last executing test programs:

5m36.030381612s ago: executing program 1 (id=53):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000020000020000000002000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9}, 0x94)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000e4ff0000000000"], 0x50)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r3, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc)
sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3)
sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="dfb7e2f3e62545000b00"], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000800)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r2], 0x20}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xaf01, &(0x7f00000001c0)={r0, 0x66c, 0x6, 0x1})
close(0x3)

5m35.409860914s ago: executing program 0 (id=60):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x15, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4c9cff8c, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x0, 0x9, 0x8, 0x2, 0x18}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x3, 0x1, 0xd, 0x5, 0x8, 0x6, 0x1}, @jmp={0x5, 0x0, 0x1, 0xb, 0x2, 0x30, 0xffffffffffffffff}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0xa4f, 0x8a, &(0x7f00000004c0)=""/138, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x7, 0x6, 0x1}, 0x10, 0x460a, r1, 0x2, &(0x7f0000000600)=[0xffffffffffffffff], &(0x7f0000000640)=[{0x2, 0x4, 0xc, 0x7}, {0x0, 0x4, 0x9, 0x4}], 0x10, 0x100}, 0x94)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0)
bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r3, &(0x7f0000000140)={0x27, 0x0, 0x0, 0x2, 0x20, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@hyper})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=<r7=>0x0)
bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="1f2403ae1b4c4702a619f710a6a9e61166fe78692fd08b770ac00e63dd987faaa9bae1ab918954588c6153e7c65abbebff06ba821beffcc5b064f1d37b79c8297925273ecdcf4f1cc0cfb86747a016d9b786de5d728436a9f43d97fbfbe767275fc40b4328efe433e76fdf8b93601d431d87996384d4a548fb4cda4f6d58cd0237e257bafe0b1e6de74e8ca0ae1099b28fdb6aa77a740cb7b4b36c7d98ea2a15d2adcfaceb9c642a7bea1469934507deba86dadc5946ec79f12befb776619eac6328e90523c9", 0xc6, 0x4000, &(0x7f00000002c0)=@nfc_llcp={0x27, r7, 0x0, 0x6, 0x1, 0x9, "6347f5abd9c4860bb7fa8368a2ca7d582d4e14a2a9a1009af0daa7139010f97c7fa6a03960bc5c572ced78c776377d6a5b7ef3c02655aed61942ba3aac44b8", 0x6}, 0x80)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000140001002bbd7000ffdbdf25020000fd", @ANYRES32, @ANYBLOB="08000b00e000000108000200ac1414bb140006"], 0x60}}, 0x814)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}})
epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x6, &(0x7f0000000100)={[0x3]}, 0x8)

5m35.25038161s ago: executing program 0 (id=61):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=<r0=>0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100020a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x4, &(0x7f0000000980)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff610, 0x0, 0x0, 0x0, 0x7fb}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESHEX=r0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5m35.158706975s ago: executing program 1 (id=62):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
tee(r0, r0, 0x60a24090, 0x1)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r1 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0)
sendmsg$netlink(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB], 0x10}, {0x0, 0x10}], 0x2, 0x0, 0x0, 0x40}, 0x22004881)

5m35.15669296s ago: executing program 0 (id=63):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xaf01, &(0x7f00000001c0)={<r1=>r0, 0x66c, 0xf, 0x7c09})
unshare(0x24060400)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'pimreg1\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x69e39df2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, r1, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8}, 0x94)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
r5 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl(r5, 0x8b32, &(0x7f0000000040))
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800058004800500080000003e"], 0x44}}, 0x4004)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4)
recvfrom$rose(r1, &(0x7f0000000500)=""/179, 0xb3, 0x10040, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x4004af07, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "fca3361763c6a603", "05ed762f68780aa679a0e0c773a64002e6ebfa59d7b226a45be284a03b1aa865", "472775c1", "68921f428b432483"}, 0x38)

5m34.957155836s ago: executing program 0 (id=64):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x242200, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140003003800010700000000000000460e000000f2b1de55d96b8cc986e08fe99987b2b6c525cfe645e768f257fef353162776f7f5cc855e2666b26e2bbede7aef15396fcf0ebaf48b3d6a70bfd9410a985911d3528e98d3835877f4d1be6c38989348753915c762830a816406b4bcc1fbf8baae317705e1cae9f7921f9cca6bc2cdcb09dfb560b504ecb6a3eba902f34d8999699b13e9935f57c59a2fa8"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x3)
ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000080)={0x281, 0x3})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xaf01, &(0x7f0000000180)={<r7=>r0, 0x66d, 0xf, 0x5})
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r7, 0x80286722, &(0x7f0000000100)={&(0x7f0000000200)=""/136, 0x88, 0xfffffff4, 0x8000})
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0x2000, 0x58, &(0x7f0000000000)=""/88}]})

5m34.829650333s ago: executing program 1 (id=66):
r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r1=>0x0)
sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40040090)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000500)=[{&(0x7f00000001c0)="59ea72403730f0db97a7bef7aaefff208c60fa88bc477faa0674146f0979383c12736f217a605f3c0deb74bde0f7218602644fd1d7209e97b7935df758f21b89d31e55545d1111371fba8844840d1fd0bd246ece0fe2c3a8510ba0bfc478ef727a36c38735078fc7ac1ec3f98ad14315066fe24a1ef50a6359116720a2d5a48d6bf93d682552acd1e8767bddf2a4019ee7567ac67d80da464f915853f6e47474415c61111a256096353bb8be4893c3220de703d5587829d6fb89a48c038d85d74da4a44338cbf8c8efa6e2448c21957493019388da3398abc600c3e6ae201271", 0xe0}, {&(0x7f00000002c0)="3ed08cbf15377b41135653ecd1c35a256447bb8320511b1328b05737ef9e", 0x1e}, {&(0x7f0000000300)="d499cb5a0e558c02fb6a3bcf4f01cd77b47f1fb8c6382d33eb3131b7323e48855ed39e50e14704fe11f3c8f243c045e782fbed39c88e6b84276b170f9c2db545cf63b0b1d54f2a13471d5e411d2c2f8c453b0973f45f55477bfeef3b52f644cc9b0bc7fca0c23256727d1cb871e8caba359215e82c56768c559d614ddbf9ca99227eda7da7bf33cf45cb61ac512ecbff6dcbb4f4691b59666f5070d637580bd1beebd73b388ea2999def8dd689de87cfb8c2865cf1fda68c8fca55f23196148f1a55ca016d39", 0xc6}, {&(0x7f0000000400)="f5c29cf99faf54bd4e5d0f3e52aa79c7addd16ecd605645ee15c06811aaeef458b9ca9067b7f8b74ff5de68fb7e962f8bbf9d8335b587ae1f75bd16b20991de809fac80e765083aee884a088ee02404ec0c053692049911db13887ab39784bd4f872743fd0ec43e5def06a4309551dcdff40144793f43cb5f0438a021508202a38c9918ec9d68519bce864901bee00a708fdb82c8f6c67bd3516a01bb357ff367a1e7c9b4d7e00131bb6cd70b5323ccfabba2f2ce009441a94cf23d3a1145683762464b12acaa2b9c116921004b78cc2615434caa68228107f03d3aef15fdd748f212efaa5271bb48194", 0xea}], 0x4, &(0x7f0000000540)=[@ip_retopts={{0xac, 0x0, 0x7, {[@cipso={0x86, 0x15, 0x3, [{0x5, 0xf, "b4f6305dd3df5c6214e0338524"}]}, @cipso={0x86, 0x18, 0x2, [{0x2, 0xa, "dd06678d99b0d496"}, {0x7, 0x8, "de07bf3730b1"}]}, @timestamp={0x44, 0x18, 0x8f, 0x0, 0x3, [0x7, 0x1, 0xffff7fff, 0x5, 0x0]}, @noop, @rr={0x7, 0x7, 0x5f, [@dev={0xac, 0x14, 0x14, 0x13}]}, @timestamp_prespec={0x44, 0x4c, 0x46, 0x3, 0x1, [{@multicast1, 0x401}, {@broadcast, 0x9}, {@private=0xa010100, 0x1}, {@local, 0x7}, {@private=0xa010102, 0xffff}, {@empty, 0xd}, {@local, 0x5}, {@multicast2, 0x2}, {@loopback, 0x10000}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x790}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffd}}], 0x110}, 0x44005)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_DOWN(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48090}, 0x1)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r5, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x36}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000980)={0xffffffffffffffff, 0x1, 0x9, 0x4, @vifc_lcl_addr=@local, @remote}, 0x10)
socketpair(0x25, 0x5, 0x4, &(0x7f00000009c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={0x1, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000b40)={@loopback, @private, <r11=>0x0}, &(0x7f0000000b80)=0xc)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x9c, r9, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6614e505}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x804)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000d40)=<r13=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000d80)=<r14=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=<r15=>0x0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r12, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x40, r0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x48004)
getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f0000000ec0), &(0x7f0000000f00)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000f40)={<r16=>0x0, 0xcb5, 0x6, 0x2, 0xbaa, 0xfff, 0x3, 0x5, {0x0, @in6={{0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x101}}, 0x4, 0x717963f4, 0x9, 0xdd, 0x8}}, &(0x7f0000001000)=0xb0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000001040)={r16, 0x100, 0x30, 0x2, 0x2}, &(0x7f0000001080)=0x18)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0xf7d338d440a28731, r6, 0xfd7fb000)
r17 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FICLONE(r2, 0x40049409, r17)
setsockopt$inet6_opts(r17, 0x29, 0x39, &(0x7f00000010c0)=@dstopts={0x1d, 0x12, '\x00', [@hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x38, {0x3, 0xc, 0x44, 0xe, [0x10000000000000, 0xc, 0x401, 0x2, 0xd6, 0x6]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x9}, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x2, 0x4, [0xa, 0x6, 0x0, 0x100000000000]}}]}, 0xa0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

5m34.680766264s ago: executing program 1 (id=67):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000000)=0xff98)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xaf01, &(0x7f00000001c0)={r1, 0x66c, 0x10, 0x207c09})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x4008af03, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

5m34.580070708s ago: executing program 0 (id=69):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xaf01, &(0x7f00000001c0)={r0, 0x66c, 0xf, 0xc3a5})
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x4008af23, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000280)=@ethtool_eeprom={0xb, 0x5, 0x102000, 0x7, "f731c837e92948"}})
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x3ff, @private1, 0x1}, 0x1c)

5m34.520188378s ago: executing program 1 (id=70):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x1000, 0xfff8, 0x200, 0xc, 0xcf8, 0x0, 0x9, 0x0, <r1=>0x0}, &(0x7f0000000040)=0x20)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={<r2=>r1, 0xe}, &(0x7f00000000c0)=0x8) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}]}, 0x1c}}, 0x40) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xffff}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000340)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, 0x0, <r7=>0x0]}, &(0x7f0000000380)=0x24) (async)
sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x1402, 0x4, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20001000}, 0x20000800)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000500)={<r9=>r2, 0xd, "59e5a16034fbc84985a27aa1ca"}, &(0x7f0000000540)=0x15) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000580)={'vcan0\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6_vti0\x00', r10, 0x29, 0x0, 0xfa, 0x0, 0x48, @loopback, @mcast2, 0x20, 0x40, 0x644, 0x26}}) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000680)={r6, 0xcb, 0xacc}, &(0x7f00000006c0)=0x8)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r5, <r11=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%+9llu \x00'}, 0x20) (async)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000840)={0x9, &(0x7f00000007c0)=[{0x74, 0x3, 0xff, 0x6}, {0x5, 0x68, 0x3, 0x3b4}, {0xfffe, 0x80, 0x54, 0x4ee}, {0x4, 0x5, 0x2, 0x3}, {0x100, 0x9, 0x2, 0x8001}, {0x8, 0x7, 0x6, 0x10001}, {0xfff, 0x4, 0x1, 0x8}, {0x4, 0x4b, 0x10, 0x43}, {0x9, 0x2, 0x8, 0x3}]}) (async)
setsockopt$inet_tcp_int(r5, 0x6, 0x9, &(0x7f0000000880)=0x1, 0x4)
bind$802154_dgram(r5, &(0x7f00000008c0)={0x24, @none={0x0, 0x1}}, 0x14) (async)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r5)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000000ec0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20001}, 0xc, &(0x7f0000000e80)={&(0x7f0000000980)={0x4f4, r12, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "ccafa52db1ff215fb709ee7dab8c7f97b9b1a848c30faa26b82ad39d14feea42eed0b98ed8bfb6a6c92e680d91c7747ba9607890418abce0cf8521d2d77334e6ac11e5358900b9526330f2afef129c49eae4057f6d34862f036eefd55e966ea289e41dee7c8a703767006e9fa2278191d2af05d7d9c6f4db69215654f79f83ed2193d28e3d3e08d258f8e96928b9a28bffbfc99991ec68c34a8cab7d16e8dad1b51d8383e6faaed528c73c9692b3d4583f3b78c64eeafb4e2bc50bcc2dcc928edfac38e627d573cf259305c1e88f901d72732e1c6ed9b9b40ef20f9b823c2416a7dce70aaa7f5816"}, @NL80211_ATTR_FILS_ERP_RRK={0xb2, 0xfc, "ef8b8047df352542f1d61441ddd6c532e0b9dfb647b4ce834bd5f54cf617ab749aab42077cdff82cc0ce7c2eb81a7475ed53a3073ad56829b1329f7913821f44ae4e46a4cb8c209228cea0a36f9a7d90506c9d53408168e074237444e24e10bcb00c06d7b604d362a3e2238fea8e144ec29c74c0ee6da655ec72ca70c85f840ff269f78f40f5b60e90861801a8de4feb96eedc113af30c841b013a13cf5b2564b2d90d34267c730089991f4734c7"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "8258"}], @NL80211_ATTR_IE={0xd6, 0x2a, [@supported_rates={0x1, 0x1, [{0x2}]}, @ssid={0x0, 0xe, @random="d689a5031f303fc73b55d5ddcb7d"}, @sec_chan_ofs={0x3e, 0x1}, @ibss={0x6, 0x2, 0xff7f}, @chsw_timing={0x68, 0x4, {0xfbf3, 0x9}}, @random={0xa7, 0xa4, "56645211db7046a4e17c7e66cd92a68ddcc2c79025970294ae675162c41ac17fdcbde3613e99d5824ab023547d57f6953bb0f67ad17725b492aa3a73c0722fbe08a5d5042ea76e258a2006aae50ceab68ef4468572409c912c9ffe67ebae41c788c7b13c77d3d42b7069130acaa57cbbac056803f5c25aec110d961b94e57c4d1d09b17d517ca59d9d0edd5e6e51e039b11e19b46cb55ab4800f3aa5c366404e54a17b7d"}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x1, 0x1, 0xa, 0x9}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x54, 0xfc, "572c959fffd6a6ca9147661ff48b4b2b16e2736c6ba166ff6d566dd94a4cbfb0990de1770e313a26d1e105a210b28c74c2c79f7b941df453fa6db7c3e5b9d40ebe68870c98b3e49bca69c4581fcf3385"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_REALM={0xb9, 0xfa, "9a708c3195c41989774955de6f02643047a48df80e3c9635874cc92022881487a575e883388bfd94c3c33e88a42b810b09e8888487f271db2e831c1eb1202d220cbc9785053d3eacdd3b55fd241b8ccaf62f04938fd6095bf2ecd8306aaaf6647f665237a2f63d12200f757bb4a00b719dacadc63a23377ca351bda9ea7d3a13d1b3fd115b83c1961c532e4ef2f5c51763738d1329bf1fb2b7d2e0fafe2871f39f3b0400a5bd635f6cc0709e605d13eef10e7ba301"}, @NL80211_ATTR_FILS_ERP_REALM={0x5c, 0xfa, "f688ba47cf9a9c708a616e352931095a7097867b2e617aed0d36da7fdb3099ebba5fec599fc7dfc05c8f5de262b809baf43ea410d7466c3750cc643c869a894c746d7eba5a2fd1c06f70f7242bc5a3e9848ccab4f34740fd"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "dd0345"}], @NL80211_ATTR_IE={0x11, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x3, 0x99}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0xc0, 0x2a, [@measure_req={0x26, 0xba, {0x8, 0x5, 0x6, "ca122ef67226794bc3b1ec7acd829c2282787837f78c5b4013812fc71849997db4c109fb21fe3c0afa32d47afb87894bbca05619facacfeca188f949ef5ab7c7dba865b2ecaf2f74372e4c7608af5d2c9b887ea3c2e2b4a43de916a35a3ce1a6f7cc3fff27f76b553a91b1598a829684372327f65b313428a057abfa2076ac8c9991d41cb7fe95eaf9023f7e5371e6c35301e06469b9206476518217c8b806eed9bb96945e014cee4009b30f3650933e7ab6a2d8b39e70"}}]}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x4080}, 0x4044001) (async)
getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000f00)={r7, 0x8e3}, &(0x7f0000000f40)=0x8) (async)
ioctl$FS_IOC_READ_VERITY_METADATA(r11, 0xc0286687, &(0x7f0000001000)={0x2, 0x7, 0x65, &(0x7f0000000f80)=""/101})
getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000001040)={r9, 0x3, 0x3, 0x8, 0x9, 0x4}, &(0x7f0000001080)=0x14) (async)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f00000010c0)={<r13=>r7, 0x37, "51b9be0030d6efd3c4e6d70a77329136c9eea8685aa027d43f22a2f5d5d0d4bd96556ca443a968a30af3e6a06a44d22e1282578115566e"}, &(0x7f0000001100)=0x3f)
setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001140)={r13, 0x8}, 0x8) (async)
r14 = syz_genetlink_get_family_id$devlink(&(0x7f00000011c0), r5)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000001340)={&(0x7f0000001180), 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xe8, r14, 0x800, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffba6}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7fff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd2}, {0x6, 0x11, 0xf}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x1}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004081}, 0x4) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001380), r5)
socket$inet6_sctp(0xa, 0x5, 0x84)

5m34.259557176s ago: executing program 0 (id=71):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000d40)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a", 0xfffffd61, 0x4000800, 0x0, 0xfffffffffffffef8)
recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000080)=""/43, 0x2b}], 0x2}, 0x2}], 0x2, 0x22, 0x0)
socket(0x400000000010, 0x3, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r5, &(0x7f0000000280), 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x8}, 0x18)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0xfffffffffffffffc}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
unshare(0x42000000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000000180c200000008004500001c00000000001190780800001cac1414aac100089078"], 0x0)
close(r8)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})

