035][T21078]  hwsim_new_radio_nl+0xea4/0x1b10
[  404.740050][T21078]  ? __pfx___nla_validate_parse+0x10/0x10
[  404.740068][T21078]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  404.740086][T21078]  ? __nla_parse+0x40/0x60
[  404.740098][T21078]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  404.740112][T21078]  genl_family_rcv_msg_doit+0x215/0x300
[  404.740124][T21078]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  404.740140][T21078]  ? bpf_lsm_capable+0x9/0x20
[  404.740151][T21078]  ? security_capable+0x7e/0x2e0
[  404.740164][T21078]  genl_rcv_msg+0x60e/0x790
[  404.740175][T21078]  ? __pfx_genl_rcv_msg+0x10/0x10
[  404.740183][T21078]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  404.740202][T21078]  netlink_rcv_skb+0x208/0x470
[  404.740214][T21078]  ? __pfx_genl_rcv_msg+0x10/0x10
[  404.740223][T21078]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  404.740243][T21078]  ? down_read+0x1ad/0x2e0
[  404.740254][T21078]  genl_rcv+0x28/0x40
[  404.740261][T21078]  netlink_unicast+0x75c/0x8e0
[  404.740278][T21078]  netlink_sendmsg+0x805/0xb30
[  404.740293][T21078]  ? __pfx_netlink_sendmsg+0x10/0x10
[  404.740306][T21078]  ? aa_sock_msg_perm+0x94/0x160
[  404.740316][T21078]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  404.740325][T21078]  ? __pfx_netlink_sendmsg+0x10/0x10
[  404.740343][T21078]  __sock_sendmsg+0x21c/0x270
[  404.740356][T21078]  ____sys_sendmsg+0x505/0x830
[  404.740372][T21078]  ? __pfx_____sys_sendmsg+0x10/0x10
[  404.740389][T21078]  ? import_iovec+0x74/0xa0
[  404.740404][T21078]  ___sys_sendmsg+0x21f/0x2a0
[  404.740418][T21078]  ? __pfx____sys_sendmsg+0x10/0x10
[  404.740450][T21078]  ? __fget_files+0x2a/0x420
[  404.740458][T21078]  ? __fget_files+0x3a0/0x420
[  404.740471][T21078]  __x64_sys_sendmsg+0x19b/0x260
[  404.740485][T21078]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  404.740507][T21078]  ? do_syscall_64+0xbe/0x3b0
[  404.740545][T21078]  do_syscall_64+0xfa/0x3b0
[  404.740554][T21078]  ? lockdep_hardirqs_on+0x9c/0x150
[  404.740563][T21078]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.740572][T21078]  ? exc_page_fault+0x9f/0xf0
[  404.740582][T21078]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.740591][T21078] RIP: 0033:0x7fa91458e9a9
[  404.740602][T21078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  404.740610][T21078] RSP: 002b:00007fa9153f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  404.740620][T21078] RAX: ffffffffffffffda RBX: 00007fa9147b6160 RCX: 00007fa91458e9a9
[  404.740627][T21078] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c
[  404.740632][T21078] RBP: 00007fa914610d69 R08: 0000000000000000 R09: 0000000000000000
[  404.740637][T21078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  404.740643][T21078] R13: 0000000000000000 R14: 00007fa9147b6160 R15: 00007ffdfb459618
[  404.740658][T21078]  </TASK>
[  404.967766][T21082] __nla_validate_parse: 11 callbacks suppressed
[  404.967781][T21082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4588'.
[  404.972936][T21084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4589'.
[  405.122034][T21090] netlink: 'syz.2.4592': attribute type 1 has an invalid length.
[  405.182039][T21094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4593'.
[  405.478240][T21113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4598'.
[  405.773050][T21140] netlink: 'syz.1.4607': attribute type 83 has an invalid length.
[  405.778997][T21140] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4607'.
[  405.789932][T21142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4608'.
[  406.071970][T21168] netlink: 'syz.1.4614': attribute type 1 has an invalid length.
[  406.130081][T21169] bond15: entered promiscuous mode
[  406.139826][T21169] bond15: entered allmulticast mode
[  406.142047][T21169] 8021q: adding VLAN 0 to HW filter on device bond15
[  406.170851][T21173] bridge7: entered promiscuous mode
[  406.178582][T21173] bridge7: entered allmulticast mode
[  406.185237][T21173] bond15: (slave bridge7): Enslaving as a backup interface with an up link
[  406.244489][ T5839] net_ratelimit: 7 callbacks suppressed
[  406.244504][ T5839] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  406.287254][T21181] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4619'.
