last executing test programs:

2.955751716s ago: executing program 1 (id=6184):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2.899530235s ago: executing program 1 (id=6187):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

2.569265082s ago: executing program 1 (id=6196):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x321, 0x40, 0x6, 0x81, 0x3, @random="3050e9ae9a3c"}, 0x10)
unshare(0x2a060400)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0xc841)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x1, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c00178004000100040003000400020004000200040004000400060008001780040003001c0017800400050004000400040001000400020004000200040002000a00e800ffffffffffff0000040017801c00e700db6d365654c98181bfba37013717c4c8c68999db6df653c9040017802000178004000100040005000400020004000100040005000400010004000300240017"], 0x138}}, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, 0x0}, 0x0)
r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)})
bind$bt_hci(r13, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r13, &(0x7f0000000040)=ANY=[], 0x6)
r14 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'})
socketpair$unix(0x1, 0x1, 0x0, 0x0)

1.677648446s ago: executing program 1 (id=6202):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [], [{}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
ppoll(&(0x7f0000000100)=[{r3, 0x5082}], 0x1, 0x0, 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x321, 0x40, 0x6, 0x81, 0x3, @random="3050e9ae9a3c"}, 0x10)
unshare(0x2a060400)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0xfffe, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}})
r10 = socket(0x10, 0x80003, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

1.179538431s ago: executing program 2 (id=6205):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x2)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x7b)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
r7 = socket(0x1e, 0x4, 0x0)
socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff})
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000}, 0x20)
getsockname$inet(r8, &(0x7f0000000000), &(0x7f0000000100)=0x10)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038)
sendmmsg(r7, &(0x7f0000000080), 0x1a1, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001800ddd000000000000000000200000000000d05000000000600150005000000280016802400010003"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0x1d, 0x6, 0xca11, 0x10000}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0xc5}, 0x24008004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdffffff000000000a00000085000000750000009d00000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94)

738.329854ms ago: executing program 1 (id=6207):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) (async, rerun: 64)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) (rerun: 64)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) (async, rerun: 64)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async)
getsockname$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000080)=0x6e)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_emit_ethernet(0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa94aaaaaaaaaaaa4c67651dcaac"], 0x0)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') (async, rerun: 64)
unshare(0x7e040400) (async, rerun: 64)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c)
r3 = socket$kcm(0xa, 0x2, 0x0) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) (async, rerun: 32)
unshare(0x44050100) (rerun: 32)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}], 0x30}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 64)
r4 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

530.044598ms ago: executing program 1 (id=6208):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
poll(&(0x7f00000011c0)=[{r0, 0x2}, {r0, 0x3600}, {r0, 0x40}, {r0, 0x59}], 0x4, 0x3)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000))

529.418281ms ago: executing program 0 (id=6209):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c005}, 0x8810) (async)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000000640)={&(0x7f0000000180)={0x490, 0x14, 0x800, 0x70bd2a, 0x25dfdbff, {0x29, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x19, 0x1, "14700022883b6a7d6815ad002cbe3d75a89b5fc709"}, @INET_DIAG_REQ_BYTECODE={0xac, 0x1, "141cf27828dec1786a681c641591caebdbe493a6086231eee61cb0c756ac0ace4184ce0b3b5b50a2ade515385ac406c333bc75a0cf7db8ceee59f101f6b7931549e0e5f14c197b16d86293e8e62200c63d1c1a05045e6bf1061c7db50b430382c888633d8440e1d2d32d5275204aa6da650a2e1650c27a65c92e3a2db522d9b740d478a0d764b46b05c04626667135961b12b8315d2f138e2853dde21a597b8c3f353e4f13207b7a"}, @INET_DIAG_REQ_BYTECODE={0xd0, 0x1, "fd0241d8f5cec60edd4cebe31cd8eae8d911fc96660d061683cb299cc18aaf4383a6cf4c4883b2a57da41de00bcd6ec651731711e5a422cfd096963f557c09d71eabe25f51eb9784809152cec523991dc61f283aab77dec541f965e124a671fc4c4fe6bc1142d9f1575be6b55430eeb2900df592397894641b5c59941e804328d5a7113ae4b5a20bae53f45e2877a5e59a630cbb3c240167b3319315e8cd7de476e3bbffb7448a3d3497f503032dd8768a0f9d133c15624082cf6af296655ae3f5c0e2082676cbab173f0f4f"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "05cff9c21aceb0ee16d6eb06e8dd72872853cd75c8012f5f27fb6c6e71f4"}, @INET_DIAG_REQ_BYTECODE={0xf, 0x1, "1f31dbc736df2cbf65b985"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "c18cff20f76b0d8b383219c10dd04bfad8aeec2257e0873ed95eb07d6cd6335b004c584c508c8ee33b95047cb0a48c892c328e4c9d75860d858c1a46fb61acc00af6e06b0fb925e47daf779a6375fde34342d500b46b8c0e11e13629fce2013ba4b78074f400"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "6b695b7019c7a754bee92fa7ceb4a9639b31fad2d12cedce13daf1818ad62c2d1feef9c9130bd1dc30c8a5dfba939a8fcaf9b2cc9cc67a3b02a62830808c8affad78e0224bb69e00126819bea26166f430b94478932f69ec1bb9ec1165b13645b01462d11b4dc52524871a8ae1a6d5da7b70c940d29d9f4808d7e2bd7cf3bc670d44198e441708c2bae4529072ba01a876c94d"}, @INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "943802693b4d32636a3a3e4793602c736d8b5732139824ef24210d753e781a5d8595a918919e85f50cad98106b52199376f20018d2b01635e202bc9cba5be12a8090df8811cb50854b75cc3c8425d1b61744f1e27ff0508f323c0bc08f2eb81d8c5575e723decc9009e918bf6fe11c357faf2a5f30e0eddbee1c01eebde5875f8b57f5f941ccbb483f54caa367c32d2490e3c8a036b98c7e0b857e49a45e9fa25462c3a6d9bbd43b42d8770e962b5b60a81824"}, @INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "51d27aa69c54544256cb4faf56f82da94ea894ef88fd0a9bfd15e60cc3712965b66d806f42234d9b2d002444b291179f7130f30430b430d654c6345faebc1e51ce56c3dc0c0bc5e8bcc91b825815e48c2b8eed5a8dd47a18ef1bf72a1e5659d936e65687a3afed39476ef95018671eb23eefbd64554e06636e731c9fb9f1526bd5afc770934e8601e8e6c4a42d73604101339764f03a0eeae649653211f90783b136593ca41c3cc3a27d23fc40fe21db2c14baacb28699a4cb2fd397a04aa3c365e96418bc31a8c462ebbf63ad9192687748337d0a82fde699dc811488c71df4ff5fc083d3d2e64974617818d01c027c"}]}, 0x490}, 0x1, 0x0, 0x0, 0x4000000}, 0x40884) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000006c0)={<r3=>0x0, @in6={{0xa, 0x4e21, 0x9, @mcast1, 0x80000000}}, 0x8, 0x7eff, 0x8, 0x4, 0x4}, &(0x7f0000000780)=0x98)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000007c0)={r3, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0xa, 0x10e, 0x7fff, 0x1, 0x40, 0x7, 0x5}, &(0x7f0000000880)=0x9c) (async)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0x0, 0x766, 0x1c}, 0xc)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a40)={r4, &(0x7f0000000900)="0f0b2f4ee3c0721c9657515c7655b6314fa89bc47bbe6f7ae374942414038f5e35038ec621ee4d650e1392c13ce3e55589e92b3a57e06868604e3e88af58f0d7c29f60a4499783a993c19f553deb11aa409f0b71e4d3160b3ecccd6e50297fa95ae69579e3664cb45b307ff21f8798afe22bbbc5bdbda5a0b9ede4a2786ed7f1efc74db621c14e9210bf62417aa522c9a1db747d83a4c606704d86d1efc0a9b53061caabf60e817ba5321cd199ae455451438b7c1161909f993521282bc1773efb636408e76ec6", &(0x7f0000000a00)=""/51}, 0x20) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80), 0x8)
ioctl$sock_bt_bnep_BNEPCONNDEL(r6, 0x400442c9, &(0x7f0000000ac0)={0x1f0d, @remote})
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000b00)=<r7=>0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000000b40)=r7) (async)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0xd}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4008014) (async)
r8 = accept4$phonet_pipe(r6, 0x0, &(0x7f0000000c80), 0x800)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000dc0)={<r9=>r8, &(0x7f0000000cc0)='}}@\x00', 0x480001, &(0x7f0000000d00)={@_ha_fsid={[0x1, 0x9]}, {0x6, 0x7f, 0xab, 0xf}}, 0x6, &(0x7f0000000d40), &(0x7f0000000d80)=0x80000000})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r9, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x40, r10, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x40}}, 0x4044000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000f80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001d80)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d40)={&(0x7f0000000fc0)={0xd60, r10, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x4, 0x0, 0x8, 0x1, 0xdbfe, 0x3d, 0x1]}, @NL80211_ATTR_FRAME={0xc7, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_a, @broadcast, @initial, {0x0, 0x6}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x4d812d681cf2f48f, 0x6, @random, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x4, 0x0, {0x8000, 0x10, 0x0, 0xc, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x2, 0x1}}, [{0xdd, 0x20, "35ebfeca2250f5f18dfb4220d1c94e6cd1529ed785c7763e477c71539da1839c"}, {0xdd, 0x61, "87d20dfb9989ee0d33f6618fc88fec2e2be54a9b8a32e26bc44b1e0cc82b8b3500e711cae03cf5ed3c5491aef4aef0715ed171c407f6e4288a8d6a7149edb69beecc4eed62586cfa2925448d77cdd304747120aa6079ae044ff460d0678b3d92c2"}]}}, @NL80211_ATTR_FRAME={0x29a, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @device_b, @device_a, @random="7fc153c96404", {0xd, 0xd04}}, @void, @void, @void, @val={0x2d, 0x1a, {0x4000, 0x0, 0x7, 0x0, {0x6, 0xa8d, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x3, 0x78}}, @void, [{0xdd, 0x1e, "5dbdcdd3569ba822604b655b08e747cd9965cb9efeadcf2b6994a20931a3"}, {0xdd, 0x96, "17bc94a5934c98276a12afd63a76e3a9c200c6eb27e39b44a5dfbf7196944fa7dc740b2b4c80f1443c265260d492618e50d05868b0f6c162dd2a50cf8d7ab80fb520f8b7f3985f0e5b718241b5dbde40c60d69060022dfa501f53350e04849c89816e443efc9e04f92e1a628ba6a44bcf540d7a055763972e22e0c41e057446b5b4d47b16a50e6cd5e2669fc64788a32c912b28f2e59"}, {0xdd, 0xab, "1de16793979eeadbbd11ba7013be795deddafe577bee2a9b7c30d639647534633219744ef1ca609ce6ac11e13a6b21d24e701b579c22c284fba39360c75634df03bd1e1bf092e4df061095d2e2fb01bfeaa46d907f14c9e63ae26292bb0e0c10693e0a6086e487d5009bb06dd402be34b3cda6f12be7c77b1a3f18f9ea618cd96af9269b7f4d4ee7c43efddc837218cc881d71a6819319ca2c6afdb948c312160674bf3226313914174697"}, {0xdd, 0xfb, "14ff7eaeec581e733fe2c21b9141e2a59304bc014bd1a10a0a2511a9f339e28da4f12002fc7b6c7d49b0a9e0c57fe5b61da3248f9bd7aadca38d6705de97399ec4004ca0552e97f23337a93ba909d64b0ff3a2b4e0ca387dfea3e9bd1309dc5d2e44aded49f2d02a605f49217dd74c4dc0792edf5c9f98a6ac4d4aef75b6665cdb945ea1eb6cbb322ced376474c9804319e6510fc3e4bca0f5abc51c155f91436551f035715d2771d5869bc5abae4b32fea36a3fd20ea01d60dbc5a86525082b760a69f8e0df4543515fe38ebb9ab94902825454a39de6d9a42590a99ec73554a59575dd541659b180ed53fd1c93e2db4c79a5a85848b2df51e79e"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x38c, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xff}, @broadcast, @device_b, @random="d4263283b091", {0x9, 0x7}}, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x7, 0xc, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x6, 0xf, 0x90}}, @val={0x72, 0x6}, [{0xdd, 0x65, "cfc5af4da240504e733c6eee6a075e554a6f3de290833257c909fb114d92985536bf6dc590ec7e69964dfccbb9dc0b9be1c99a3d8ea924de46d2aaa6e0370bf56ff605db1b50f36fac3fc0a95da0c92309661e6934a95293f845a83d9086fde9cfff8fe49a"}, {0xdd, 0x71, "39d85d7cc58bca0015c1b3e7b977b57c6fe3eb8795989f6383c9699acaaf84afa17cf97c2ca53b8f61993f66e37a9eda2ebb0e02329149ead9544aedf2baa121371b24e4de8629b88e74098340f9b9b4b78a5f724d44ba7d80e33c6c9cfb9d3d744b4426896a6fc1a311e7fcea6382c0b5"}, {0xdd, 0x8f, "9e55b600299fc28d737f2674793a0f86496c57090bf6fdd53f0431ba2e44a387e204f203817e89b3d98ba9f7cf1935e45f37b5def2a510be4044f53118acb96c9153c4715e27cd6b273e717b4a99335c7196b4162d820c2e3ebecbda082ff3a81803cc8151472675d1ec4a0f4b0105d793189c80bfef3a1fc26d60b75368e0b55423bdde839ba983ba24dfc3f120b7"}, {0xdd, 0xc1, "4ca8981b328d880576ef21daf6be578a3330251ded2af22370965bb5273ce679265bfd3d126c1c1f04274d87569da2bd4ed95797eee5fb5957f3f1886c8fef868e657dbb2f96669863f96aeafa75cc7c092e5e6a1d18fbb10815bbb84af676015aafe55c7a3923a5abef4f29fdcf2200d21f9f7d1bf7a29ef6be82695793be8b5186d8fec6f4102410bf05444e6945044283507c20f019348995e8677ecffbc9d4a8d8d91b06a32aa7d7c7b6c1dd388f99e4205c8bb73fb6285fedc125fd799e43"}, {0xdd, 0x6f, "a92c8f9f3c400d8732f5d3b522c55de51eecd05e1565a0ed8490953dee106c4120647f738dcd52fc289351c8016b456f3ddc6012bbd4f3c1564abcb378074ec07d3a07ed7ca8ccec3104105d81826805e1c27a066e0c3c1da5af9b632615f9c05a7bd31701b668065b0873f26e9552"}, {0xdd, 0x24, "bd108eb1670d30b43e6be058407501238f4dec4f3999c6fd16ec6f5e640c9fcacd83ab9d"}, {0xdd, 0x85, "c001977c1ff01151d790b12e77f9a63fdf8f1665de794ef745e9a8554d6c48a529745e8f34b9dee3ff714179257a916b892407752adb22ebb9afb14548da2a292cef6ebdd0f85a0060e9d2e9412048dacc13b647558c1546b70140681c220bdd4a48a8503cf60859751bc277de6ab474c3532f9f6d2169d41dabb514b57a1d0d7b622abf2e"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x20d}, @NL80211_ATTR_FRAME={0x405, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7f01}, @device_a, @device_a, @initial, {0x8, 0xc}, @value=@ver_80211n={0x0, 0x237a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @void, @val={0x1, 0x2, [{0xf191ff45f8d8c770}, {0x16}]}, @val={0x3, 0x1, 0xb}, @val={0x2d, 0x1a, {0x8, 0x0, 0x0, 0x0, {0x6, 0x1, 0x0, 0x1e6, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x0, 0x2}}, @val={0x72, 0x6}, [{0xdd, 0x87, "1b8cbb1464edd0a2d4c3e647e6c338e7cca8c4df58c9346aade6205b10b26df3e60bb9515112aab033d59ff6a8f99d1b3a1672fc11f2e8a5f96a3f51cd6e662cb2064e695dad30b74520db004a1bc7efb91100fb141280fa47c147324fa4b6776be85ee441bc751afac986537fa4ad0fabdb4ad4917a9802ac2813703069311949aafc98259700"}, {0xdd, 0x52, "641a1664ecc8509c0d6e344ab53195a5aba786e203cc1ed848ba44b5b9774e74f51c58bd8ad0932361047e96ab8164c0c15cfca17850b97d84b59ff5ec7849e1012eb8227bb89dc26984ee57f1bba270937f"}, {0xdd, 0xa9, "9824722300a9c417decaa1f428e8aae5fe0d5b59142e3d50b0ea1d772221714ac16197590f5bfbb7b09088295619c74ac46634ba7824f29e37af057824b2c71b785ccdcb532c45186d0374e336487f11d20086d587d5fdb07c789a95a18d24188e2d8ced03ad406ae24c394ace67324cdf7ba94b3811b2fa9c00eb4a4f5eda4f81ce9d10723c8d37fa8bb34b6b3ac4cf919956a10d9687044f4423f676c13d75a669ac3b34a77bbcb8"}, {0xdd, 0x6e, "272778bfbd2e9061fed98db4233df0f3acc267a0e2d1a9112830ab2820e60969fed6254f2435f3f5f470596b33945bef584617ec452b4e80520797da56c4da2856e43d110746ae7874df0a51d3002a68cc3660168c0ecc408ada322b7168d05831005d2832b450179c79138b59dd"}, {0xdd, 0x37, "ed5c59ea73417bda5a0eb58de0b1dc2a8906e8a7e198c4c12e82486f1e6d7849668cf6d0518a0f5796ebd3b880728b501ffd2b10615689"}, {0xdd, 0x6e, "23885d1bff0c99de878b699aaea4cb48ca2744ff58e0d654c6556c6ad1e703f5ca97032f5fa283da95676b36bdb025e155cf60e732311396c11c29927c693b70f7e5e1ac0e5b1ea7b8b59d53a7f32041373825e4199e6f5f59b0bcdca84d268f20b5228ad7c2958da471c37df9bf"}, {0xdd, 0xd3, "fa4318f03ec78a575af3d1a5253ab0a56fe12e3cb8a38c9cba0c94d836b0e57365fd1aaf6ffdf4269820752312cd9f99867ed84b59bf16565bb143479d0ce03c647c64457f30222967281b3a74d58f64c0171477df14032a470bfc0b5c51338ad9cdd3309d4d772cec0ed446f970068f1a4ea10dd8cc0257a225654d63b71afb92501f9c306be1449492ba0efeae87a6762913f1c3a123955082845633d7d91cee295243e7b77edc95e6c2afdce21cf8b545bb217a51201628ecc57a2de3bba65b1f2c85786ace9efc9c26afe1a2c41904d5d8"}, {0xdd, 0x42, "2e0e1ee9f4e6a9ae53defb59c5e357db2f79b83b72da7cf0d0bdb0d2ba85a7c387ed873daadf568d90726cee6c583ff4e26c1f1b0fb60b72a6a646e58e684e18170b"}]}}, @NL80211_ATTR_FRAME={0x1ef, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7}, @broadcast, @broadcast, @random="8e8957e40c73", {0xc, 0xa}, @value=@ver_80211n={0x0, 0x7ffe, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x1, 0x8, @device_a, {0x0, 0x2, @random="0563"}, @val={0x1, 0x8, [{0x30, 0x1}, {0x60}, {0x36, 0x1}, {0x3}, {0x18}, {0x44, 0x1}, {0x12}, {}]}, @void, [{0xdd, 0xbd, "d96621e6ab813ac8f7c0b086a8af2b2ac5c99875ec04609eef86ab7d45cd767d9a7760282be3243e6f747307a8e7d1dc3c1758d27c3563bae253e917a5c5bbf802b02b9a5bfc8adc59f10f91e34c5828759c4e0fdc198a4ad756d9c0dbedc775062d18bf7be4da3335b9746d7f52ab578cdd3289b81d3527bb89b9a1c2b0f5ed5a9da39200d00623576ceda9d15aaf3e7a6fe43695ff75f09703e5d3ed2a71ba479345add8923f2bf8ccb65f7e1bc46d91780638b6dba21e35f41337a1"}, {0xdd, 0x7c, "6439e42b286bdcd2decd5ea1f4ec2bd1db2c3fcfb7086c39bbe1973be60daa6d6a5f01391cf5bae9966d9a461a78949a1123bf6259f64c116046abf57203d13bffcd330c2fa870fd77241d5b0d1079b1f77b74fab3add8dced5d0e143ec3abbe7be566c8e1ce49f431aa95aa2ccd73eda7ad6924ca4e7975c1f4cba6"}, {0xdd, 0x78, "c0068f5b4089fb11f8a1a503c5fac1bd703ebed1a6ec7c12b2c91e6b3c749ef2b447a122c67aabb787e6fe05bb63a007cc4adf39feb8aaf2f81c299f1d1bd331a6b151c18965e897ed632e643591936da6bf15224a5687be8d61014c443762cc1c2de7c8232a786c950ca7b9f14593d1b89fd5fb93c6ef9e"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2000}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0xd60}, 0x1, 0x0, 0x0, 0x2000c9c4}, 0x8000)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x24, r10, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}]]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x40000)
sendmsg$inet6(r2, &(0x7f00000021c0)={&(0x7f0000001ec0)={0xa, 0x4e21, 0x7, @empty, 0x400}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000001f00)="fbe53d2a6f7ccb7257c4c61d492db51b067c6fed2e144dd209f04b0af66fa1d8a6f48c4d5292a5050ac150889fbe7cb3cbf680a135f596db85ed5d4f1e2a4462114b5a582a000231", 0x48}, {&(0x7f0000001f80)="e4d7975e459de3a8f9dd14d07b52a33ca717fcc7c64faccfd1b35a52ab57383610c909adb5fd194bac39d1c2441f441340cbb8bdca2e27919cfa59932e36eaac08ce8344d2e3da427250f43ca942f0a0ca36e6d854b71eb64d226a983ffdbdb685631a65faa3944caeb432d8b4e3c61e17eca0910307a29a4052e46c1f5f254a1cac50fbe9a747e5af3a1eab331a", 0x8e}, {&(0x7f0000002040)="a3b490002eb39b4c383bc53dee91484321e62016786ae87f15e2e20c3937e18e2e20b7fe27f3aac1bb1b09547e0fc0d7bc9c2706972797dd614b6df0417a7d2dc45a5178f5778690da28c949a3bbf5b1221e4e0669dd02f30a723ef16641e8fcb80aaeec6fc4a0410b9bbecfe1d05749a78bf8ead084b16aeae0762fbc9dbe112b893ed97a6e1d035d19b02580422117adde7efcf042081565571d67056dd424507c08702a6ea5cf469d3292476152c3d2364f942ad3a4b8c23f6206a8dcfe98a8983cc2b2fbe90e4d9a9c4a3cbe3b28a454881cffbe83972a0ccd05cf2f05bc7213882304c6d2", 0xe7}], 0x3, &(0x7f0000002180)}, 0x80)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000002300)={&(0x7f0000002200), 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x60, r10, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x0, 0x6}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x220}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x60}, 0x1, 0x0, 0x0, 0x6010}, 0x10) (async)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r9, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async)
r12 = openat$cgroup_int(r9, &(0x7f0000002440)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
sendfile(r2, r12, &(0x7f0000002480)=0x8a2, 0x0) (async)
r13 = accept4$inet6(r6, &(0x7f00000024c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000002500)=0x1c, 0x80800)
ioctl$sock_SIOCGIFCONF(r13, 0x8912, &(0x7f0000002640)=@buf={0xe8, &(0x7f0000002540)="5110b50c9ad908a57f0595b36203eeaecb25689fbcd811f8cb2e149625e1bc1cc9f85eb63109dc43170dfcfdbf4f105ab3e0cedff30116318e4992880800cbec19a0d1e99d5e642861cd4b88d66b1b68eb106c54a6944872b07f6290589abcdd793674e0f48f750b7c7036d4552003f3709acce5fbc3691152ae7e91ba9f9707ed1b7684ad5b88d6ee58fde70169e591f016af2ff52d664748eb5e6ee15748c25e51e0d343963010901332a4680a1ad0e3f68e10e4bd91122a904bce91f3f5e220baaa0fcbe32db1d83bd121b56e11b337165b9cba8d0fd4d6a3bc9bb3bb7078b55ed7b2ece363c3"}) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002780)={@fallback=r9, 0xd, 0xfb05d3a6bffb25f4, 0x7ff, &(0x7f0000002680)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000026c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)