5m34.118329831s ago: executing program 32 (id=71):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000d40)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a", 0xfffffd61, 0x4000800, 0x0, 0xfffffffffffffef8)
recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000080)=""/43, 0x2b}], 0x2}, 0x2}], 0x2, 0x22, 0x0)
socket(0x400000000010, 0x3, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r5, &(0x7f0000000280), 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x8}, 0x18)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0xfffffffffffffffc}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
unshare(0x42000000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000000180c200000008004500001c00000000001190780800001cac1414aac100089078"], 0x0)
close(r8)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})

5m34.060834138s ago: executing program 1 (id=73):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10)
bind$can_raw(r0, &(0x7f0000000040), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@newsa={0x140, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x140}}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@empty, 0x4e23, 0x4, 0x4e21, 0x7, 0xa, 0x60, 0x20, 0x87, 0x0, r7}, {0x80000000, 0x7, 0xfffffffffffffffb, 0x7, 0x9, 0x7, 0x8, 0xb}, {0x0, 0x100, 0x100, 0x6a}, 0x400, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3500, 0xbf0a59c5fd157c33, 0x1, 0x5, 0xff80, 0x8, 0x9}}, 0xe8)
unshare(0x6a040000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x12)
socket$kcm(0x29, 0x5, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8)

5m34.024273539s ago: executing program 33 (id=73):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10)
bind$can_raw(r0, &(0x7f0000000040), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@newsa={0x140, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x140}}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@empty, 0x4e23, 0x4, 0x4e21, 0x7, 0xa, 0x60, 0x20, 0x87, 0x0, r7}, {0x80000000, 0x7, 0xfffffffffffffffb, 0x7, 0x9, 0x7, 0x8, 0xb}, {0x0, 0x100, 0x100, 0x6a}, 0x400, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3500, 0xbf0a59c5fd157c33, 0x1, 0x5, 0xff80, 0x8, 0x9}}, 0xe8)
unshare(0x6a040000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x12)
socket$kcm(0x29, 0x5, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8)

3.088920537s ago: executing program 3 (id=1664):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000e90000000000000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b657400001400028008000240000000030800014000000000240001800a000100717565756500000014000280080004400000001006000340000100000900010073797a30000000000900020073797a3200"], 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0xc00e, 0x0, {0x80}}, 0x26}}, 0x0)

2.957041737s ago: executing program 3 (id=1665):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00001128711093000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

2.880728126s ago: executing program 3 (id=1666):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000010002104ffef0000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r2], 0x50}}, 0x2)

2.880342092s ago: executing program 3 (id=1667):
unshare(0x6a040000)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000f3ff000000604d5bd655e764b57d31cf41c922000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00'}, 0x90)
socket$inet6(0xa, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r0, 0x2000000, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f000094a000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
close(r2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x50, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x620b}, 0x0)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r5, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x200}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x40800)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x88, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x14}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x4841}, 0x0)

2.025771726s ago: executing program 4 (id=1673):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40090)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}})
ioctl(0xffffffffffffffff, 0x8b1a, &(0x7f0000000040))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
syz_emit_ethernet(0x1036, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)={0x1, 0x2, [0xb92, 0x924, 0x4ef, 0xe73]})
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x10, 0x2f, 0x20, 0x70bd2d, 0x25dfdbfc}, 0x10}, {0x0, 0x10}], 0x2, 0x0, 0x0, 0x40}, 0x22004881)

1.950110948s ago: executing program 3 (id=1674):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10)
bind$can_raw(r0, &(0x7f0000000040), 0x10) (async)
bind$can_raw(r0, &(0x7f0000000040), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x15, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xce, &(0x7f0000000980)=""/206, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
socket$inet6(0xa, 0x1, 0x0) (async)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b40000000001010400000000000000000a000000440001802c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000006000340000200003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800b85b80ae00001800068014000400200100000000000000000000000000017cfedad372eebbf1c5358da4f709047031217c76be78843a653a8b4b73c892da83e3718da93019c41ac2367130d681d77461bae76de8032ecbd25ad68fbb9815db"], 0xb4}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b40000000001010400000000000000000a000000440001802c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000006000340000200003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800b85b80ae00001800068014000400200100000000000000000000000000017cfedad372eebbf1c5358da4f709047031217c76be78843a653a8b4b73c892da83e3718da93019c41ac2367130d681d77461bae76de8032ecbd25ad68fbb9815db"], 0xb4}}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=ANY=[@ANYBLOB="4001000010000100fcffff0700000000fc010000000000000000000001000001000000000000000000000000000000000000e5b22000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000002000000000000000000000000000000056c000000fe8000000000000000000000000000bb00000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100004000000000000050000000000000004000000000000000d000000000000000a00000000000000000000000004000000000000fcffffff000000000a0001060000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0008000000"], 0x140}}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4, 0x4e21, 0x7, 0xa, 0x60, 0x20, 0x5e, 0x0, r5}, {0x80000000, 0x9, 0xfffffffffffffffb, 0x7, 0x9, 0x7, 0x8, 0xb}, {0x0, 0x100, 0x105, 0x6a}, 0x400, 0x6e6bb2, 0x1, 0x0, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3504, 0x3, 0x1, 0x5, 0xff80, 0x8, 0xb}}, 0xe8) (async)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4, 0x4e21, 0x7, 0xa, 0x60, 0x20, 0x5e, 0x0, r5}, {0x80000000, 0x9, 0xfffffffffffffffb, 0x7, 0x9, 0x7, 0x8, 0xb}, {0x0, 0x100, 0x105, 0x6a}, 0x400, 0x6e6bb2, 0x1, 0x0, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3504, 0x3, 0x1, 0x5, 0xff80, 0x8, 0xb}}, 0xe8)
unshare(0x6a040000)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="06000000000000000a004e240000000cff0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000442d31f2e2d367b29ac897c258f24004c9f11b40418d4c81f61484b41e6bf6020fd012ad9903f6f2c8d195ffa7248f1192627374f581f2"], 0x90)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x12) (async)
r7 = socket$netlink(0x10, 0x3, 0x12)
socket$kcm(0x29, 0x5, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7)
ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) (async)
ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) (async)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf2501000000"], 0x14}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf2501000000"], 0x14}}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="53f386a8f8577ed9bf5a588a824c8c48", @ANYRES16=r9, @ANYBLOB="01002dbd7000fbdbdf250400000008000300010000000800030004000000140006800600010002000000050002000500000008000400020000000800030003000000"], 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x0)

1.196414127s ago: executing program 3 (id=1677):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
mmap(&(0x7f0000506000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x5131e000)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0xffffffff, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x1, @private}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2c, 0x3501}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}]}, 0x50}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ecb(arc4),sha3-224)\x00'}, 0x58)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
socketpair(0x5, 0x2, 0x688, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
unshare(0x6a040000)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
r3 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0xfffffffffffffffc, 0x0, 0xa2}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0)
sendmsg$netlink(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYRESOCT=r3], 0x10}, {0x0}], 0x2, 0x0, 0x0, 0x40}, 0x22004881)

1.141052677s ago: executing program 4 (id=1679):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000e90000000000000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b657400001400028008000240000000030800014000000000240001800a000100717565756500000014000280080004400000001006000340000100000900010073797a30000000000900020073797a3200"], 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0xfff0, 0x0, {0x80}}, 0x26}}, 0x0)

1.026608501s ago: executing program 4 (id=1680):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000180), 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}, 0x1, 0x500000000000000}, 0xc080)

901.763848ms ago: executing program 4 (id=1681):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd25, 0x40, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x78e}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000004)
r1 = socket$inet6(0xa, 0x6, 0x5)
sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="af629345986f252d38ead00ea9dc887ef541acbe0cb90cb1fab3d1aef9047b9af18a259c9a18cb300fff6a91ed750ec609f478b84c928957061182d21a91f640abf60a179f31454e6f260a688c1594dd61a594051ffba20349db6349cbdb7f3d6cafe71589bbfce831158544933def24e34d50d04c583d1259dd03e923f2a25ef3afc42a29dd9d10f1bf2076987a08b72d3dbfc94d8eb3e442bb8bb106c4144778a8", 0xa2}, {&(0x7f0000000200)="99bbd40286992c7f979ec92535f17aba38b7c2b06fae7490a24b2c0859986d6cdf02ce30c80133fb2f02acbcfbde94306498c9a6847e", 0x36}], 0x2, &(0x7f0000000280)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}], 0x18}, 0x4040)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r4=>0x0)
sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_SE_APDU={0x43, 0x19, "3a8765c19eb1edb63347b3e0462d46d03dff8a9d31ff56a953b979339cdb9fc001c1b76a6020c3a39c94bae2adb99253a9b3768dba22f0fa487a066196a799"}, @NFC_ATTR_SE_APDU={0x16, 0x19, "daedd36cfc48c69e8d76ad003ff1233c195a"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20000020)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x420200, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000500)={'macvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r0)
sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000740)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000800)={&(0x7f00000006c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r6, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x49}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x1)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
write$tun(r8, &(0x7f0000000880)={@val={0x0, 0x6000}, @val={0x3, 0x0, 0x3, 0x9c, 0x5, 0x9}, @mpls={[{0x4}, {0x8001}, {0x2}, {0x2, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x43}, {0x2, 0x0, 0x1}, {0x3}], @llc={@llc={0xac, 0x4e, 'h', "0e8a92b19e22c0a19d0771b1d87fc4255f731f514362a190e779873d1ea5dd6a4642f254556e038531d65dc95323c4159a4975c72f7e127412005ea0d1b301bf36460365b96108f2a5b128589ef2aebab32253ecaf071d9bb89303ea0a348f656bd75a8ec3360b24d00e8a8089e3c733184b79a4959a02c771fb04c54aa5f85931195d7bbb088a8cf68e93a2306be7b1a55b8adc5f0857947bb33f5f4fde1be6eb8520cef49ee65e5b8cc1f75395594ea4c768aa06f45d2eb8f892ad440e00f522fdee"}}}}, 0xf4)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r3, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x10, 0x14, '-]#-:+\')!-{-'}]}, 0x24}, 0x1, 0x0, 0x0, 0x18367fa78eee7fde}, 0x80)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r2, 0x94ffe000)
r9 = accept4$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000ac0)=0x1c, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00', <r10=>0x0})
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001c00), 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001d40)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f0000001cc0), &(0x7f0000001d00)='%pK    \x00'}, 0x20)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001d80)={0xffffffffffffffff, 0x1, 0x10}, 0xc)
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e40)={0x18, 0xa, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xa38}, @exit]}, &(0x7f0000000b80)='GPL\x00', 0x5, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41000, 0x20, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000001c40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001c80)={0x0, 0x1, 0x5, 0xab37}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001dc0)=[r12, r13], &(0x7f0000001e00)=[{0x0, 0x3, 0x5, 0x649a34fa33687453}, {0x3, 0x1, 0x2, 0xa}, {0x5, 0x3, 0x2, 0x8}], 0x10, 0x4}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f00)=r14, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001f40)={r13}, 0x4)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000001f80)={'wpan0\x00'})
socket(0x1e, 0x800, 0xbca)

568.938519ms ago: executing program 4 (id=1682):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e50000000000000000000000000018110000", @ANYRES32=<r9=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x8, 0x5, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0x7, 0x8, 0xb, 0x50, 0xffffffffffffffff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0xf, 0x6, 0x2, 0x7, 0x1}], &(0x7f00000001c0)='GPL\x00', 0x40, 0x72, &(0x7f00000003c0)=""/114, 0xa1600, 0x20, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x492, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000900)=[r10, r10, 0xffffffffffffffff, r10, r10, r10, r10, r10, 0xffffffffffffffff], &(0x7f0000000540)=[{0x2, 0x4, 0x8, 0x9}, {0x0, 0x3, 0x2}, {0x4, 0x1, 0xf, 0x5}, {0x2, 0x5, 0x6, 0x4}, {0x5, 0x2, 0x8, 0x3}, {0x3, 0x4, 0x4}, {0x0, 0x4, 0x6, 0x5}], 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r12}, 0x10)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r13}, 0x18)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r8, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="01596600", @ANYRES16=r6, @ANYBLOB="020027bd7000ffdbdf25790000000400f4000400f4000400f4000400f4000400f4000400f400", @ANYRES8=r4, @ANYRES16=r11, @ANYRESOCT=r14, @ANYRES32=r9, @ANYRESHEX=r6], 0x2c}}, 0x800)
r15 = socket$inet_udplite(0x2, 0x2, 0x88)
pwritev(r15, &(0x7f0000000180), 0x0, 0x8, 0x2)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'bond0\x00', <r16=>0x0})
syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@ipv6_newaddrlabel={0x70, 0x48, 0x20, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x78, 0x0, r16, 0x32}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x70}}, 0x0)

417.388184ms ago: executing program 2 (id=1683):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0303000000c00e0000000600140008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)

415.017897ms ago: executing program 4 (id=1684):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x6a040000) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (async)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000023c0)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711253000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
shutdown(r0, 0x1)

343.360619ms ago: executing program 2 (id=1685):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="080026006c09000008009f00007544d71b5926b2088c1690663859d8b7467e6ea5dce400020000008f5ed396f38d8dfbd1f8dbc224697beddde6feab939b67e96adb776bffb22de539f7a1c93dca1ccec961c33255bd1384b903a13e4a7ef6c12fa9e48fefda5c255b18f1dc0093405a18ed1bc8c4c5821b0884a9f09708689b290d047a6ec3edf0412d188bb2"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40)

246.106797ms ago: executing program 2 (id=1686):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000e90000000000000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b657400001400028008000240000000030800014000000000240001800a000100717565756500000014000280080004400000001006000340000100000900010073797a30000000000900020073797a3200"], 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x2000000, 0x0, {0x80}}, 0x26}}, 0x0)

190.053875ms ago: executing program 2 (id=1687):
r0 = socket$caif_seqpacket(0x25, 0x5, 0x5)
sendmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000004240)=@l2={0x1f, 0x6e0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x9c}, 0x80, &(0x7f0000004540)=[{&(0x7f00000042c0)="0eb20d74ebc9cf4ce986404df51de1c44fe53b1ded9195944f5a7a7ef1205e69d8c4bb89b98ccbdb371f11ba2d42735dabb7342544d5", 0x36}, {&(0x7f0000004300)="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", 0xfe}, {&(0x7f0000004400)="9012d0fbd13a6ac096dd30c27eb21b0f8ae84d7bf69922c4131eba6ebf04b78c0531c5bd73688b0bb8057853b22c867e7c56b2055d267ebf850afec236e2b1dba11d92fdb83b619febe3011235d62cbd19c37ccc9ec8067690157675cd1097a66e9c5de57fc66a0d213f3d90b49a922eb0a9ddc810c85dd9c7e9d42da09d60a5c317a07b0035c8bbb4c8820de55c51264a49c8aa47", 0x95}, {&(0x7f00000044c0)="39faf94566426cf9f9d149f543bb1ee166aa68150dd2843dbf31436ee2b8ede248bc9ccf8aec82743ea8b143302c4bad80664f1d06ab00304955f3dda0f3f92f0e6f2e27776193af07c539", 0x4b}], 0x4, &(0x7f0000004580)=[{0x24, 0x0, 0x200, "4b164b215cdf02c9b95ad31deea0b15cf4ebd229ed32160f560120abc8f34bd4dd51a1f8b04f40894a2ca6e4a5ae4a49b111b1044b2f38ffe889baa88bf8dafb4ea682c24dc728a5"}], 0x58}}, {{0x0, 0x0, &(0x7f0000004740)=[{&(0x7f0000004600)="fc", 0x1}, {&(0x7f0000004640)="6e35ea39493f96ca9e6e01c396ce60055a", 0x11}, {&(0x7f0000004680)="c52fb857d833aaf1888c5982925f0cc2a1da24019b744b888995ea3434a6852aafae0747bd15d101d006c2e3b878da43ab6bf0fdf15d1efb94a5a4978f8350e484f67dc4a7100148242097cea9f9606b8a819b9266252dfd405c9e960f44b8c84b14a7616b17bfcf0b3b84acfe09a3ac90098d0e2725e7ffb0b6fe6ab35e9313286cc05e24a749057f9da67e39b9de29b49dd2ba6f", 0x95}], 0x3}}], 0x2, 0x8000)

140.097974ms ago: executing program 2 (id=1688):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10)
bind$can_raw(r0, &(0x7f0000000040), 0x10) (async)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3}, 0x4) (async)
close(0x4) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000c71a3162738fa64a000000000000"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, &(0x7f0000000000)="5aa62d32aa43"}, 0x20) (async)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) (async)
socket$unix(0x1, 0x5, 0x0) (async)
r6 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x800)
ioctl$SIOCGETNODEID(r6, 0x89e1, &(0x7f00000004c0)={0x1}) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b40000000001010400000000000000000a000000440001802c00018014000300ff01000000000000000000000000000114000000ff0100000000000000000000000000010c000280050001000000000006000340000200003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xb4}}, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=ANY=[@ANYBLOB="4001000010000100fcffff0700000000fc010000000000000000000000000001000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000002000000000000000000000000000000046c000000fe8000000000000000000000000000bb00000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000050000000000000004000000000000000d000000000000000a00000000000000000000000004000000000000fcffffff000000000a0001060000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0006000000"], 0x140}}, 0x20000000) (async)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@empty, 0x4e23, 0x4, 0x4e21, 0x7, 0xa, 0x60, 0x20, 0x87, 0x0, r9}, {0x80000000, 0x7, 0xfffffffffffffffb, 0x7, 0x9, 0x7, 0x8, 0xb}, {0x0, 0x100, 0x100, 0x6a}, 0x400, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x1500, 0xbf0a59c5fd157c33, 0x1, 0x5, 0xff80, 0x8, 0x9}}, 0xe8)
unshare(0x6a040000) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0)