[  406.325033][T21185] lo: entered promiscuous mode
[  406.326938][T21185] lo: entered allmulticast mode
[  406.331237][   T10] lo speed is unknown, defaulting to 1000
[  406.334062][T21187] netlink: 'syz.1.4622': attribute type 1 has an invalid length.
[  406.334077][T21187] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4622'.
[  406.334769][T21187] netlink: 'syz.1.4622': attribute type 11 has an invalid length.
[  406.347533][   T10] syz2: Port: 1 Link ACTIVE
[  406.374690][ T5876] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  406.521299][T21194] xt_CT: You must specify a L4 protocol and not use inversions on it
[  406.586256][T21199] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4625'.
[  406.681116][T21207] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4627'.
[  406.782996][T21214] 8021q: adding VLAN 0 to HW filter on device bond6
[  406.803402][T21214] macvlan3: entered promiscuous mode
[  406.807666][T21214] macvlan3: entered allmulticast mode
[  406.810314][T21214] bond0: entered allmulticast mode
[  406.812132][T21214] bond_slave_0: entered allmulticast mode
[  406.814098][T21214] batadv0: entered allmulticast mode
[  406.815903][T21214] bond0: entered promiscuous mode
[  406.817560][T21214] bond_slave_0: entered promiscuous mode
[  406.819537][T21214] batadv0: entered promiscuous mode
[  406.822154][T21214] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  406.831521][T21214] bond6: (slave macvlan3): Enslaving as an active interface with an up link
[  406.868010][T21221] IPVS: length: 163 != 8
[  407.095628][T21239] C speed is unknown, defaulting to 1000
[  407.098442][T21239] wg1 speed is unknown, defaulting to 1000
[  407.101154][T21239] lo speed is unknown, defaulting to 1000
[  407.400219][T21247] bond0 (unregistering): Released all slaves
[  407.425634][T21250] C speed is unknown, defaulting to 1000
[  407.429443][T21250] wg1 speed is unknown, defaulting to 1000
[  407.432521][T21250] lo speed is unknown, defaulting to 1000
[  407.731040][T21262] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  407.735116][T21262] syzkaller0: entered promiscuous mode
[  407.737069][T21262] syzkaller0: entered allmulticast mode
[  407.746925][T21262] tipc: Resetting bearer <eth:syzkaller0>
[  407.750521][T21261] tipc: Resetting bearer <eth:syzkaller0>
[  407.785048][T21261] tipc: Disabling bearer <eth:syzkaller0>
[  407.898110][T21272] netlink: 'syz.3.4647': attribute type 1 has an invalid length.
[  407.958287][T21276] tipc: New replicast peer: 255.255.255.255
[  407.961261][T21276] tipc: Enabled bearer <udp:syz2>, priority 10
[  408.113511][T21282] C speed is unknown, defaulting to 1000
[  408.126401][T21282] wg1 speed is unknown, defaulting to 1000
[  408.129669][T21282] lo speed is unknown, defaulting to 1000
[  408.421828][T21299] netlink: 'syz.2.4656': attribute type 2 has an invalid length.
[  408.452446][T21302] bridge_slave_0: entered promiscuous mode
[  408.762494][T21327] xt_limit: Overflow, try lower: 262144/524288
[  409.188276][T21369] netlink: 'syz.2.4678': attribute type 2 has an invalid length.
[  409.440791][T21390] netlink: 'syz.2.4685': attribute type 10 has an invalid length.
[  409.758761][T21427] gretap0: entered promiscuous mode
[  410.134158][T21474] netlink: 'syz.3.4707': attribute type 2 has an invalid length.
[  410.206703][T21480] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9
[  410.371956][T21498] netlink: 'syz.2.4715': attribute type 2 has an invalid length.
[  410.440788][T21500] __nla_validate_parse: 26 callbacks suppressed
[  410.440803][T21500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4716'.
[  410.511632][T21503] C speed is unknown, defaulting to 1000
[  410.514539][T21503] wg1 speed is unknown, defaulting to 1000
[  410.517877][T21503] lo speed is unknown, defaulting to 1000
[  410.729176][T21514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4720'.
[  410.781596][T21516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4721'.
[  410.933210][T21535] C speed is unknown, defaulting to 1000
[  410.936767][T21535] wg1 speed is unknown, defaulting to 1000
[  410.942440][T21535] lo speed is unknown, defaulting to 1000
[  411.414480][T21553] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4732'.