529.224025ms ago: executing program 0 (id=6210):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
connect$llc(r0, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
connect$llc(r1, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random}, 0x10)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)

528.189394ms ago: executing program 0 (id=6211):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f000001000000000000000020"], 0x60}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000000900010073797a310000000034000000140a030000000000000000000300000008000340000000000900010073797a310000000009000200737a30"], 0x7c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000c0002400000000000000001"], 0x80}}, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
listen(r4, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000210001002dbd700000000000ffffffff000000000000000000000000e000000100000000000000040000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000e800110000000000000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe800000000000000000000000000020000000000000000000000a0000000000000000000000000000000000fe8000000000000000000000000000bb7f000001000000000000000000000000ac14141a000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000ffff0000000000000000000000000000000000000000ac1414bb000000000000000000000000000000000000000000000200"], 0x138}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xa055}, 0x0)

526.512737ms ago: executing program 0 (id=6212):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000000f0000000800000041000000", @ANYRES32, @ANYBLOB="0000807dc393450d411e00cc7040737b60a56143b800000087", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$sock(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
recvfrom(r7, 0x0, 0x0, 0x22, 0x0, 0x0) (async)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78)
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r12 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x9005}, 0x4) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)

523.96412ms ago: executing program 0 (id=6213):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="540000001000010029bd7100ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c5af07000f0e0000140003007465616d3000000000000000000000000a0001000180"], 0x54}}, 0x20000014)
r2 = accept4$llc(r0, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4)
sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000df251b0000000d001900b019944dc5512633b1000000080015000200000008001500c000000008001500c00000002900190036cf4d29e2c409ae370d4fdbc6cc590d32bcb3dcb05e41ff2f6eee764f7f7dda0e9dba642300000008000100f0"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r8=>0x0)
sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r6, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x44}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x84}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x42}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x80}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000880)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280)={<r10=>0x0, <r11=>0x0, <r12=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r9, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}], 0x20, 0x40044}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="114a", 0x2}], 0x1, 0x0, 0x0, 0x400e815}}], 0x2, 0x4)
r13 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r13, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4)
sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080", @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
gettid()
getgid()
r14 = socket$can_j1939(0x1d, 0x2, 0x7)
r15 = socket$inet_mptcp(0x2, 0x1, 0x106)
r16 = getpid()
r17 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000600)=0xe8)
sendmsg$netlink(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="580100002f00010400000000fcdbdf250822c27182778b4c14be0a3001f2800c00180008ac0f000010000014000104fc0000000000000000", @ANYRES32=r18, @ANYBLOB="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"], 0x158}], 0x1, 0x0, 0x0, 0x1}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003640)={0x0, 0x0, <r19=>0x0}, &(0x7f0000003680)=0xc)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000340)="6d3ca6e9c89a0071b56ef3a8b8e9a616218a11f4ef65069823cc8ba7fa147816ed3ff06d199fc94582f2d84d3cbd37b6448afb4eac08728df025cdad6d95dc00d5e2f96784d3aef069de2a846334037fd7de0d92", 0x54}, {&(0x7f00000004c0)="d11d20d0650018d89ca8f8179984691da92efb6c8ff2d6ccf90c634e88acc25df192a4ce354e0aa217a8bde0495607510bf6f27820f449773702ecdb147404b46685a7c2dfc8628313340fb5548174e8d247e9897fb0b552bc27c7f6aed23ba910854c575e5d96e85641efcf887da9f55ae4c19196d0e687a352fbb8ce07912d2ad864e156154d6111ef34524865d245e43854cd9a8af26db7d5437d26c4632fd163626934c2aa052233dce906f6698e3628354eb0223e13617592aa4190892d1685380a62e3aa6ec50b46ba1d60f076113964ae5102802846c883049082eddc88a4", 0xe2}], 0x2, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}], 0x58, 0x20000040}}, {{&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000880)="89998770e12a12c56aa455f175a2c1461583279f84e38b52363e017482ab813af50409e7662a80ac406886648b07717f33dc20d1365d6694ceb75e67e15a7378c042cc43ccaa24f4178ce670a8c55a65432d9828ff15910602a75da6ceb0da883ccac71eed7cc9ad983128cf15b13f2cd0dbfccaa0b46e83eb34280fb3746e93609b17e452d535d8436a7d677c9ca579b3ee29c55e7048cd1549f12635e047b8e11fda111f2015d0bcf8f9c3419db22908cf6a5d20b17b3a8bc6757673fee8f711743e7f7c0ccd078158bf16fcf07ab90b08462acdcaadc004baa746fa02f735", 0xe0}, {&(0x7f0000000980)="eacdaa315a56d96c328667aa8a0dad97355e9b1c3a6fe6c33700459501abc2ed26abb3d66cbb63ea95ad4c922617f0323bfc0b644e9aa7b651dbcd9465e54bcc57b187d188d409704462f7a78422b394f37c2c67c97e5966b2e6fb63bae4ea37a051f59d688123ebb021808167ab85173448773babec9a5ddda2bf47f4645d7061522f97839af9de234f8674c0cc0cf0cf9ee53d19b308a0c8d01526e5b62a329039c9571624bc3b", 0xa8}, {&(0x7f0000000a40)="1f169855871403c391d508e61acfb86616815f98787bee8dd7ad4114fe4f3f75696715bb1ba826b487bdbda89173f2813e9371223deaff0ccd69f10c64fabeb210bdb8bd70931c6930a8136275a8d7fd44553cfe864dc8e9e77589bbde12a125a1e9559b0d2e4a4e644e680334356ec0e0db38b42a22eb2742ac2ed5ac239994b8a09fdfdadf05ebed58fd08b1f95c00ab1b21fe3ce1642bc99035fd1b20736e1e25ba72345fbacd9b1dce215cd40c7455cd1e", 0xb3}, {&(0x7f0000000b00)="a5668a18487315e6b6a792f18c91ab88b42d791ab7df8697e96d610b0032f5f95e5b3ca650428cd37f63055c778bfcf444de81cec19c6e61cfd0c06ac5d6f356fa1e927e81396c2cd041945ac1d6fc68eea05d26", 0x54}, {&(0x7f0000000b80)="1df8942ce058659854bf27b7a862ee57c39512cb5aaef7c077917f94d9549fbacdff1a", 0x23}, {&(0x7f0000000bc0)="dcd90825f06220efe578a72432ae0e6e6eedde9f6d8fb99e1a1c186e2c457158cfa1c3695142741390c9f2457d76f74365c3", 0x32}, {&(0x7f0000000c00)="b6fdbf7ae114f2e9dd830830ad2d4e60", 0x10}], 0x7, 0x0, 0x0, 0x24000044}}, {{&(0x7f0000000d00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000d80)="b1bd1eadead7bab72467280aab11ebcd4bdc4315226aa3a931625c010aeb27f1f73b53e23cb7fe627bb5540df0c1a1faff0bab152c4ba93db47ab8563c8a99357ea17533e47c9378fb326df204c3a9d74d069468a114c8eba844e3ae7b166656d831e0d1587654e31d59ca708261e7", 0x6f}, {&(0x7f0000000e00)="ec532834fc7844f9774d5d8b08df49b933459d7afbd7657099e1cbfad3a443c0ccf982dc0730b71f5913a729032fd333c3095373dac9b122ab78ee630a152890ae48bc4b176439a1fe27a7f683b475d9b83dcc8d42dec6e0e3a586fa274a5a2d6082585bfed68fbbe1b17395bdf811bdc921895b50f23e23d8d3e1d61ddcc9d9d5b9f811b45b0be88d1157a1d152dbd79d0ad2323f448785707cc11d7c06d12766f6aa2e2cf6b5abb5f0f39387758829eee53bc454f9443f91a7506f3a90f42c70c2a31c923617a5d74034336ecfcfab2f44a9e5ec481d8e59be4229e3973d2f9ad1349097b57738", 0xe8}, {&(0x7f0000000f00)}, {&(0x7f0000000f40), 0xffffffffffffff14}, {&(0x7f0000000f80)="07d6bf3a825ddca39d7c173434783506ed45ae447202ccae70d70d793084edcea3faba26890af0", 0x27}, {&(0x7f0000000fc0)="d7a6c0becf511cb2ff85fb095b69f83c07a024e6d0944b5c88387ebcb4139ef129f8c4cb419592d914de9fa0a579a69680e18c4f94bc7f8a50a5d93b3509ecc7051c513798f6b0d2f86d9b435f34a2cc3da38938b1f1f59424b5adce50337331076f1297cb8ac83b860083ce182cfdc443f60dc14180faeba620", 0x7a}], 0x6, &(0x7f0000001280)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, r1]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50, 0x84}}, {{&(0x7f0000001300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000001380)="2133c01746d764b84a6f9fef1487f03ef5e24f8dbd88b0829f1d2fb54f08809fc3e449f3709cf62549a6ed7d5858e5070b73514a9f8020ef524b2f73b7f65845fab0e315a94e1e3d93bab2cf9762abfcbaa31191fdf96ba023797e6408cba89ef7f7d6f77383fd99dec548bfd18e364faa0c12188f13535c7abefd8c54df636ada77b1e32ac56bfc733d14a537feaa5aad4cd37dabb21b7ca812c8866e04f0cda8b7baca991fb56be4bccad2262425e78c211f1ae064985ec24bbf6d17885854667b9b8237d8c05a237ffa6faa0a036ac5e78401bed6", 0xd6}, {&(0x7f0000001480)="a778c6dfb93838007d6196a5a15451fd9b1c5eac1c6aeb775e2e1e1ad31d9dbffa06192b62d7e6332c11983ae619309adfdfde84a9bc786a", 0x38}, {&(0x7f0000003880)="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", 0x1000}, {&(0x7f00000024c0)="8f758046f4beabc67f2418877f8255b9009c0ee51c634e2aa7839e9a0bca04eebcd20ff0522a083b7d4d6f7a5acc9d209318fa4952db79cf04748f727d92813a0be9da349a57382344c0ab13492570ea1cb2a8e1be7fb5e39eeae289acec9f7074d3308a6bef83cd4541f6d9fa15bdaee9a07583bc1edeaa13d6", 0x7a}, {&(0x7f0000002540)="66cfe1488d784ed2505e817218276831658376761ab5f9acca685ea4fabe52e24266308f62e72c27e151263f3ef26ec531918da8f3e9fbe4b8f70d172e97b249f0506b68b7f1260eb7bf122b230afa18b415377dae87a575f1bc1e2d7c41cc14b7058ecb758926d28c19", 0x6a}, {&(0x7f00000025c0)="143aac296abded9626ddeb58401fa4f4a91f7404adfa9922f7ed0c00c77055379ea7f384c45a3c20a4147ef7d215b6a714324a156dd16f4db65f846f6a85216965a1747432f229504052f38b5eb666753f69c683845bcc0e8dc270a17e846e3914919f8d96d82706dabeef766737aebd7b8c0e7bbc30699a2bdcf5147b0c5412f13faa853e119121f30c9b9938d64211aeb7ffaf29bbadf492fb58b123ff7b2b631b86eebfcf0aec7d47f3a2c12aa48cd417b33f88c0f5a231f5b8bda9008675296c048beb072924cdc4fe5beed7b6ed14133a814d0ded86", 0xd8}, {&(0x7f00000026c0)="ab89fdace8e2b7d13e49196f289e2e24a72eca37388b3b70de57807fd9d99f8207ee6a9600711c7469e3151e890cdf03ee34fa37af77c6f96f4334a4758d6e993bd48337f2000d699059e384a4a9d4b2b0b37ea05cd5a578029617f577b056871995044dce0394b54d07edbb5b5afb83e9c908", 0x73}], 0x7, &(0x7f0000002800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, r0, 0xffffffffffffffff, r1, r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, r0]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f00000028c0)="80a23ad0150c74814327a824d455d2a1a722f61e9652a2e3ef11acc05ece057bd5f7b6f3432b517b3fee8f08b05c66b249315d6b22efac44a34053edde0a6423105afd06fb39ec9cd8fcb021b500fe145c831401977cdc9cfa00fd8ab541ef8e2d371371efabec651b273bc7118a9f6d66", 0x71}, {&(0x7f0000002940)="439eaa1a4a73885cbb69e403843e1e8833d8838080040f379288b24e9a41274a08af3630dd1fbc40981b15057fd640a08f1dd12c96554685b5c4a572cf52b0c481e85bb953a3d783450db32b1fdb7d41dc2b472a6d9307c0ac4074da7b1e10cc16d273679d75608dba995088bf3b357077737190b6a018799282b6e3632b5601a98672b58b92146f6c535c8283ed30af3c7922f6a6d1b88aea65d9adab2f9e336cc243b706f9fef88b60e9f9a327449ee52c93acab9a5114010114415aa52eacb3a5415708fed48bb8f211a9bb2276516b0199175011180465cb56be8289d16ca847d0938190211f535772ddb821d2c9218780e3670726fd7b262944f7e3", 0xfe}, {&(0x7f0000002a40)="6e5f66d865119be8b0f7569c835d6d50bd3c5a7a3daaab5c0bda1370f2aa22", 0x1f}, {&(0x7f0000002a80)="bebd816458791b1875e12dc428e4e15105a5ced4e68ab7a973004afb84041f049f26b61f2b05e66d23899d96b4a3ca355c7d365bd7a609496c587ded30", 0x3d}, {&(0x7f0000002ac0)="4ee04232b321a04f0d0767659aff88e9c999737c8122c8a5a7403fd78aa4f374c57506b9d2ae3c8b38ea246bc81a56b005af879198e3f5bf1ef31691ede92b198649ce8fd2f982e29f370671e95dc020ecc3e9366f90c8db7327a7a6c3bcc58b51052274ceed517f2f0413eb709d769e1d4ecb5f7ca68df428795257a47224a6fc672f309512303cd760bc5ae7781dc913bb29b5f67426f819ffae40681cc36a6ff414c884cc81a1fe3badd63f7270e99e55676ec1f84e634088faee7f5cfc01e09ace2a89b5c12eea", 0xc9}, {&(0x7f0000002bc0)="a65cad7b16ba6ea21a58773075f8f62e5ca4c17e4b06a25989277a45d7aa14bbeb2ff18520c7617d30b5a454d4a1739cd9524de47fcf059316418a0dceab7605210806344a53ef79c53bd3efea4f2eb16d4936b9c7e955b4149d37ce247d81e066a876200b1abc8c6e9654ae5b8a9ae8edb1750f03a8860bd7a59621defa71576d1930558619518e3b126e5c5dbd47d387bcd127be612477f109e0519aae5c181d362e5542f21e9b0650a434e25b5b1595f60f2b29b0633bccd002107716a901941d951a4cce1fb91bfaebdde806ffefc6a9bbd4cf0db92240565d209c41444d2595af6f150a4629c986e0c2fba36a5a8ae5b4c8f19d2af226", 0xf9}, {&(0x7f0000002cc0)="1f63fe4b5a81f61452f1b3d390540c7fb0743fdaa2ed2c41fda6dc8df671cb54e897cbc050e324a4e6532ca0d4af50be3dbaa65bdb598e585d86d8fd65e1adfbf157fee0ec978fa85fbd7ab0ef221b9e7ec15699c70046c5f1cbb747f2e15449d0181357954f9a3b5e95bd3b3fcc46aace6e7905e585ad1546c139e79254047738f9204e8cb7e6d18d39035eb1e1ef03795ce8a2da21e27f35c84c04afdb627b63c522e1d310a69ac132dda599baae8792da86e7bc11abf3ca49abf04a43dcdc1e06c7232feba715dbb141fc1ec28f21038da797eabf361b641a5df1b39ddd8a14ef77e94d86c9a898b94429b30931d04743e70709ea2001", 0xf8}, {&(0x7f0000002dc0)="14171b0510c60f8fdbf80083d217bdfda799b4a7327271bba2be7f28f37c812248e5c091e3e06cce2653bfb740fc275bd2011c6ae55497d733dc134d9499fb1bb16c55514ffaeb91e6ce4c432daec4f499f5b444ed84eb467e3de9996f432de70466b050050cecbbfcf5757c5c7f5f6ed2a06a11c942c6476ffb57cee641", 0x7e}, {&(0x7f0000002e40)="63b9121d55e22a6434d70bcddda83f6a9c36a9d918ab95faa1d99b65a193cc1a9f3ceebeaef0610aaae1552dd22542114083cb4cca9276902b09c96d8417e6f242d188d30513ba", 0x47}], 0x9, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r2, r0]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2]}}, @rights={{0x30, 0x1, 0x1, [r2, r0, r2, r2, r1, r0, r14, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r0, r2, r2, r0, r2, r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r12}}}, @rights={{0x1c, 0x1, 0x1, [r13, r0, r1]}}, @rights={{0x2c, 0x1, 0x1, [r0, r14, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r14]}}, @rights={{0x1c, 0x1, 0x1, [r14, r2, r15]}}], 0x180, 0x40}}, {{&(0x7f00000032c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003600)=[{&(0x7f0000003340)="19bb4facfeae3a34f02860d1b245ab3e2d9499fd2022996a8731ce93b76ac71d91def4a2cc6fbb3d426527", 0x2b}, {&(0x7f0000003380)="15ac9f8b135d987dd6c3929103d0c891011a41ee92886a7e89bdc7ca0f43e93f5ab9b8e868523e573e6c733ae5671a6d394f183f4c550fb6adbffff6b03fe0aaf9c14d000722ff2f11ca8cab4d1e3f5dde3ce27ada163ab170cbf164748fcb3157dd6d4be6ab81a09b20298271f7a59461ff038ba514914b8c1e325bd940590a278a438b52827a2a277b4441cc6354fc375b6e9d485190e8bc2f622129b9b3b21ba1ca482f5b22a3bbd0754f87f56804c961d6b01af48dbb41baeb1370ee8b3b8dc216c56a492738010b2fd7971d86e8fd3cde378ed41c20afdd239f8b8981554aea", 0xe2}, {&(0x7f0000003480)="fcff19489192c1c4bf585d15713e72c8097a0d240993d2042a4b432dcd2dfa2007d6e6be8093ca26a0e0a5cd560a26694061b2600716f2a804d2b49d2586f7b6a553638f6ac15a943c2b912cbe249a57b45796d308731bae7b8dbab8ee6e3e8adbab55b28d9b2adf7659ec9a67dbcc218d600f60424bb65e4e19c7868d9daa173245dc07c10a566c3945a62133ae529946f072cfec2876c4376b3bbeb31b06d90492e6e9c58f171caeed82fff0c3", 0xae}, {&(0x7f0000003540)="6eb3141e07b306173c30e7f8ff3f89b5c66acb85ff9d68bff568034ce3192fe15b77bdf92a14260c91776fffbf1c0c8a8b7b2a97de791e270c6b50b5247d30b6847c5722010cb19433945887d9e86ad4b0fb2cdb72a15b7e2b389404141caf76210bdc6d510559d77dcdfdc18829d379f20588a6b6171046a72b09b26f6d61dac1", 0x81}], 0x4, &(0x7f00000036c0)=[@cred={{0x1c, 0x1, 0x2, {r16, r18, r19}}}], 0x20, 0x8000}}], 0x6, 0x4)