0s ago: executing program 2 (id=1689):
socket(0x1d, 0x800, 0x6)
unshare(0x6a040000)
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x7}, 0x1c)
setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000200)="95de66096bcc111518d3640f969ee0f145ae77ab", 0x14)
mmap(&(0x7f00009ee000/0x4000)=nil, 0x4000, 0x3, 0x10, r0, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
ioctl$SIOCSIFMTU(r1, 0x8918, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000b00)={'bond0\x00', &(0x7f0000000a40)=@ethtool_pauseparam={0x13, 0x0, 0x36, 0x101}})
socket$alg(0x26, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r3=>0x0, 0x0})
close(r3)
bind$rose(r3, &(0x7f0000000300)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, [@bcast, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10)

kernel console output (not intermixed with test programs):

16] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.551942][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'.
[   85.562722][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'.
[   85.566933][ T5716] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.574847][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'.
[   85.753000][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.116'.
[   85.756106][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.116'.
[   85.860186][ T6491] netlink: 'syz.2.117': attribute type 1 has an invalid length.
[   86.654757][   T60] cfg80211: failed to load regulatory.db
[   88.066587][ T6537] netlink: 64 bytes leftover after parsing attributes in process `syz.3.126'.
[   88.075243][ T6537] netlink: 64 bytes leftover after parsing attributes in process `syz.3.126'.
[   88.089570][ T6537] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[   88.217119][ T6535] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.245073][ T6523] tipc: Disabling bearer <eth:syzkaller0>
[   88.328322][ T6552] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.447386][ T6552] bond_slave_0: entered promiscuous mode
[   88.449909][ T6552] bond_slave_1: entered promiscuous mode
[   88.464967][ T6552] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   88.479704][ T6552] bond2: (slave macvlan2): Enslaving as a backup interface with an up link
[   88.499469][ T6554] batman_adv: batadv0: Interface deactivated: dummy0
[   88.503040][ T6554] batman_adv: batadv0: Removing interface: dummy0
[   88.507780][ T6554] bridge_slave_0: left allmulticast mode
[   88.509947][ T6554] bridge_slave_0: left promiscuous mode
[   88.513645][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.520099][ T6554] bridge_slave_1: left allmulticast mode
[   88.524289][ T6554] bridge_slave_1: left promiscuous mode
[   88.526830][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.537096][ T6554] bond0: (slave bond_slave_0): Releasing backup interface
[   88.541123][ T6554] bond_slave_0: left promiscuous mode
[   88.549460][ T6554] bond0: (slave bond_slave_1): Releasing backup interface
[   88.557684][ T6554] bond_slave_1: left promiscuous mode
[   88.574353][ T6554] team0: Port device team_slave_0 removed
[   88.585948][ T6554] team0: Port device team_slave_1 removed
[   88.589462][ T6554] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.592958][ T6554] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.597982][ T6554] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.602764][ T6554] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.617799][ T6554] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   88.621684][ T6554] batman_adv: batadv0: Removing interface: ip6gretap1
[   88.627549][ T6554] bond2: (slave macvlan2): Removing an active aggregator
[   88.632936][ T6554] bond2: (slave macvlan2): Releasing backup interface
[   89.051327][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.136'.
[   89.067842][ T6577] netlink: 'syz.4.136': attribute type 7 has an invalid length.
[   89.073102][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'.
[   89.494693][ T6601] netlink: 'syz.3.142': attribute type 16 has an invalid length.
[   91.792153][ T6653] __nla_validate_parse: 1 callbacks suppressed
[   91.792172][ T6653] netlink: 20 bytes leftover after parsing attributes in process `syz.4.154'.
[   92.233585][ T6677] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   92.254631][ T6679] netlink: 'syz.3.157': attribute type 1 has an invalid length.
[   93.347926][ T6729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.161'.
[   93.372484][ T6729] netlink: 152 bytes leftover after parsing attributes in process `syz.3.161'.
[   93.584254][ T6739] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.164'.
[   93.592070][ T6739] netlink: 'syz.2.164': attribute type 10 has an invalid length.
[   93.601208][ T6739] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   94.008724][ T6759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.166'.
[   94.028953][ T6759] netlink: 92 bytes leftover after parsing attributes in process `syz.3.166'.
[   94.718909][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'.
[   94.724392][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'.
[   94.727982][ T6776] netlink: 'syz.3.168': attribute type 13 has an invalid length.
[   94.802622][   T32] wlan1: Trigger new scan to find an IBSS to join
[   94.966014][ T6784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.170'.
[   95.463233][ T6797] lo speed is unknown, defaulting to 1000
[   95.475067][ T6798] net_ratelimit: 30 callbacks suppressed
[   95.475073][ T6798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   95.494382][ T6797] lo speed is unknown, defaulting to 1000
[   95.519552][ T6797] lo speed is unknown, defaulting to 1000
[   95.794572][ T6797] infiniband syz0: set active
[   95.796621][ T6797] infiniband syz0: added lo
[   95.886157][    T9] lo speed is unknown, defaulting to 1000
[   95.918596][ T6797] RDS/IB: syz0: added
[   95.939028][ T6797] smc: adding ib device syz0 with port count 1
[   95.948286][ T6797] smc:    ib device syz0 port 1 has no pnetid
[   95.993590][ T5312] lo speed is unknown, defaulting to 1000
[   95.997948][ T6797] lo speed is unknown, defaulting to 1000
[   96.214533][ T6797] lo speed is unknown, defaulting to 1000
[   96.374996][ T6797] lo speed is unknown, defaulting to 1000
[   96.500380][ T6797] lo speed is unknown, defaulting to 1000
[   96.648395][ T6797] lo speed is unknown, defaulting to 1000
[   96.828144][ T6797] lo speed is unknown, defaulting to 1000
[   96.989386][ T6797] lo speed is unknown, defaulting to 1000
[   97.233560][ T6816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.176'.
[   97.424468][ T6821] netlink: 'syz.4.178': attribute type 21 has an invalid length.
[   97.674326][ T6820] lo speed is unknown, defaulting to 1000
[   97.761686][  T359] wlan1: Trigger new scan to find an IBSS to join
[   97.997098][ T6827] netlink: 44 bytes leftover after parsing attributes in process `syz.3.180'.
[   98.120198][ T6831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'.
[   98.125741][ T6831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'.
[   98.129159][ T6829] _Z`Ԁ@: entered promiscuous mode
[   98.199754][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.182'.
[   98.241836][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'.
[   98.260233][ T6838] erspan0: entered promiscuous mode
[   98.273926][ T6840] syz_tun: entered allmulticast mode
[   98.286002][ T6840] dvmrp8: entered allmulticast mode
[   98.312286][ T6840] lo speed is unknown, defaulting to 1000
[   98.830482][ T6839] syz_tun: left allmulticast mode
[   98.836145][ T6839] dvmrp8: left allmulticast mode
[   98.993786][ T6880] syz.3.192: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   99.001819][ T6880] CPU: 0 UID: 0 PID: 6880 Comm: syz.3.192 Not tainted syzkaller #0 PREEMPT(full) 
[   99.001840][ T6880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.001849][ T6880] Call Trace:
[   99.001855][ T6880]  <TASK>
[   99.001861][ T6880]  dump_stack_lvl+0x189/0x250
[   99.001894][ T6880]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.001910][ T6880]  ? __pfx__printk+0x10/0x10
[   99.001928][ T6880]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   99.001944][ T6880]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   99.001960][ T6880]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   99.001977][ T6880]  warn_alloc+0x214/0x310
[   99.002002][ T6880]  ? __pfx_warn_alloc+0x10/0x10
[   99.002028][ T6880]  ? __get_vm_area_node+0x28f/0x300
[   99.002047][ T6880]  ? packet_set_ring+0x6f4/0x2350
[   99.002068][ T6880]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   99.002118][ T6880]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   99.002137][ T6880]  ? alloc_pages_mpol+0x3cd/0x4a0
[   99.002158][ T6880]  ? packet_set_ring+0x6f4/0x2350
[   99.002175][ T6880]  vzalloc_noprof+0xb2/0xf0
[   99.002193][ T6880]  ? packet_set_ring+0x6f4/0x2350
[   99.002211][ T6880]  packet_set_ring+0x6f4/0x2350
[   99.002247][ T6880]  ? __pfx_packet_set_ring+0x10/0x10
[   99.002280][ T6880]  ? _copy_from_user+0x94/0xb0
[   99.002299][ T6880]  packet_setsockopt+0xc5a/0x12c0
[   99.002319][ T6880]  ? __pfx_packet_setsockopt+0x10/0x10
[   99.002341][ T6880]  ? __lock_acquire+0xab9/0xd20
[   99.002363][ T6880]  ? aa_sk_perm+0x81e/0x950
[   99.002387][ T6880]  ? __pfx_aa_sk_perm+0x10/0x10
[   99.002407][ T6880]  ? __fget_files+0x2a/0x420
[   99.002418][ T6880]  ? aa_sock_opt_perm+0xff/0x1b0
[   99.002465][ T6880]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   99.002479][ T6880]  ? __pfx_packet_setsockopt+0x10/0x10
[   99.002498][ T6880]  do_sock_setsockopt+0x17c/0x1b0
[   99.002517][ T6880]  __x64_sys_setsockopt+0x13f/0x1b0
[   99.002536][ T6880]  do_syscall_64+0xfa/0x3b0
[   99.002550][ T6880]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.002563][ T6880]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.002576][ T6880]  ? exc_page_fault+0x9f/0xf0
[   99.002591][ T6880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.002603][ T6880] RIP: 0033:0x7f623c98ebe9
[   99.002616][ T6880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.002626][ T6880] RSP: 002b:00007f623d8b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   99.002640][ T6880] RAX: ffffffffffffffda RBX: 00007f623cbc5fa0 RCX: 00007f623c98ebe9
[   99.002649][ T6880] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000047
[   99.002657][ T6880] RBP: 00007f623ca11e19 R08: 000000000000001c R09: 0000000000000000
[   99.002665][ T6880] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[   99.002672][ T6880] R13: 00007f623cbc6038 R14: 00007f623cbc5fa0 R15: 00007ffe57fdcd18
[   99.002695][ T6880]  </TASK>
[   99.002701][ T6880] Mem-Info:
[   99.117178][ T6880] active_anon:5977 inactive_anon:0 isolated_anon:0
[   99.117178][ T6880]  active_file:1383 inactive_file:38243 isolated_file:0
[   99.117178][ T6880]  unevictable:1768 dirty:103 writeback:0
[   99.117178][ T6880]  slab_reclaimable:10020 slab_unreclaimable:55721
[   99.117178][ T6880]  mapped:18223 shmem:2439 pagetables:1159
[   99.117178][ T6880]  sec_pagetables:0 bounce:0
[   99.117178][ T6880]  kernel_misc_reclaimable:0
[   99.117178][ T6880]  free:285802 free_pcp:22144 free_cma:0
[   99.134804][ T6880] Node 0 active_anon:8720kB inactive_anon:0kB active_file:3252kB inactive_file:140896kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:22920kB dirty:100kB writeback:0kB shmem:4952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5276kB pagetables:2184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   99.146984][ T6880] Node 1 active_anon:15188kB inactive_anon:0kB active_file:2280kB inactive_file:12076kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49972kB dirty:312kB writeback:0kB shmem:4804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6748kB pagetables:2520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   99.158589][ T6880] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   99.169942][ T6880] lowmem_reserve[]: 0 811 811 811 811
[   99.172158][ T6880] Node 0 DMA32 free:276676kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8720kB inactive_anon:0kB active_file:3252kB inactive_file:140896kB unevictable:3536kB writepending:100kB present:1556484kB managed:830880kB mlocked:0kB bounce:0kB free_pcp:49680kB local_pcp:28696kB free_cma:0kB
[   99.185507][ T6880] lowmem_reserve[]: 0 0 0 0 0
[   99.187160][ T6880] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   99.197095][ T6880] lowmem_reserve[]: 0 0 854 854 854
[   99.199314][ T6880] Node 1 Normal free:392556kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15256kB inactive_anon:0kB active_file:2280kB inactive_file:12076kB unevictable:3536kB writepending:312kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38980kB local_pcp:21012kB free_cma:0kB
[   99.221377][ T6880] lowmem_reserve[]: 0 0 0 0 0
[   99.223268][ T6880] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   99.237741][ T6880] Node 0 DMA32: 612*4kB (UME) 101*8kB (ME) 5*16kB (UME) 177*32kB (UME) 40*64kB (UM) 4*128kB (UME) 1*256kB (M) 16*512kB (UM) 10*1024kB (UM) 14*2048kB (UM) 55*4096kB (M) = 284712kB
[   99.243614][ T6880] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   99.255147][ T6880] Node 1 Normal: 533*4kB (ME) 130*8kB (UME) 53*16kB (UME) 43*32kB (ME) 31*64kB (M) 15*128kB (UME) 7*256kB (UME) 5*512kB (UME) 4*1024kB (UM) 3*2048kB (ME) 90*4096kB (M) = 392532kB
[   99.261616][ T6880] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   99.269980][ T6880] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   99.274983][ T6880] 42065 total pagecache pages
[   99.276623][ T6880] 0 pages in swap cache
[   99.278034][ T6880] Free swap  = 124996kB
[   99.279682][ T6880] Total swap = 124996kB
[   99.282560][ T6880] 786301 pages RAM
[   99.284292][ T6891] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[   99.287830][ T6880] 0 pages HighMem/MovableOnly
[   99.289915][ T6880] 241349 pages reserved
[   99.292734][ T6880] 0 pages cma reserved
[   99.629056][ T6902] lo speed is unknown, defaulting to 1000
[   99.640233][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'.
[   99.651228][ T6904] batadv0: entered promiscuous mode
[   99.653604][ T6904] macsec2: entered promiscuous mode
[   99.659016][ T6904] batadv0: left promiscuous mode
[   99.895130][ T6900] lo speed is unknown, defaulting to 1000
[  100.365383][ T6920] lo speed is unknown, defaulting to 1000
[  100.525704][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.200'.
[  100.644524][ T6925] lo speed is unknown, defaulting to 1000
[  100.798417][   T27] wlan1: Trigger new scan to find an IBSS to join
[  101.726840][   T36] wlan1: Creating new IBSS network, BSSID c2:5d:15:4b:3e:88
[  102.538609][ T6936] lo speed is unknown, defaulting to 1000
[  102.764055][ T6941] lo speed is unknown, defaulting to 1000
[  103.584935][ T6956] netlink: 666 bytes leftover after parsing attributes in process `syz.2.208'.
[  103.918690][ T6974] gtp0: entered promiscuous mode
[  104.223648][ T6988] lo speed is unknown, defaulting to 1000
[  104.428645][ T6991] lo speed is unknown, defaulting to 1000
[  104.640092][ T6996] lo speed is unknown, defaulting to 1000
[  104.873621][ T7016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'.
[  104.958139][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'.
[  104.966136][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'.
[  104.969260][ T7023] netlink: 'syz.3.225': attribute type 13 has an invalid length.
[  104.974154][ T7023] netlink: 'syz.3.225': attribute type 11 has an invalid length.
[  105.396882][ T7044] lo speed is unknown, defaulting to 1000
[  105.707440][ T7041] lo speed is unknown, defaulting to 1000
[  105.833497][ T7063] lo speed is unknown, defaulting to 1000
[  106.034397][ T7076] netlink: 'syz.3.235': attribute type 7 has an invalid length.
[  106.037159][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'.
[  106.252001][ T7080] lo speed is unknown, defaulting to 1000
[  106.485397][ T7093] netlink: 120 bytes leftover after parsing attributes in process `syz.4.238'.
[  106.508438][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'.
[  106.803397][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'.
[  106.817179][ T7099] lo speed is unknown, defaulting to 1000
[  107.071787][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'.
[  107.184808][ T7111] lo speed is unknown, defaulting to 1000
[  107.509228][ T7126] lo speed is unknown, defaulting to 1000
[  108.360191][ T7157] netlink: 'syz.4.256': attribute type 4 has an invalid length.
[  108.363212][ T7157] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.256'.
[  108.439109][ T7155] lo speed is unknown, defaulting to 1000
[  108.683605][ T7169] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  108.987768][ T7163] lo speed is unknown, defaulting to 1000
[  109.189560][ T7174] lo speed is unknown, defaulting to 1000
[  109.457403][ T7185] lo speed is unknown, defaulting to 1000
[  109.979092][ T7190] lo speed is unknown, defaulting to 1000
[  110.455137][ T7194] lo speed is unknown, defaulting to 1000
[  110.555652][ T7203] __nla_validate_parse: 2 callbacks suppressed
[  110.555668][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.263'.
[  110.594131][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.263'.
[  110.841385][ T7211] netlink: 830 bytes leftover after parsing attributes in process `syz.3.265'.
[  111.171920][ T7217] lo speed is unknown, defaulting to 1000
[  111.949758][ T7231] lo speed is unknown, defaulting to 1000
[  112.369436][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'.
[  112.396222][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'.
[  112.406458][ T7239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.271'.
[  112.443362][ T7238] 8021q: adding VLAN 0 to HW filter on device bond3
[  112.556700][ T7246] netlink: 'syz.3.273': attribute type 1 has an invalid length.
[  113.894404][ T7256] lo speed is unknown, defaulting to 1000
[  114.196402][ T7272] lo speed is unknown, defaulting to 1000
[  114.456688][ T7283] lo speed is unknown, defaulting to 1000
[  115.443369][   T61] block nbd0: Possible stuck request ffff888020cf0000: control (read@0,1024B). Runtime 30 seconds
[  115.448033][   T61] block nbd0: Possible stuck request ffff888020cf0200: control (read@1024,1024B). Runtime 30 seconds
[  115.452886][   T61] block nbd0: Possible stuck request ffff888020cf0400: control (read@2048,1024B). Runtime 30 seconds
[  115.457804][   T61] block nbd0: Possible stuck request ffff888020cf0600: control (read@3072,1024B). Runtime 30 seconds
[  116.746695][ T7290] netlink: 'syz.3.283': attribute type 1 has an invalid length.
[  116.774108][ T7290] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.823251][ T7290] bond1: (slave geneve2): making interface the new active one
[  116.827269][ T7290] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  116.917384][ T7295] lo speed is unknown, defaulting to 1000
[  116.997498][ T7300] netlink: 264 bytes leftover after parsing attributes in process `syz.3.285'.
[  117.002074][ T7300] netlink: 56 bytes leftover after parsing attributes in process `syz.3.285'.
[  117.268523][ T7305] lo speed is unknown, defaulting to 1000
[  117.314447][ T7310] netlink: 'syz.3.288': attribute type 21 has an invalid length.
[  117.320250][ T7310] netlink: 132 bytes leftover after parsing attributes in process `syz.3.288'.
[  117.536628][ T7308] netlink: 36 bytes leftover after parsing attributes in process `syz.4.287'.
[  117.541190][ T7312] lo speed is unknown, defaulting to 1000
[  119.070965][ T7313] lo speed is unknown, defaulting to 1000
[  119.182058][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.289'.
[  119.251952][ T7318] nbd: must specify at least one socket
[  119.874585][ T7328] "syz.2.292" (7328) uses obsolete ecb(arc4) skcipher
[  119.916621][ T7332] lo speed is unknown, defaulting to 1000
[  120.194717][ T7344] lo speed is unknown, defaulting to 1000
[  120.333623][ T7343] lo speed is unknown, defaulting to 1000
[  120.607678][ T7355] netlink: 'syz.2.298': attribute type 4 has an invalid length.