[  411.525319][T21555] netlink: 'syz.3.4733': attribute type 1 has an invalid length.
[  411.543523][T21557] sctp: [Deprecated]: syz.1.4734 (pid 21557) Use of struct sctp_assoc_value in delayed_ack socket option.
[  411.543523][T21557] Use struct sctp_sack_info instead
[  411.637826][T21562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4735'.
[  411.736429][T21564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4737'.
[  411.760247][T21564] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.769222][T21566] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  411.769525][T21569] netlink: 'syz.2.4739': attribute type 2 has an invalid length.
[  411.772256][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4737'.
[  411.787529][T21564] macvlan3: entered promiscuous mode
[  411.789286][T21564] macvlan3: entered allmulticast mode
[  411.820049][T21571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4740'.
[  411.854954][T21574] syzkaller1: entered promiscuous mode
[  411.866276][T21574] syzkaller1: entered allmulticast mode
[  411.909758][T21575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4741'.
[  411.959033][T21580] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  412.003208][T21584] netlink: 'syz.1.4745': attribute type 1 has an invalid length.
[  412.009250][T21584] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4745'.
[  412.022798][T21586] netlink: 'syz.3.4746': attribute type 1 has an invalid length.
[  412.059918][T21590] siw: device registration error -23
[  412.062657][T21590] netlink: 'syz.1.4748': attribute type 10 has an invalid length.
[  412.081304][T21593] gretap1: entered promiscuous mode
[  412.088276][T21592] netlink: 'syz.2.4749': attribute type 2 has an invalid length.
[  412.161056][T21602] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  412.168576][T21601] syzkaller1: entered promiscuous mode
[  412.173485][T21601] syzkaller1: entered allmulticast mode
[  412.482727][T21641] syzkaller1: entered promiscuous mode
[  412.485014][T21641] syzkaller1: entered allmulticast mode
[  412.797954][T21674] C speed is unknown, defaulting to 1000
[  412.800537][T21674] wg1 speed is unknown, defaulting to 1000
[  412.807136][T21674] lo speed is unknown, defaulting to 1000
[  412.920395][T21684] openvswitch: netlink: IPv6 tunnel dst address is zero
[  412.969977][T21689] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  412.975621][T21689] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.476288][ T1089] bridge0: port 3(dummy0) entered disabled state
[  413.636928][ T1089] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  414.082215][ T5218] Bluetooth: hci3: link tx timeout
[  414.084886][ T5218] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  414.089303][ T5830] Bluetooth: hci3: link tx timeout
[  414.091050][ T5830] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  414.093364][ T5830] Bluetooth: hci3: link tx timeout
[  414.098617][ T5830] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  414.131356][T21761] Unknown options in mask 700
[  414.167160][T21763] IPVS: Scheduler module ip_vs_ not found
[  414.249166][T21767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.254431][T21770] netlink: zone id is out of range
[  414.256715][T21770] netlink: zone id is out of range
[  414.258815][T21770] netlink: zone id is out of range
[  414.260633][T21770] netlink: zone id is out of range
[  414.262305][T21770] netlink: zone id is out of range
[  414.277386][T21766] tipc: Disabling bearer <eth:syzkaller0>
[  414.713299][T21798] validate_nla: 13 callbacks suppressed
[  414.713313][T21798] netlink: 'syz.1.4814': attribute type 1 has an invalid length.
[  414.742250][T21798] 8021q: adding VLAN 0 to HW filter on device bond16
[  414.767985][T21798] bond16: (slave veth11): Enslaving as an active interface with a down link
[  414.838004][T21800] vlan4: entered allmulticast mode
[  414.840199][T21800] bond16: entered allmulticast mode
[  414.844671][T21800] bond16: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  415.470391][T21824] netlink: 'syz.2.4821': attribute type 2 has an invalid length.
[  415.525723][T21828] netlink: 'syz.2.4823': attribute type 1 has an invalid length.
[  415.568329][T21828] 8021q: adding VLAN 0 to HW filter on device bond7
[  415.622232][T21828] veth9: entered promiscuous mode
[  415.651908][T21839] __nla_validate_parse: 15 callbacks suppressed
[  415.651922][T21839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4826'.
[  415.827244][T21849] sctp: [Deprecated]: syz.2.4832 (pid 21849) Use of int in max_burst socket option.
[  415.827244][T21849] Use struct sctp_assoc_value instead
[  415.831871][T21849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4832'.