410.335866ms ago: executing program 0 (id=6214):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r1 = socket(0x2b, 0x80801, 0x1) (async)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
syz_genetlink_get_family_id$smc(&(0x7f0000000240), r2) (async)
ioctl$sock_qrtr_TIOCOUTQ(r1, 0x8905, &(0x7f0000000000))
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async)
poll(&(0x7f00000011c0)=[{r0, 0x2}, {r0, 0x3600}, {r0, 0x40}, {r0, 0x59}], 0x4, 0x3)

290.131494ms ago: executing program 2 (id=6215):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xd, 0x2a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)

289.536269ms ago: executing program 2 (id=6216):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000080000000000000000000071108f000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x1, 0x0, @multicast}, 0x10) (async)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaaaaaaa68322ec14bbaaaaaaaaaa00ac1414aa"], 0x0) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async)
r4 = socket$inet(0xa, 0x801, 0x84)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r5, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
writev(r6, &(0x7f0000000280)=[{&(0x7f0000001040)="3e98", 0x2}], 0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
unshare(0x20000400)
r8 = socket(0x80000000000000a, 0x2, 0x0)
getsockopt$inet6_buf(r8, 0x11, 0x6, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r6, 0x0) (async)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000280)={0xfbca, 0x1ff, 0x1, 0x3, 0x7, 0x0, 0xd}, 0xc) (async)
getsockopt$IPT_SO_GET_INFO(r4, 0x29, 0x40, 0x0, &(0x7f0000000200)) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002240)=<r9=>0x0, &(0x7f0000002280)=0x4)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002380)={'ip_vti0\x00', &(0x7f00000022c0)={'gretap0\x00', <r10=>0x0, 0x8000, 0x7800, 0x4, 0x2, {{0x26, 0x4, 0x0, 0xa, 0x98, 0x65, 0x0, 0xa, 0x4, 0x0, @local, @empty, {[@ssrr={0x89, 0x17, 0xf0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast, @loopback]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xc5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @broadcast]}, @noop, @cipso={0x86, 0x55, 0x3, [{0x0, 0x12, "29382418d03c255507bfbde6bef07978"}, {0x0, 0x8, "aa6b288a8020"}, {0x0, 0x4, "668a"}, {0x0, 0x10, "423e846f7fecb60679799da60d5e"}, {0x1, 0x7, "852f3c8be5"}, {0x1, 0xf, "9bc40a63d5d1389daac8e1f379"}, {0x1, 0x2}, {0x1, 0x9, "5b45652a1145fe"}]}]}}}}})
sendmsg$inet(r0, &(0x7f0000002500)={&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, &(0x7f0000002200)=[{&(0x7f0000000040)="b236d380ad1989658aee5ab4e7bd63178345357f4fb52be788d77ecefb060d4b8b909a17156a91988cecb8997579084d9288f1d707ce0819af8b842494da05418953efea352ce79bfe43ad8b926fb217b27cf2c5c83d4f768baa2f8c987fb0bae93db71f73884d9885ca0a5152e0838dd333e99d1834c65a14c57954cbae34ab2a020d", 0x83}, {&(0x7f00000001c0)="e4c38c3f6d1bac56449d42ea49077275a16a1c77c7fc709eda8ff39c1c4de11d8d6c5b54833effd61c30f5e5b7aebb0a08d7f36cee679fd623b3d3211f4f1f1bd124734b35629b259adadc1be8b2d679ea70e0e41dbddbb75fd368d88ef9a093dba8c34bc9dfb1a2da72da5e7438d32c26b4987f2263608a413b76839ae454c8107c740a5e20b4f872685b23896616129c84fcff22ddc1b124b010746dbfec98f6", 0xa1}, {&(0x7f0000001200)="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", 0x1000}], 0x3, &(0x7f00000023c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x35}, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1e5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @local, @local}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x2e, [@multicast1, @multicast2, @rand_addr=0x64010101, @broadcast, @empty, @remote]}, @cipso={0x86, 0x37, 0x2, [{0x7, 0x4, "ac3f"}, {0x2, 0xe, "0920d52b247dcac4d371b241"}, {0x5, 0x12, "c455e00bf945c0c5eecf48c2c4f414ac"}, {0x0, 0xd, "6ff2d8edff106c2deda80f"}]}, @timestamp_prespec={0x44, 0xc, 0xc7, 0x3, 0x0, [{@private=0xa010100, 0x7}]}, @timestamp={0x44, 0x18, 0xdf, 0x0, 0x1, [0x7, 0x3ff, 0x9, 0x9, 0x8]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfa8}}], 0x130}, 0x0) (async)
poll(&(0x7f00000011c0)=[{r0, 0x2}, {r0, 0x3600}, {r0, 0x40}, {r0, 0x59}], 0x4, 0x3)

149.438612ms ago: executing program 2 (id=6217):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xac, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0xc000}, 0x20004040)
setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), 0x4) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) (rerun: 64)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), 0x0}, 0x20)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r6, &(0x7f0000000440), &(0x7f0000000040)=@udp=r5}, 0x20)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, 0x2c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async, rerun: 64)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) (rerun: 64)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r8, r8, 0x2f, 0x0, @void}, 0x10) (async, rerun: 64)
r10 = socket(0x10, 0x3, 0x0) (rerun: 64)
write(r10, 0x0, 0x0) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r9, r8, 0x4, r8}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '}(/{}'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) (async)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r3, &(0x7f0000003680), 0x0, 0xf2ff, 0x0) (async, rerun: 32)
recvfrom$inet(r5, &(0x7f0000000300)=""/113, 0x71, 0x40000000, 0x0, 0x0) (async, rerun: 32)
connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10)

149.027152ms ago: executing program 2 (id=6218):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000300)={@val={0x0, 0x8863}, @val={0x0, 0x0, 0x3, 0x0, 0x1}, @llc={@snap={0x1, 0xab, "c1", 'TF^', 0x60}}}, 0x16)
recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001800ddd000000000000000000200000000000d05000000000600150005000000280016802400010003"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x148, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xf}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x5}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0xc5}, 0x24008004)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000a00ffff000000000a00000085000000750000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'\x00', <r11=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r11, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x20000851)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

0s ago: executing program 2 (id=6219):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2], 0x7c}}, 0x20000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2) (async)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r8 = socket(0x1, 0x803, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r10, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x8, @mcast2, 0x60}, 0x80, 0x0}}], 0x2, 0x48094)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) (async)
write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a)
sendfile(r10, r11, 0x0, 0xffffffff000) (async)
sendfile(r10, r11, 0x0, 0xffffffff000)
socket(0x10, 0x3, 0x0) (async)
r12 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000006c0)={0x50, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x3b, 0xf, 0x0, 0x1, [@generic="dbf7a540b403da3ccb732d5b32d7ca3e7964d3736a80e1e0cce108d8caf3992f1b35247d85163802548e0ff626d1f153ecc06317ed39a6"]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000d400"/13], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2e, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