[  120.611128][ T7355] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.298'.
[  122.425379][ T7365] bond0: Device is already in use.
[  122.496993][ T7376] netlink: 'syz.3.304': attribute type 2 has an invalid length.
[  122.533961][ T7374] lo speed is unknown, defaulting to 1000
[  122.891585][ T7385] lo speed is unknown, defaulting to 1000
[  123.105584][ T7389] lo speed is unknown, defaulting to 1000
[  123.286485][ T7405] lo speed is unknown, defaulting to 1000
[  123.591452][ T7416] netlink: 464 bytes leftover after parsing attributes in process `syz.3.314'.
[  123.633825][ T7417] lo speed is unknown, defaulting to 1000
[  123.888436][ T7424] netlink: 36 bytes leftover after parsing attributes in process `syz.3.316'.
[  124.302131][ T7433] lo speed is unknown, defaulting to 1000
[  124.507941][ T7436] lo speed is unknown, defaulting to 1000
[  124.550379][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'.
[  124.802757][ T7443] lo speed is unknown, defaulting to 1000
[  124.893100][ T7447] sctp: [Deprecated]: syz.4.322 (pid 7447) Use of struct sctp_assoc_value in delayed_ack socket option.
[  124.893100][ T7447] Use struct sctp_sack_info instead
[  125.131473][ T7447] lo speed is unknown, defaulting to 1000
[  125.357291][ T7457] netlink: 416 bytes leftover after parsing attributes in process `syz.3.325'.
[  125.688706][ T7459] lo speed is unknown, defaulting to 1000
[  125.894052][ T7457] lo speed is unknown, defaulting to 1000
[  126.322873][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'.
[  126.326377][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.327'.
[  128.158481][ T7478] lo speed is unknown, defaulting to 1000
[  128.782148][ T7489] xt_HMARK: proto mask must be zero with L3 mode
[  128.998168][ T7498] netlink: 'syz.2.332': attribute type 10 has an invalid length.
[  129.066755][ T7499] lo speed is unknown, defaulting to 1000
[  129.214119][ T7515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.334'.
[  129.217358][ T7515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.334'.
[  129.280153][ T7505] lo speed is unknown, defaulting to 1000
[  129.439287][ T7509] lo speed is unknown, defaulting to 1000
[  130.505026][ T7551] netlink: 'syz.3.343': attribute type 1 has an invalid length.
[  130.593249][ T7551] 8021q: adding VLAN 0 to HW filter on device bond2
[  130.619654][ T7551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.343'.
[  130.664764][ T7547] bond2: (slave wlan1): Enslaving as an active interface with a down link
[  130.679255][ T7553] lo speed is unknown, defaulting to 1000
[  130.850180][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'.
[  130.928989][ T7563] lo speed is unknown, defaulting to 1000
[  131.793156][ T1091] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  132.128849][ T7594] lo speed is unknown, defaulting to 1000
[  132.348315][ T7602] lo speed is unknown, defaulting to 1000
[  132.526556][ T7613] netlink: 'syz.4.357': attribute type 4 has an invalid length.
[  132.528988][ T7613] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.357'.
[  132.727205][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.839936][ T7623] lo speed is unknown, defaulting to 1000
[  133.058034][ T7629] lo speed is unknown, defaulting to 1000
[  133.180818][ T7634] netlink: 52 bytes leftover after parsing attributes in process `syz.2.363'.
[  133.437580][ T7636] lo speed is unknown, defaulting to 1000
[  133.663479][ T7642] netlink: 'syz.3.366': attribute type 1 has an invalid length.
[  133.735415][ T7642] 8021q: adding VLAN 0 to HW filter on device bond3
[  133.960177][ T7649] lo speed is unknown, defaulting to 1000
[  134.306106][ T7654] lo speed is unknown, defaulting to 1000
[  134.504364][ T7670] netlink: 'syz.2.372': attribute type 7 has an invalid length.
[  134.509741][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'.
[  134.573724][ T7670] 8021q: adding VLAN 0 to HW filter on device bond4
[  134.577350][ T7670] bridge3: port 1(bond4) entered blocking state
[  134.580362][ T7670] bridge3: port 1(bond4) entered disabled state
[  134.585485][ T7670] bond4: entered allmulticast mode
[  134.599248][ T7670] bridge3: port 1(bond4) entered blocking state
[  134.603125][ T7670] bridge3: port 1(bond4) entered forwarding state
[  134.756847][   T27] bridge3: port 1(bond4) entered disabled state
[  134.826645][ T7672] lo speed is unknown, defaulting to 1000
[  135.020165][ T7677] lo speed is unknown, defaulting to 1000
[  135.722000][ T7687] lo speed is unknown, defaulting to 1000
[  136.399929][ T7696] lo speed is unknown, defaulting to 1000
[  136.747472][ T7716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.382'.
[  136.759740][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.382'.
[  136.809833][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'.
[  137.024259][ T7721] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  137.026417][ T7722] lo speed is unknown, defaulting to 1000
[  137.059399][ T7721] infiniband sL2: RDMA CMA: cma_listen_on_dev, error -98
[  137.568787][ T7729] lo speed is unknown, defaulting to 1000
[  138.111605][ T7716] syz.3.382 (7716) used greatest stack depth: 19512 bytes left
[  138.144987][ T7752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.391'.
[  138.317244][ T7771] lo speed is unknown, defaulting to 1000
[  138.618009][ T7775] lo speed is unknown, defaulting to 1000
[  139.029982][ T7795] lo speed is unknown, defaulting to 1000
[  139.317287][ T7806] netlink: 'syz.3.401': attribute type 1 has an invalid length.
[  139.449661][ T7799] lo speed is unknown, defaulting to 1000
[  139.757867][ T7807] lo speed is unknown, defaulting to 1000
[  140.597672][ T7823] lo speed is unknown, defaulting to 1000
[  140.995210][ T7836] netlink: 'syz.2.405': attribute type 30 has an invalid length.
[  141.119248][ T7838] lo speed is unknown, defaulting to 1000
[  141.553584][ T7842] lo speed is unknown, defaulting to 1000
[  142.705164][ T7868] netlink: 200 bytes leftover after parsing attributes in process `syz.4.414'.
[  142.738303][ T7859] lo speed is unknown, defaulting to 1000
[  142.806595][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.414'.
[  143.097431][ T7881] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  143.114026][ T7884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.133586][ T7884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.418'.
[  143.178446][ T7884] tap0: tun_chr_ioctl cmd 1074025677
[  143.187584][ T7884] tap0: linktype set to 800
[  143.348444][ T7897] lo speed is unknown, defaulting to 1000
[  144.108582][ T7917] lo speed is unknown, defaulting to 1000
[  144.439596][ T7930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'.
[  144.442980][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'.
[  144.447032][ T7930] netlink: 2 bytes leftover after parsing attributes in process `syz.3.427'.
[  144.453968][ T7930] netlink: 80 bytes leftover after parsing attributes in process `syz.3.427'.
[  144.559584][ T7928] lo speed is unknown, defaulting to 1000
[  144.785373][ T7930] lo speed is unknown, defaulting to 1000
[  145.532026][   T61] block nbd0: Possible stuck request ffff888020cf0000: control (read@0,1024B). Runtime 60 seconds
[  145.536418][   T61] block nbd0: Possible stuck request ffff888020cf0200: control (read@1024,1024B). Runtime 60 seconds
[  145.542182][   T61] block nbd0: Possible stuck request ffff888020cf0400: control (read@2048,1024B). Runtime 60 seconds
[  145.546592][   T61] block nbd0: Possible stuck request ffff888020cf0600: control (read@3072,1024B). Runtime 60 seconds
[  146.858676][ T7936] lo speed is unknown, defaulting to 1000
[  147.599281][ T7956] lo speed is unknown, defaulting to 1000
[  147.785238][ T7959] lo speed is unknown, defaulting to 1000
[  147.824300][ T7963] trusted_key: syz.4.434 sent an empty control message without MSG_MORE.
[  148.144132][ T7962] lo speed is unknown, defaulting to 1000
[  148.281365][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'.
[  148.534743][ T7979] lo speed is unknown, defaulting to 1000
[  149.377757][ T8011] netlink: 20 bytes leftover after parsing attributes in process `syz.3.446'.
[  149.456411][ T8019] lo speed is unknown, defaulting to 1000
[  149.644298][ T8029] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.738844][ T8029] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.812563][ T8029] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.898717][ T8029] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.041280][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.045072][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.054888][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.452'.
[  150.076983][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.082339][ T8035] lo speed is unknown, defaulting to 1000
[  150.090057][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.408853][ T8052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.456'.
[  150.430365][ T8052] bond0: (slave dummy0): Releasing backup interface
[  150.553893][ T8046] lo speed is unknown, defaulting to 1000
[  150.802560][ T8045] lo speed is unknown, defaulting to 1000
[  151.090454][ T8054] lo speed is unknown, defaulting to 1000
[  151.770795][ T8066] lo speed is unknown, defaulting to 1000
[  151.852894][ T8070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.459'.
[  152.378508][ T8091] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20000
[  152.524934][ T8101] dvmrp0: entered allmulticast mode
[  152.598119][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'.
[  152.717173][ T8105] lo speed is unknown, defaulting to 1000
[  153.056651][ T8111] lo speed is unknown, defaulting to 1000
[  153.391877][ T8112] lo speed is unknown, defaulting to 1000
[  155.390082][ T8119] lo speed is unknown, defaulting to 1000
[  155.568313][ T8121] lo speed is unknown, defaulting to 1000
[  156.721394][ T8133] netlink: 'syz.2.472': attribute type 21 has an invalid length.
[  156.730729][ T8133] netlink: 128 bytes leftover after parsing attributes in process `syz.2.472'.
[  156.736930][ T8133] netlink: 'syz.2.472': attribute type 5 has an invalid length.
[  156.743700][ T8133] netlink: 'syz.2.472': attribute type 6 has an invalid length.
[  156.746660][ T8133] netlink: 3 bytes leftover after parsing attributes in process `syz.2.472'.
[  156.855746][ T8144] lo speed is unknown, defaulting to 1000
[  157.067677][ T8138] lo speed is unknown, defaulting to 1000
[  157.275012][ T8164] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  157.393923][ T8146] lo speed is unknown, defaulting to 1000
[  157.948342][ T8179] lo speed is unknown, defaulting to 1000
[  158.526233][ T8190] lo speed is unknown, defaulting to 1000
[  158.718805][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'.
[  158.791442][ T8196] lo speed is unknown, defaulting to 1000
[  158.959022][ T8191] netlink: 'syz.3.479': attribute type 10 has an invalid length.
[  158.983250][ T8191] bond2: (slave wlan1): Releasing active interface
[  158.993811][ T8191] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  159.113295][ T8200] lo speed is unknown, defaulting to 1000
[  159.843171][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'.
[  160.124772][ T8231] lo speed is unknown, defaulting to 1000
[  160.178353][ T8232] netlink: 9 bytes leftover after parsing attributes in process `syz.4.488'.
[  160.186918][ T8232] .70: renamed from hsr0 (while UP)
[  160.218661][ T8232] .70: entered allmulticast mode
[  160.230229][ T8232] hsr_slave_0: entered allmulticast mode
[  160.243287][ T8232] hsr_slave_1: entered allmulticast mode
[  160.247339][ T8232] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  160.263732][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'.
[  160.271710][ T8232] IPVS: Error joining to the multicast group
[  160.281178][ T8235] netlink: 332 bytes leftover after parsing attributes in process `syz.3.489'.
[  160.284208][ T8235] netlink: 96 bytes leftover after parsing attributes in process `syz.3.489'.
[  160.286966][ T8235] netlink: 40 bytes leftover after parsing attributes in process `syz.3.489'.
[  160.297477][ T8232] team_slave_0: entered promiscuous mode
[  160.300123][ T8232] team_slave_1: entered promiscuous mode
[  160.304682][ T8232] vlan2: entered promiscuous mode
[  160.306371][ T8232] team0: entered promiscuous mode
[  160.337411][ T8235] netlink: 32 bytes leftover after parsing attributes in process `syz.3.489'.
[  160.695582][ T8257] lo speed is unknown, defaulting to 1000
[  161.072404][ T8260] lo speed is unknown, defaulting to 1000
[  161.500478][ T8264] lo speed is unknown, defaulting to 1000
[  161.531243][ T8273] netlink: 'syz.3.497': attribute type 1 has an invalid length.
[  161.885443][ T8282] lo speed is unknown, defaulting to 1000
[  161.888925][ T8288] netlink: 'syz.2.498': attribute type 3 has an invalid length.
[  161.908137][ T8288] netlink: 'syz.2.498': attribute type 1 has an invalid length.
[  161.910491][ T8288] __nla_validate_parse: 2 callbacks suppressed
[  161.910504][ T8288] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.498'.
[  162.367447][ T8300] netlink: 'syz.4.501': attribute type 2 has an invalid length.
[  162.390522][ T8300] k*]: entered promiscuous mode
[  162.423125][ T8300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.429090][  T976] lo speed is unknown, defaulting to 1000
[  162.501561][ T8300] veth0_to_team: entered promiscuous mode
[  162.505339][ T8300] veth0_to_team: entered allmulticast mode
[  162.526666][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'.
[  162.724918][ T1091] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  162.934291][ T8324] lo speed is unknown, defaulting to 1000
[  163.243473][ T8344] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.509'.
[  163.261149][ T8344] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  163.467986][ T8339] bond5: entered promiscuous mode
[  163.480804][ T8339] bond5: entered allmulticast mode
[  163.499181][ T8339] 8021q: adding VLAN 0 to HW filter on device bond5
[  163.668851][ T8352] lo speed is unknown, defaulting to 1000
[  163.972941][ T8371] lo speed is unknown, defaulting to 1000
[  164.189843][ T8380] bridge1: entered allmulticast mode
[  164.757589][ T8401] netlink: 40 bytes leftover after parsing attributes in process `syz.4.521'.
[  164.799178][ T8401] netlink: 32 bytes leftover after parsing attributes in process `syz.4.521'.
[  164.872010][ T8403] lo speed is unknown, defaulting to 1000
[  165.006225][ T8406] macvtap1: entered promiscuous mode
[  165.009844][ T8406] macvtap1: entered allmulticast mode
[  165.016424][ T8406] syz_tun: entered promiscuous mode
[  165.033586][ T8406] syz_tun: entered allmulticast mode
[  165.037185][ T8406] team0: Device macvtap1 failed to register rx_handler
[  165.044006][ T8406] syz_tun: left allmulticast mode
[  165.046661][ T8406] syz_tun: left promiscuous mode
[  165.236284][ T8411] lo speed is unknown, defaulting to 1000
[  165.320112][ T8417] netlink: 9 bytes leftover after parsing attributes in process `syz.4.525'.
[  165.340279][ T8418] dvmrp1: entered allmulticast mode
[  165.349702][ T8417] dvmrp1: left allmulticast mode
[  165.449586][ T5853] Bluetooth: hci1: link tx timeout
[  165.453361][ T5853] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  165.459389][ T5853] Bluetooth: hci1: link tx timeout
[  165.461659][ T5853] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  165.464900][ T5853] Bluetooth: hci1: link tx timeout
[  165.466984][ T5853] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  165.470801][ T5853] Bluetooth: hci1: link tx timeout
[  165.472873][ T5853] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  165.475667][ T5853] Bluetooth: hci1: link tx timeout
[  165.477430][ T5853] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  165.480216][ T5853] Bluetooth: hci1: link tx timeout
[  165.488037][ T5853] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  165.491347][ T5853] Bluetooth: hci1: link tx timeout
[  165.493399][ T5853] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  165.496481][ T5853] Bluetooth: hci1: link tx timeout
[  165.498420][ T5853] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  165.612704][ T8425] lo speed is unknown, defaulting to 1000
[  165.842484][ T8429] lo speed is unknown, defaulting to 1000
[  166.167770][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'.
[  166.507519][ T8449] lo speed is unknown, defaulting to 1000
[  167.044063][ T8480] IPVS: set_ctl: invalid protocol: 255 10.1.1.0:20004
[  167.255744][ T8487] lo speed is unknown, defaulting to 1000
[  167.525112][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  167.703224][ T8496] lo speed is unknown, defaulting to 1000
[  168.070353][ T8507] netlink: 32 bytes leftover after parsing attributes in process `syz.2.546'.
[  168.151862][ T8509] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  168.367034][ T8516] lo speed is unknown, defaulting to 1000
[  168.884368][ T8522] lo speed is unknown, defaulting to 1000
[  169.082629][ T8521] lo speed is unknown, defaulting to 1000
[  169.346606][ T8527] lo speed is unknown, defaulting to 1000
[  169.601347][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  170.475496][ T8535] lo speed is unknown, defaulting to 1000
[  170.508379][ T8539] netlink: 60 bytes leftover after parsing attributes in process `syz.4.551'.
[  170.785622][ T8548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.555'.
[  170.796477][ T8548] netlink: 76 bytes leftover after parsing attributes in process `syz.2.555'.
[  170.922212][ T8553] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.937996][ T8553] batadv0: mtu less than device minimum
[  170.953315][ T8553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  170.958982][ T8553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  170.964426][ T8553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  170.969698][ T8553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  170.974836][ T8553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  170.979917][ T8553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  170.982193][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.553'.
[  170.985360][ T8553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  170.993674][ T8553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  170.998858][ T8553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  171.003931][ T8546] netlink: 428 bytes leftover after parsing attributes in process `syz.4.553'.
[  171.041395][ T8553] batadv_slave_0: entered promiscuous mode
[  171.055710][ T8546] netlink: 32 bytes leftover after parsing attributes in process `syz.4.553'.
[  171.177440][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'.
[  171.177927][ T8554] lo speed is unknown, defaulting to 1000
[  171.651481][ T8564] lo speed is unknown, defaulting to 1000
[  171.851545][ T8573] pim6reg: entered allmulticast mode
[  171.855908][ T8572] pim6reg: left allmulticast mode
[  172.111310][ T8580] lo speed is unknown, defaulting to 1000
[  174.216231][ T8587] pim6reg1: entered promiscuous mode
[  174.219904][ T8587] pim6reg1: entered allmulticast mode
[  174.266775][ T8583] lo speed is unknown, defaulting to 1000
[  174.568841][ T8600] delete_channel: no stack
[  174.709282][ T8609] lo speed is unknown, defaulting to 1000
[  175.169638][ T8620] lo speed is unknown, defaulting to 1000
[  175.613347][   T61] block nbd0: Possible stuck request ffff888020cf0000: control (read@0,1024B). Runtime 90 seconds
[  175.618171][   T61] block nbd0: Possible stuck request ffff888020cf0200: control (read@1024,1024B). Runtime 90 seconds
[  175.623885][   T61] block nbd0: Possible stuck request ffff888020cf0400: control (read@2048,1024B). Runtime 90 seconds
[  175.628842][   T61] block nbd0: Possible stuck request ffff888020cf0600: control (read@3072,1024B). Runtime 90 seconds
[  175.713159][ T8628] lo speed is unknown, defaulting to 1000
[  175.774273][ T8629] ieee802154 phy1 wpan1: encryption failed: -90