[  415.836342][T21849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4832'.
[  415.839516][T21849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4832'.
[  416.113856][ T5830] Bluetooth: hci3: command 0x0405 tx timeout
[  416.151571][T21870] netlink: 'syz.2.4839': attribute type 13 has an invalid length.
[  416.154826][T21870] netlink: 'syz.2.4839': attribute type 17 has an invalid length.
[  416.157912][T21870] lo: left promiscuous mode
[  416.159745][T21870] lo: left allmulticast mode
[  416.163964][T21870] gretap0: left promiscuous mode
[  416.173963][T21870] 8021q: adding VLAN 0 to HW filter on device bond0
[  416.216691][T21874] C speed is unknown, defaulting to 1000
[  416.220053][T21874] wg1 speed is unknown, defaulting to 1000
[  416.223547][T21874] lo speed is unknown, defaulting to 1000
[  416.351859][T21880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4842'.
[  416.356859][T21880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4842'.
[  416.400392][T21886] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4845'.
[  416.533964][T21902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4849'.
[  416.546832][T21900] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  416.857216][T21926] netlink: 'syz.2.4860': attribute type 13 has an invalid length.
[  416.859958][T21926] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4860'.
[  416.867927][T21926] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  416.909487][T21931] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4862'.
[  416.990486][T21935] netlink: 'syz.1.4865': attribute type 2 has an invalid length.
[  417.103963][   T12] net_ratelimit: 4084 callbacks suppressed
[  417.103978][   T12] bond15: (slave bridge7): link status up again after 0 ms
[  417.109989][   T12] bond15: (slave bridge7): failed to get link speed/duplex
[  417.224930][ T5839] bond15: (slave bridge7): failed to get link speed/duplex
[  417.344143][ T5839] bond15: (slave bridge7): failed to get link speed/duplex
[  417.473668][T10558] bond15: (slave bridge7): failed to get link speed/duplex
[  417.531533][T21990] xt_bpf: check failed: parse error
[  417.583787][ T5839] bond15: (slave bridge7): failed to get link speed/duplex
[  417.592498][T21999] dummy0: left allmulticast mode
[  417.595615][T21999] dummy0: left promiscuous mode
[  417.597425][T21999] bridge0: port 3(dummy0) entered disabled state
[  417.604106][T21999] bond0: (slave batadv0): Releasing backup interface
[  417.606889][T21999] batadv0: left promiscuous mode
[  417.608539][T21999] batadv0: left allmulticast mode
[  417.611918][T21999] bridge_slave_0: left allmulticast mode
[  417.615440][T21999] bridge_slave_0: left promiscuous mode
[  417.617944][T21999] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.624002][T21999] bridge_slave_1: left allmulticast mode
[  417.626087][T21999] bridge_slave_1: left promiscuous mode
[  417.628339][T21999] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.641745][T21999] bond0: (slave bond_slave_0): Releasing backup interface
[  417.645069][T21995] netlink: zone id is out of range
[  417.645966][T21996] netlink: zone id is out of range
[  417.647136][T21995] netlink: zone id is out of range
[  417.649224][T21996] netlink: zone id is out of range
[  417.658883][T21999] bond_slave_0: left allmulticast mode
[  417.660805][T21999] bond_slave_0: left promiscuous mode
[  417.686680][T21999] team0: Port device team_slave_0 removed
[  417.708255][T21999] team0: Port device team_slave_1 removed
[  417.711636][T21999] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  417.715134][T21999] batman_adv: batadv0: Removing interface: batadv_slave_0
[  417.721165][T21999] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  417.745161][T21999] batman_adv: batadv0: Removing interface: batadv_slave_1
[  417.754957][T21999] bond1: (slave vcan1): Releasing backup interface
[  417.757319][T21999] vcan1: left promiscuous mode
[  417.766339][T21999] bond6: (slave macvlan3): Releasing backup interface
[  417.770901][T21999] bond0: left allmulticast mode
[  417.772654][T21999] bond0: left promiscuous mode
[  417.891482][T22006] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  418.030404][T22019] netlink: 'syz.3.4889': attribute type 2 has an invalid length.
[  418.496583][T22052] netlink: 'syz.3.4899': attribute type 1 has an invalid length.
[  418.625887][T22056] C speed is unknown, defaulting to 1000
[  418.628795][T22056] wg1 speed is unknown, defaulting to 1000
[  418.631586][T22056] lo speed is unknown, defaulting to 1000
[  419.289535][T22094] netlink: 'syz.1.4913': attribute type 2 has an invalid length.