tributes in process `syz.0.1096'.
[  110.502293][ T8300] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1111'.
[  111.529792][ T8342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1128'.
[  111.622853][ T8339] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1127'.
[  111.758332][ T8358] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1135'.
[  111.843732][ T8363] macvlan2: left promiscuous mode
[  111.846496][ T8363] bond1: left promiscuous mode
[  111.855233][ T8363] 8021q: adding VLAN 0 to HW filter on device batadv1
[  111.863662][ T8363] bond2: left promiscuous mode
[  111.865750][ T8363] bridge1: left promiscuous mode
[  112.211294][ T8402] netlink: 'syz.1.1155': attribute type 1 has an invalid length.
[  112.224204][ T8404] raw_sendmsg: syz.2.1156 forgot to set AF_INET. Fix it!
[  112.391165][ T8420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1164'.
[  112.858603][ T8441] IPv6: NLM_F_REPLACE set, but no existing node found!
[  113.427197][ T8477] netlink: 'syz.0.1190': attribute type 62 has an invalid length.
[  113.502385][ T8483] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.505418][ T8481] IPv6: Can't replace route, no match found
[  113.505774][ T8483] syzkaller0: entered promiscuous mode
[  113.510318][ T8483] syzkaller0: entered allmulticast mode
[  113.512000][ T8481] IPv6: Can't replace route, no match found
[  113.538057][ T8483] tipc: Resetting bearer <eth:syzkaller0>
[  113.544943][ T8482] tipc: Resetting bearer <eth:syzkaller0>
[  113.602611][ T8482] tipc: Disabling bearer <eth:syzkaller0>
[  114.431150][ T8558] netlink: 'syz.2.1229': attribute type 1 has an invalid length.
[  114.447142][ T8558] 8021q: adding VLAN 0 to HW filter on device bond3
[  114.476859][ T8558] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1229'.
[  114.490720][ T8558] bond3: (slave geneve2): making interface the new active one
[  114.494238][ T8558] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  114.502019][ T8558] syz.2.1229 (8558) used greatest stack depth: 20056 bytes left
[  114.637751][ T8582] tc_dump_action: action bad kind
[  114.682762][ T8586] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1241'.
[  114.726756][ T8592] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  114.735358][ T8592] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  114.738064][ T8592] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  114.939684][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'.
[  115.074884][ T8612] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1255'.
[  115.751963][ T8623] syzkaller0: entered promiscuous mode
[  115.754332][ T8623] syzkaller0: entered allmulticast mode
[  116.394604][ T8662] xt_hashlimit: size too large, truncated to 1048576
[  117.158034][ T8708] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1296'.
[  117.264392][ T8716] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1300'.
[  117.274402][ T8716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1300'.
[  117.470625][ T8728] netlink: 'syz.1.1306': attribute type 1 has an invalid length.
[  117.498057][ T8728] 8021q: adding VLAN 0 to HW filter on device bond2
[  118.167564][ T8728] veth9: entered allmulticast mode
[  118.176167][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'.
[  118.186184][ T8728] bond2: (slave veth9): Enslaving as an active interface with a down link
[  118.205896][ T8730] bond2 (unregistering): (slave veth9): Releasing active interface
[  118.214406][ T8730] bond2 (unregistering): Released all slaves
[  118.292510][ T8742] syzkaller0: entered promiscuous mode
[  118.294333][ T8742] syzkaller0: entered allmulticast mode
[  119.784019][ T8841] syzkaller0: entered promiscuous mode
[  119.789069][ T8841] syzkaller0: entered allmulticast mode
[  119.795166][ T8841] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.798394][ T8840] tipc: Resetting bearer <eth:syzkaller0>
[  119.801712][ T8847] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.820700][ T8840] tipc: Disabling bearer <eth:syzkaller0>
[  120.019026][ T8876] netlink: 'syz.1.1338': attribute type 2 has an invalid length.
[  120.022664][ T8876] netlink: 'syz.1.1338': attribute type 8 has an invalid length.
[  120.025634][ T8876] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1338'.
[  120.046185][ T8878] tap0: tun_chr_ioctl cmd 1074025677
[  120.050297][ T8878] tap0: linktype set to 768
[  120.188339][ T8891] netlink: 'syz.1.1345': attribute type 1 has an invalid length.
[  120.191741][ T8891] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1345'.
[  120.418562][ T8905] netlink: 'syz.1.1351': attribute type 1 has an invalid length.
[  121.423948][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1357'.
[  121.462674][ T8931] 8021q: adding VLAN 0 to HW filter on device bond4
[  121.473563][ T8931] netlink: 'syz.0.1357': attribute type 8 has an invalid length.
[  121.496529][ T8931] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  121.502786][ T6369] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  121.508254][ T6369] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  121.528549][ T8931] bond4 (unregistering): (slave geneve3): Releasing backup interface
[  121.540936][ T8931] bond4 (unregistering): Released all slaves
[  121.563556][ T6369] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  121.572284][ T6369] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  121.584371][ T8942] bridge0: port 3(vlan2) entered blocking state
[  121.586967][ T8942] bridge0: port 3(vlan2) entered disabled state
[  121.590070][ T8942] vlan2: entered allmulticast mode
[  121.592008][ T8942] geneve0: entered allmulticast mode
[  121.594615][ T8942] vlan2: entered promiscuous mode
[  121.596262][ T8942] geneve0: entered promiscuous mode
[  122.994973][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1389'.
[  123.021547][ T8994] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1390'.
[  123.030496][ T8994] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  123.094296][ T9000] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1393'.
[  123.318382][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'.
[  123.435468][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'.
[  124.471506][ T9029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  124.639884][ T9052] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1414'.
[  124.643637][ T9052] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1414'.
[  125.109091][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  125.553782][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'.
[  125.558176][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'.
[  125.863716][ T9154] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1463'.
[  125.866770][ T9154] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  126.995836][ T9217] netlink: 'syz.2.1492': attribute type 3 has an invalid length.
[  127.097607][   T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.108012][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.161557][ T9231] syzkaller0: entered promiscuous mode
[  127.163430][ T9231] syzkaller0: entered allmulticast mode
[  127.166909][ T9231] TC_ACT_REPEAT abuse ?
[  127.303433][ T9241] netlink: 'syz.0.1504': attribute type 2 has an invalid length.
[  128.139039][ T9282] xfrm0: entered allmulticast mode
[  128.607394][ T9309] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  128.609837][ T9309] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  128.612656][ T9309] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  128.731080][ T9321] netlink: 'syz.0.1535': attribute type 6 has an invalid length.
[  128.740858][ T9323] block nbd0: not configured, cannot reconfigure
[  128.783203][ T9327] __nla_validate_parse: 3 callbacks suppressed
[  128.783216][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1539'.
[  129.096556][ T9296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  129.105358][ T9360] netlink: 'syz.2.1555': attribute type 2 has an invalid length.
[  129.303708][ T9384] atomic_op ffff8881189c8998 conn xmit_atomic 0000000000000000
[  129.350201][ T9390] SET target dimension over the limit!
[  129.743078][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1581'.
[  129.816404][ T9397] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  129.828917][ T9397] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  130.821878][ T9479] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  130.961144][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1611'.
[  130.964807][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1611'.
[  131.266807][ T9506] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.1618'.
[  131.274217][ T9506] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  131.735595][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'.
[  132.120868][ T9564] ip6tnl1: entered allmulticast mode
[  132.151454][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1647'.
[  132.318983][ T9545] syz.2.1637 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  132.325871][ T9545] CPU: 0 UID: 0 PID: 9545 Comm: syz.2.1637 Not tainted syzkaller #0 PREEMPT(full) 
[  132.325885][ T9545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.325891][ T9545] Call Trace:
[  132.325901][ T9545]  <TASK>
[  132.325906][ T9545]  dump_stack_lvl+0xe8/0x150
[  132.325940][ T9545]  dump_header+0xd3/0x4c0
[  132.325957][ T9545]  oom_kill_process+0x3ab/0x970
[  132.325970][ T9545]  out_of_memory+0x106c/0x1410
[  132.325979][ T9545]  ? try_charge_memcg+0xbb9/0x1570
[  132.325994][ T9545]  ? __pfx___mutex_lock+0x10/0x10
[  132.326010][ T9545]  ? __pfx_out_of_memory+0x10/0x10
[  132.326019][ T9545]  ? do_raw_spin_unlock+0x4d/0x210
[  132.326035][ T9545]  try_charge_memcg+0xc77/0x1570
[  132.326054][ T9545]  ? __pfx_try_charge_memcg+0x10/0x10
[  132.326064][ T9545]  ? percpu_ref_tryget+0x15/0x180
[  132.326083][ T9545]  ? charge_memcg+0x23/0x2b0
[  132.326095][ T9545]  charge_memcg+0x1a2/0x2b0
[  132.326107][ T9545]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  132.326117][ T9545]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  132.326129][ T9545]  __swap_cache_prepare_and_add+0xdc/0x700
[  132.326142][ T9545]  ? page_rmappable_folio+0x9a/0x170
[  132.326158][ T9545]  swap_cache_alloc_folio+0xf1/0x240
[  132.326169][ T9545]  swap_cluster_readahead+0x355/0x670
[  132.326181][ T9545]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  132.326196][ T9545]  ? get_vma_policy+0x27b/0x3c0
[  132.326208][ T9545]  swapin_readahead+0x196/0xc50
[  132.326219][ T9545]  ? swap_table_get+0x1e/0x260
[  132.326230][ T9545]  ? __pfx_swapin_readahead+0x10/0x10
[  132.326240][ T9545]  ? swap_table_get+0x1e/0x260
[  132.326248][ T9545]  ? swap_table_get+0x1e/0x260
[  132.326255][ T9545]  ? swap_table_get+0x1e/0x260
[  132.326264][ T9545]  ? swap_table_get+0x216/0x260
[  132.326273][ T9545]  ? swap_cache_get_folio+0x2e4/0x2f0
[  132.326284][ T9545]  do_swap_page+0x555/0x5120
[  132.326296][ T9545]  ? __pte_offset_map+0x29/0x240
[  132.326306][ T9545]  ? __pte_offset_map+0x29/0x240
[  132.326319][ T9545]  ? do_swap_page+0x128/0x5120
[  132.326328][ T9545]  ? __pfx_do_swap_page+0x10/0x10
[  132.326336][ T9545]  ? __pte_offset_map+0x1ae/0x240
[  132.326346][ T9545]  ? pte_offset_map_rw_nolock+0xea/0x160
[  132.326357][ T9545]  handle_mm_fault+0x12d2/0x3170
[  132.326373][ T9545]  ? handle_mm_fault+0xee/0x3170
[  132.326385][ T9545]  ? __pfx_handle_mm_fault+0x10/0x10
[  132.326393][ T9545]  ? lock_vma_under_rcu+0x45a/0x500
[  132.326414][ T9545]  do_user_addr_fault+0xa73/0x1340
[  132.326426][ T9545]  ? rcu_is_watching+0x15/0xb0
[  132.326436][ T9545]  ? trace_page_fault_user+0x84/0x1e0
[  132.326446][ T9545]  exc_page_fault+0x6a/0xc0
[  132.326457][ T9545]  asm_exc_page_fault+0x26/0x30
[  132.326466][ T9545] RIP: 0033:0x7eff9786a7be
[  132.326475][ T9545] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 e8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 f6 d5 3a 00 85 c0 0f 8e 53 fd ff ff <e8> 6d 7d fe ff 49 39 c4 73 88 48 8d 1d d1 b7 3a 00 83 3d d6 d5 3a
[  132.326482][ T9545] RSP: 002b:00007ffdbff97cf0 EFLAGS: 00010202
[  132.326491][ T9545] RAX: 0000000000000001 RBX: 00007eff97c17da0 RCX: 000055555d738808
[  132.326496][ T9545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  132.326501][ T9545] RBP: 00007eff97c17da0 R08: 0000000000000000 R09: 0000000000000000
[  132.326506][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000205e1
[  132.326510][ T9545] R13: 00007eff97c15fac R14: 00000000000202d2 R15: 00007ffdbff97df0
[  132.326523][ T9545]  </TASK>
[  132.326951][ T9545] memory: usage 307200kB, limit 307200kB, failcnt 2221
[  132.444707][ T9545] memory+swap: usage 307296kB, limit 9007199254740988kB, failcnt 0
[  132.447598][ T9545] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[  132.450873][ T9545] Memory cgroup stats for /syz2:
[  132.451524][ T9545] cache 0
[  132.455161][ T9545] rss 0
[  132.456226][ T9545] rss_huge 0
[  132.457332][ T9545] shmem 0
[  132.458484][ T9545] mapped_file 0
[  132.460157][ T9545] dirty 0
[  132.464660][ T9545] writeback 0
[  132.466852][ T9545] workingset_refault_anon 8
[  132.470321][ T9545] workingset_refault_file 0
[  132.473326][ T9545] swap 98304
[  132.474659][ T9545] swapcached 143360
[  132.476130][ T9545] pgpgin 52900
[  132.477289][ T9545] pgpgout 52898
[  132.478406][ T9545] pgfault 117507
[  132.479844][ T9545] pgmajfault 4
[  132.481068][ T9545] inactive_anon 4096
[  132.482390][ T9545] active_anon 4096
[  132.483692][ T9545] inactive_file 0
[  132.489194][ T9545] active_file 0
[  132.490389][ T9545] unevictable 0
[  132.492989][ T9545] hierarchical_memory_limit 314572800
[  132.509023][ T9545] hierarchical_memsw_limit 9223372036854771712
[  132.518798][ T9545] total_cache 0
[  132.519950][ T9545] total_rss 0
[  132.522083][ T9545] total_rss_huge 0
[  132.523277][ T9545] total_shmem 0
[  132.525946][ T9545] total_mapped_file 0
[  132.527182][ T9545] total_dirty 0
[  132.534766][ T9545] total_writeback 0
[  132.538297][ T9545] total_workingset_refault_anon 8
[  132.549399][ T9545] total_workingset_refault_file 0
[  132.551703][ T9545] total_swap 98304
[  132.552934][ T9545] total_swapcached 143360
[  132.557984][ T9545] total_pgpgin 52900
[  132.561973][ T9545] total_pgpgout 52898
[  132.568861][ T9545] total_pgfault 117507
[  132.574366][ T9545] total_pgmajfault 4
[  132.575629][ T9545] total_inactive_anon 4096
[  132.585033][ T9545] total_active_anon 4096
[  132.586381][ T9545] total_inactive_file 0
[  132.594105][ T9545] total_active_file 0
[  132.600352][ T9545] total_unevictable 0
[  132.601702][ T9545] anon_cost 0
[  132.611298][ T9545] file_cost 0
[  132.615147][ T9545] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1637,pid=9545,uid=0
[  132.637874][ T9545] Memory cgroup out of memory: Killed process 9545 (syz.2.1637) total-vm:104208kB, anon-rss:1256kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  132.883963][ T9600] bridge0: port 3(macvlan3) entered blocking state
[  132.887060][ T9600] bridge0: port 3(macvlan3) entered disabled state
[  132.890739][ T9600] macvlan3: entered allmulticast mode
[  132.894662][ T9600] ip6gretap0: entered allmulticast mode
[  132.894709][ T9597] sock: sock_timestamping_bind_phc: sock not bind to device
[  132.900984][ T9600] macvlan3: entered promiscuous mode
[  132.907188][ T9600] bridge0: port 3(macvlan3) entered blocking state
[  132.910429][ T9600] bridge0: port 3(macvlan3) entered forwarding state
[  133.100030][ T9609] openvswitch: netlink: Flow key attr not present in new flow.
[  133.485890][ T9627] netlink: 'syz.2.1674': attribute type 6 has an invalid length.
[  133.489841][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'.
[  133.731011][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'.
[  133.736421][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1685'.
[  133.744563][ T9650] netlink: 'syz.1.1685': attribute type 13 has an invalid length.
[  133.755905][ T9650] netlink: 'syz.1.1685': attribute type 11 has an invalid length.
[  134.046818][ T9688] __nla_validate_parse: 1 callbacks suppressed
[  134.046831][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1702'.
[  134.053870][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1702'.
[  134.095934][ T9687] 8021q: adding VLAN 0 to HW filter on device bond2
[  134.316397][ T9709] netlink: 'syz.1.1713': attribute type 1 has an invalid length.
[  134.321856][ T9709] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1713'.
[  134.326570][ T9709] netlink: 658 bytes leftover after parsing attributes in process `syz.1.1713'.
[  134.330929][ T9709] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1713'.
[  134.364891][ T9711] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1714'.
[  134.373192][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1714'.
[  134.662970][ T9734] netlink: 'syz.2.1725': attribute type 10 has an invalid length.
[  134.668230][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1725'.
[  134.672914][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'.
[  134.676264][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'.
[  134.941565][ T9761] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  134.947388][ T9761] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  136.240650][ T9857] netlink: 'syz.2.1780': attribute type 4 has an invalid length.
[  136.924320][ T9921] xt_hashlimit: size too large, truncated to 1048576
[  136.945280][ T9923] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  137.582665][ T9947] netlink: 'syz.2.1815': attribute type 13 has an invalid length.
[  137.911762][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  140.323954][ T9934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  141.544153][T10011] bond0: (slave wlan0): Error: Device can not be enslaved while up
[  142.145533][T10051] syz_tun: left allmulticast mode
[  142.830514][T10089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  143.031018][T10101] __nla_validate_parse: 5 callbacks suppressed
[  143.031032][T10101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1886'.
[  143.039975][T10101] ip6gre1: entered promiscuous mode
[  143.042102][T10101] ip6gre1: entered allmulticast mode
[  143.047385][T10101] netlink: 'syz.2.1886': attribute type 6 has an invalid length.
[  143.052154][T10101] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1886'.
[  143.069990][T10101] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  143.073385][T10101] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  143.114507][T10105] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.005173][T10163] netlink: 'syz.0.1914': attribute type 29 has an invalid length.
[  144.049276][T10165] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  144.052729][T10165] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  144.325659][T10188] netlink: 'syz.2.1924': attribute type 1 has an invalid length.
[  144.339534][ T5332] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  144.357155][T10188] 8021q: adding VLAN 0 to HW filter on device bond4
[  144.372563][T10188] bond4: (slave dummy0): making interface the new active one
[  144.377660][T10188] bond4: (slave dummy0): Enslaving as an active interface with an up link
[  144.384076][T10188] netlink: 'syz.2.1924': attribute type 10 has an invalid length.
[  144.386704][T10188] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1924'.
[  144.394600][T10188] dummy0: entered promiscuous mode
[  144.404118][T10188] bond4: (slave dummy0): Releasing active interface
[  144.594772][T10212] veth0: entered promiscuous mode
[  144.598227][T10212] bond0: entered promiscuous mode
[  144.600496][T10212] bond_slave_0: entered promiscuous mode
[  144.603258][T10212] bond_slave_1: entered promiscuous mode
[  144.606242][T10211] bond0: left promiscuous mode
[  144.612818][T10211] bond_slave_0: left promiscuous mode
[  144.615442][T10211] bond_slave_1: left promiscuous mode
[  144.621532][T10211] veth0: left promiscuous mode
[  144.933719][T10231] syzkaller1: tun_chr_ioctl cmd 2147767506
[  145.254335][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1949'.
[  145.271792][ T5332] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.275774][T10250] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  145.295124][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1950'.
[  145.307081][T10250] vlan3: entered allmulticast mode
[  145.309581][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  145.315538][T10250] macvtap0: entered allmulticast mode
[  145.317617][T10250] veth0_macvtap: entered allmulticast mode
[  145.611042][T10261] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  145.622696][T10261] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  145.819440][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  146.074316][T10295] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1957'.
[  146.376881][T10299] netlink: 'syz.1.1959': attribute type 4 has an invalid length.
[  148.853879][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1970'.
[  149.424158][T10368] pim6reg: entered allmulticast mode
[  149.837152][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2004'.
[  149.840132][T10396] netlink: 304 bytes leftover after parsing attributes in process `syz.0.2004'.
[  150.081726][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2011'.
[  150.316286][T10427] syzkaller0: entered promiscuous mode
[  150.319038][T10427] syzkaller0: entered allmulticast mode
[  150.480453][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2022'.
[  150.606399][T10452] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  150.778437][T10464] 8021q: adding VLAN 0 to HW filter on device bond6
[  150.789135][T10464] bond5: (slave bond6): Enslaving as an active interface with an up link
[  150.806218][T10464] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  151.181572][T10490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2045'.
[  151.188077][T10490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2045'.
[  151.345617][T10496] ieee802154 phy1 wpan1: encryption failed: -22
[  152.052132][T10569] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2070'.
[  152.321200][T10592] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2074'.
[  152.324767][T10592] bridge_slave_0: left allmulticast mode
[  152.326833][T10592] bridge_slave_0: left promiscuous mode
[  152.329769][T10592] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.335688][T10592] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  152.457738][T10600] vcan0: tx address claim with dlc 0
[  152.691875][T10615] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2083'.
[  152.860769][T10627] tun0: tun_chr_ioctl cmd 2147767507
[  153.333590][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.337939][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.408350][T10672] bridge0: entered allmulticast mode
[  153.417536][T10672] pim6reg: entered allmulticast mode
[  153.435465][T10673] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  153.446281][T10673] block nbd0: not configured, cannot reconfigure
[  153.505021][T10681] netlink: 'syz.2.2115': attribute type 1 has an invalid length.
[  153.524768][T10681] gretap2: entered allmulticast mode
[  153.531794][T10681] bond7: (slave gretap2): making interface the new active one
[  153.534817][T10681] bond7: (slave gretap2): Enslaving as an active interface with an up link
[  153.582644][T10688] IPv6: NLM_F_CREATE should be specified when creating new route
[  153.933829][T10706] netlink: 'syz.1.2125': attribute type 21 has an invalid length.
[  153.937915][T10706] __nla_validate_parse: 9 callbacks suppressed
[  153.937927][T10706] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2125'.
[  153.946324][T10706] netlink: 'syz.1.2125': attribute type 4 has an invalid length.
[  153.950255][T10706] netlink: 'syz.1.2125': attribute type 3 has an invalid length.
[  153.953844][T10706] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2125'.
[  154.206165][T10718] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2131'.
[  154.209876][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2131'.
[  154.359703][T10732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  154.646298][T10759] syzkaller0: entered promiscuous mode
[  154.652022][T10759] syzkaller0: entered allmulticast mode
[  154.830815][T10776] netlink: 'syz.1.2158': attribute type 1 has an invalid length.
[  154.887023][T10776] 8021q: adding VLAN 0 to HW filter on device bond3
[  154.891120][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2160'.
[  154.910511][T10784] bond3: (slave geneve2): making interface the new active one
[  154.916621][T10784] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  155.534827][T10856] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2191'.
[  155.575793][T10858] xt_limit: Overflow, try lower: 268435456/134217728
[  155.662837][T10872] ieee802154 phy1 wpan1: encryption failed: -22
[  155.833333][   T67] wlan1: Trigger new scan to find an IBSS to join
[  156.158350][T10933] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2226'.
[  156.278438][T10945] netlink: 820 bytes leftover after parsing attributes in process `syz.0.2231'.
[  156.291304][T10945] netlink: 820 bytes leftover after parsing attributes in process `syz.0.2231'.
[  156.618167][T10970] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2243'.
[  157.412546][T11000] netlink: 'syz.2.2257': attribute type 4 has an invalid length.
[  157.431829][T11000] netlink: 'syz.2.2257': attribute type 4 has an invalid length.
[  157.480343][T11009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  158.120145][T11064] netlink: zone id is out of range
[  158.123177][T11064] netlink: zone id is out of range
[  158.125775][T11064] netlink: zone id is out of range
[  158.131183][T11064] netlink: zone id is out of range
[  158.134572][T11064] netlink: zone id is out of range
[  158.138620][T11064] netlink: zone id is out of range
[  158.145106][T11064] netlink: zone id is out of range
[  158.149330][T11064] netlink: zone id is out of range
[  158.155359][T11064] netlink: zone id is out of range