[  176.527202][ T8636] lo speed is unknown, defaulting to 1000
[  176.923227][ T8634] lo speed is unknown, defaulting to 1000
[  177.096068][ T8645] netlink: 128 bytes leftover after parsing attributes in process `syz.2.574'.
[  177.102898][ T8645] netlink: 80 bytes leftover after parsing attributes in process `syz.2.574'.
[  177.179227][ T8645] lo speed is unknown, defaulting to 1000
[  177.597116][ T8655] lo speed is unknown, defaulting to 1000
[  177.869820][ T8659] lo speed is unknown, defaulting to 1000
[  178.208083][ T8667] lo speed is unknown, defaulting to 1000
[  178.464492][ T8674] lo speed is unknown, defaulting to 1000
[  179.375923][ T8687] lo speed is unknown, defaulting to 1000
[  179.920245][ T8697] lo speed is unknown, defaulting to 1000
[  180.166206][   T55] block nbd1: Receive control failed (result -104)
[  180.181830][ T8712] lo speed is unknown, defaulting to 1000
[  181.286349][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  182.678996][ T8720] lo speed is unknown, defaulting to 1000
[  183.058831][ T8730] lo speed is unknown, defaulting to 1000
[  183.350114][ T8737] lo speed is unknown, defaulting to 1000
[  183.791334][ T8743] lo speed is unknown, defaulting to 1000
[  184.207700][ T8755] lo speed is unknown, defaulting to 1000
[  184.490829][ T8758] lo speed is unknown, defaulting to 1000
[  184.683967][ T8773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.597'.
[  184.763853][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'.
[  184.868995][ T8776] lo speed is unknown, defaulting to 1000
[  185.877191][ T8804] lo speed is unknown, defaulting to 1000
[  186.058391][ T8806] lo speed is unknown, defaulting to 1000
[  186.337232][ T8811] lo speed is unknown, defaulting to 1000
[  186.634989][ T8825] xt_policy: too many policy elements
[  186.714429][ T8823] lo speed is unknown, defaulting to 1000
[  186.880940][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  187.191425][ T8831] netlink: 27 bytes leftover after parsing attributes in process `syz.3.612'.
[  187.318879][ T8831] tap0: tun_chr_ioctl cmd 1074025676
[  187.323391][ T8831] tap0: owner set to 0
[  187.619134][ T8843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.615'.
[  187.669570][ T8843] lo speed is unknown, defaulting to 1000
[  188.066157][ T8851] lo speed is unknown, defaulting to 1000
[  188.821694][ T8870] lo speed is unknown, defaulting to 1000
[  189.207459][ T8878] lo speed is unknown, defaulting to 1000
[  189.761801][ T8888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.624'.
[  189.970930][ T8905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.627'.
[  190.019218][ T8899] netlink: 'syz.2.626': attribute type 2 has an invalid length.
[  190.062538][ T8899] lo speed is unknown, defaulting to 1000
[  190.385013][ T8919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.631'.
[  190.390192][ T8919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.631'.
[  190.409819][ T8921] tap0: tun_chr_ioctl cmd 1074025676
[  190.412520][ T8921] tap0: owner set to 0
[  190.436559][ T8919] netlink: 'syz.3.631': attribute type 1 has an invalid length.
[  190.538579][ T8928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.635'.
[  190.584006][ T8929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.633'.
[  190.604340][ T8929] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  190.632147][ T8930] lo speed is unknown, defaulting to 1000
[  190.674194][ T8934] netlink: 176 bytes leftover after parsing attributes in process `syz.3.637'.
[  190.838670][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.640'.
[  191.191607][ T8942] lo speed is unknown, defaulting to 1000
[  191.439625][ T8952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'.
[  191.505863][ T8952] lo speed is unknown, defaulting to 1000
[  191.689248][ T8948] lo speed is unknown, defaulting to 1000
[  192.111199][ T8966] lo speed is unknown, defaulting to 1000
[  192.367470][ T8964] lo speed is unknown, defaulting to 1000
[  192.826337][ T8991] lo speed is unknown, defaulting to 1000
[  193.051167][ T8994] lo speed is unknown, defaulting to 1000
[  193.671444][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'.
[  193.866399][ T9036] batman_adv: batadv0: Adding interface: dummy0
[  193.872133][ T9036] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.893815][ T9036] batman_adv: batadv0: Interface activated: dummy0
[  193.908808][ T9033] net_ratelimit: 10 callbacks suppressed
[  193.908824][ T9033] batadv0: mtu less than device minimum
[  193.917527][ T9033] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  193.922414][ T9033] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  193.927365][ T9033] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  193.931998][ T9033] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  193.936597][ T9033] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  193.941465][ T9033] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  193.945740][ T9033] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  193.950441][ T9033] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  193.955625][ T9033] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  194.168504][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.343577][ T9041] lo speed is unknown, defaulting to 1000
[  195.164478][ T9064] lo speed is unknown, defaulting to 1000
[  195.432723][ T9067] rdma_rxe: rxe_newlink: failed to add lo
[  195.741500][ T9089] netlink: 'syz.3.665': attribute type 1 has an invalid length.
[  195.744963][ T9082] lo speed is unknown, defaulting to 1000
[  195.781985][ T9089] 8021q: adding VLAN 0 to HW filter on device bond4
[  195.852256][ T9089] veth5: entered promiscuous mode
[  195.862169][ T9089] bond4: (slave veth5): Enslaving as an active interface with an up link
[  195.976572][ T9099] __nla_validate_parse: 1 callbacks suppressed
[  195.976590][ T9099] netlink: 32 bytes leftover after parsing attributes in process `syz.3.667'.
[  196.077186][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.667'.
[  196.182756][ T9099] bond5 (unregistering): Released all slaves
[  196.373873][ T9106] lo speed is unknown, defaulting to 1000
[  196.721197][ T9110] lo speed is unknown, defaulting to 1000
[  196.741531][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'.
[  196.861277][ T9119] lo speed is unknown, defaulting to 1000
[  197.672394][ T9139] netlink: 'syz.2.674': attribute type 1 has an invalid length.
[  197.683443][ T9140] netlink: 32 bytes leftover after parsing attributes in process `syz.4.675'.
[  197.804607][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.675'.
[  197.938184][ T9140] bond3 (unregistering): Released all slaves
[  197.957661][ T9143] lo speed is unknown, defaulting to 1000
[  198.157059][ T9147] lo speed is unknown, defaulting to 1000
[  198.377354][ T9159] netlink: 32 bytes leftover after parsing attributes in process `syz.4.678'.
[  198.386406][ T9159] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  198.476118][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.680'.
[  198.480262][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'.
[  198.517111][ T9163] netlink: 80 bytes leftover after parsing attributes in process `syz.2.679'.
[  198.545976][ T9163] lo speed is unknown, defaulting to 1000
[  198.770801][ T9172] netlink: 'syz.3.682': attribute type 1 has an invalid length.
[  198.896286][ T9170] lo speed is unknown, defaulting to 1000
[  199.183178][ T9172] lo speed is unknown, defaulting to 1000
[  199.416976][ T9181] lo speed is unknown, defaulting to 1000
[  199.873983][ T9192] lo speed is unknown, defaulting to 1000
[  200.514832][ T9197] lo speed is unknown, defaulting to 1000
[  200.589211][ T9201] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.687210][ T9201] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.809367][ T9201] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.884287][ T9201] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.968390][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'.
[  201.026903][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.689'.
[  201.122134][ T9210] geneve2: entered promiscuous mode
[  201.175861][ T9207] lo speed is unknown, defaulting to 1000
[  201.372976][ T5854] Bluetooth: hci0: command 0x0406 tx timeout
[  201.375351][ T5854] Bluetooth: hci2: command 0x0419 tx timeout
[  201.382329][ T5974] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.393453][ T5974] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.396879][ T5974] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.400211][ T5974] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.589192][ T9219] lo speed is unknown, defaulting to 1000
[  201.908788][ T9218] lo speed is unknown, defaulting to 1000
[  201.931067][ T9233] netlink: 92 bytes leftover after parsing attributes in process `syz.3.695'.
[  201.934360][ T9233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.695'.
[  202.149045][ T9237] lo speed is unknown, defaulting to 1000
[  203.212593][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.698'.
[  203.622642][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'.
[  203.627899][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.706'.
[  203.716476][ T9278] lo speed is unknown, defaulting to 1000
[  203.836099][ T9289] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.708'.
[  204.068516][ T9297] netlink: 160 bytes leftover after parsing attributes in process `syz.2.710'.
[  204.078024][ T9293] lo speed is unknown, defaulting to 1000
[  204.086156][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.710'.
[  205.690922][   T61] block nbd0: Possible stuck request ffff888020cf0000: control (read@0,1024B). Runtime 120 seconds
[  205.695201][   T61] block nbd0: Possible stuck request ffff888020cf0200: control (read@1024,1024B). Runtime 120 seconds
[  205.699385][   T61] block nbd0: Possible stuck request ffff888020cf0400: control (read@2048,1024B). Runtime 120 seconds
[  205.703812][   T61] block nbd0: Possible stuck request ffff888020cf0600: control (read@3072,1024B). Runtime 120 seconds
[  205.820047][ T9297] lo speed is unknown, defaulting to 1000
[  206.216655][ T9308] lo speed is unknown, defaulting to 1000
[  206.556728][ T9314] lo speed is unknown, defaulting to 1000
[  206.898299][ T9324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.714'.
[  207.904697][ T9343] lo speed is unknown, defaulting to 1000
[  208.123230][ T9350] netlink: 56 bytes leftover after parsing attributes in process `syz.3.720'.
[  208.147804][ T9350] netlink: 80 bytes leftover after parsing attributes in process `syz.3.720'.
[  208.210050][ T9350] lo speed is unknown, defaulting to 1000
[  208.896162][ T9365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.724'.
[  210.315190][ T9364] lo speed is unknown, defaulting to 1000
[  210.519673][ T9373] net_ratelimit: 11 callbacks suppressed
[  210.519679][ T9373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  210.529674][ T9354] lo speed is unknown, defaulting to 1000
[  210.679854][ T9372] rdma_rxe: rxe_newlink: failed to add lo
[  211.034391][ T9376] lo speed is unknown, defaulting to 1000
[  211.087114][ T9377] netlink: 'syz.2.727': attribute type 11 has an invalid length.
[  211.530335][ T9386] lo speed is unknown, defaulting to 1000
[  212.143516][ T9396] lo speed is unknown, defaulting to 1000
[  213.665267][ T9399] lo speed is unknown, defaulting to 1000
[  213.734698][ T9407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.733'.
[  213.841206][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.734'.
[  213.869391][ T9409] netlink: 'syz.4.734': attribute type 1 has an invalid length.
[  213.873547][ T9409] netlink: 'syz.4.734': attribute type 1 has an invalid length.
[  213.950893][ T9411] lo speed is unknown, defaulting to 1000
[  214.650232][ T9422] lo speed is unknown, defaulting to 1000
[  214.858287][ T9434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.741'.
[  214.911887][ T9435] netlink: 32 bytes leftover after parsing attributes in process `syz.3.741'.
[  215.053334][ T9425] lo speed is unknown, defaulting to 1000
[  215.337080][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.743'.
[  215.443279][ T9456] netlink: 'syz.3.743': attribute type 1 has an invalid length.
[  215.446925][ T9456] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.743'.
[  215.773330][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'.
[  215.788814][ T9474] lo speed is unknown, defaulting to 1000
[  215.945407][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'.
[  215.964041][ T9467] lo speed is unknown, defaulting to 1000
[  216.155165][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.752'.
[  216.179444][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.752'.
[  216.272814][ T9492] lo speed is unknown, defaulting to 1000
[  216.623136][ T9498] lo speed is unknown, defaulting to 1000
[  218.562935][ T9513] lo speed is unknown, defaulting to 1000
[  218.793889][ T9520] netlink: 'syz.2.758': attribute type 1 has an invalid length.
[  218.873213][ T9520] 8021q: adding VLAN 0 to HW filter on device bond6
[  219.026340][ T9521] bond6: (slave veth3): Enslaving as an active interface with a down link
[  219.060846][ T9520] macvlan4: entered promiscuous mode
[  219.063212][ T9520] macvlan4: entered allmulticast mode
[  219.066257][ T9520] bond6: entered promiscuous mode
[  219.068980][ T9520] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  219.072486][ T9520] bond6: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  219.079296][ T9520] bond6: left promiscuous mode
[  219.345102][   T33] audit: type=1800 audit(1757377149.735:2): pid=9527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.759" name="memory.events" dev="tmpfs" ino=1393 res=0 errno=0
[  219.448628][ T9525] lo speed is unknown, defaulting to 1000
[  219.875899][ T9529] lo speed is unknown, defaulting to 1000
[  220.004830][ T9540] netlink: 14 bytes leftover after parsing attributes in process `syz.4.762'.
[  220.008639][ T9540] batman_adv: batadv0: Interface deactivated: dummy0
[  220.033086][ T9540] batman_adv: batadv0: Removing interface: dummy0
[  220.082889][ T9542] team0: entered promiscuous mode
[  220.085529][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'.
[  220.116391][ T9542] team0 (unregistering): left promiscuous mode
[  220.339924][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.766'.
[  220.734546][ T9555] lo speed is unknown, defaulting to 1000
[  220.997892][ T9562] lo speed is unknown, defaulting to 1000
[  221.156374][ T9570] netlink: 'syz.3.771': attribute type 1 has an invalid length.
[  221.159647][ T9570] NCSI netlink: No device for ifindex 0
[  221.588023][ T9577] lo speed is unknown, defaulting to 1000
[  222.344506][ T9585] lo speed is unknown, defaulting to 1000
[  222.376546][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'.
[  222.476385][ T9593] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  222.481464][ T8740] bond0: (slave bond_slave_0): interface is now down
[  222.484386][ T8740] bond0: (slave bond_slave_1): interface is now down
[  222.522357][ T8740] bond0: (slave bond_slave_0): interface is now down
[  222.525105][ T8740] bond0: (slave bond_slave_1): interface is now down
[  222.541306][ T8740] bond0: (slave bond_slave_0): interface is now down
[  222.546887][ T8740] bond0: (slave bond_slave_1): interface is now down
[  222.580844][ T8740] bond0: (slave bond_slave_0): interface is now down
[  222.583579][ T8740] bond0: (slave bond_slave_1): interface is now down
[  222.606934][ T5880] bond0: (slave bond_slave_0): interface is now down
[  222.610263][ T5880] bond0: (slave bond_slave_1): interface is now down
[  222.643343][ T5880] bond0: (slave bond_slave_0): interface is now down
[  222.647681][ T5880] bond0: (slave bond_slave_1): interface is now down
[  222.672649][ T8740] bond0: (slave bond_slave_0): interface is now down
[  222.675184][ T8740] bond0: (slave bond_slave_1): interface is now down
[  222.691471][ T5716] bond0: (slave bond_slave_0): interface is now down
[  222.694247][ T5716] bond0: (slave bond_slave_1): interface is now down
[  222.711124][ T8740] bond0: (slave bond_slave_0): interface is now down
[  222.713713][ T8740] bond0: (slave bond_slave_1): interface is now down
[  222.732308][ T5716] bond0: (slave bond_slave_0): interface is now down
[  222.734518][ T5716] bond0: (slave bond_slave_1): interface is now down
[  222.760993][ T5716] bond0: (slave bond_slave_0): interface is now down
[  222.763590][ T5716] bond0: (slave bond_slave_1): interface is now down
[  222.794621][ T5716] bond0: (slave bond_slave_0): interface is now down
[  222.799188][ T5716] bond0: (slave bond_slave_1): interface is now down
[  222.828451][ T5716] bond0: now running without any active interface!
[  223.157757][ T9629] netlink: 48 bytes leftover after parsing attributes in process `syz.4.785'.
[  223.427371][ T9641] lo speed is unknown, defaulting to 1000
[  223.472241][ T9645] netlink: 'syz.4.787': attribute type 1 has an invalid length.
[  223.740292][ T9648] lo speed is unknown, defaulting to 1000
[  224.025847][ T9659] lo speed is unknown, defaulting to 1000
[  224.353127][ T9665] lo speed is unknown, defaulting to 1000
[  224.672473][ T9678] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.867940][ T9678] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.939912][ T9678] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.971178][ T9670] lo speed is unknown, defaulting to 1000
[  225.005508][ T9678] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.128594][ T8740] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.234215][ T5716] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.395534][ T8740] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.483924][ T8740] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.906147][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.798'.
[  226.119639][ T9693] lo speed is unknown, defaulting to 1000
[  226.784968][ T9716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.805'.
[  226.909257][ T9718] lo speed is unknown, defaulting to 1000
[  226.939206][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'.
[  226.947636][ T9721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.807'.
[  227.068319][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'.
[  227.130017][ T9733] lo speed is unknown, defaulting to 1000
[  227.316940][ T9743] netlink: 32 bytes leftover after parsing attributes in process `syz.3.812'.
[  227.383126][ T9743] bond5 (unregistering): Released all slaves
[  227.660001][ T9748] lo speed is unknown, defaulting to 1000
[  228.137836][ T9763] batman_adv: batadv0: Interface deactivated: dummy0
[  228.140556][ T9763] batman_adv: batadv0: Removing interface: dummy0
[  228.149024][ T9763] bridge_slave_0: left allmulticast mode
[  228.161069][ T9763] bridge_slave_0: left promiscuous mode
[  228.163369][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.164079][ T9765] netlink: 32 bytes leftover after parsing attributes in process `syz.2.820'.
[  228.178696][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.189259][ T9763] bond0: (slave bond_slave_0): Releasing backup interface
[  228.215470][ T9763] bond0: (slave bond_slave_1): Releasing backup interface
[  228.228232][ T9763] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.234876][ T9763] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.243705][ T9763] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.246480][ T9763] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.253374][ T9763] bond0: (slave wlan1): Releasing backup interface
[  228.259732][ T9763] bond1: (slave geneve2): Releasing active interface
[  228.263033][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.822'.
[  228.274512][ T9763] bond4: (slave veth5): Releasing backup interface
[  228.347298][ T9771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.822'.
[  228.370098][ T9771] lo speed is unknown, defaulting to 1000