[  419.426456][T22104] sctp: [Deprecated]: syz.2.4918 (pid 22104) Use of int in maxseg socket option.
[  419.426456][T22104] Use struct sctp_assoc_value instead
[  419.751487][T22124] validate_nla: 2 callbacks suppressed
[  419.751499][T22124] netlink: 'syz.1.4922': attribute type 1 has an invalid length.
[  419.802747][T22124] bond17: entered promiscuous mode
[  419.805856][T22124] 8021q: adding VLAN 0 to HW filter on device bond17
[  419.818275][T22125] bond17: (slave bridge9): making interface the new active one
[  419.820628][T22125] bridge9: entered promiscuous mode
[  419.827273][T22125] bond17: (slave bridge9): Enslaving as an active interface with an up link
[  419.890191][T22131] SET target dimension over the limit!
[  419.995961][T22148] netlink: 'syz.3.4926': attribute type 3 has an invalid length.
[  419.998872][T22148] netlink: 'syz.3.4926': attribute type 3 has an invalid length.
[  420.522960][T22192] C speed is unknown, defaulting to 1000
[  420.534614][T22192] wg1 speed is unknown, defaulting to 1000
[  420.537506][T22192] lo speed is unknown, defaulting to 1000
[  420.857947][T22231] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  420.861639][T22231] CPU: 0 UID: 0 PID: 22231 Comm: syz.2.4953 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  420.861652][T22231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  420.861658][T22231] Call Trace:
[  420.861663][T22231]  <TASK>
[  420.861668][T22231]  dump_stack_lvl+0x189/0x250
[  420.861688][T22231]  ? __pfx_dump_stack_lvl+0x10/0x10
[  420.861698][T22231]  ? __pfx__printk+0x10/0x10
[  420.861711][T22231]  ? kernfs_path_from_node+0x2c/0x260
[  420.861721][T22231]  ? kernfs_path_from_node+0x2c/0x260
[  420.861728][T22231]  ? kernfs_path_from_node+0x2c/0x260
[  420.861737][T22231]  ? kernfs_path_from_node+0x22c/0x260
[  420.861744][T22231]  ? kernfs_path_from_node+0x2c/0x260
[  420.861753][T22231]  sysfs_warn_dup+0x8e/0xa0
[  420.861767][T22231]  sysfs_do_create_link_sd+0xc0/0x110
[  420.861777][T22231]  device_add_class_symlinks+0x1cf/0x240
[  420.861793][T22231]  device_add+0x475/0xb50
[  420.861808][T22231]  wiphy_register+0x199a/0x26b0
[  420.861829][T22231]  ? __pfx_wiphy_register+0x10/0x10
[  420.861839][T22231]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  420.861855][T22231]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  420.861870][T22231]  ieee80211_register_hw+0x33e1/0x4120
[  420.861892][T22231]  ? ieee80211_register_hw+0x14d1/0x4120
[  420.861908][T22231]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  420.861922][T22231]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  420.861941][T22231]  ? __hrtimer_setup+0x187/0x210
[  420.861952][T22231]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  420.861969][T22231]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  420.862016][T22231]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  420.862028][T22231]  ? trace_kmalloc+0x1f/0xd0
[  420.862040][T22231]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  420.862051][T22231]  ? kstrndup+0xbf/0x160
[  420.862065][T22231]  hwsim_new_radio_nl+0xea4/0x1b10
[  420.862079][T22231]  ? __pfx___nla_validate_parse+0x10/0x10
[  420.862097][T22231]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  420.862115][T22231]  ? __nla_parse+0x40/0x60
[  420.862127][T22231]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  420.862142][T22231]  genl_family_rcv_msg_doit+0x215/0x300
[  420.862154][T22231]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  420.862170][T22231]  ? bpf_lsm_capable+0x9/0x20
[  420.862183][T22231]  ? security_capable+0x7e/0x2e0
[  420.862197][T22231]  genl_rcv_msg+0x60e/0x790
[  420.862209][T22231]  ? __pfx_genl_rcv_msg+0x10/0x10
[  420.862217][T22231]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  420.862236][T22231]  netlink_rcv_skb+0x208/0x470
[  420.862249][T22231]  ? __pfx_genl_rcv_msg+0x10/0x10
[  420.862258][T22231]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  420.862278][T22231]  ? down_read+0x1ad/0x2e0
[  420.862289][T22231]  genl_rcv+0x28/0x40
[  420.862296][T22231]  netlink_unicast+0x75c/0x8e0
[  420.862312][T22231]  netlink_sendmsg+0x805/0xb30
[  420.862328][T22231]  ? __pfx_netlink_sendmsg+0x10/0x10
[  420.862342][T22231]  ? aa_sock_msg_perm+0x94/0x160