[  158.388911][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  158.790984][ T4449] wlan1: Trigger new scan to find an IBSS to join
[  159.536355][T11102] __nla_validate_parse: 4 callbacks suppressed
[  159.536370][T11102] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2303'.
[  161.213530][T11076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  161.540884][T11132] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.545364][T11132] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.830153][   T51] wlan1: Trigger new scan to find an IBSS to join
[  162.710812][ T5638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.791425][T11170] : renamed from team_slave_1 (while UP)
[  163.265112][T11204] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2348'.
[  163.393978][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2351'.
[  163.397022][T11211] netem: incorrect ge model size
[  163.402078][T11211] netem: change failed
[  163.523803][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2359'.
[  164.664568][T11293] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) !
[  164.713273][T11296] syzkaller0: entered promiscuous mode
[  164.718095][T11296] syzkaller0: entered allmulticast mode
[  164.726453][T11296] net_ratelimit: 393 callbacks suppressed
[  164.726462][T11296] 0: reclassify loop, rule prio 0, protocol 800
[  165.187501][T11316] bridge1: entered promiscuous mode
[  165.230538][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2397'.
[  165.961183][T11368] netlink: 'syz.2.2419': attribute type 3 has an invalid length.
[  167.353701][T11424] batadv0: entered promiscuous mode
[  167.357500][T11424] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  167.730945][T11437] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  167.735685][T11437] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.813129][T11437] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  167.817394][T11437] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.866799][T11437] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  167.871131][T11437] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.008240][ T5667] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  168.013581][ T5667] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.040404][ T6368] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  168.044072][ T6368] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.060382][ T5667] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  168.063433][ T5667] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.082087][ T6368] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  168.085820][ T6368] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.154170][T11450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2452'.
[  168.157154][T11450] bond0: ARP target 170.170.170.170 is already present
[  168.160533][T11450] bond0: option arp_ip_target: invalid value (2863311530)
[  168.230902][T11454] syzkaller1: entered promiscuous mode
[  168.232784][T11454] syzkaller1: entered allmulticast mode
[  168.357403][T11466] IPv6: addrconf: prefix option has invalid lifetime
[  169.539826][T11551] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  169.563520][T11551] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  170.757479][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2524'.
[  170.900759][T11625] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.112263][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2527'.
[  171.125023][T11627] block nbd2: NBD_DISCONNECT
[  171.163686][T11627] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  171.187213][T11627] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  171.203099][T11627] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  171.221243][T11627] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  171.227032][T11627] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  171.442987][T11657] netlink: 'syz.0.2540': attribute type 11 has an invalid length.
[  171.539234][T11665] netlink: 'syz.1.2544': attribute type 1 has an invalid length.
[  171.582394][T11665] 8021q: adding VLAN 0 to HW filter on device bond4
[  171.617216][T11665] bond4: (slave syz_tun): Enslaving as a backup interface with an up link
[  171.758058][T11684] netlink: 'syz.2.2552': attribute type 46 has an invalid length.
[  171.932770][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2563'.
[  172.124828][T11732] netlink: 'syz.1.2575': attribute type 1 has an invalid length.
[  172.159551][T11732] bond5: (slave dummy0): making interface the new active one
[  172.167121][T11732] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  172.172146][T11732] bond5: entered promiscuous mode
[  172.173980][T11732] dummy0: entered promiscuous mode
[  172.176225][T11730] bond5: left promiscuous mode
[  172.178303][T11730] dummy0: left promiscuous mode
[  172.184406][T11732] syz.1.2575 (11732) used greatest stack depth: 19648 bytes left
[  172.252791][T11746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2582'.
[  172.326870][T11754] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  172.455516][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'.
[  172.463680][T11774] netlink: 'syz.2.2595': attribute type 1 has an invalid length.
[  172.466847][T11774] netlink: 'syz.2.2595': attribute type 2 has an invalid length.
[  172.606835][T11787] sock: sock_set_timeout: `syz.2.2602' (pid 11787) tries to set negative timeout
[  173.552501][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2627'.
[  173.622528][T11841] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2629'.
[  173.809569][T11856] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  173.968663][T11867] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2641'.
[  173.983658][T11867] syzkaller0: entered promiscuous mode
[  173.990641][T11867] syzkaller0: entered allmulticast mode
[  174.433205][T11902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2658'.
[  174.602663][T11917] netlink: 'syz.2.2664': attribute type 2 has an invalid length.
[  174.605137][T11917] netlink: 'syz.2.2664': attribute type 1 has an invalid length.
[  174.607588][T11917] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2664'.
[  174.660983][T11919] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.743110][T11929] netlink: 'syz.0.2668': attribute type 5 has an invalid length.
[  174.753099][T11929] geneve4: entered promiscuous mode
[  174.754741][T11929] geneve4: entered allmulticast mode
[  174.763701][ T5647] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  174.770209][ T5647] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  174.792852][ T5647] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  174.798880][ T5647] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  174.980510][T11943] netlink: 'syz.0.2674': attribute type 1 has an invalid length.
[  174.984431][T11943] netlink: 'syz.0.2674': attribute type 1 has an invalid length.
[  175.187182][T11949] veth0: entered promiscuous mode
[  175.190673][T11948] veth0: left promiscuous mode
[  175.569113][T11963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.909433][T11981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.915895][T11981] syzkaller0: entered promiscuous mode
[  175.918649][T11981] syzkaller0: entered allmulticast mode
[  175.953346][T11981] tipc: Resetting bearer <eth:syzkaller0>
[  175.958972][T11980] tipc: Resetting bearer <eth:syzkaller0>
[  175.983863][T11980] tipc: Disabling bearer <eth:syzkaller0>
[  176.337355][T12007] __nla_validate_parse: 7 callbacks suppressed
[  176.337374][T12007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2704'.
[  176.363375][T12007] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2704'.
[  176.459664][T12013] veth15: entered promiscuous mode
[  176.464431][T12013] veth15: entered allmulticast mode
[  176.625878][T12024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2709'.
[  176.725984][T12034] validate_nla: 1 callbacks suppressed
[  176.726005][T12034] netlink: 'syz.1.2716': attribute type 39 has an invalid length.
[  176.824486][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2722'.
[  176.840515][T12046] bond6: entered promiscuous mode
[  176.843060][T12046] 8021q: adding VLAN 0 to HW filter on device bond6
[  176.855058][T12046] vlan4: entered allmulticast mode
[  176.857339][T12046] bond6: entered allmulticast mode
[  177.038504][T12055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2725'.
[  177.159773][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2726'.
[  177.298099][T12068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2731'.
[  177.446908][T12069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2730'.
[  177.867575][T12104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2748'.
[  177.899092][T12104] 8021q: adding VLAN 0 to HW filter on device bond4
[  177.917604][T12112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.922849][T12104] 8021q: adding VLAN 0 to HW filter on device bond5
[  177.926816][T12104] bond4: (slave bond5): Enslaving as an active interface with an up link
[  177.932955][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2748'.
[  177.947671][T12104] bond4 (unregistering): (slave bond5): Releasing backup interface
[  177.958103][T12104] bond4 (unregistering): Released all slaves
[  179.213120][T12219] netlink: 'syz.0.2801': attribute type 1 has an invalid length.
[  179.396147][T12237] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  179.408871][T12235] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[  179.938585][T12292] netlink: 'syz.0.2834': attribute type 3 has an invalid length.
[  180.630793][T12339] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  180.642712][T12339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.526656][T12411] __nla_validate_parse: 4 callbacks suppressed
[  181.526675][T12411] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2887'.
[  181.807636][T12434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2898'.
[  181.847933][T12436] netlink: 'syz.0.2900': attribute type 14 has an invalid length.
[  183.562285][T12543] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  183.565062][T12543] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  183.591323][T12548] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  183.856369][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2958'.
[  183.859547][T12571] netlink: 'syz.2.2958': attribute type 2 has an invalid length.
[  183.862447][T12571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2958'.
[  184.466683][T12620] netlink: 'syz.1.2979': attribute type 1 has an invalid length.
[  184.581408][T12627] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.586783][T12627] syzkaller0: entered promiscuous mode
[  184.592476][T12627] syzkaller0: entered allmulticast mode
[  184.610993][T12627] tipc: Resetting bearer <eth:syzkaller0>
[  184.620358][T12626] tipc: Resetting bearer <eth:syzkaller0>
[  184.636311][T12626] tipc: Disabling bearer <eth:syzkaller0>
[  184.794402][T12638] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  185.006840][T12653] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.012854][T12653] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.070745][T12653] veth0_macvtap: left allmulticast mode
[  185.104535][T12653] batman_adv: batadv0: Interface deactivated: gretap1
[  185.110928][T12656] netlink: 'syz.0.2994': attribute type 1 has an invalid length.
[  185.159265][ T5647] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.170644][ T5647] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.174246][ T5647] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.177926][ T5647] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.649254][T12700] netlink: 'syz.0.3015': attribute type 32 has an invalid length.
[  185.950980][T12700] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3015'.
[  186.068850][T12583] Bluetooth: hci1: command 0x0406 tx timeout
[  186.073711][T12583] Bluetooth: hci2: command 0x0406 tx timeout
[  186.815701][T12740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3029'.
[  186.909802][T12747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3029'.
[  186.956843][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3029'.
[  187.486789][T12769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3039'.
[  187.512355][T12769] bond7: entered promiscuous mode
[  187.514341][T12769] 8021q: adding VLAN 0 to HW filter on device bond7
[  187.783871][T12778] syzkaller0: entered promiscuous mode
[  187.786551][T12778] syzkaller0: entered allmulticast mode
[  188.261219][T12802] netlink: 'syz.0.3054': attribute type 1 has an invalid length.
[  188.274536][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3054'.
[  188.684772][T12704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  189.168244][T12848] netlink: 'syz.0.3076': attribute type 13 has an invalid length.
[  189.186648][T12848] netlink: 'syz.0.3076': attribute type 17 has an invalid length.
[  189.298098][T12848] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.303477][T12848] 8021q: adding VLAN 0 to HW filter on device team0
[  189.345039][T12848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  189.348408][T12848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  189.357903][T12848] veth1_macvtap: left promiscuous mode
[  189.365347][T12848] veth0_macvtap: left promiscuous mode
[  189.384739][T12848] veth0_macvtap: entered promiscuous mode
[  189.396715][T12862] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3081'.
[  189.400466][T12848] veth1_macvtap: entered promiscuous mode
[  189.404247][T12862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3081'.
[  189.407997][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3081'.
[  189.422611][T12848] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  189.433343][T12848] 8021q: adding VLAN 0 to HW filter on device bond1
[  189.441818][T12848] 8021q: adding VLAN 0 to HW filter on device bond2
[  189.446969][T12848] 8021q: adding VLAN 0 to HW filter on device bond3
[  189.457572][T12848] ip6gre1: left promiscuous mode
[  189.460688][T12848] ip6gre1: left allmulticast mode
[  189.470166][T12848] ip6tnl1: left allmulticast mode
[  189.483130][T12848] 8021q: adding VLAN 0 to HW filter on device eth0
[  189.493830][T12848] 8021q: adding VLAN 0 to HW filter on device eth1
[  189.506878][T12848] 8021q: adding VLAN 0 to HW filter on device eth2
[  189.521326][T12848] 8021q: adding VLAN 0 to HW filter on device eth3
[  189.535905][T12848] geneve4: left promiscuous mode
[  189.539342][T12848] geneve4: left allmulticast mode
[  189.546525][T12848] 8021q: adding VLAN 0 to HW filter on device bond5
[  189.556943][ T9429] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  189.563333][ T9429] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20004 - 0
[  189.566449][ T9429] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  189.578995][ T9429] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20004 - 0
[  189.597595][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.600719][ T5638] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.830953][ T9429] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  189.839183][ T9429] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20004 - 0
[  189.866462][T12872] xt_TPROXY: Can be used only with -p tcp or -p udp
[  189.869695][ T9429] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  189.885460][ T9429] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20004 - 0
[  190.239033][T12895] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3094'.
[  190.493811][T12912] netlink: 'syz.2.3102': attribute type 4 has an invalid length.
[  190.629167][T12924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  190.631703][T12924] IPv6: NLM_F_CREATE should be set when creating new route
[  190.634089][T12924] IPv6: NLM_F_CREATE should be set when creating new route
[  190.636392][T12924] IPv6: NLM_F_CREATE should be set when creating new route
[  190.733630][T12933] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3107'.
[  190.867638][T12938] "syz.1.3111" (12938) uses obsolete ecb(arc4) skcipher
[  191.133354][T12966] xt_connbytes: Forcing CT accounting to be enabled
[  192.198118][T13023] batman_adv: batadv0: Adding interface: macvtap1
[  192.205413][T13023] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  192.327869][T13032] __nla_validate_parse: 2 callbacks suppressed
[  192.327882][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3152'.
[  192.336865][T13032] ip6tnl4: entered allmulticast mode
[  192.386098][T13033] netlink: 'syz.2.3151': attribute type 4 has an invalid length.
[  192.400419][T13033] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3151'.
[  192.834789][T13060] netlink: 'syz.2.3162': attribute type 1 has an invalid length.
[  192.837544][T13060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.917574][T13062] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  193.344653][T13076] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3169'.
[  193.498311][T13084] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.738507][T13099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  194.110941][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3196'.
[  194.167121][   T56] block nbd0: Receive control failed (result -1)
[  194.503964][T13152] syzkaller0: entered promiscuous mode
[  194.507682][T13152] syzkaller0: entered allmulticast mode
[  194.621943][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3205'.
[  194.921653][T13180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3215'.
[  195.069754][T13189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3221'.
[  195.097325][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3222'.
[  195.598380][T13219] syzkaller0: entered promiscuous mode
[  195.604237][T13219] syzkaller0: entered allmulticast mode
[  195.886922][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3240'.
[  196.647627][T13268] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3254'.
[  197.485377][T13293] netlink: 'syz.1.3265': attribute type 6 has an invalid length.
[  197.488653][T13293] netlink: 'syz.1.3265': attribute type 23 has an invalid length.
[  197.493601][T13293] IPv6: NLM_F_CREATE should be specified when creating new route
[  197.878305][T13312] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.3274'.
[  198.496575][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3285'.
[  198.539528][T13334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3285'.
[  199.175567][T13384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3305'.
[  199.354910][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  200.204457][T13431] bond8 (unregistering): Released all slaves
[  200.662560][T13453] lo speed is unknown, defaulting to 1000
[  200.667185][T13453] lo speed is unknown, defaulting to 1000
[  200.673707][T13453] lo speed is unknown, defaulting to 1000
[  200.677105][T13453] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  200.682380][T13453] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  200.689856][T13453] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  200.706274][T13453] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  200.730694][T13453] lo speed is unknown, defaulting to 1000
[  200.745637][T13453] lo speed is unknown, defaulting to 1000
[  200.749713][T13453] lo speed is unknown, defaulting to 1000
[  200.854325][T13460] netlink: 'syz.0.3334': attribute type 4 has an invalid length.
[  200.868109][   T24] lo speed is unknown, defaulting to 1000
[  200.871037][T13460] netlink: 'syz.0.3334': attribute type 4 has an invalid length.
[  200.875405][   T24] syz2: Port: 1 Link DOWN
[  200.882411][   T24] lo speed is unknown, defaulting to 1000
[  200.885497][T13460] netlink: 'syz.0.3334': attribute type 4 has an invalid length.
[  200.888031][   T24] syz2: Port: 1 Link ACTIVE
[  200.894529][   T24] lo speed is unknown, defaulting to 1000
[  200.900780][   T24] syz2: Port: 1 Link DOWN
[  201.018170][ T2318] lo speed is unknown, defaulting to 1000
[  201.465342][T13505] netlink: 'syz.1.3354': attribute type 21 has an invalid length.
[  201.468113][T13505] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3354'.
[  201.472681][T13505] netlink: 'syz.1.3354': attribute type 1 has an invalid length.
[  202.537494][T13535] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3366'.
[  202.838131][T13562] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  202.862108][T13558] lo speed is unknown, defaulting to 1000
[  203.206124][T13573] netlink: 'syz.1.3382': attribute type 1 has an invalid length.
[  203.286612][T13573] 8021q: adding VLAN 0 to HW filter on device bond8
[  203.316233][T13577] veth17: entered allmulticast mode
[  203.331038][T13577] bond8: (slave veth17): Enslaving as an active interface with an up link
[  203.352460][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'.
[  203.360042][T13573] bond8 (unregistering): (slave veth17): Releasing backup interface
[  203.377597][T13573] bond8 (unregistering): Released all slaves
[  203.968448][T13628] "syz.1.3407" (13628) uses obsolete ecb(arc4) skcipher
[  204.181283][T13641] netlink: zone id is out of range
[  204.184711][T13641] netlink: zone id is out of range
[  204.188809][T13641] netlink: zone id is out of range
[  204.194827][T13641] netlink: zone id is out of range
[  204.196936][T13641] netlink: zone id is out of range
[  204.200794][T13641] netlink: zone id is out of range
[  204.203546][T13641] netlink: zone id is out of range
[  204.206369][T13641] netlink: zone id is out of range
[  204.213079][T13641] netlink: zone id is out of range
[  204.215443][T13641] netlink: zone id is out of range
[  204.404626][T13655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3415'.
[  204.508029][T13659] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3421'.
[  204.963520][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3439'.
[  205.397928][T13715] netlink: 'syz.0.3447': attribute type 1 has an invalid length.
[  205.401121][T13715] netlink: 'syz.0.3447': attribute type 2 has an invalid length.
[  205.405462][T13715] netlink: 'syz.0.3447': attribute type 2 has an invalid length.
[  205.408073][T13715] netlink: 'syz.0.3447': attribute type 2 has an invalid length.
[  205.412831][T13715] netlink: 'syz.0.3447': attribute type 1 has an invalid length.
[  205.415960][T13715] netlink: 'syz.0.3447': attribute type 2 has an invalid length.
[  205.806508][T13740] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3458'.
[  206.069591][T13762] netlink: 'syz.0.3468': attribute type 1 has an invalid length.
[  206.072257][T13762] netlink: 'syz.0.3468': attribute type 2 has an invalid length.
[  206.083554][T13762] netem: change failed
[  206.810149][T13815] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3494'.
[  207.107632][T13835] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3503'.
[  207.135075][T13837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3504'.
[  207.151502][T13837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3504'.
[  207.157172][T13837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3504'.
[  208.755303][T13914] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  208.895621][T13919] netlink: 'syz.2.3541': attribute type 4 has an invalid length.
[  209.055058][T13924] __nla_validate_parse: 3 callbacks suppressed
[  209.055120][T13924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3543'.
[  209.121630][T13924] netlink: 296 bytes leftover after parsing attributes in process `syz.2.3543'.
[  209.321672][T13931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3546'.
[  209.513316][T13944] netlink: 'syz.0.3552': attribute type 1 has an invalid length.
[  209.882601][T13961] lo speed is unknown, defaulting to 1000
[  210.148041][T13977] netem: change failed
[  210.997672][T14016] lo speed is unknown, defaulting to 1000
[  211.756354][T14059] syzkaller0: entered promiscuous mode
[  211.760481][T14059] syzkaller0: entered allmulticast mode
[  211.914758][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3588'.
[  212.442536][T14108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3606'.
[  213.039497][T14136] net_ratelimit: 15 callbacks suppressed
[  213.039510][T14136] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  213.509462][T14162] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3631'.
[  213.512373][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3631'.
[  214.435106][T14218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3657'.
[  214.656512][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3661'.
[  214.672120][T14227] team1: entered promiscuous mode
[  214.674748][T14227] team1: entered allmulticast mode
[  214.676651][T14227] 8021q: adding VLAN 0 to HW filter on device team1
[  215.430948][T14258] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  215.443931][T14252] lo speed is unknown, defaulting to 1000
[  215.487425][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3673'.
[  216.259464][T14287] syzkaller0: entered promiscuous mode
[  216.262989][T14287] syzkaller0: entered allmulticast mode
[  216.281391][T14287] sch_tbf: burst 185 is lower than device syzkaller0 mtu (1500) !
[  217.083124][T14350] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3713'.
[  217.318427][T14367] geneve4: entered allmulticast mode
[  217.405629][T14371] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  217.451220][T14373] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3723'.
[  217.646676][T14384] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3726'.
[  218.370609][T14433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3751'.
[  218.406751][T14438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3753'.
[  218.676628][T14458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3759'.
[  218.687694][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3759'.
[  218.796482][T14465] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  218.808881][T14465] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  219.211214][T14493] 8021q: adding VLAN 0 to HW filter on device bond8