[  228.477361][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'.
[  228.679684][ T9783] lo speed is unknown, defaulting to 1000
[  228.872561][ T9779] lo speed is unknown, defaulting to 1000
[  229.256370][ T9792] lo speed is unknown, defaulting to 1000
[  230.267968][ T9808] lo speed is unknown, defaulting to 1000
[  230.720539][ T9811] lo speed is unknown, defaulting to 1000
[  231.345434][ T9818] lo speed is unknown, defaulting to 1000
[  231.376401][ T9823] __nla_validate_parse: 1 callbacks suppressed
[  231.376419][ T9823] netlink: 32 bytes leftover after parsing attributes in process `syz.3.830'.
[  231.752211][ T9828] lo speed is unknown, defaulting to 1000
[  231.927490][ T9839] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.834'.
[  231.947665][ T9839] netlink: 'syz.3.834': attribute type 10 has an invalid length.
[  231.958750][ T9839] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  232.446987][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'.
[  232.767877][ T9860] netlink: 'syz.3.839': attribute type 1 has an invalid length.
[  232.826731][ T9860] bond6: entered promiscuous mode
[  232.828913][ T9860] bond6: entered allmulticast mode
[  232.845087][ T9862] bridge4: entered promiscuous mode
[  232.847628][ T9862] bridge4: entered allmulticast mode
[  232.855964][ T9862] bond6: (slave bridge4): making interface the new active one
[  232.863964][ T9862] bond6: (slave bridge4): Enslaving as an active interface with an up link
[  232.899120][ T9860] tipc: Started in network mode
[  232.902993][ T9860] tipc: Node identity 080211000001, cluster identity 4711
[  232.905581][ T9860] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.919544][ T9860] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  232.924688][ T9860] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  232.974233][ T9860] tipc: Resetting bearer <eth:syzkaller0>
[  233.028841][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'.
[  233.380343][ T9873] lo speed is unknown, defaulting to 1000
[  233.905433][ T9893] lo speed is unknown, defaulting to 1000
[  233.971240][ T5900] tipc: Node number set to 134418688
[  234.045496][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'.
[  234.213420][ T9904] lo speed is unknown, defaulting to 1000
[  234.295200][ T9911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.854'.
[  234.384691][ T9911] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  234.411279][ T9911] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  234.455212][ T9913] macvlan3: entered promiscuous mode
[  234.456878][ T9913] macvlan3: entered allmulticast mode
[  234.459025][ T9913] bond5: (slave macvlan3): Error -98 calling set_mac_address
[  234.821297][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'.
[  235.007455][ T9934] lo speed is unknown, defaulting to 1000
[  235.298376][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'.
[  235.311057][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.861'.
[  235.536205][ T9946] netlink: 16 bytes leftover after parsing attributes in process `syz.2.863'.
[  235.540146][ T9946] 8021q: VLANs not supported on gre0
[  235.615364][ T9950] lo speed is unknown, defaulting to 1000
[  235.769271][   T61] block nbd0: Possible stuck request ffff888020cf0000: control (read@0,1024B). Runtime 150 seconds
[  235.777361][   T61] block nbd0: Possible stuck request ffff888020cf0200: control (read@1024,1024B). Runtime 150 seconds
[  235.783518][   T61] block nbd0: Possible stuck request ffff888020cf0400: control (read@2048,1024B). Runtime 150 seconds
[  235.787817][   T61] block nbd0: Possible stuck request ffff888020cf0600: control (read@3072,1024B). Runtime 150 seconds
[  236.006481][ T9971] lo speed is unknown, defaulting to 1000
[  236.306646][ T9978] lo speed is unknown, defaulting to 1000
[  236.378419][ T9972] openvswitch: netlink: Flow actions attr not present in new flow.
[  236.540235][ T9988] lo speed is unknown, defaulting to 1000
[  236.812425][ T9997] netlink: 'syz.3.877': attribute type 1 has an invalid length.
[  237.065911][T10007] __nla_validate_parse: 3 callbacks suppressed
[  237.065926][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'.
[  237.104186][T10007] gretap0: entered promiscuous mode
[  237.166168][T10010] lo speed is unknown, defaulting to 1000
[  237.399961][T10016] lo speed is unknown, defaulting to 1000
[  237.495322][T10022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.885'.
[  237.615313][T10024] lo speed is unknown, defaulting to 1000
[  238.507768][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.892'.
[  238.772368][T10054] lo speed is unknown, defaulting to 1000
[  238.985249][T10061] netlink: 40 bytes leftover after parsing attributes in process `syz.3.896'.
[  239.120822][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'.
[  239.477565][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'.
[  239.549847][T10061] lo speed is unknown, defaulting to 1000
[  239.816986][T10084] lo speed is unknown, defaulting to 1000
[  240.552391][T10090] netlink: 32 bytes leftover after parsing attributes in process `syz.2.902'.
[  240.917951][T10095] lo speed is unknown, defaulting to 1000
[  241.444042][T10105] lo speed is unknown, defaulting to 1000
[  241.687558][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  241.743176][T10116] netlink: 32 bytes leftover after parsing attributes in process `syz.4.909'.
[  241.894073][T10113] lo speed is unknown, defaulting to 1000
[  242.167047][T10128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.912'.
[  242.398403][T10134] lo speed is unknown, defaulting to 1000
[  242.869281][T10148] lo speed is unknown, defaulting to 1000
[  242.899378][T10151] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  243.021009][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'.
[  243.033256][T10154] lo speed is unknown, defaulting to 1000
[  243.443210][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.921'.
[  243.446071][T10162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.921'.
[  243.448779][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.921'.
[  243.478403][T10162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.921'.
[  243.498572][T10162] netlink: 'syz.3.921': attribute type 6 has an invalid length.
[  243.525077][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'.
[  244.497202][T10209] lo speed is unknown, defaulting to 1000
[  245.035458][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.936'.
[  245.045349][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.936'.
[  245.080402][T10227] lo speed is unknown, defaulting to 1000
[  245.296120][T10237] lo speed is unknown, defaulting to 1000
[  245.524478][T10240] lo speed is unknown, defaulting to 1000
[  246.171897][T10258] lo speed is unknown, defaulting to 1000
[  246.354879][T10260] lo speed is unknown, defaulting to 1000
[  246.757011][T10281] lo speed is unknown, defaulting to 1000
[  247.586905][T10287] can: request_module (can-proto-0) failed.
[  247.587386][T10289] openvswitch: netlink: IP tunnel dst address not specified
[  249.455370][T10295] lo speed is unknown, defaulting to 1000
[  249.916684][T10318] lo speed is unknown, defaulting to 1000
[  250.102239][T10324] lo speed is unknown, defaulting to 1000
[  250.381586][T10330] lo speed is unknown, defaulting to 1000
[  250.800007][T10345] lo speed is unknown, defaulting to 1000
[  250.828399][T10347] tap1: tun_chr_ioctl cmd 1074025681
[  250.844788][T10347] lo speed is unknown, defaulting to 1000
[  251.150360][T10351] lo speed is unknown, defaulting to 1000
[  251.507783][T10361] netlink: 32 bytes leftover after parsing attributes in process `syz.3.968'.
[  251.926956][T10382] netlink: 44 bytes leftover after parsing attributes in process `syz.4.972'.
[  251.976182][T10383] lo speed is unknown, defaulting to 1000
[  255.065894][ T5294] udevd[5294]: worker [5860] /devices/virtual/block/nbd0 is taking a long time
[  255.614779][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  256.735743][T10386] lo speed is unknown, defaulting to 1000
[  257.479371][T10400] netlink: 32 bytes leftover after parsing attributes in process `syz.4.976'.
[  257.878607][T10411] lo speed is unknown, defaulting to 1000
[  258.228536][T10421] lo speed is unknown, defaulting to 1000
[  258.352484][T10430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.981'.
[  258.764043][T10435] lo speed is unknown, defaulting to 1000
[  259.354289][T10459] lo speed is unknown, defaulting to 1000
[  259.490519][T10464] netlink: 92 bytes leftover after parsing attributes in process `syz.2.989'.
[  259.494272][T10464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.989'.
[  259.497797][T10464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.989'.
[  259.616972][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'.
[  259.635794][T10472] : entered promiscuous mode
[  259.713206][T10474] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.733609][T10475] netlink: 'syz.4.992': attribute type 11 has an invalid length.
[  259.760450][T10464] lo speed is unknown, defaulting to 1000
[  259.816768][T10474] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.878046][T10474] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.956014][T10474] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.279863][   T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.334470][   T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.379254][ T8740] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.394960][ T8740] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.464347][T10480] syz.2.994 uses old SIOCAX25GETINFO
[  260.471647][T10480] netlink: 'syz.2.994': attribute type 5 has an invalid length.
[  260.490446][T10482] pim6reg99999999: entered allmulticast mode
[  260.596719][   T10] IPVS: starting estimator thread 0...
[  260.603283][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.997'.
[  260.694505][T10491] IPVS: using max 62 ests per chain, 148800 per kthread
[  260.751190][T10495] lo speed is unknown, defaulting to 1000
[  260.793539][T10498] netlink: 'syz.3.999': attribute type 4 has an invalid length.
[  261.143443][T10514] lo speed is unknown, defaulting to 1000
[  261.614118][T10523] lo speed is unknown, defaulting to 1000
[  262.331568][T10543] lo speed is unknown, defaulting to 1000
[  262.648843][T10548] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1009'.
[  262.798372][T10553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.859635][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'.
[  265.432376][ T5294] udevd[5294]: worker [5860] /devices/virtual/block/nbd0 timeout; kill it
[  265.440952][ T5294] udevd[5294]: seq 12489 '/devices/virtual/block/nbd0' killed
[  265.822637][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'.
[  265.850257][   T61] block nbd0: Possible stuck request ffff888020cf0000: control (read@0,1024B). Runtime 180 seconds
[  265.854917][   T61] block nbd0: Possible stuck request ffff888020cf0200: control (read@1024,1024B). Runtime 180 seconds
[  265.859930][   T61] block nbd0: Possible stuck request ffff888020cf0400: control (read@2048,1024B). Runtime 180 seconds
[  265.868581][   T61] block nbd0: Possible stuck request ffff888020cf0600: control (read@3072,1024B). Runtime 180 seconds
[  266.045163][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1018'.
[  266.076705][T10572] lo speed is unknown, defaulting to 1000
[  266.286586][T10581] netlink: 'syz.4.1020': attribute type 5 has an invalid length.
[  266.297031][T10581] bridge0: entered promiscuous mode
[  266.391217][T10586] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1021'.
[  266.619762][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1023'.
[  269.394920][T10592] bond0: (slave dummy0): Releasing backup interface
[  269.628187][T10599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1025'.
[  269.826349][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'.
[  269.859562][T10611] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1029'.
[  269.899549][T10609] lo speed is unknown, defaulting to 1000
[  270.046584][T10621] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1032'.
[  270.069477][T10620] 8021q: adding VLAN 0 to HW filter on device bond9
[  270.221173][T10634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1034'.
[  270.227356][T10633] lo speed is unknown, defaulting to 1000
[  270.229958][T10637] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1036'.
[  270.300294][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1037'.
[  270.329223][T10642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1037'.
[  270.383839][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'.
[  270.477238][T10650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.780969][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'.
[  271.005843][T10663] lo speed is unknown, defaulting to 1000
[  271.302693][T10673] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.338572][T10673] bond0: (slave rose0): Enslaving as an active interface with an up link
[  274.010247][T10689] netlink: 'syz.4.1050': attribute type 23 has an invalid length.
[  274.059470][T10687] lo speed is unknown, defaulting to 1000
[  274.324724][T10697] lo speed is unknown, defaulting to 1000
[  274.548953][T10708] lo speed is unknown, defaulting to 1000
[  274.705454][T10724] lo speed is unknown, defaulting to 1000
[  274.897783][T10732] __nla_validate_parse: 2 callbacks suppressed
[  274.897796][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'.
[  278.004204][T10750] lo speed is unknown, defaulting to 1000
[  278.075822][T10753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1063'.
[  278.092925][T10753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1063'.
[  278.224172][T10759] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  278.228376][T10759] syzkaller0: entered promiscuous mode
[  278.230527][T10759] syzkaller0: entered allmulticast mode
[  278.261240][T10759] tipc: Resetting bearer <eth:syzkaller0>
[  278.300334][T10758] tipc: Resetting bearer <eth:syzkaller0>
[  278.332806][T10758] tipc: Disabling bearer <eth:syzkaller0>
[  278.353163][T10768] netlink: 'syz.2.1067': attribute type 1 has an invalid length.
[  278.382289][T10768] 8021q: adding VLAN 0 to HW filter on device bond9
[  278.448553][T10768] ipvlan0: entered allmulticast mode
[  278.460802][T10768] bond9: entered allmulticast mode
[  278.481224][T10771] can: request_module (can-proto-0) failed.
[  278.495668][T10771] openvswitch: netlink: IP tunnel dst address not specified
[  278.511869][T10768] bond9: (slave gretap1): making interface the new active one
[  278.516358][T10768] gretap1: entered allmulticast mode
[  278.521802][T10768] bond9: (slave gretap1): Enslaving as an active interface with an up link
[  278.564623][T10768] syz.2.1067 (10768) used greatest stack depth: 18864 bytes left
[  278.647645][T10777] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1070'.
[  278.758063][T10777] lo speed is unknown, defaulting to 1000
[  281.704175][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1072'.
[  281.864543][T10787] lo speed is unknown, defaulting to 1000
[  281.926175][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1073'.
[  282.176176][T10794] syzkaller0: entered promiscuous mode
[  282.178030][T10794] syzkaller0: entered allmulticast mode
[  282.190279][T10792] lo speed is unknown, defaulting to 1000
[  282.417699][T10794] lo speed is unknown, defaulting to 1000
[  282.560463][T10799] lo speed is unknown, defaulting to 1000
[  285.314222][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'.
[  285.354254][T10815] lo speed is unknown, defaulting to 1000
[  285.527689][T10824] lo speed is unknown, defaulting to 1000
[  285.761836][T10827] lo speed is unknown, defaulting to 1000
[  287.027709][T10847] lo speed is unknown, defaulting to 1000
[  287.651223][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'.
[  287.662412][T10867] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1091'.
[  287.942938][T10875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1093'.
[  288.878963][T10889] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  288.938035][T10891] lo speed is unknown, defaulting to 1000
[  289.012241][T10897] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1098'.
[  289.214175][T10893] lo speed is unknown, defaulting to 1000
[  289.272214][T10908] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.1101'.
[  289.292129][T10908] netlink: 'syz.2.1101': attribute type 10 has an invalid length.
[  289.304852][T10908] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  289.974008][T10916] lo speed is unknown, defaulting to 1000
[  290.054167][T10920] ip_vti0: entered promiscuous mode
[  290.056598][T10920] ip_vti0: entered allmulticast mode
[  290.188662][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'.
[  290.398303][T10932] lo speed is unknown, defaulting to 1000
[  290.702177][T10939] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  290.733643][T10934] lo speed is unknown, defaulting to 1000
[  290.786455][T10942] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  290.887433][T10946] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1110'.
[  291.041142][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  291.189622][T10950] lo speed is unknown, defaulting to 1000
[  291.719636][T10965] lo speed is unknown, defaulting to 1000
[  292.149960][T10995] lo speed is unknown, defaulting to 1000
[  292.308336][T10992] lo speed is unknown, defaulting to 1000
[  292.555746][T11001] lo speed is unknown, defaulting to 1000
[  292.989431][T10999] lo speed is unknown, defaulting to 1000
[  293.322387][T11008] lo speed is unknown, defaulting to 1000
[  294.263466][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1128'.
[  294.461158][T11037] lo speed is unknown, defaulting to 1000
[  294.835173][T11045] lo speed is unknown, defaulting to 1000
[  295.133009][T11055] lo speed is unknown, defaulting to 1000
[  295.467023][T11062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1137'.
[  295.483257][T11062] bond0: entered promiscuous mode
[  295.485665][T11062] bond_slave_0: entered promiscuous mode
[  295.488492][T11062] bond_slave_1: entered promiscuous mode
[  295.493139][T11062] bond0: left promiscuous mode
[  295.495408][T11062] bond_slave_0: left promiscuous mode
[  295.498023][T11062] bond_slave_1: left promiscuous mode
[  295.925015][   T61] block nbd0: Possible stuck request ffff888020cf0000: control (read@0,1024B). Runtime 210 seconds
[  295.928538][   T61] block nbd0: Possible stuck request ffff888020cf0200: control (read@1024,1024B). Runtime 210 seconds
[  295.932605][   T61] block nbd0: Possible stuck request ffff888020cf0400: control (read@2048,1024B). Runtime 210 seconds
[  295.936536][   T61] block nbd0: Possible stuck request ffff888020cf0600: control (read@3072,1024B). Runtime 210 seconds
[  297.285630][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'.
[  297.289136][T11070] netlink: 'syz.4.1140': attribute type 5 has an invalid length.
[  297.292636][T11070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1140'.
[  297.367441][T11070] geneve2: entered promiscuous mode
[  297.369450][T11070] geneve2: entered allmulticast mode
[  297.374325][T10746] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  297.380798][T10746] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  297.384003][T10746] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  297.387129][T10746] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  297.693639][T11075] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  297.696431][T11075] tipc: Enabled bearer <udp:syz0>, priority 6
[  297.872459][T11080] lo speed is unknown, defaulting to 1000
[  298.061022][T11090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1145'.
[  298.066908][T11090] netlink: 'syz.2.1145': attribute type 1 has an invalid length.
[  298.115323][T11090] 8021q: adding VLAN 0 to HW filter on device bond10
[  298.387513][T11099] lo speed is unknown, defaulting to 1000