[  420.862352][T22231]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  420.862362][T22231]  ? __pfx_netlink_sendmsg+0x10/0x10
[  420.862374][T22231]  __sock_sendmsg+0x21c/0x270
[  420.862386][T22231]  ____sys_sendmsg+0x505/0x830
[  420.862402][T22231]  ? __pfx_____sys_sendmsg+0x10/0x10
[  420.862419][T22231]  ? import_iovec+0x74/0xa0
[  420.862433][T22231]  ___sys_sendmsg+0x21f/0x2a0
[  420.862446][T22231]  ? __pfx____sys_sendmsg+0x10/0x10
[  420.862477][T22231]  ? __fget_files+0x2a/0x420
[  420.862485][T22231]  ? __fget_files+0x3a0/0x420
[  420.862497][T22231]  __x64_sys_sendmsg+0x19b/0x260
[  420.862511][T22231]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  420.862535][T22231]  ? do_user_addr_fault+0xc8a/0x1390
[  420.862546][T22231]  ? do_syscall_64+0xbe/0x3b0
[  420.862559][T22231]  do_syscall_64+0xfa/0x3b0
[  420.862567][T22231]  ? lockdep_hardirqs_on+0x9c/0x150
[  420.862576][T22231]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.862585][T22231]  ? exc_page_fault+0x9f/0xf0
[  420.862594][T22231]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.862603][T22231] RIP: 0033:0x7fe1d178e9a9
[  420.862613][T22231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  420.862621][T22231] RSP: 002b:00007fe1cf5b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  420.862631][T22231] RAX: ffffffffffffffda RBX: 00007fe1d19b6160 RCX: 00007fe1d178e9a9
[  420.862637][T22231] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  420.862643][T22231] RBP: 00007fe1d1810d69 R08: 0000000000000000 R09: 0000000000000000
[  420.862648][T22231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  420.862653][T22231] R13: 0000000000000001 R14: 00007fe1d19b6160 R15: 00007ffc26d26878
[  420.862667][T22231]  </TASK>
[  421.130216][T22242] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  421.162137][T22242] __nla_validate_parse: 21 callbacks suppressed
[  421.162158][T22242] netlink: 516 bytes leftover after parsing attributes in process `syz.1.4957'.
[  421.347287][T22258] netlink: 71 bytes leftover after parsing attributes in process `syz.2.4963'.
[  421.420127][T22262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4965'.
[  421.880314][T22293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4971'.
[  421.954696][T22297] syzkaller0: entered promiscuous mode
[  421.957067][T22297] syzkaller0: entered allmulticast mode
[  422.134349][T22304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4972'.
[  422.153755][ T5839] net_ratelimit: 51 callbacks suppressed
[  422.153771][ T5839] bond15: (slave bridge7): failed to get link speed/duplex
[  422.290744][T22306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4974'.
[  422.294203][ T5876] bond15: (slave bridge7): failed to get link speed/duplex
[  422.379996][T22309] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4975'.
[  422.391137][T22309] netlink: 'syz.2.4975': attribute type 1 has an invalid length.
[  422.439046][T22312] netlink: 'syz.3.4976': attribute type 1 has an invalid length.
[  422.442066][T22312] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.4976'.
[  422.464295][T22309] 8021q: adding VLAN 0 to HW filter on device bond8
[  422.492026][T22309] bond8: (slave gretap2): making interface the new active one
[  422.508245][T22309] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  422.514330][ T5839] bond15: (slave bridge7): failed to get link speed/duplex
[  422.603949][T22321] netlink: 'syz.2.4980': attribute type 2 has an invalid length.
[  422.624215][   T12] bond15: (slave bridge7): failed to get link speed/duplex
[  422.641393][T22323] x_tables: duplicate underflow at hook 3
[  422.645986][T22325] netlink: 'syz.2.4982': attribute type 1 has an invalid length.
[  422.697639][T22325] macvlan4: entered promiscuous mode
[  422.699403][T22325] macvlan4: entered allmulticast mode
[  422.701838][T22325] bond9: entered promiscuous mode
[  422.704438][T22325] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  422.712663][T22325] bond9: left promiscuous mode
[  422.744210][ T5876] bond15: (slave bridge7): failed to get link speed/duplex
[  422.769088][T22331] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001
[  422.817557][T22335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4985'.