[  219.217402][T14493] bond8: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  220.749370][T14529] __nla_validate_parse: 1 callbacks suppressed
[  220.749432][T14529] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3795'.
[  220.761992][T14529] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3795'.
[  220.983577][T14554] netlink: 'syz.2.3803': attribute type 15 has an invalid length.
[  220.989869][T14554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3803'.
[  221.306315][T14581] netlink: 'syz.2.3815': attribute type 4 has an invalid length.
[  221.309749][T14581] netlink: 'syz.2.3815': attribute type 4 has an invalid length.
[  222.049164][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3825'.
[  222.058523][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3825'.
[  222.252182][T14607] IPVS: Scheduler module ip_vs_sip not found
[  222.507445][T14621] netlink: 'syz.2.3833': attribute type 29 has an invalid length.
[  222.791690][T14633] tipc: New replicast peer: 172.20.20.170
[  222.795140][T14633] tipc: Enabled bearer <udp:syz2>, priority 10
[  223.798991][   T24] tipc: Node number set to 2664364789
[  225.422985][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3868'.
[  225.426014][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3868'.
[  225.476412][T14699] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3870'.
[  225.481676][T14696] netlink: 'syz.0.3867': attribute type 2 has an invalid length.
[  226.793569][T14711] vti0: entered promiscuous mode
[  227.257562][T14735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  228.201030][T14777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3901'.
[  229.820369][T14820] block nbd1: server does not support multiple connections per device.
[  229.834399][T14820] block nbd1: shutting down sockets
[  229.967708][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3920'.
[  230.119278][T14833] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3925'.
[  230.317883][T14843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3929'.
[  230.403252][T14845] lo speed is unknown, defaulting to 1000
[  230.551054][T14853] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3932'.
[  230.569013][T14853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3932'.
[  230.764921][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3937'.
[  230.874080][T14873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3941'.
[  231.265165][T14899] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3953'.
[  231.282138][T14899] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3953'.
[  231.764413][T14936] tipc: Enabled bearer <ib:geneve1>, priority 10
[  232.481268][T14996] tap0: tun_chr_ioctl cmd 1074025677
[  232.483170][T14996] tap0: linktype set to 768
[  235.043099][T15127] __nla_validate_parse: 5 callbacks suppressed
[  235.043124][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4057'.
[  235.050218][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4057'.
[  235.521125][T15151] bond9: Unable to set down delay as MII monitoring is disabled
[  235.525580][T15151] bond9 (unregistering): Released all slaves
[  235.665234][T15163] netlink: 'syz.2.4075': attribute type 15 has an invalid length.
[  235.683477][T15160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4072'.
[  235.689463][T15160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4072'.
[  235.702200][T15165] Cannot find set identified by id 0 to match
[  235.719779][T15166] No such timeout policy "syz1"
[  235.748463][T15169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4077'.
[  235.764981][T15169] bond9: entered promiscuous mode
[  235.767267][T15169] 8021q: adding VLAN 0 to HW filter on device bond9
[  235.796166][T15169] bridge4: entered promiscuous mode
[  235.802450][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4079'.
[  235.809304][T15169] bond9: (slave bridge4): Enslaving as an active interface with an up link
[  235.839480][T15169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4077'.
[  235.886043][T15169] bond9 (unregistering): (slave bridge4): Releasing backup interface
[  235.896638][T15169] bridge4: left promiscuous mode
[  235.903445][T15169] bond9 (unregistering): Released all slaves
[  236.212829][T15200] x_tables: duplicate underflow at hook 3
[  236.351066][T15214] netlink: 'syz.2.4097': attribute type 1 has an invalid length.
[  236.375481][T15216] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4098'.
[  236.378558][T15216] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4098'.
[  236.456744][T15224] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4102'.
[  237.094538][T15264] syz.1.4121: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  237.101690][T15264] CPU: 1 UID: 0 PID: 15264 Comm: syz.1.4121 Not tainted syzkaller #0 PREEMPT(full) 
[  237.101711][T15264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  237.101719][T15264] Call Trace:
[  237.101726][T15264]  <TASK>
[  237.101733][T15264]  dump_stack_lvl+0xe8/0x150
[  237.101756][T15264]  warn_alloc+0x249/0x340
[  237.101779][T15264]  ? stack_trace_save+0xa9/0x100
[  237.101804][T15264]  ? __pfx_warn_alloc+0x10/0x10
[  237.101828][T15264]  ? kasan_save_track+0x4f/0x80
[  237.101846][T15264]  ? kasan_save_track+0x3e/0x80
[  237.101862][T15264]  ? __kasan_kmalloc+0x93/0xb0
[  237.101879][T15264]  ? __kmalloc_cache_noprof+0x31c/0x660
[  237.101895][T15264]  ? xskq_create+0x56/0x170
[  237.101912][T15264]  ? xsk_setsockopt+0x54c/0x990
[  237.101926][T15264]  ? do_sock_setsockopt+0x17c/0x1b0
[  237.101943][T15264]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  237.101961][T15264]  ? do_syscall_64+0x15f/0xf80
[  237.101985][T15264]  __vmalloc_node_range_noprof+0x132/0x1750
[  237.102027][T15264]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  237.102050][T15264]  ? __kasan_kmalloc+0x93/0xb0
[  237.102071][T15264]  vmalloc_user_noprof+0xad/0xe0
[  237.102089][T15264]  ? xskq_create+0xbf/0x170
[  237.102106][T15264]  xskq_create+0xbf/0x170
[  237.102124][T15264]  xsk_init_queue+0x8a/0xe0
[  237.102142][T15264]  xsk_setsockopt+0x54c/0x990
[  237.102158][T15264]  ? __pfx_xsk_setsockopt+0x10/0x10
[  237.102181][T15264]  ? __pfx_aa_sk_perm+0x10/0x10
[  237.102202][T15264]  ? aa_sock_opt_perm+0xff/0x1a0
[  237.102224][T15264]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  237.102244][T15264]  ? __pfx_xsk_setsockopt+0x10/0x10
[  237.102262][T15264]  do_sock_setsockopt+0x17c/0x1b0
[  237.102286][T15264]  __x64_sys_setsockopt+0x13d/0x1b0
[  237.102306][T15264]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.102322][T15264]  do_syscall_64+0x15f/0xf80
[  237.102340][T15264]  ? trace_irq_disable+0x3b/0x140
[  237.102364][T15264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.102378][T15264] RIP: 0033:0x7f27c139cdd9
[  237.102392][T15264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  237.102424][T15264] RSP: 002b:00007f27c2312028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  237.102441][T15264] RAX: ffffffffffffffda RBX: 00007f27c1615fa0 RCX: 00007f27c139cdd9
[  237.102451][T15264] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  237.102459][T15264] RBP: 00007f27c1432d69 R08: 0000000000000004 R09: 0000000000000000
[  237.102468][T15264] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.102477][T15264] R13: 00007f27c1616038 R14: 00007f27c1615fa0 R15: 00007ffe7f9e2d18
[  237.102529][T15264]  </TASK>
[  237.102578][T15264] Mem-Info:
[  237.212117][T15264] active_anon:13310 inactive_anon:0 isolated_anon:0
[  237.212117][T15264]  active_file:12289 inactive_file:38379 isolated_file:0
[  237.212117][T15264]  unevictable:1768 dirty:149 writeback:0
[  237.212117][T15264]  slab_reclaimable:10785 slab_unreclaimable:129405
[  237.212117][T15264]  mapped:18227 shmem:2475 pagetables:1031
[  237.212117][T15264]  sec_pagetables:0 bounce:0
[  237.212117][T15264]  kernel_misc_reclaimable:0
[  237.212117][T15264]  free:1063928 free_pcp:28059 free_cma:0
[  237.226915][T15264] Node 0 active_anon:38628kB inactive_anon:0kB active_file:22600kB inactive_file:141472kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28964kB dirty:56kB writeback:0kB shmem:5192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5584kB pagetables:1824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  237.237911][T15264] Node 1 active_anon:14612kB inactive_anon:0kB active_file:26556kB inactive_file:12044kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43944kB dirty:540kB writeback:0kB shmem:4708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6840kB pagetables:2300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  237.248966][T15264] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  237.258075][T15264] lowmem_reserve[]: 0 1587 2117 2117 2117
[  237.260313][T15264] Node 0 DMA32 free:1446020kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33500kB inactive_anon:0kB active_file:22588kB inactive_file:17156kB unevictable:0kB writepending:36kB zspages:0kB present:2080636kB managed:1625328kB mlocked:0kB bounce:0kB free_pcp:30368kB local_pcp:15524kB free_cma:0kB
[  237.271064][T15264] lowmem_reserve[]: 0 0 530 530 530
[  237.273258][T15264] Node 0 Normal free:50032kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5112kB inactive_anon:0kB active_file:12kB inactive_file:124316kB unevictable:3536kB writepending:20kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:2972kB local_pcp:256kB free_cma:0kB
[  237.283724][T15264] lowmem_reserve[]: 0 0 0 0 0
[  237.285420][T15264] Node 1 Normal free:2744204kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14612kB inactive_anon:0kB active_file:26556kB inactive_file:12044kB unevictable:3536kB writepending:540kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:79004kB local_pcp:47368kB free_cma:0kB
[  237.311282][T15264] lowmem_reserve[]: 0 0 0 0 0
[  237.313070][T15264] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  237.317958][T15264] Node 0 DMA32: 113*4kB (UME) 98*8kB (UME) 103*16kB (UE) 224*32kB (UME) 123*64kB (UM) 67*128kB (UE) 43*256kB (UME) 25*512kB (UM) 21*1024kB (UM) 9*2048kB (UM) 331*4096kB (UM) = 1446020kB
[  237.324908][T15264] Node 0 Normal: 564*4kB (UME) 100*8kB (U) 227*16kB (UM) 609*32kB (U) 236*64kB (U) 53*128kB (U) 7*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 49856kB
[  237.330267][T15264] Node 1 Normal: 979*4kB (UME) 432*8kB (UE) 434*16kB (UE) 208*32kB (UME) 379*64kB (UE) 181*128kB (UM) 62*256kB (UME) 17*512kB (UM) 13*1024kB (UME) 14*2048kB (UME) 637*4096kB (UM) = 2744108kB
[  237.336160][T15264] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  237.340612][T15264] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  237.343932][T15264] 53143 total pagecache pages
[  237.345454][T15264] 0 pages in swap cache
[  237.346842][T15264] Free swap  = 124996kB
[  237.348135][T15264] Total swap = 124996kB
[  237.357145][T15264] 1834877 pages RAM
[  237.361500][T15264] 0 pages HighMem/MovableOnly
[  237.364713][T15264] 390246 pages reserved
[  237.368780][T15264] 0 pages cma reserved
[  239.033098][T15353] ip6t_srh: unknown srh match flags  4000
[  239.405407][T15384] netlink: 'syz.2.4171': attribute type 3 has an invalid length.
[  240.183788][T15417] __nla_validate_parse: 2 callbacks suppressed
[  240.183801][T15417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4187'.
[  240.195041][T15417] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  240.243643][T15423] netlink: 'syz.1.4190': attribute type 8 has an invalid length.
[  240.732338][T15463] netlink: 'syz.0.4207': attribute type 1 has an invalid length.
[  240.777730][T15465] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4210'.
[  240.833794][T15470] ieee802154 phy1 wpan1: encryption failed: -22
[  240.919268][T15477] netlink: 'syz.1.4214': attribute type 1 has an invalid length.
[  240.922323][T15477] netlink: 'syz.1.4214': attribute type 2 has an invalid length.
[  240.925004][T15477] netlink: 'syz.1.4214': attribute type 1 has an invalid length.
[  240.927920][T15477] netlink: 'syz.1.4214': attribute type 3 has an invalid length.
[  240.938988][T15477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4214'.
[  242.189348][T15511] Bluetooth: MGMT ver 1.23
[  244.156312][T15552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4247'.
[  244.195980][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4248'.
[  244.297298][T15558] lo speed is unknown, defaulting to 1000
[  244.374857][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4250'.
[  245.363293][T15580] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  245.643010][T15593] netlink: 724 bytes leftover after parsing attributes in process `syz.1.4263'.
[  245.646786][T15593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4263'.
[  245.652590][T15593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4263'.
[  245.656164][T15593] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4263'.
[  245.955048][T15608] geneve4: entered promiscuous mode
[  245.957454][T15608] geneve4: entered allmulticast mode
[  246.166299][T15622] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.170844][T15622] syzkaller0: MTU too low for tipc bearer
[  246.173301][T15622] tipc: Disabling bearer <eth:syzkaller0>
[  247.191198][T15643] block nbd1: server does not support multiple connections per device.
[  247.204602][T15643] block nbd1: shutting down sockets
[  247.424875][T15664] netlink: 'syz.1.4292': attribute type 10 has an invalid length.
[  247.427463][T15664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4292'.
[  247.436888][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4292'.
[  247.445231][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4292'.
[  247.749559][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4301'.
[  248.783963][T15712] team0: Device macvlan2 failed to change mtu
[  248.866567][T15720] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4315'.
[  249.423037][T15758] netlink: 'syz.0.4332': attribute type 1 has an invalid length.
[  249.427800][T15758] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4332'.
[  249.448219][T15760] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  249.465394][T15756] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.118095][T15800] xt_hashlimit: size too large, truncated to 1048576
[  251.276161][T15862] netlink: 'syz.1.4382': attribute type 3 has an invalid length.
[  251.280949][T15862] netlink: 'syz.1.4382': attribute type 3 has an invalid length.
[  251.294404][T15862] __nla_validate_parse: 4 callbacks suppressed
[  251.294418][T15862] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4382'.
[  251.405906][T15873] netlink: 'syz.2.4386': attribute type 1 has an invalid length.
[  251.480677][T15879] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  251.487287][T15871] block nbd1: not configured, cannot reconfigure
[  251.555575][T15881] lo speed is unknown, defaulting to 1000
[  251.769190][T15882] vlan3: entered promiscuous mode
[  251.771251][T15882] gretap0: entered promiscuous mode
[  252.237723][T15904] netlink: 'syz.0.4399': attribute type 25 has an invalid length.
[  252.241218][T15904] netlink: 'syz.0.4399': attribute type 3 has an invalid length.
[  252.245675][T15904] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4399'.
[  252.400791][T15912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4402'.
[  252.404629][T15912] netlink: 'syz.2.4402': attribute type 1 has an invalid length.
[  253.173117][T15909] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  253.176454][T15909] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  253.183584][T15909] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  253.185811][T15909] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  253.210878][T15909] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  253.214857][T15909] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  253.586704][T15971] syzkaller0: entered promiscuous mode
[  253.595529][T15971] syzkaller0: entered allmulticast mode
[  253.703968][T15983] openvswitch: netlink: Unknown key attributes 2
[  253.925948][T15995] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4439'.
[  253.937518][T15995] netlink: 'syz.2.4439': attribute type 9 has an invalid length.
[  253.941583][T15995] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4439'.
[  253.946038][T15995] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4439'.
[  254.284476][T16019] lo speed is unknown, defaulting to 1000
[  254.937782][T16058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4466'.
[  254.992792][T16058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4466'.
[  255.301319][T16084] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4478'.
[  255.610518][T16093] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4482'.
[  255.659137][T16093] nbd0: detected capacity change from 0 to 896
[  255.664892][T15581] block nbd0: Dead connection, failed to find a fallback
[  255.668530][T15581] block nbd0: shutting down sockets
[  255.679742][T15581] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.685897][T15581] Buffer I/O error on dev nbd0, logical block 0, async page read
[  255.702388][T15581] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.706841][T15581] Buffer I/O error on dev nbd0, logical block 0, async page read
[  255.714705][T15581] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.724637][T15581] Buffer I/O error on dev nbd0, logical block 0, async page read
[  255.730651][T15581] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.734389][T15581] Buffer I/O error on dev nbd0, logical block 0, async page read
[  255.743630][T15581] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.753128][T15581] Buffer I/O error on dev nbd0, logical block 0, async page read
[  255.757007][T15581] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.760401][T15581] Buffer I/O error on dev nbd0, logical block 0, async page read
[  255.763384][T15581] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.766471][T15581] Buffer I/O error on dev nbd0, logical block 0, async page read
[  255.772909][T15581] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.776615][T15581] Buffer I/O error on dev nbd0, logical block 0, async page read
[  255.781599][T15581] ldm_validate_partition_table(): Disk read failed.
[  255.786341][T15581] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.790304][T15581] Buffer I/O error on dev nbd0, logical block 0, async page read
[  255.793539][T15581] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.797196][T15581] Buffer I/O error on dev nbd0, logical block 0, async page read
[  255.803724][T15581] Dev nbd0: unable to read RDB block 0
[  255.809669][T15581]  nbd0: unable to read partition table
[  255.825609][T15581] ldm_validate_partition_table(): Disk read failed.
[  255.828521][T15581] Dev nbd0: unable to read RDB block 0
[  255.835368][T15581]  nbd0: unable to read partition table
[  256.000816][T16104] syzkaller0: entered promiscuous mode
[  256.003189][T16104] syzkaller0: entered allmulticast mode
[  256.215585][T16112] syzkaller0: entered promiscuous mode
[  256.219167][T16112] syzkaller0: entered allmulticast mode
[  256.226682][T16112] tc action pedit offset must be on 32 bit boundaries
[  256.231316][T16112] tc action pedit offset must be on 32 bit boundaries
[  256.234036][T16112] tc action pedit offset must be on 32 bit boundaries
[  256.236738][T16112] tc action pedit offset must be on 32 bit boundaries
[  256.239416][T16112] tc action pedit offset must be on 32 bit boundaries
[  256.242092][T16112] tc action pedit offset must be on 32 bit boundaries
[  256.244770][T16112] tc action pedit offset must be on 32 bit boundaries
[  256.247448][T16112] tc action pedit offset must be on 32 bit boundaries
[  256.250156][T16112] tc action pedit offset must be on 32 bit boundaries
[  256.252957][T16112] tc action pedit offset must be on 32 bit boundaries
[  256.255732][T16112] 0: reclassify loop, rule prio 0, protocol 800
[  256.261460][T16113] netlink: 'syz.2.4492': attribute type 3 has an invalid length.
[  256.363790][T16115] __nla_validate_parse: 1 callbacks suppressed
[  256.363812][T16115] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4493'.
[  256.742795][T16132] netlink: 'syz.0.4500': attribute type 12 has an invalid length.
[  256.800131][T16134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4501'.
[  256.880590][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4501'.
[  257.521443][T16153] block nbd1: Unsupported socket: should be TCP or UNIX.
[  258.118672][T16171] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  258.633042][T16198] nbd: socks must be embedded in a SOCK_ITEM attr
[  258.723316][T16200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4528'.
[  259.184651][T16231] netlink: 660 bytes leftover after parsing attributes in process `syz.1.4544'.
[  259.191238][T16231] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4544'.
[  259.422334][T16249] netlink: 'syz.2.4554': attribute type 1 has an invalid length.
[  259.435615][T16249] 8021q: adding VLAN 0 to HW filter on device bond10
[  259.439894][T16249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4554'.
[  259.497886][T16255] netlink: 'syz.2.4554': attribute type 1 has an invalid length.
[  259.507900][T16255] bond10: (slave batadv2): Opening slave failed
[  259.586478][T16259] lo speed is unknown, defaulting to 1000
[  259.758497][T16263] lo speed is unknown, defaulting to 1000
[  260.791761][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  260.966691][T16297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4568'.
[  261.117676][T16301] pim6reg1: entered promiscuous mode
[  261.121782][T16301] pim6reg1: entered allmulticast mode
[  261.370970][T16314] netlink: 'syz.1.4575': attribute type 1 has an invalid length.
[  261.378634][T16314] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4575'.
[  261.976092][T16358] netlink: 'syz.2.4598': attribute type 1 has an invalid length.
[  261.983074][T16358] netlink: 'syz.2.4598': attribute type 4 has an invalid length.
[  261.986285][T16358] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4598'.
[  262.942488][T16421] netlink: 'syz.1.4629': attribute type 1 has an invalid length.
[  262.945025][T16421] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4629'.
[  262.947927][T16421] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4629'.
[  262.951378][T16421] netlink: 'syz.1.4629': attribute type 1 has an invalid length.
[  262.992302][T16424] x9: renamed from bridge_slave_0
[  263.271494][T16447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4641'.
[  263.509811][T16460] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4645'.
[  263.845390][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4661'.
[  264.294676][T16514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4672'.
[  264.387457][T16519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4674'.
[  264.582013][T16528] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  264.587237][T16528] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  264.612135][T16529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4677'.
[  264.663749][T16528] tipc: Resetting bearer <eth:syzkaller0>
[  264.731602][T16531] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.893649][T16531] syzkaller0: entered promiscuous mode
[  264.896466][T16531] syzkaller0: entered allmulticast mode
[  264.899888][T16531] tipc: Resetting bearer <eth:syzkaller0>
[  264.972267][T16530] tipc: Resetting bearer <eth:syzkaller0>
[  267.368028][T16530] tipc: Disabling bearer <eth:syzkaller0>
[  267.375450][ T2318] tipc: Node number set to 2325139337
[  267.575597][T16563] macsec1: entered promiscuous mode
[  267.578258][T16563] macsec1: entered allmulticast mode
[  267.581077][T16563] dummy0: entered allmulticast mode
[  267.585616][T16563] dummy0: left allmulticast mode
[  268.040608][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4701'.
[  268.313162][T16607] ip6erspan0: entered allmulticast mode
[  268.685595][T16642] netlink: 'syz.1.4730': attribute type 1 has an invalid length.
[  269.106520][T16650] x9 (unregistering): left allmulticast mode
[  269.113614][T16650] x9 (unregistering): left promiscuous mode
[  269.119723][T16650] bridge0: port 1(1x9) entered disabled state
[  269.338894][T16689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4749'.
[  269.586259][T16708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4760'.
[  269.591218][T16708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4760'.
[  269.597551][T16708] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4760'.
[  269.780998][T16716] netlink: 'syz.0.4762': attribute type 1 has an invalid length.
[  270.506561][T16766] sctp: [Deprecated]: syz.2.4784 (pid 16766) Use of int in max_burst socket option.
[  270.506561][T16766] Use struct sctp_assoc_value instead
[  270.623155][T16774] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4788'.
[  270.625946][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4788'.
[  270.629648][T16774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4788'.
[  270.632925][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4788'.
[  270.636382][T16774] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4788'.
[  272.314845][T16904] netlink: 'syz.0.4848': attribute type 1 has an invalid length.
[  272.502120][T16921] sctp: [Deprecated]: syz.1.4853 (pid 16921) Use of int in max_burst socket option deprecated.
[  272.502120][T16921] Use struct sctp_assoc_value instead
[  272.672219][T16935] bridge8: entered promiscuous mode
[  272.673979][T16935] bridge8: entered allmulticast mode
[  272.679556][T16935] team0: Port device bridge8 added
[  272.683518][T16935] bridge0: port 1(team0) entered blocking state
[  272.686668][T16935] bridge0: port 1(team0) entered disabled state
[  272.693398][T16935] team0: entered allmulticast mode
[  272.695254][T16935] team_slave_0: entered allmulticast mode
[  272.697270][T16935] team_slave_1: entered allmulticast mode
[  272.703937][T16935] team0: entered promiscuous mode
[  272.705798][T16935] team_slave_0: entered promiscuous mode