[  298.583413][T11102] lo speed is unknown, defaulting to 1000
[  298.709189][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1149'.
[  298.717509][    C1] vcan0: j1939_session_tx_dat: 0xffff8881079e5000: queue data error: -100
[  298.837152][T11116] netlink: 'syz.3.1152': attribute type 1 has an invalid length.
[  298.861317][T11116] 8021q: adding VLAN 0 to HW filter on device bond8
[  298.929519][T11116] bond8: (slave gretap2): making interface the new active one
[  298.935110][T11116] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  299.593982][T11132] lo speed is unknown, defaulting to 1000
[  299.910415][T11136] bridge0: port 1(batadv1) entered blocking state
[  299.914047][T11136] bridge0: port 1(batadv1) entered disabled state
[  299.919892][T11136] batadv1: entered allmulticast mode
[  299.926894][T11136] batadv1: entered promiscuous mode
[  300.017060][T11144] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1159'.
[  300.242597][T11148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1160'.
[  300.390155][T11154] batman_adv: batadv0: Adding interface: ip6gretap1
[  300.394243][T11154] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.417592][T11154] batman_adv: batadv0: Interface activated: ip6gretap1
[  300.418149][ T5716] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  300.425756][ T5716] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  300.584455][T11161] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1163'.
[  300.641505][T11164] 8021q: adding VLAN 0 to HW filter on device bond11
[  300.693771][T11161] lo speed is unknown, defaulting to 1000
[  300.706193][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'.
[  300.763182][T11173] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1165'.
[  300.935815][T11164] lo speed is unknown, defaulting to 1000
[  303.981953][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1168'.
[  304.070928][T11196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1169'.
[  304.304914][T11205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1172'.
[  304.337953][T11205] lo speed is unknown, defaulting to 1000
[  304.356319][T11207] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  304.567984][T11208] lo speed is unknown, defaulting to 1000
[  305.075936][T11216] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1174'.
[  308.076543][T11224] lo speed is unknown, defaulting to 1000
[  308.218156][T11222] lo speed is unknown, defaulting to 1000
[  308.479530][T11227] lo speed is unknown, defaulting to 1000
[  309.214029][T11234] lo speed is unknown, defaulting to 1000
[  309.260469][T11235] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  309.264816][T11235] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  309.487438][T11239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1179'.
[  309.490915][T11239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1179'.
[  309.494458][T11239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1179'.
[  309.497679][T11239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1179'.
[  309.763569][T11246] lo speed is unknown, defaulting to 1000
[  310.293075][T11257] lo speed is unknown, defaulting to 1000
[  312.302952][T11271] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1188'.
[  312.439240][T11292] netlink: 'syz.4.1192': attribute type 1 has an invalid length.
[  312.490034][T11292] vlan4: entered promiscuous mode
[  312.500382][T11292] macvtap0: entered promiscuous mode
[  312.728181][T11304] nbd: nbd4 already in use
[  312.856591][T11308] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1195'.
[  312.964429][T11299] bridge_slave_1: left promiscuous mode
[  312.967928][T11299] bridge_slave_1: left allmulticast mode
[  313.121243][T11299] veth5: left promiscuous mode
[  313.152873][T11299] bond6: left promiscuous mode
[  313.154786][T11299] bond6: left allmulticast mode
[  313.156974][T11299] bridge4: left promiscuous mode
[  313.158536][T11299] bridge4: left allmulticast mode
[  313.180004][T11299] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  313.216704][ T8740] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.220144][ T8740] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.225791][ T8740] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.229410][ T8740] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.488951][T11324] lo speed is unknown, defaulting to 1000
[  313.506932][T11322] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1199'.
[  313.510506][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'.
[  313.514181][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'.
[  313.711042][T11322] lo speed is unknown, defaulting to 1000
[  314.090302][T11330] lo speed is unknown, defaulting to 1000
[  314.475903][T11339] vlan4: entered promiscuous mode
[  314.995497][T11347] lo speed is unknown, defaulting to 1000
[  315.145815][T11354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1207'.
[  315.186686][T11352] lo speed is unknown, defaulting to 1000
[  315.517888][T11367] lo speed is unknown, defaulting to 1000
[  317.047204][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  317.817449][T11392] lo speed is unknown, defaulting to 1000
[  317.938473][T11395] lo speed is unknown, defaulting to 1000
[  318.185371][T11400] netlink: 'syz.2.1217': attribute type 2 has an invalid length.
[  318.208857][T11400] ave_0: entered promiscuous mode
[  318.249635][T11402] netlink: 'syz.4.1218': attribute type 8 has an invalid length.
[  318.849457][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1221'.
[  318.854828][T11412] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1221'.
[  318.863295][T11412] : renamed from bond_slave_0
[  319.260332][T11418] lo speed is unknown, defaulting to 1000
[  319.911634][T11441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1227'.
[  319.926505][T11441] openvswitch: netlink: Flow key attr not present in new flow.
[  319.947591][T11439] lo speed is unknown, defaulting to 1000
[  320.218579][T11444] lo speed is unknown, defaulting to 1000
[  320.779012][T11454] lo speed is unknown, defaulting to 1000
[  320.863112][T11449] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  321.090712][T11462] lo speed is unknown, defaulting to 1000
[  321.279901][T11465] lo speed is unknown, defaulting to 1000
[  321.530398][T11469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1233'.
[  321.541237][T11469] netlink: 'syz.3.1233': attribute type 7 has an invalid length.
[  321.544417][T11469] netlink: 'syz.3.1233': attribute type 8 has an invalid length.
[  321.547573][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1233'.
[  321.851527][T11472] lo speed is unknown, defaulting to 1000
[  322.072716][T11482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1236'.
[  322.101073][T11482] 8021q: adding VLAN 0 to HW filter on device bond13
[  322.189471][T11483] lo speed is unknown, defaulting to 1000
[  322.342813][T11489] veth9: entered promiscuous mode
[  322.452209][T11492] lo speed is unknown, defaulting to 1000
[  323.159979][T11501] bridge5: entered promiscuous mode
[  323.165363][T11501] bridge5: entered allmulticast mode
[  323.176021][T11501] team0: Port device bridge5 added
[  323.234511][T11503] lo speed is unknown, defaulting to 1000
[  323.709273][T11509] lo speed is unknown, defaulting to 1000
[  324.116045][T11523] lo speed is unknown, defaulting to 1000
[  324.191808][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1245'.
[  324.292531][T11535] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1247'.
[  324.297100][T11535] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1247'.
[  324.388489][T11535] lo speed is unknown, defaulting to 1000
[  324.734564][T11547] lo speed is unknown, defaulting to 1000
[  325.186635][T11558] lo speed is unknown, defaulting to 1000
[  325.365728][T11563] lo speed is unknown, defaulting to 1000
[  325.914224][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'.
[  325.993848][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'.
[  325.996917][T11574] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1256'.
[  326.020794][   T61] block nbd0: Possible stuck request ffff888020cf0000: control (read@0,1024B). Runtime 240 seconds
[  326.024168][   T61] block nbd0: Possible stuck request ffff888020cf0200: control (read@1024,1024B). Runtime 240 seconds
[  326.028250][   T61] block nbd0: Possible stuck request ffff888020cf0400: control (read@2048,1024B). Runtime 240 seconds
[  326.031943][   T61] block nbd0: Possible stuck request ffff888020cf0600: control (read@3072,1024B). Runtime 240 seconds
[  326.058372][T11577] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1257'.
[  326.406745][T11584] lo speed is unknown, defaulting to 1000
[  326.408997][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1262'.
[  326.730683][T11594] lo speed is unknown, defaulting to 1000
[  326.894072][T11601] lo speed is unknown, defaulting to 1000
[  327.047215][T11609] lo speed is unknown, defaulting to 1000
[  328.055049][T11627] lo speed is unknown, defaulting to 1000
[  328.457213][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'.
[  328.463761][T11634] netlink: 'syz.4.1270': attribute type 30 has an invalid length.
[  328.477373][T10746] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  328.482046][T10746] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  328.485699][T10746] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  328.489037][T10746] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  328.740486][T11651] netlink: 'syz.3.1275': attribute type 1 has an invalid length.
[  328.908437][T11651] bond12: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  328.912465][T11655] 8021q: adding VLAN 0 to HW filter on device bond12
[  328.915628][ T5974] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  329.050068][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1275'.
[  329.089194][T11657] bond12 (unregistering): (slave ip6gretap2): Removing an active aggregator
[  329.094714][T11657] bond12 (unregistering): (slave ip6gretap2): Releasing backup interface
[  329.100205][T11657] bond12 (unregistering): Released all slaves
[  329.122657][T11655] gtp0: entered promiscuous mode
[  329.322399][T11670] netlink: 'syz.2.1279': attribute type 1 has an invalid length.
[  329.514197][T11681] netlink: 'syz.4.1282': attribute type 1 has an invalid length.
[  329.517372][T11681] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1282'.
[  329.522504][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1282'.
[  329.525454][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'.
[  329.534012][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1282'.
[  329.539223][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'.
[  329.547863][T11687] gretap2: entered promiscuous mode
[  329.786409][T11703] lo speed is unknown, defaulting to 1000
[  330.811265][T11723] netlink: 'syz.2.1292': attribute type 11 has an invalid length.
[  331.088984][T11736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1295'.
[  331.773094][T11757] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1302'.
[  331.798169][T11757] lo speed is unknown, defaulting to 1000
[  332.049205][T11768] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1303'.
[  332.118828][T11771] lo speed is unknown, defaulting to 1000
[  332.244685][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'.
[  332.467353][T11789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1307'.
[  332.472114][T11788] netlink: 'syz.4.1308': attribute type 2 has an invalid length.
[  332.495842][T11788] netlink: 'syz.4.1308': attribute type 1 has an invalid length.
[  332.557920][T11788] 8021q: adding VLAN 0 to HW filter on device bond14
[  332.633538][T11794] bond14: (slave geneve3): making interface the new active one
[  332.641135][T11794] bond14: (slave geneve3): Enslaving as an active interface with an up link
[  332.661762][T11785] delete_channel: no stack
[  332.825829][T11811] lo speed is unknown, defaulting to 1000
[  333.492686][T11876] lo speed is unknown, defaulting to 1000
[  333.922378][T11879] lo speed is unknown, defaulting to 1000
[  334.139520][T11887] lo speed is unknown, defaulting to 1000
[  336.468371][T11903] lo speed is unknown, defaulting to 1000
[  336.856872][T11915] netlink: 'syz.2.1322': attribute type 83 has an invalid length.
[  336.884978][T11915] lo speed is unknown, defaulting to 1000
[  337.177367][T11930] lo speed is unknown, defaulting to 1000
[  337.609613][T11943] __nla_validate_parse: 2 callbacks suppressed
[  337.609634][T11943] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1328'.
[  337.675841][T11943] lo speed is unknown, defaulting to 1000
[  337.902385][T11952] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  337.930744][T11948] lo speed is unknown, defaulting to 1000
[  338.087303][T11950] lo speed is unknown, defaulting to 1000
[  338.220850][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'.
[  338.291622][T11961] lo speed is unknown, defaulting to 1000
[  338.569496][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'.
[  338.875259][T11979] lo speed is unknown, defaulting to 1000
[  339.205021][T11997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1343'.
[  339.259898][T11997] bond0: (slave dummy0): Releasing backup interface
[  339.490557][T12000] lo speed is unknown, defaulting to 1000
[  339.932136][T12013] lo speed is unknown, defaulting to 1000
[  340.316337][T12012] lo speed is unknown, defaulting to 1000
[  340.520475][T12017] lo speed is unknown, defaulting to 1000
[  340.891590][T12027] lo speed is unknown, defaulting to 1000
[  341.990341][T12044] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1353'.
[  341.994055][T12044] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1353'.
[  341.997662][T12044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1353'.
[  342.006850][T12053] netlink: 'syz.3.1355': attribute type 1 has an invalid length.
[  342.073664][T12053] 8021q: adding VLAN 0 to HW filter on device bond14
[  342.076871][T12055] lo speed is unknown, defaulting to 1000
[  342.086446][T12054] vlan0: entered promiscuous mode
[  342.088117][T12054] bond14: entered promiscuous mode
[  342.096768][T12054] vlan0: entered allmulticast mode
[  342.098934][T12054] bond14: entered allmulticast mode
[  342.101447][T12058] Bluetooth: MGMT ver 1.23
[  342.317607][T12063] lo speed is unknown, defaulting to 1000
[  342.813968][T12068] lo speed is unknown, defaulting to 1000
[  344.788062][T12074] lo speed is unknown, defaulting to 1000
[  345.084656][T12078] lo speed is unknown, defaulting to 1000
[  346.102014][T12093] lo speed is unknown, defaulting to 1000
[  346.112688][T12097] netlink: 'syz.2.1365': attribute type 1 has an invalid length.
[  346.201335][T12097] bond14: (slave gretap3): making interface the new active one
[  346.205387][T12097] bond14: (slave gretap3): Enslaving as an active interface with an up link
[  346.529291][T12116] veth1_to_bond: entered allmulticast mode
[  346.533481][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1369'.
[  346.652430][T12116] veth1_to_bond (unregistering): left allmulticast mode
[  346.755611][T12122] lo speed is unknown, defaulting to 1000
[  347.001275][T12125] lo speed is unknown, defaulting to 1000
[  347.050031][T12122] pim6reg: entered allmulticast mode
[  347.116555][T12127] lo speed is unknown, defaulting to 1000
[  347.247307][T12124] lo speed is unknown, defaulting to 1000
[  347.418785][T12138] lo speed is unknown, defaulting to 1000
[  347.719235][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1378'.
[  348.495596][T12179] lo speed is unknown, defaulting to 1000
[  348.505315][T12180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1383'.
[  349.026136][T12192] lo speed is unknown, defaulting to 1000
[  349.508872][T12193] lo speed is unknown, defaulting to 1000
[  349.707958][T12208] lo speed is unknown, defaulting to 1000
[  350.173381][T12220] lo speed is unknown, defaulting to 1000
[  352.247310][T12242] lo speed is unknown, defaulting to 1000
[  352.342978][T12247] IPv6: sit1: Disabled Multicast RS
[  352.346196][T12247] sit1: entered allmulticast mode
[  352.384689][T12241] lo speed is unknown, defaulting to 1000
[  352.642947][T12251] lo speed is unknown, defaulting to 1000
[  352.755416][T12263] netlink: 'syz.3.1401': attribute type 1 has an invalid length.
[  352.759259][T12263] netlink: 'syz.3.1401': attribute type 2 has an invalid length.
[  352.895968][T12272] vlan1: entered allmulticast mode
[  352.897659][T12272] batadv0: entered allmulticast mode
[  352.926077][T12269] lo speed is unknown, defaulting to 1000
[  353.032750][T12277] veth1_to_bond: entered allmulticast mode
[  353.062455][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1405'.
[  353.110875][T12279] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1405'.
[  353.136073][T12284] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1405'.
[  353.139269][T12279] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1405'.
[  353.271602][T12277] bond0 (unregistering): Released all slaves
[  353.356677][T12282] lo speed is unknown, defaulting to 1000
[  353.369639][T12277] veth1_to_bond: left allmulticast mode
[  353.581560][T12288] lo speed is unknown, defaulting to 1000
[  354.246649][T12294] lo speed is unknown, defaulting to 1000
[  354.566669][ T8740] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  354.608251][T12311] lo speed is unknown, defaulting to 1000
[  354.842966][T12312] lo speed is unknown, defaulting to 1000
[  354.898827][T12330] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1417'.
[  355.150759][T12330] lo speed is unknown, defaulting to 1000
[  355.378592][T12336] netlink: 'syz.4.1418': attribute type 8 has an invalid length.
[  355.714388][T12343] lo speed is unknown, defaulting to 1000
[  355.979631][T12357] lo speed is unknown, defaulting to 1000
[  356.081554][   T61] block nbd0: Possible stuck request ffff888020cf0000: control (read@0,1024B). Runtime 270 seconds
[  356.085787][   T61] block nbd0: Possible stuck request ffff888020cf0200: control (read@1024,1024B). Runtime 270 seconds
[  356.090716][   T61] block nbd0: Possible stuck request ffff888020cf0400: control (read@2048,1024B). Runtime 270 seconds
[  356.094145][   T61] block nbd0: Possible stuck request ffff888020cf0600: control (read@3072,1024B). Runtime 270 seconds
[  356.338948][T12394] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  356.364471][T12396] netlink: 'syz.4.1430': attribute type 1 has an invalid length.
[  356.601825][T12396] lo speed is unknown, defaulting to 1000
[  356.721322][ T5851] Bluetooth: hci1: command 0x0406 tx timeout
[  356.851099][T12418] lo speed is unknown, defaulting to 1000
[  356.923051][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1435'.
[  356.937479][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1434'.
[  356.941565][T12422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1434'.
[  357.118848][T12419] hsr_slave_1 (unregistering): left promiscuous mode
[  357.418583][T12434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1438'.
[  357.428067][T12432] lo speed is unknown, defaulting to 1000
[  357.603733][T12441] lo speed is unknown, defaulting to 1000
[  357.894002][T12453] lo speed is unknown, defaulting to 1000
[  358.293801][T12457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  358.453669][T12465] lo speed is unknown, defaulting to 1000
[  358.458423][T12466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1443'.
[  358.493792][T12466] bond15 (unregistering): Released all slaves
[  358.800865][ T5851] Bluetooth: hci1: command 0x0406 tx timeout
[  358.926220][T12483] vlan5: entered promiscuous mode
[  358.977728][T12483] lo speed is unknown, defaulting to 1000
[  359.067795][T12486] pim6reg99999999: entered allmulticast mode
[  359.477720][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1452'.
[  359.505404][T12507] netlink: 'syz.3.1453': attribute type 1 has an invalid length.