[  422.858153][T22341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4986'.
[  422.874456][   T12] bond15: (slave bridge7): failed to get link speed/duplex
[  422.886407][T22338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  422.892861][T22338] syzkaller0: entered promiscuous mode
[  422.898143][T22338] syzkaller0: entered allmulticast mode
[  422.937310][T22338] tipc: Resetting bearer <eth:syzkaller0>
[  423.004155][T22337] tipc: Resetting bearer <eth:syzkaller0>
[  423.017655][T22345] IPVS: Scheduler module ip_vs_sip not found
[  423.032819][T22337] tipc: Disabling bearer <eth:syzkaller0>
[  423.057227][ T5839] bond15: (slave bridge7): failed to get link speed/duplex
[  423.150208][T22354] sctp: [Deprecated]: syz.2.4992 (pid 22354) Use of int in maxseg socket option.
[  423.150208][T22354] Use struct sctp_assoc_value instead
[  423.159231][T22354] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  423.164328][ T5876] bond15: (slave bridge7): failed to get link speed/duplex
[  423.200690][T22360] netlink: 'syz.3.4994': attribute type 2 has an invalid length.
[  423.274722][   T12] bond15: (slave bridge7): failed to get link speed/duplex
[  423.385742][   T12] bond15: (slave bridge7): failed to get link speed/duplex
[  423.451204][T22378] 8021q: adding VLAN 0 to HW filter on device bond4
[  423.455288][T22378] bond4: entered allmulticast mode
[  423.459917][T22378] bond0: (slave bond4): Enslaving as an active interface with an up link
[  423.470320][T22378] netlink: 'syz.3.5000': attribute type 1 has an invalid length.
[  423.929265][T22402] netlink: 'syz.3.5008': attribute type 2 has an invalid length.
[  424.411445][T22433] bridge0: entered promiscuous mode
[  424.415017][T22433] bridge0: port 1(macvlan2) entered blocking state
[  424.417095][T22433] bridge0: port 1(macvlan2) entered disabled state
[  424.419278][T22433] macvlan2: entered allmulticast mode
[  424.421363][T22433] bridge0: entered allmulticast mode
[  424.434866][T22433] macvlan2: left allmulticast mode
[  424.440639][T22433] bridge0: left allmulticast mode
[  424.444619][T22433] bridge0: left promiscuous mode
[  424.828446][T22466] validate_nla: 2 callbacks suppressed
[  424.828463][T22466] netlink: 'syz.2.5030': attribute type 12 has an invalid length.
[  424.986226][T22476] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  425.052625][T22480] netlink: 'syz.2.5035': attribute type 2 has an invalid length.
[  426.200848][T22549] block nbd1: not configured, cannot reconfigure
[  426.218739][T22551] xt_ecn: cannot match TCP bits for non-tcp packets
[  426.348215][T22557] __nla_validate_parse: 9 callbacks suppressed
[  426.348227][T22557] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5056'.
[  426.447483][T22561] netlink: 'syz.1.5058': attribute type 2 has an invalid length.
[  426.568002][T22576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5064'.
[  426.601497][T22579] syzkaller0: entered allmulticast mode
[  426.756131][T22592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5071'.
[  426.759358][T22592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5071'.
[  426.807634][T22595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5072'.
[  426.818398][T22595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5072'.
[  426.858464][T22595] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5072'.
[  426.922807][T22603] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5076'.
[  426.926798][T22603] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5076'.
[  426.930406][T22603] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5076'.