[  272.707730][T16935] team_slave_1: entered promiscuous mode
[  272.710597][T16935] bridge0: port 1(team0) entered blocking state
[  272.713148][T16935] bridge0: port 1(team0) entered forwarding state
[  272.720145][T16936] syzkaller1: tun_chr_ioctl cmd 21731
[  273.381680][T16962] lo speed is unknown, defaulting to 1000
[  273.996237][T16995] netlink: 'syz.1.4888': attribute type 1 has an invalid length.
[  274.142490][T17003] __nla_validate_parse: 8 callbacks suppressed
[  274.142553][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4892'.
[  274.160286][T17005] netlink: 'syz.0.4893': attribute type 1 has an invalid length.
[  274.203642][T17007] netlink: 'syz.0.4894': attribute type 1 has an invalid length.
[  274.247491][T17007] 8021q: adding VLAN 0 to HW filter on device bond4
[  274.264572][T17007] bond4: (slave geneve5): making interface the new active one
[  274.270615][T17007] bond4: (slave geneve5): Enslaving as an active interface with an up link
[  274.343732][T17012] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4896'.
[  274.348077][T17012] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4896'.
[  274.806998][T17041] netlink: 'syz.2.4910': attribute type 29 has an invalid length.
[  274.856326][T17043] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4912'.
[  274.933685][T17049] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  275.152807][T17059] syzkaller0: entered promiscuous mode
[  275.160284][T17059] syzkaller0: entered allmulticast mode
[  275.173274][T17063] netlink: 'syz.0.4919': attribute type 5 has an invalid length.
[  275.417735][T17076] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4927'.
[  276.012129][T17121] netlink: 820 bytes leftover after parsing attributes in process `syz.1.4946'.
[  276.015203][T17121] netlink: 820 bytes leftover after parsing attributes in process `syz.1.4946'.
[  276.211806][T17132] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4950'.
[  277.055056][T17177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4969'.
[  277.148450][T17180] siw: device registration error -23
[  277.192778][T17186] netlink: 'syz.0.4973': attribute type 1 has an invalid length.
[  277.195945][T17186] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.393090][T17195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4976'.
[  278.817556][T17256] netlink: 'syz.1.5006': attribute type 1 has an invalid length.
[  278.883908][T17256] 8021q: adding VLAN 0 to HW filter on device bond8
[  279.629257][T17296] __nla_validate_parse: 7 callbacks suppressed
[  279.629273][T17296] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5024'.
[  279.640002][T17296] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5024'.
[  279.765710][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5030'.
[  279.903389][T17318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5036'.
[  281.212633][T17357] netlink: 'syz.2.5052': attribute type 10 has an invalid length.
[  281.396380][T17375] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5062'.
[  281.456727][T17371] lo speed is unknown, defaulting to 1000
[  281.516561][T17380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5064'.
[  281.546665][T17380] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5064'.
[  281.552371][T17378] syzkaller1: entered promiscuous mode
[  281.554410][T17378] syzkaller1: entered allmulticast mode
[  281.815908][T17393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5069'.
[  281.819087][T17393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5069'.
[  282.264836][T17416] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  282.270418][T17416] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  282.839084][T17464] netlink: 'syz.0.5097': attribute type 4 has an invalid length.
[  283.046576][T17477] netlink: 428 bytes leftover after parsing attributes in process `syz.0.5104'.
[  283.055249][T17478] bond12: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  283.061179][T17478] bond12 (unregistering): Released all slaves
[  283.404496][T17495] netlink: 'syz.2.5111': attribute type 29 has an invalid length.
[  284.259898][T17510] syz.1.5119 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  284.276594][T17510] CPU: 1 UID: 0 PID: 17510 Comm: syz.1.5119 Not tainted syzkaller #0 PREEMPT(full) 
[  284.276612][T17510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.276618][T17510] Call Trace:
[  284.276622][T17510]  <TASK>
[  284.276627][T17510]  dump_stack_lvl+0xe8/0x150
[  284.276644][T17510]  dump_header+0xd3/0x4c0
[  284.276659][T17510]  oom_kill_process+0x3ab/0x970
[  284.276673][T17510]  out_of_memory+0x106c/0x1410
[  284.276683][T17510]  ? try_charge_memcg+0xbb9/0x1570
[  284.276697][T17510]  ? __pfx___mutex_lock+0x10/0x10
[  284.276713][T17510]  ? __pfx_out_of_memory+0x10/0x10
[  284.276722][T17510]  ? do_raw_spin_unlock+0x4d/0x210
[  284.276738][T17510]  try_charge_memcg+0xc77/0x1570
[  284.276757][T17510]  ? __pfx_try_charge_memcg+0x10/0x10
[  284.276767][T17510]  ? percpu_ref_tryget+0x15/0x180
[  284.276787][T17510]  ? charge_memcg+0x23/0x2b0
[  284.276798][T17510]  charge_memcg+0x1a2/0x2b0
[  284.276810][T17510]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  284.276820][T17510]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  284.276833][T17510]  __swap_cache_prepare_and_add+0xdc/0x700
[  284.276845][T17510]  ? page_rmappable_folio+0x9a/0x170
[  284.276861][T17510]  swap_cache_alloc_folio+0xf1/0x240
[  284.276872][T17510]  swap_cluster_readahead+0x355/0x670
[  284.276884][T17510]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  284.276898][T17510]  ? get_vma_policy+0x27b/0x3c0
[  284.276942][T17510]  swapin_readahead+0x196/0xc50
[  284.276954][T17510]  ? swap_table_get+0x1e/0x260
[  284.276965][T17510]  ? __pfx_swapin_readahead+0x10/0x10
[  284.276993][T17510]  ? swap_table_get+0x1e/0x260
[  284.277001][T17510]  ? swap_table_get+0x1e/0x260
[  284.277009][T17510]  ? swap_table_get+0x1e/0x260
[  284.277017][T17510]  ? swap_table_get+0x216/0x260
[  284.277027][T17510]  ? swap_cache_get_folio+0x2e4/0x2f0
[  284.277038][T17510]  do_swap_page+0x555/0x5120
[  284.277050][T17510]  ? __pte_offset_map+0x29/0x240
[  284.277061][T17510]  ? __pte_offset_map+0x29/0x240
[  284.277074][T17510]  ? do_swap_page+0x128/0x5120
[  284.277083][T17510]  ? __pfx_do_swap_page+0x10/0x10
[  284.277091][T17510]  ? __pte_offset_map+0x1ae/0x240
[  284.277102][T17510]  ? pte_offset_map_rw_nolock+0xea/0x160
[  284.277113][T17510]  handle_mm_fault+0x12d2/0x3170
[  284.277129][T17510]  ? handle_mm_fault+0xee/0x3170
[  284.277141][T17510]  ? __pfx_handle_mm_fault+0x10/0x10
[  284.277150][T17510]  ? lock_vma_under_rcu+0x45a/0x500
[  284.277171][T17510]  do_user_addr_fault+0xa73/0x1340
[  284.277184][T17510]  ? rcu_is_watching+0x15/0xb0
[  284.277194][T17510]  ? trace_page_fault_user+0x84/0x1e0
[  284.277204][T17510]  exc_page_fault+0x6a/0xc0
[  284.277216][T17510]  asm_exc_page_fault+0x26/0x30
[  284.277224][T17510] RIP: 0033:0x7f27c126a78c
[  284.277234][T17510] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[  284.277242][T17510] RSP: 002b:00007ffe7f9e2e80 EFLAGS: 00010206
[  284.277252][T17510] RAX: 0000000000000000 RBX: 00007f27c1615fa0 RCX: 0000555565c68808
[  284.277257][T17510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  284.277262][T17510] RBP: 00007f27c1617da0 R08: 0000000000000000 R09: 0000000000000000
[  284.277267][T17510] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000004569b
[  284.277272][T17510] R13: 00007f27c1615fac R14: 000000000004538d R15: 00007ffe7f9e2f80
[  284.277286][T17510]  </TASK>
[  284.277321][T17510] memory: usage 307200kB, limit 307200kB, failcnt 3202
[  284.456168][T17510] memory+swap: usage 307812kB, limit 9007199254740988kB, failcnt 0
[  284.463630][T17510] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[  284.494719][T17510] Memory cgroup stats for /syz1:
[  284.494794][T17510] cache 0
[  284.515630][T17510] rss 0
[  284.516648][T17510] rss_huge 0
[  284.517685][T17510] shmem 0
[  284.518633][T17510] mapped_file 0
[  284.541229][T17510] dirty 0
[  284.542220][T17510] writeback 0
[  284.543347][T17510] workingset_refault_anon 19
[  284.544804][T17510] workingset_refault_file 34
[  284.546519][T17510] swap 626688
[  284.547588][T17510] swapcached 733184
[  284.548876][T17510] pgpgin 163514
[  284.549993][T17510] pgpgout 163510
[  284.573204][T17510] pgfault 344427
[  284.574389][T17510] pgmajfault 10
[  284.581740][T17510] inactive_anon 16384
[  284.583081][T17510] active_anon 0
[  284.590469][T17510] inactive_file 0
[  284.591645][T17510] active_file 0
[  284.599047][T17510] unevictable 0
[  284.600179][T17510] hierarchical_memory_limit 314572800
[  284.611043][T17510] hierarchical_memsw_limit 9223372036854771712
[  284.615935][T17510] total_cache 0
[  284.620233][T17510] total_rss 0
[  284.624321][T17510] total_rss_huge 0
[  284.625490][T17510] total_shmem 0
[  284.633615][T17510] total_mapped_file 0
[  284.634894][T17510] total_dirty 0
[  284.642178][T17510] total_writeback 0
[  284.643393][T17510] total_workingset_refault_anon 19
[  284.651183][T17510] total_workingset_refault_file 34
[  284.662390][T17510] total_swap 626688
[  284.663627][T17510] total_swapcached 733184
[  284.672598][T17510] total_pgpgin 163514
[  284.676864][T17510] total_pgpgout 163510
[  284.699010][T17510] total_pgfault 344427
[  284.701005][T17510] total_pgmajfault 10
[  284.702353][T17510] total_inactive_anon 16384
[  284.704393][T17510] total_active_anon 0
[  284.705751][T17510] total_inactive_file 0
[  284.709547][T17510] total_active_file 0
[  284.710865][T17510] total_unevictable 0
[  284.715018][T17510] anon_cost 0
[  284.716088][T17510] file_cost 0
[  284.723537][T17510] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5119,pid=17510,uid=0
[  284.739648][T17510] Memory cgroup out of memory: Killed process 17510 (syz.1.5119) total-vm:104208kB, anon-rss:1252kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  284.991546][T17550] netlink: 'syz.1.5137': attribute type 6 has an invalid length.
[  285.670132][T17572] syzkaller0: entered promiscuous mode
[  285.672179][T17572] syzkaller0: entered allmulticast mode
[  287.466311][T17605] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  288.475037][T17618] netlink: 'syz.2.5163': attribute type 1 has an invalid length.
[  289.495483][T17629] syzkaller0: entered promiscuous mode
[  289.502469][T17629] syzkaller0: entered allmulticast mode
[  289.508592][T17629] 0: reclassify loop, rule prio 0, protocol 800
[  289.697236][T17646] bond9: option ad_user_port_key: invalid value (65535)
[  289.699643][T17646] bond9: option ad_user_port_key: allowed values 0 - 1023
[  289.702899][T17646] bond9 (unregistering): Released all slaves
[  289.889262][T17655] __nla_validate_parse: 3 callbacks suppressed
[  289.889276][T17655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5181'.
[  290.202187][T17683] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5192'.
[  290.436723][T17702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5202'.
[  290.927669][T17718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5209'.
[  291.501281][T17739] netlink: 'syz.1.5219': attribute type 2 has an invalid length.
[  291.504888][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5219'.
[  291.507697][T17739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  291.547553][T17740] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  291.552337][T17740] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  291.557208][T17740] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  292.529326][T17740] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  292.533167][T17740] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  292.536463][T17740] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  292.668597][T17740] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  292.674079][T17740] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  292.678592][T17740] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  292.802729][T17740] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  292.817003][T17740] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  292.839412][T17740] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  292.972081][ T5667] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  292.975489][ T5667] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  292.983512][ T5667] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  292.999839][ T5667] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  293.005169][ T5667] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  293.008307][ T5667] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  293.014919][ T5667] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  293.017586][ T5667] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  293.020696][ T5667] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  293.032083][ T9431] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  293.034714][ T9431] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  293.037471][ T9431] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  293.680350][T17810] ip6tnl4: entered allmulticast mode
[  293.683402][ T9431] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  293.686400][ T9431] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  293.710215][ T5668] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  293.761884][T17816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5254'.
[  293.765302][T17816] netlink: 'syz.0.5254': attribute type 5 has an invalid length.
[  293.768129][T17816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5254'.
[  293.780930][ T5668] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  293.827407][T17822] xt_hashlimit: size too large, truncated to 1048576
[  293.930009][ T5668] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  294.478647][T17859] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.535981][T17917] lo speed is unknown, defaulting to 1000
[  295.575064][T17917] netlink: 'syz.0.5300': attribute type 1 has an invalid length.
[  295.982879][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5305'.
[  296.033549][T17935] netlink: 'syz.2.5308': attribute type 1 has an invalid length.
[  296.061339][T17938] netlink: 'syz.2.5309': attribute type 39 has an invalid length.
[  296.266895][T17949] bond12: Removing last arp target with arp_interval on
[  296.348657][T17954] bridge_slave_1: left allmulticast mode
[  296.350967][T17954] bridge_slave_1: left promiscuous mode
[  296.352941][T17954] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.362104][T17954] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  296.777380][T17973] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5322'.
[  297.538364][T18002] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  297.748852][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  297.930383][T18012] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  297.944980][   T24] lo speed is unknown, defaulting to 1000
[  297.947733][   T24] syz2: Port: 1 Link ACTIVE
[  298.246444][T18028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5345'.
[  298.440773][T18038] netlink: 'syz.0.5348': attribute type 12 has an invalid length.
[  298.443388][T18038] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5348'.
[  298.637630][T18049] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.645818][T18049] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.665929][T18049] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.670621][T18049] batman_adv: batadv0: Interface activated: batadv_slave_1
[  298.677666][T18049] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  298.686045][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.688415][ T5638] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.794517][T18058] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5359'.
[  299.337619][T18091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5373'.
[  299.465777][T18101] netlink: 'syz.0.5377': attribute type 1 has an invalid length.
[  299.512051][T18106] netlink: 'syz.0.5379': attribute type 49 has an invalid length.
[  299.552674][T18109] netlink: 'syz.0.5381': attribute type 1 has an invalid length.
[  299.577722][T18110] netlink: 'syz.2.5380': attribute type 1 has an invalid length.
[  299.651078][T18110] bond13: (slave veth15): Enslaving as an active interface with a down link
[  299.658646][T18110] dummy0: left promiscuous mode
[  299.677671][T18110] bond13: (slave dummy0): making interface the new active one
[  299.683355][T18110] bond13: (slave dummy0): Enslaving as an active interface with an up link
[  299.687959][T18110] netlink: 'syz.2.5380': attribute type 10 has an invalid length.
[  299.691830][T18110] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5380'.
[  299.704248][T18110] dummy0: entered promiscuous mode
[  299.707777][T18110] bond13: (slave dummy0): Releasing active interface
[  299.925888][T18122] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5387'.
[  299.930583][T18121] batadv0: left promiscuous mode
[  299.935810][T18121] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  300.012851][T18128] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  300.042675][ T5667] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  300.061050][ T5667] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  300.077240][ T5647] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  300.089179][ T5647] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  300.156085][T18135] netlink: 'syz.2.5389': attribute type 10 has an invalid length.
[  300.165170][T18135] syz_tun: entered promiscuous mode
[  300.189310][T18135] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  300.225101][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5389'.
[  300.654210][T18179] netlink: 'syz.1.5410': attribute type 1 has an invalid length.
[  300.663688][T18179] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.674654][T18181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5415'.
[  301.146594][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5428'.
[  301.149657][T18213] netlink: 'syz.2.5428': attribute type 8 has an invalid length.
[  301.155050][T18213] geneve4: entered promiscuous mode
[  301.156823][T18213] geneve4: entered allmulticast mode
[  301.223318][T18219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5432'.
[  301.792311][T18242] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5442'.
[  302.044136][T18259] netlink: 'syz.2.5450': attribute type 2 has an invalid length.
[  302.756575][T18295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5467'.
[  302.989211][T18303] tipc: Enabled bearer <udp:syz2>, priority 10
[  303.041263][T18309] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  303.148353][T18316] bridge0: port 1(erspan0) entered blocking state
[  303.150633][T18316] bridge0: port 1(erspan0) entered disabled state
[  303.153076][T18316] erspan0: entered allmulticast mode
[  303.155771][T18316] erspan0: entered promiscuous mode
[  303.158662][T18316] bridge0: port 1(erspan0) entered blocking state
[  303.161606][T18316] bridge0: port 1(erspan0) entered forwarding state
[  303.165438][T18316] erspan0: left allmulticast mode
[  303.167263][T18316] erspan0: left promiscuous mode
[  303.169901][T18316] bridge0: port 1(erspan0) entered disabled state
[  303.236830][T18322] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5478'.
[  303.245604][T18322] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5478'.
[  303.305003][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5481'.
[  303.832786][T18342] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  303.835206][T18342] batman_adv: batadv0: Removing interface: batadv_slave_0
[  303.839286][T18342] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  303.842101][T18342] batman_adv: batadv0: Removing interface: batadv_slave_1
[  303.845081][T18342] batman_adv: batadv0: Removing interface: macvtap1
[  304.307396][T18370] lo speed is unknown, defaulting to 1000
[  304.457933][T18375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5498'.
[  305.140310][T18418] lo speed is unknown, defaulting to 1000
[  305.423031][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5519'.
[  305.514136][T18431] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5520'.
[  305.517468][T18431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  306.187472][T18470] bridge0: port 1(team0) entered disabled state
[  306.189612][T18470] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.221556][T18472] netlink: 'syz.0.5538': attribute type 13 has an invalid length.
[  306.227278][T18472] netlink: 'syz.0.5538': attribute type 17 has an invalid length.
[  306.230858][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  306.359885][T18479] netlink: 'syz.2.5534': attribute type 11 has an invalid length.
[  306.558849][ T5668] lo speed is unknown, defaulting to 1000
[  306.561910][ T5668] syz2: Port: 1 Link DOWN
[  306.678532][T18472] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.688625][T18472] 8021q: adding VLAN 0 to HW filter on device team0
[  306.739143][T18472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  306.742517][T18472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  306.748934][T18472] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  306.755360][ T9431] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.763141][ T9431] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  306.773936][ T9431] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  306.779710][ T9431] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  306.782815][ T9431] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.785915][ T9431] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  306.789772][ T9431] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  306.793307][ T9431] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  306.807601][ T5668] lo speed is unknown, defaulting to 1000
[  306.812706][ T5668] syz2: Port: 1 Link ACTIVE
[  306.816736][ T4449] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.819816][ T4449] bridge0: port 2(bridge_slave_1) entered forwarding state
[  306.865844][ T4449] bridge0: port 1(team0) entered blocking state
[  306.868601][ T4449] bridge0: port 1(team0) entered forwarding state
[  306.883723][ T9431] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.886602][ T9431] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  306.889537][ T9431] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  306.892218][ T9431] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  306.900259][ T9431] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.903504][ T9431] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  306.906263][ T9431] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  306.909381][ T9431] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  306.919990][T18484] lo speed is unknown, defaulting to 1000
[  307.503806][T18544] netlink: 'syz.1.5567': attribute type 4 has an invalid length.
[  307.589475][T18555] netlink: 'syz.0.5572': attribute type 1 has an invalid length.
[  307.612255][T18555] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  307.616004][T18555] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  307.704783][T18563] bond7: (slave gretap3): making interface the new active one
[  307.715052][T18563] bond7: (slave gretap3): Enslaving as an active interface with an up link
[  307.725055][T18555] macvlan0: entered promiscuous mode
[  307.726982][T18555] macvlan0: entered allmulticast mode
[  307.730135][T18555] bond7: entered promiscuous mode
[  307.731852][T18555] gretap3: entered promiscuous mode
[  307.737509][T18555] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  307.743575][T18555] bond7: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap3
[  307.748110][T18555] bond7: left promiscuous mode
[  307.750512][T18555] gretap3: left promiscuous mode
[  307.852870][T18577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5581'.
[  307.999166][T18588] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5586'.
[  308.767781][T18592] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  310.710739][T18686] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5631'.
[  311.631732][T18728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5648'.
[  312.153465][T18748] netlink: 'syz.2.5657': attribute type 13 has an invalid length.
[  312.216689][T18749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5657'.
[  312.272495][ T5689] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  312.290491][T18749] bond0: (slave syz_tun): Releasing backup interface
[  312.490497][ T5689] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  312.694310][T18766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.862098][T18779] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  313.323652][T18809] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  313.374243][T18818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5687'.
[  313.385711][T18820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5689'.
[  313.701215][T18843] netlink: 'syz.0.5695': attribute type 1 has an invalid length.
[  313.762506][T18839] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.965748][T18839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  313.984001][T18839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  314.116899][T18848] netlink: 'syz.2.5700': attribute type 1 has an invalid length.
[  314.119511][T18848] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.5700'.
[  314.583006][T18891] tunl0: Caught tx_queue_len zero misconfig
[  314.681842][T18896] lo speed is unknown, defaulting to 1000
[  314.692314][   T33] audit: type=1804 audit(1778673535.677:2): pid=18899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5722" name="/newroot/1923/memory.events" dev="tmpfs" ino=9696 res=1 errno=0
[  314.760195][T18902] syzkaller0: entered allmulticast mode
[  314.894336][T18910] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.946831][T18910] syzkaller0: entered promiscuous mode
[  314.948571][T18910] syzkaller0: entered allmulticast mode
[  314.952420][T18910] tipc: Resetting bearer <eth:syzkaller0>
[  314.966856][T18909] tipc: Resetting bearer <eth:syzkaller0>
[  315.060938][T18919] tipc: Can't bind to reserved service type 0
[  316.521088][T18909] tipc: Disabling bearer <eth:syzkaller0>
[  316.706795][T18954] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  316.807310][T18965] lo: Caught tx_queue_len zero misconfig
[  317.095313][T18998] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  317.510040][T19026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5780'.
[  317.516487][T19026] gtp3: entered promiscuous mode
[  317.518247][T19026] gtp3: entered allmulticast mode
[  317.596964][T19035] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5783'.
[  318.238984][T19079] netem: change failed
[  318.314480][T19081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  318.317389][T19081] IPv6: NLM_F_CREATE should be set when creating new route
[  318.319921][T19081] IPv6: NLM_F_CREATE should be set when creating new route
[  318.322485][T19081] IPv6: NLM_F_CREATE should be set when creating new route
[  318.405969][T19089] IPVS: Error connecting to the multicast addr
[  318.651809][T19105] syzkaller0: entered promiscuous mode
[  318.653574][T19105] syzkaller0: entered allmulticast mode
[  320.222462][T19141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5829'.
[  320.228295][T19141] ip6tnl4: entered allmulticast mode
[  320.371023][T19157] netlink: 'syz.2.5836': attribute type 4 has an invalid length.
[  320.389317][T19157] netlink: 'syz.2.5836': attribute type 4 has an invalid length.
[  320.451691][T19169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5842'.
[  320.627208][T19189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5851'.
[  321.504335][T19205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5856'.
[  321.641522][T19214] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  321.758004][T19218] syzkaller0: entered promiscuous mode
[  321.760560][T19218] syzkaller0: entered allmulticast mode
[  321.812031][T19220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5863'.
[  321.871161][T19220] veth9: entered allmulticast mode
[  321.877405][T19220] bond8: (slave veth9): Enslaving as an active interface with an up link
[  321.885451][T19220] bond8 (unregistering): (slave veth9): Releasing backup interface
[  321.890177][T19220] bond8 (unregistering): Released all slaves
[  321.975695][T19228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5866'.
[  322.232113][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  322.236103][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  322.322914][T19254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5878'.
[  322.401033][T19261] netlink: 'syz.0.5883': attribute type 1 has an invalid length.
[  323.011565][T19334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5916'.
[  323.016852][T19335] syzkaller0: entered promiscuous mode
[  323.019973][T19335] syzkaller0: entered allmulticast mode
[  323.025320][T19335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.031764][T19333] tipc: Resetting bearer <eth:syzkaller0>
[  323.056213][T19333] tipc: Disabling bearer <eth:syzkaller0>
[  323.130583][T19341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5919'.
[  323.325500][T19353] netlink: 'syz.1.5922': attribute type 1 has an invalid length.
[  323.821326][T19393] lo speed is unknown, defaulting to 1000
[  324.087914][T19411] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5950'.
[  324.158519][T19430] syzkaller0: entered promiscuous mode
[  324.160341][T19430] syzkaller0: entered allmulticast mode
[  324.164613][T19430] simple: basic_1
[  324.167297][T19430] simple: basic_2
[  324.168496][T19430] simple: basic_3
[  324.169752][T19430] simple: basic_4
[  324.170956][T19430] simple: basic_5
[  324.172423][T19430] simple: basic_6
[  324.173933][T19430] simple: basic_7
[  324.175173][T19430] simple: basic_8
[  324.176544][T19430] simple: basic_9
[  324.177976][T19430] simple: basic_10
[  324.179532][T19430] simple: basic_11
[  324.181016][T19430] simple: basic_12
[  324.182488][T19430] simple: basic_13
[  324.183955][T19430] simple: basic_14
[  324.185418][T19430] simple: basic_15
[  324.186921][T19430] simple: basic_16
[  324.188484][T19430] simple: basic_17
[  324.189940][T19430] 0: reclassify loop, rule prio 0, protocol 800
[  324.687100][T19470] syzkaller0: entered promiscuous mode
[  324.689113][T19470] syzkaller0: entered allmulticast mode
[  325.243052][T19497] syzkaller0: entered promiscuous mode
[  325.245022][T19497] syzkaller0: entered allmulticast mode
[  325.248369][T19497] 0: reclassify loop, rule prio 0, protocol 800
[  325.666649][T19535] __nla_validate_parse: 1 callbacks suppressed
[  325.666666][T19535] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6003'.
[  326.684557][T19564] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  326.684557][T19564] Please contact the netfilter-devel mailing list or update your nftables rules.
[  326.817551][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6021'.
[  326.823263][T19578] netlink: 'syz.2.6021': attribute type 30 has an invalid length.
[  326.879316][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6021'.
[  326.883513][T19578] netlink: 'syz.2.6021': attribute type 30 has an invalid length.
[  327.125892][T19607] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6036'.
[  327.371330][T19635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6049'.
[  327.397065][T19637] netlink: 'syz.2.6050': attribute type 5 has an invalid length.
[  327.904528][T19672] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6066'.
[  327.934976][T19674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6067'.
[  327.998867][T19680] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6070'.
[  328.057518][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6071'.
[  328.067559][T19683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6071'.
[  328.216930][T19694] netlink: 'syz.1.6076': attribute type 8 has an invalid length.
[  329.872189][T19781] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  329.917264][T19785] syzkaller0: entered promiscuous mode
[  329.919708][T19785] syzkaller0: entered allmulticast mode
[  330.329845][T19812] netlink: 'syz.2.6131': attribute type 10 has an invalid length.
[  330.633024][T19837] netlink: 'syz.2.6139': attribute type 5 has an invalid length.
[  330.661505][T19841] netlink: 'syz.0.6140': attribute type 33 has an invalid length.
[  330.667269][T19841] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  330.713421][T19851] xt_CT: You must specify a L4 protocol and not use inversions on it
[  330.760220][T19855] syzkaller1: entered promiscuous mode
[  330.761925][T19855] syzkaller1: entered allmulticast mode
[  330.831452][T19859] __nla_validate_parse: 5 callbacks suppressed
[  330.831464][T19859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6148'.
[  331.058469][T19878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6155'.
[  331.066377][T19878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6155'.
[  331.162953][T19882] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.168562][T19882] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.186247][T19882] batman_adv: batadv0: Interface activated: batadv_slave_0
[  331.192676][T19882] batman_adv: batadv0: Interface activated: batadv_slave_1
[  331.197853][T19882] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  331.208164][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.211204][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.407287][T19907] sit0: entered promiscuous mode
[  331.415463][T19907] netlink: 'syz.0.6168': attribute type 1 has an invalid length.
[  331.420874][T19907] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6168'.
[  332.337216][T19940] IPv4: Oversized IP packet from 127.202.26.0
[  332.436558][T19942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6184'.
[  332.609136][T19956] netlink: 'syz.2.6190': attribute type 5 has an invalid length.
[  332.731179][T19964] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  332.739347][T19964] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  332.950261][T19971] netlink: 'syz.1.6196': attribute type 1 has an invalid length.
[  332.953782][T19971] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6196'.
[  333.110259][   T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.509489][ T5667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.617775][T19982] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check.
[  333.672022][   T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.676956][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.752868][T19987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.774339][T19987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.783923][T19987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.789713][T19987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.881913][T19993] syzkaller0: entered promiscuous mode
[  333.886085][T19993] syzkaller0: entered allmulticast mode
[  333.903741][T19987] lo speed is unknown, defaulting to 1000
[  334.746711][T20029] tipc: Invalid UDP bearer configuration
[  334.746737][T20029] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  334.957604][T20037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6213'.
[  334.970201][T20037] netlink: 324 bytes leftover after parsing attributes in process `syz.0.6213'.
[  335.462682][T20059] netlink: 'syz.2.6219': attribute type 1 has an invalid length.
[  335.466086][T20060] netlink: 'syz.2.6219': attribute type 1 has an invalid length.
[  335.487240][T20060] bond14: entered promiscuous mode
[  335.490248][T20060] 8021q: adding VLAN 0 to HW filter on device bond14
[  335.500010][T20059] macvtap3: entered allmulticast mode
[  335.508431][T20060] macvtap4: entered allmulticast mode
[  335.524400][T20058] 
[  335.525237][T20058] ======================================================
[  335.527441][T20058] WARNING: possible circular locking dependency detected
[  335.529563][T20058] syzkaller #0 Not tainted
[  335.531033][T20058] ------------------------------------------------------
[  335.533153][T20058] syz.2.6219/20058 is trying to acquire lock:
[  335.535134][T20058] ffff888109222ac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  335.538323][T20058] 
[  335.538323][T20058] but task is already holding lock:
[  335.540637][T20058] ffff8881092225a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x198/0x450
[  335.543852][T20058] 
[  335.543852][T20058] which lock already depends on the new lock.
[  335.543852][T20058] 
[  335.547161][T20058] 
[  335.547161][T20058] the existing dependency chain (in reverse order) is:
[  335.550314][T20058] 
[  335.550314][T20058] -> #6 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  335.553324][T20058]        blk_alloc_queue+0x546/0x680
[  335.555108][T20058]        __blk_mq_alloc_disk+0x197/0x390
[  335.556984][T20058]        nbd_dev_add+0x499/0xb50
[  335.558635][T20058]        nbd_init+0x168/0x1f0
[  335.560133][T20058]        do_one_initcall+0x250/0x870
[  335.561851][T20058]        do_initcall_level+0x104/0x190
[  335.563541][T20058]        do_initcalls+0x59/0xa0
[  335.565040][T20058]        kernel_init_freeable+0x2a6/0x3e0
[  335.566792][T20058]        kernel_init+0x1d/0x1d0
[  335.568313][T20058]        ret_from_fork+0x514/0xb70
[  335.569947][T20058]        ret_from_fork_asm+0x1a/0x30
[  335.571584][T20058] 
[  335.571584][T20058] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  335.573801][T20058]        fs_reclaim_acquire+0x71/0x100
[  335.575540][T20058]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  335.577484][T20058]        __alloc_skb+0x1d0/0x7d0
[  335.579014][T20058]        __ip6_append_data+0x2d3c/0x3f60
[  335.580754][T20058]        ip6_append_data+0x10f/0x280
[  335.582541][T20058]        rawv6_sendmsg+0x12d3/0x18e0
[  335.584164][T20058]        ____sys_sendmsg+0x80a/0x9f0
[  335.585799][T20058]        ___sys_sendmsg+0x2a5/0x360
[  335.587414][T20058]        __x64_sys_sendmsg+0x1bd/0x2a0
[  335.589341][T20058]        do_syscall_64+0x15f/0xf80
[  335.591084][T20058]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.593121][T20058] 
[  335.593121][T20058] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  335.595651][T20058]        lock_sock_nested+0x41/0x100
[  335.597352][T20058]        inet_shutdown+0x6a/0x390
[  335.598911][T20058]        nbd_mark_nsock_dead+0x2e9/0x560
[  335.600635][T20058]        recv_work+0x1c2e/0x1d40
[  335.602150][T20058]        process_scheduled_works+0xb5d/0x1860
[  335.604043][T20058]        worker_thread+0xa53/0xfc0
[  335.605675][T20058]        kthread+0x388/0x470
[  335.607152][T20058]        ret_from_fork+0x514/0xb70
[  335.608810][T20058]        ret_from_fork_asm+0x1a/0x30
[  335.610495][T20058] 
[  335.610495][T20058] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  335.612822][T20058]        __mutex_lock+0x1a3/0x1550
[  335.614475][T20058]        nbd_queue_rq+0x37b/0x1100
[  335.616395][T20058]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  335.618480][T20058]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  335.621271][T20058]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  335.623433][T20058]        blk_mq_run_hw_queue+0x348/0x4f0
[  335.625227][T20058]        blk_mq_dispatch_list+0xd16/0xe10
[  335.627071][T20058]        blk_mq_flush_plug_list+0x48d/0x570
[  335.629028][T20058]        __blk_flush_plug+0x3ed/0x4d0
[  335.630741][T20058]        __submit_bio+0x28d/0x580
[  335.632361][T20058]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  335.634276][T20058]        block_read_full_folio+0x7b7/0x830
[  335.636177][T20058]        filemap_read_folio+0x137/0x3b0
[  335.637932][T20058]        do_read_cache_folio+0x358/0x590
[  335.639789][T20058]        read_part_sector+0xb6/0x2b0
[  335.641459][T20058]        adfspart_check_ICS+0xb1/0x960
[  335.643194][T20058]        bdev_disk_changed+0x817/0x1770
[  335.645074][T20058]        blkdev_get_whole+0x380/0x510
[  335.646776][T20058]        bdev_open+0x31e/0xd30
[  335.648366][T20058]        blkdev_open+0x470/0x610
[  335.650008][T20058]        do_dentry_open+0x785/0x14e0
[  335.651684][T20058]        vfs_open+0x3b/0x340
[  335.653133][T20058]        path_openat+0x2e08/0x3860
[  335.654771][T20058]        do_file_open+0x23e/0x4a0
[  335.656448][T20058]        do_sys_openat2+0x113/0x200
[  335.658084][T20058]        __x64_sys_openat+0x138/0x170
[  335.659905][T20058]        do_syscall_64+0x15f/0xf80
[  335.661594][T20058]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.663642][T20058] 
[  335.663642][T20058] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  335.665989][T20058]        __mutex_lock+0x1a3/0x1550
[  335.667631][T20058]        nbd_queue_rq+0xc6/0x1100
[  335.669345][T20058]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  335.671358][T20058]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  335.673511][T20058]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  335.675558][T20058]        blk_mq_run_hw_queue+0x348/0x4f0
[  335.677376][T20058]        blk_mq_dispatch_list+0xd16/0xe10
[  335.679199][T20058]        blk_mq_flush_plug_list+0x48d/0x570
[  335.681149][T20058]        __blk_flush_plug+0x3ed/0x4d0
[  335.682850][T20058]        __submit_bio+0x28d/0x580
[  335.684471][T20058]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  335.686427][T20058]        block_read_full_folio+0x7b7/0x830
[  335.688274][T20058]        filemap_read_folio+0x137/0x3b0
[  335.690031][T20058]        do_read_cache_folio+0x358/0x590
[  335.691785][T20058]        read_part_sector+0xb6/0x2b0
[  335.693493][T20058]        adfspart_check_ICS+0xb1/0x960
[  335.695181][T20058]        bdev_disk_changed+0x817/0x1770
[  335.697028][T20058]        blkdev_get_whole+0x380/0x510
[  335.698753][T20058]        bdev_open+0x31e/0xd30
[  335.700350][T20058]        blkdev_open+0x470/0x610
[  335.701898][T20058]        do_dentry_open+0x785/0x14e0
[  335.703552][T20058]        vfs_open+0x3b/0x340
[  335.704977][T20058]        path_openat+0x2e08/0x3860
[  335.706716][T20058]        do_file_open+0x23e/0x4a0
[  335.708537][T20058]        do_sys_openat2+0x113/0x200
[  335.710573][T20058]        __x64_sys_openat+0x138/0x170
[  335.712648][T20058]        do_syscall_64+0x15f/0xf80
[  335.714762][T20058]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.717269][T20058] 
[  335.717269][T20058] -> #1 (set->srcu){.+.+}-{0:0}:
[  335.720022][T20058]        __synchronize_srcu+0xca/0x300
[  335.722145][T20058]        elevator_switch+0x1e8/0x7a0
[  335.724189][T20058]        elevator_change+0x2cc/0x450
[  335.726273][T20058]        elevator_set_default+0x36c/0x430
[  335.728244][T20058]        blk_register_queue+0x3e9/0x4e0
[  335.729981][T20058]        __add_disk+0x677/0xd50
[  335.731630][T20058]        add_disk_fwnode+0xfb/0x480
[  335.733473][T20058]        nbd_dev_add+0x72c/0xb50
[  335.735024][T20058]        nbd_init+0x168/0x1f0
[  335.736660][T20058]        do_one_initcall+0x250/0x870
[  335.738254][T20058]        do_initcall_level+0x104/0x190
[  335.740070][T20058]        do_initcalls+0x59/0xa0
[  335.742000][T20058]        kernel_init_freeable+0x2a6/0x3e0
[  335.744193][T20058]        kernel_init+0x1d/0x1d0
[  335.745767][T20058]        ret_from_fork+0x514/0xb70
[  335.747420][T20058]        ret_from_fork_asm+0x1a/0x30
[  335.749133][T20058] 
[  335.749133][T20058] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  335.751768][T20058]        __lock_acquire+0x15a5/0x2cf0
[  335.753574][T20058]        lock_acquire+0x106/0x350
[  335.755165][T20058]        __mutex_lock+0x1a3/0x1550
[  335.756905][T20058]        elevator_change+0x1b3/0x450
[  335.758576][T20058]        elevator_set_none+0xb5/0x140
[  335.760318][T20058]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  335.762529][T20058]        nbd_start_device+0x17f/0xb10
[  335.764450][T20058]        nbd_genl_connect+0x165b/0x1cf0
[  335.766249][T20058]        genl_family_rcv_msg_doit+0x22a/0x330
[  335.768477][T20058]        genl_rcv_msg+0x61c/0x7a0
[  335.770492][T20058]        netlink_rcv_skb+0x232/0x4b0
[  335.772559][T20058]        genl_rcv+0x28/0x40
[  335.774421][T20058]        netlink_unicast+0x75c/0x8e0
[  335.776585][T20058]        netlink_sendmsg+0x813/0xb40
[  335.778773][T20058]        ____sys_sendmsg+0x972/0x9f0
[  335.780962][T20058]        ___sys_sendmsg+0x2a5/0x360
[  335.783125][T20058]        __x64_sys_sendmsg+0x1bd/0x2a0
[  335.785371][T20058]        do_syscall_64+0x15f/0xf80
[  335.787369][T20058]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.789774][T20058] 
[  335.789774][T20058] other info that might help us debug this:
[  335.789774][T20058] 
[  335.793677][T20058] Chain exists of:
[  335.793677][T20058]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52
[  335.793677][T20058] 
[  335.797994][T20058]  Possible unsafe locking scenario:
[  335.797994][T20058] 
[  335.800413][T20058]        CPU0                    CPU1
[  335.802310][T20058]        ----                    ----
[  335.804481][T20058]   lock(&q->q_usage_counter(io)#52);
[  335.806583][T20058]                                lock(fs_reclaim);
[  335.808953][T20058]                                lock(&q->q_usage_counter(io)#52);
[  335.812036][T20058]   lock(&q->elevator_lock);
[  335.813617][T20058] 
[  335.813617][T20058]  *** DEADLOCK ***
[  335.813617][T20058] 
[  335.816653][T20058] 6 locks held by syz.2.6219/20058:
[  335.818525][T20058]  #0: ffffffff8fe3f068 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  335.821562][T20058]  #1: ffffffff8fe3eea0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  335.824867][T20058]  #2: ffff8881099c89c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60
[  335.828499][T20058]  #3: ffff8881099c88d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60
[  335.832485][T20058]  #4: ffff8881092225a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x198/0x450
[  335.836665][T20058]  #5: ffff8881092225d8 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[  335.841001][T20058] 
[  335.841001][T20058] stack backtrace:
[  335.843352][T20058] CPU: 1 UID: 0 PID: 20058 Comm: syz.2.6219 Not tainted syzkaller #0 PREEMPT(full) 
[  335.843367][T20058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  335.843375][T20058] Call Trace:
[  335.843382][T20058]  <TASK>
[  335.843388][T20058]  dump_stack_lvl+0xe8/0x150
[  335.843405][T20058]  print_circular_bug+0x2e1/0x300
[  335.843423][T20058]  check_noncircular+0x12e/0x150
[  335.843442][T20058]  __lock_acquire+0x15a5/0x2cf0
[  335.843462][T20058]  ? elevator_change+0x1b3/0x450
[  335.843480][T20058]  lock_acquire+0x106/0x350
[  335.843493][T20058]  ? elevator_change+0x1b3/0x450
[  335.843512][T20058]  __mutex_lock+0x1a3/0x1550
[  335.843530][T20058]  ? elevator_change+0x1b3/0x450
[  335.843554][T20058]  ? rcu_is_watching+0x15/0xb0
[  335.843570][T20058]  ? work_grab_pending+0x3d1/0x990
[  335.843584][T20058]  ? elevator_change+0x1b3/0x450
[  335.843601][T20058]  ? __pfx___mutex_lock+0x10/0x10
[  335.843617][T20058]  ? enable_work+0x17f/0x230
[  335.843631][T20058]  ? lockdep_hardirqs_on+0x7a/0x110
[  335.843650][T20058]  ? __cancel_work_sync+0xf7/0x110
[  335.843664][T20058]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  335.843677][T20058]  elevator_change+0x1b3/0x450
[  335.843700][T20058]  elevator_set_none+0xb5/0x140
[  335.843716][T20058]  ? __pfx_elevator_set_none+0x10/0x10
[  335.843734][T20058]  ? xa_load+0x1db/0x210
[  335.843752][T20058]  blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  335.843769][T20058]  ? kernfs_add_one+0x477/0x5c0
[  335.843786][T20058]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  335.843802][T20058]  ? sysfs_add_file_mode_ns+0x259/0x300
[  335.843817][T20058]  nbd_start_device+0x17f/0xb10
[  335.843832][T20058]  ? device_create_file+0xf4/0x1b0
[  335.843846][T20058]  nbd_genl_connect+0x165b/0x1cf0
[  335.843858][T20058]  ? __pfx___nla_validate_parse+0x10/0x10
[  335.843879][T20058]  ? __pfx_nbd_genl_connect+0x10/0x10
[  335.843894][T20058]  ? rcu_is_watching+0x15/0xb0
[  335.843908][T20058]  ? trace_kmalloc+0x2a/0xf0
[  335.843926][T20058]  ? __nla_parse+0x40/0x60
[  335.843944][T20058]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  335.843957][T20058]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  335.843973][T20058]  genl_family_rcv_msg_doit+0x22a/0x330
[  335.843988][T20058]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  335.844003][T20058]  ? __lock_acquire+0x6b5/0x2cf0
[  335.844018][T20058]  genl_rcv_msg+0x61c/0x7a0
[  335.844032][T20058]  ? __pfx_genl_rcv_msg+0x10/0x10
[  335.844043][T20058]  ? __pfx_nbd_genl_connect+0x10/0x10
[  335.844057][T20058]  netlink_rcv_skb+0x232/0x4b0
[  335.844074][T20058]  ? __pfx_genl_rcv_msg+0x10/0x10
[  335.844086][T20058]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  335.844104][T20058]  ? down_read+0x270/0x2e0
[  335.844115][T20058]  ? genl_rcv+0xd/0x40
[  335.844127][T20058]  genl_rcv+0x28/0x40
[  335.844138][T20058]  netlink_unicast+0x75c/0x8e0
[  335.844155][T20058]  netlink_sendmsg+0x813/0xb40
[  335.844174][T20058]  ? __pfx_netlink_sendmsg+0x10/0x10
[  335.844190][T20058]  ? aa_sock_msg_perm+0xf1/0x1b0
[  335.844206][T20058]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  335.844224][T20058]  ____sys_sendmsg+0x972/0x9f0
[  335.844242][T20058]  ? __might_fault+0xaf/0x130
[  335.844259][T20058]  ? __pfx_____sys_sendmsg+0x10/0x10
[  335.844277][T20058]  ? import_iovec+0x73/0xa0
[  335.844325][T20058]  ___sys_sendmsg+0x2a5/0x360
[  335.844343][T20058]  ? __lock_acquire+0x6b5/0x2cf0
[  335.844356][T20058]  ? __pfx____sys_sendmsg+0x10/0x10
[  335.844376][T20058]  ? futex_wait+0x2a2/0x390
[  335.844399][T20058]  ? __fget_files+0x2a/0x420
[  335.844415][T20058]  ? __fget_files+0x3a0/0x420
[  335.844433][T20058]  __x64_sys_sendmsg+0x1bd/0x2a0
[  335.844450][T20058]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  335.844469][T20058]  ? rcu_is_watching+0x15/0xb0
[  335.844485][T20058]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.844498][T20058]  do_syscall_64+0x15f/0xf80
[  335.844514][T20058]  ? trace_irq_disable+0x3b/0x140
[  335.844533][T20058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.844553][T20058] RIP: 0033:0x7eff9799cdd9
[  335.844567][T20058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  335.844579][T20058] RSP: 002b:00007eff98801028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  335.844592][T20058] RAX: ffffffffffffffda RBX: 00007eff97c15fa0 RCX: 00007eff9799cdd9
[  335.844602][T20058] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004
[  335.844610][T20058] RBP: 00007eff97a32d69 R08: 0000000000000000 R09: 0000000000000000
[  335.844618][T20058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  335.844626][T20058] R13: 00007eff97c16038 R14: 00007eff97c15fa0 R15: 00007ffdbff97b88
[  335.844640][T20058]  </TASK>
[  336.109086][T20058] nbd3: detected capacity change from 0 to 63
[  336.113701][   T55] block nbd3: Receive control failed (result -104)
[  336.113903][T20062] block nbd3: Receive control failed (result -32)
[  338.329101][ T5647] net_ratelimit: 114 callbacks suppressed
[  338.329114][ T5647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.869685][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.872823][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.876017][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.439085][ T5647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.549119][ T5667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.658828][ T5667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.768968][ T5667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.888991][ T6368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.629634][ T5638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.632383][ T5638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.635069][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.019283][ T6368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