[  426.959752][T22606] macvtap1: entered promiscuous mode
[  426.961869][T22606] bond0: entered promiscuous mode
[  426.965307][T22606] macvtap1: entered allmulticast mode
[  426.967578][T22606] bond0: entered allmulticast mode
[  426.971593][T22606] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  426.979633][T22606] bond0: left allmulticast mode
[  426.981700][T22606] bond0: left promiscuous mode
[  427.085553][ T5856] unregister_netdevice: waiting for veth0_to_bridge to become free. Usage count = 3
[  427.088779][ T5856] ref_tracker: veth0_to_bridge@ffff888118240610 has 1/1 users at
[  427.088779][ T5856]      ib_device_set_netdev+0x31f/0x6d0
[  427.088779][ T5856]      siw_newlink+0x405/0xd70
[  427.088779][ T5856]      nldev_newlink+0x4a5/0x5a0
[  427.088779][ T5856]      rdma_nl_rcv+0x6ae/0x980
[  427.088779][ T5856]      netlink_unicast+0x75c/0x8e0
[  427.088779][ T5856]      netlink_sendmsg+0x805/0xb30
[  427.088779][ T5856]      __sock_sendmsg+0x21c/0x270
[  427.088779][ T5856]      ____sys_sendmsg+0x505/0x830
[  427.088779][ T5856]      ___sys_sendmsg+0x21f/0x2a0
[  427.088779][ T5856]      __x64_sys_sendmsg+0x19b/0x260
[  427.088779][ T5856]      do_syscall_64+0xfa/0x3b0
[  427.088779][ T5856]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.088779][ T5856] 
[  427.224005][   T13] net_ratelimit: 36 callbacks suppressed
[  427.224022][   T13] bond15: (slave bridge7): failed to get link speed/duplex
[  427.334679][ T5876] bond15: (slave bridge7): failed to get link speed/duplex
[  427.443882][   T13] bond15: (slave bridge7): failed to get link speed/duplex
[  427.554071][ T5876] bond15: (slave bridge7): failed to get link speed/duplex
[  427.664134][ T5876] bond15: (slave bridge7): failed to get link speed/duplex
[  427.774106][T22382] bond15: (slave bridge7): failed to get link speed/duplex
[  427.884021][ T5876] bond15: (slave bridge7): failed to get link speed/duplex
[  427.994220][T22382] bond15: (slave bridge7): failed to get link speed/duplex
[  428.103908][T22382] bond15: (slave bridge7): failed to get link speed/duplex
[  428.214414][ T5876] bond15: (slave bridge7): failed to get link speed/duplex
[  429.004593][   T60] block nbd0: Possible stuck request ffff888022448000: control (read@0,1024B). Runtime 300 seconds
[  429.008498][   T60] block nbd0: Possible stuck request ffff888022448200: control (read@1024,1024B). Runtime 300 seconds
[  429.012179][   T60] block nbd0: Possible stuck request ffff888022448400: control (read@2048,1024B). Runtime 300 seconds
[  429.016122][   T60] block nbd0: Possible stuck request ffff888022448600: control (read@3072,1024B). Runtime 300 seconds
[  432.334005][ T5839] net_ratelimit: 36 callbacks suppressed
[  432.334030][ T5839] bond15: (slave bridge7): failed to get link speed/duplex
[  432.444446][ T5876] bond15: (slave bridge7): failed to get link speed/duplex
[  432.555770][ T5839] bond15: (slave bridge7): failed to get link speed/duplex
[  432.664716][ T5839] bond15: (slave bridge7): failed to get link speed/duplex
[  432.774059][ T5876] bond15: (slave bridge7): failed to get link speed/duplex
[  432.884205][ T5839] bond15: (slave bridge7): failed to get link speed/duplex
[  432.994287][ T5839] bond15: (slave bridge7): failed to get link speed/duplex
[  433.114020][ T5839] bond15: (slave bridge7): failed to get link speed/duplex
[  433.224212][T22382] bond15: (slave bridge7): failed to get link speed/duplex
[  433.334236][ T5839] bond15: (slave bridge7): failed to get link speed/duplex
[  434.754772][ T1092] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)

VM DIAGNOSIS:
16:28:11  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffd40000e9f39 RBX=ffff8880416c01e0 RCX=dffffc0000000000 RDX=0000000000000000
RSI=000000000000001b RDI=000000000000001f RBP=ffffc90003f8f988 RSP=ffffc90003f8f700
R8 =ffffea00008ee7c7 R9 =1ffffd400011dcf8 R10=dffffc0000000000 R11=fffff9400011dcf9
R12=1ffff110082d803c R13=ffffea000074f9c0 R14=0000000000000000 R15=000000000000003a
RIP=ffffffff82197c1b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555588425500 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f61db81c440 CR3=0000000029884000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fa914611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900033def70
R8 =ffff888020f30237 R9 =1ffff110041e6046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8f1 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe1d24e56c0 CR3=000000001faa2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000000306e616c77
XMM02=00007fbc7e586478 00007fbc7e586450 XMM03=00007fbc7e586488 00007fbc7e586480
XMM04=00007fbc7f0ed100 00007fbc7e586440 XMM05=00007fbc7e586458 00007fbc7e5864a0
XMM06=00007fbc7e586498 00007fbc7e586490 XMM07=00007fbc7e586488 00007fbc7e586480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fbc7e411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