[  359.508565][T12507] netlink: 'syz.3.1453': attribute type 1 has an invalid length.
[  359.645259][T12507] lo speed is unknown, defaulting to 1000
[  360.067767][T12519] lo speed is unknown, defaulting to 1000
[  360.090219][T12520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1455'.
[  360.327999][T12525] lo speed is unknown, defaulting to 1000
[  360.374968][T12533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1458'.
[  360.395915][T12533] bond6: (slave bridge4): Releasing backup interface
[  360.410114][T12533] bond8: (slave gretap2): Releasing active interface
[  360.422790][T12533] batman_adv: batadv0: Removing interface: ip6gretap1
[  360.485829][T12527] lo speed is unknown, defaulting to 1000
[  360.815795][T12538] lo speed is unknown, defaulting to 1000
[  361.394477][T12546] lo speed is unknown, defaulting to 1000
[  361.671330][T12547] lo speed is unknown, defaulting to 1000
[  361.900949][T12550] lo speed is unknown, defaulting to 1000
[  362.165475][T12563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1464'.
[  362.168984][T12563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1464'.
[  362.173812][T12563] netlink: 'syz.2.1464': attribute type 6 has an invalid length.
[  362.182997][T12562] lo speed is unknown, defaulting to 1000
[  362.643046][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1465'.
[  363.040104][T12577] lo speed is unknown, defaulting to 1000
[  363.478519][T12581] lo speed is unknown, defaulting to 1000
[  363.609202][T12588] netlink: 'syz.4.1470': attribute type 1 has an invalid length.
[  363.641407][T12588] bond17: entered promiscuous mode
[  363.644657][T12588] 8021q: adding VLAN 0 to HW filter on device bond17
[  363.650192][T12588] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1470'.
[  363.666215][T12588] batadv1: entered promiscuous mode
[  363.668614][T12588] batadv1: entered allmulticast mode
[  363.674540][T12588] 8021q: adding VLAN 0 to HW filter on device batadv1
[  363.682191][T12588] bond17: (slave batadv1): making interface the new active one
[  363.688148][T12588] bond17: (slave batadv1): Enslaving as an active interface with an up link
[  363.707441][T12583] lo speed is unknown, defaulting to 1000
[  363.840323][T12588] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  363.846658][T12588] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  363.929160][T12597] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1470'.
[  364.612505][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'.
[  364.700488][T12610] lo speed is unknown, defaulting to 1000
[  364.818050][T12615] netlink: 'syz.2.1476': attribute type 2 has an invalid length.
[  364.880422][T12617] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1477'.
[  365.089680][T12621] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1477'.
[  365.105699][T12621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1477'.
[  365.110040][T12628] lo speed is unknown, defaulting to 1000
[  365.246913][T12617] lo speed is unknown, defaulting to 1000
[  365.638218][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1481'.
[  365.662762][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'.
[  365.666202][T12642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1481'.
[  365.829221][T12648] lo speed is unknown, defaulting to 1000
[  366.040193][T12655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1485'.
[  366.043672][T12655] openvswitch: netlink: Flow key attr not present in new flow.
[  366.389338][T12670] lo speed is unknown, defaulting to 1000
[  366.746576][T12673] lo speed is unknown, defaulting to 1000
[  366.948158][T12677] bond18: entered promiscuous mode
[  366.950997][T12677] 8021q: adding VLAN 0 to HW filter on device bond18
[  367.025217][T12675] dvmrp1: entered allmulticast mode
[  367.046699][T12675] dvmrp1: left allmulticast mode
[  367.121020][T12682] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  367.453289][T12704] netlink: 'syz.4.1498': attribute type 1 has an invalid length.
[  367.529271][T12704] lo speed is unknown, defaulting to 1000
[  367.873899][T12729] lo speed is unknown, defaulting to 1000
[  368.344938][T12749] lo speed is unknown, defaulting to 1000
[  368.696693][T12754] lo speed is unknown, defaulting to 1000
[  368.745092][T12757] netlink: 'syz.3.1508': attribute type 1 has an invalid length.
[  368.866792][T12757] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.134976][T12762] netlink: 'syz.2.1509': attribute type 1 has an invalid length.
[  369.195819][T12761] __nla_validate_parse: 6 callbacks suppressed
[  369.195842][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1509'.
[  369.204316][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1509'.
[  369.217139][T12761] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  369.220722][T12761] IPv6: NLM_F_CREATE should be set when creating new route
[  369.223654][T12761] IPv6: NLM_F_CREATE should be set when creating new route
[  369.228946][T12761] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  370.804384][T12762] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR
[  370.808102][T12761] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  370.975778][T12766] lo speed is unknown, defaulting to 1000
[  371.173651][T12776] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  371.517917][T12780] lo speed is unknown, defaulting to 1000
[  371.522524][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1515'.
[  371.788868][T12790] lo speed is unknown, defaulting to 1000
[  372.271146][T12803] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1519'.
[  372.274116][T12803] ..0: renamed from hsr0
[  372.278473][T12803] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  372.282106][T12803] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  372.285367][T12803] ..0: entered allmulticast mode
[  372.287029][T12803] hsr_slave_0: entered allmulticast mode
[  372.288930][T12803] hsr_slave_1: entered allmulticast mode
[  372.299766][T12803] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  372.413992][T12807] lo speed is unknown, defaulting to 1000
[  374.149378][T12811] lo speed is unknown, defaulting to 1000
[  374.306769][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1522'.
[  374.399933][T12816] lo speed is unknown, defaulting to 1000
[  375.152705][T12829] pim6reg: entered allmulticast mode
[  375.159169][T12829] pim6reg: left allmulticast mode
[  375.190367][T12832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1526'.
[  375.201313][T12833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1526'.
[  375.258405][T12835] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1527'.
[  375.268160][T12836] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1527'.
[  375.379724][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1528'.
[  375.402693][T12833] veth7: entered promiscuous mode
[  375.417257][T12837] veth9: entered promiscuous mode
[  375.505274][T12850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1529'.
[  375.531912][T12849] lo speed is unknown, defaulting to 1000
[  375.883659][T12854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1531'.
[  375.929527][T12853] lo speed is unknown, defaulting to 1000
[  376.091911][T12871] lo speed is unknown, defaulting to 1000
[  376.522005][T12881] bridge8: entered promiscuous mode
[  376.523747][T12881] bridge8: entered allmulticast mode
[  376.699425][T12891] lo speed is unknown, defaulting to 1000
[  376.882599][T12898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1540'.
[  376.975104][T12902] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  377.008606][T12893] lo speed is unknown, defaulting to 1000
[  377.936624][T12908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1542'.
[  378.486450][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  379.109853][T12917] lo speed is unknown, defaulting to 1000
[  379.393469][T12930] __nla_validate_parse: 1 callbacks suppressed
[  379.393489][T12930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1544'.
[  379.474657][T12931] netlink: 'syz.4.1545': attribute type 1 has an invalid length.
[  379.544363][T12931] lo speed is unknown, defaulting to 1000
[  379.869087][T12944] lo speed is unknown, defaulting to 1000
[  380.760797][T12964] lo speed is unknown, defaulting to 1000
[  381.356520][T12980] lo speed is unknown, defaulting to 1000
[  381.723960][T12983] lo speed is unknown, defaulting to 1000
[  382.586497][T13004] lo speed is unknown, defaulting to 1000
[  382.775208][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'.
[  382.970268][T13013] lo speed is unknown, defaulting to 1000
[  383.408854][T13025] lo speed is unknown, defaulting to 1000
[  383.871147][T13038] lo speed is unknown, defaulting to 1000
[  384.137963][T13048] lo speed is unknown, defaulting to 1000
[  386.162295][   T61] block nbd0: Possible stuck request ffff888020cf0000: control (read@0,1024B). Runtime 300 seconds
[  386.166552][   T61] block nbd0: Possible stuck request ffff888020cf0200: control (read@1024,1024B). Runtime 300 seconds
[  386.171186][   T61] block nbd0: Possible stuck request ffff888020cf0400: control (read@2048,1024B). Runtime 300 seconds
[  386.175458][   T61] block nbd0: Possible stuck request ffff888020cf0600: control (read@3072,1024B). Runtime 300 seconds
[  386.303800][T13066] lo speed is unknown, defaulting to 1000
[  386.707621][T13070] lo speed is unknown, defaulting to 1000
[  387.004919][T13075] lo speed is unknown, defaulting to 1000
[  387.098265][T13080] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1579'.
[  387.224995][T13082] lo speed is unknown, defaulting to 1000
[  387.936734][T13095] lo speed is unknown, defaulting to 1000
[  388.601666][T13104] lo speed is unknown, defaulting to 1000
[  388.852351][T13115] lo speed is unknown, defaulting to 1000
[  389.035297][T13120] lo speed is unknown, defaulting to 1000
[  389.334447][T13128] lo speed is unknown, defaulting to 1000
[  389.844073][T13146] lo speed is unknown, defaulting to 1000
[  390.020502][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1596'.
[  390.288786][T13152] lo speed is unknown, defaulting to 1000
[  390.731948][T13161] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1599'.
[  390.966057][T13165] lo speed is unknown, defaulting to 1000
[  391.046835][T13168] ieee802154 phy1 wpan1: encryption failed: -22
[  391.048961][T13168] ieee802154 phy1 wpan1: encryption failed: -22
[  391.156097][T13168] lo speed is unknown, defaulting to 1000
[  391.706513][T13177] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1602'.
[  391.775106][T13176] lo speed is unknown, defaulting to 1000
[  392.308303][T13185] lo speed is unknown, defaulting to 1000
[  392.649067][T13198] lo speed is unknown, defaulting to 1000
[  392.951253][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1609'.
[  393.210314][T13227] lo speed is unknown, defaulting to 1000
[  393.578098][T13238] lo speed is unknown, defaulting to 1000
[  393.907940][T13242] netlink: 'syz.2.1616': attribute type 10 has an invalid length.
[  393.936558][T13242] netlink: 'syz.2.1616': attribute type 10 has an invalid length.
[  394.010397][T13242] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  394.117277][T13243] lo speed is unknown, defaulting to 1000
[  395.678453][T13247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1617'.
[  395.713155][T13247] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1617'.
[  396.043873][T13256] lo speed is unknown, defaulting to 1000
[  396.351477][T13261] netlink: 'syz.2.1623': attribute type 1 has an invalid length.
[  396.501072][T13268] lo speed is unknown, defaulting to 1000
[  396.846774][T13275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1624'.
[  396.884296][T13274] lo speed is unknown, defaulting to 1000
[  397.040894][T13279] lo speed is unknown, defaulting to 1000
[  397.234697][T13283] lo speed is unknown, defaulting to 1000
[  399.181717][T13295] lo speed is unknown, defaulting to 1000
[  399.298951][T13311] 8021q: adding VLAN 0 to HW filter on device bond16
[  399.357280][T13308] bridge6: entered promiscuous mode
[  399.359415][T13308] bridge6: entered allmulticast mode
[  399.521996][T13310] lo speed is unknown, defaulting to 1000
[  399.847475][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  400.003882][T13325] lo speed is unknown, defaulting to 1000
[  400.293616][T13330] lo speed is unknown, defaulting to 1000
[  400.497382][T13338] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1638'.
[  400.576766][T13338] netlink: 'syz.2.1638': attribute type 1 has an invalid length.
[  400.646436][T13338] 8021q: adding VLAN 0 to HW filter on device bond17
[  400.671128][T13339] bond17: (slave gretap4): making interface the new active one
[  400.679777][T13339] bond17: (slave gretap4): Enslaving as an active interface with an up link
[  400.694424][T13339] syz.2.1638 (13339) used greatest stack depth: 16824 bytes left
[  400.723940][T13347] lo speed is unknown, defaulting to 1000
[  401.003515][T13353] lo speed is unknown, defaulting to 1000
[  401.138167][T13359] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.1643'.
[  401.143787][T13359] netlink: 'syz.3.1643': attribute type 10 has an invalid length.
[  401.310092][T13363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1644'.
[  401.416497][T13368] netlink: 'syz.2.1645': attribute type 1 has an invalid length.
[  401.692761][T13374] lo speed is unknown, defaulting to 1000
[  401.781153][T13382] macsec0: entered promiscuous mode
[  401.782933][T13382] bridge0: entered promiscuous mode
[  401.785553][T13382] bridge0: port 1(macsec0) entered blocking state
[  401.794302][T13382] bridge0: port 1(macsec0) entered disabled state
[  401.797514][T13382] macsec0: entered allmulticast mode
[  401.810341][T13382] bridge0: entered allmulticast mode
[  401.814254][T13382] macsec0: left allmulticast mode
[  401.815913][T13382] bridge0: left allmulticast mode
[  401.826561][T13377] netlink: 'syz.4.1646': attribute type 1 has an invalid length.
[  401.831126][T13382] bridge0: left promiscuous mode
[  402.026837][T13386] lo speed is unknown, defaulting to 1000
[  402.087160][T13395] veth1_to_bond: entered allmulticast mode
[  402.095798][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1651'.
[  402.221904][T13395] veth1_to_bond (unregistering): left allmulticast mode
[  402.499677][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'.
[  402.571193][T13407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1653'.
[  403.907788][T13414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1655'.
[  404.091080][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  404.375091][T13407] macsec0: entered promiscuous mode
[  404.376811][T13407] batadv0: entered promiscuous mode
[  404.380260][T13407] batadv0: left promiscuous mode
[  404.418550][T13408] macvlan3: entered allmulticast mode
[  404.420433][T13408] bond0: entered allmulticast mode
[  404.426735][T13408] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  404.430428][T13408] bond0: left allmulticast mode
[  404.513220][T13413] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.515658][T13413] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.522492][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1656'.
[  404.639622][T13413] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  404.776427][T13413] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  404.840184][  T976] lo speed is unknown, defaulting to 1000
[  404.843164][  T976] syz0: Port: 1 Link DOWN
[  404.848236][   T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.855166][   T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.871096][   T12] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  404.874918][   T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.877686][   T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.882510][   T12] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  404.893389][  T976] lo speed is unknown, defaulting to 1000
[  404.924588][   T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.927459][   T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.930367][   T12] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  404.935361][   T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.938731][   T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.942663][   T12] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  405.048698][T13427] lo speed is unknown, defaulting to 1000
[  405.063856][T13430] macsec0: entered allmulticast mode
[  405.547601][T13430] lo speed is unknown, defaulting to 1000
[  406.100048][T13450] lo speed is unknown, defaulting to 1000
[  406.417748][T13462] lo speed is unknown, defaulting to 1000
[  406.890402][T13476] lo speed is unknown, defaulting to 1000
[  407.344220][T13487] lo speed is unknown, defaulting to 1000
[  407.526037][T13484] lo speed is unknown, defaulting to 1000
[  408.100998][T13505] lo speed is unknown, defaulting to 1000
[  408.103194][T13509] syzkaller0: entered promiscuous mode
[  408.105567][T13509] syzkaller0: entered allmulticast mode
[  408.367139][T13517] lo speed is unknown, defaulting to 1000
[  408.794553][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1685'.
[  408.821145][T13536] lo speed is unknown, defaulting to 1000
[  409.217128][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'.
[  409.264040][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'.
[  409.270755][T10746] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  409.274892][T13554] lo speed is unknown, defaulting to 1000
[  409.331442][T10746] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  409.336462][T10746] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  409.348747][T10746] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  409.509430][T13558] lo speed is unknown, defaulting to 1000
[  409.980393][T13569] lo speed is unknown, defaulting to 1000
[  416.245565][   T61] block nbd0: Possible stuck request ffff888020cf0000: control (read@0,1024B). Runtime 330 seconds
[  416.249947][   T61] block nbd0: Possible stuck request ffff888020cf0200: control (read@1024,1024B). Runtime 330 seconds
[  416.254590][   T61] block nbd0: Possible stuck request ffff888020cf0400: control (read@2048,1024B). Runtime 330 seconds
[  416.258324][   T61] block nbd0: Possible stuck request ffff888020cf0600: control (read@3072,1024B). Runtime 330 seconds
[  425.200969][   T34] INFO: task udevd:5860 blocked for more than 143 seconds.
[  425.203925][   T34]       Not tainted syzkaller #0
[  425.207086][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  425.211688][   T34] task:udevd           state:D stack:21928 pid:5860  tgid:5860  ppid:5294   task_flags:0x400140 flags:0x00004006
[  425.216349][   T34] Call Trace:
[  425.217740][   T34]  <TASK>
[  425.218956][   T34]  __schedule+0x1798/0x4cc0
[  425.221014][   T34]  ? __pfx___schedule+0x10/0x10
[  425.223058][   T34]  ? schedule+0x91/0x360
[  425.224816][   T34]  schedule+0x165/0x360
[  425.226520][   T34]  io_schedule+0x80/0xd0
[  425.228245][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  425.230378][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  425.233265][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  425.235506][   T34]  ? __filemap_get_folio+0x6b0/0xaf0
[  425.237629][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  425.239696][   T34]  do_read_cache_folio+0x1aa/0x590
[  425.243615][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  425.245522][   T34]  read_part_sector+0xb6/0x2b0
[  425.247122][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  425.249243][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  425.253153][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  425.255963][   T34]  bdev_disk_changed+0x75f/0x14b0
[  425.257692][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  425.259566][   T34]  ? wait_on_inode+0xc0/0x230
[  425.261816][   T34]  blkdev_get_whole+0x380/0x510
[  425.263749][   T34]  bdev_open+0x31e/0xd30
[  425.265578][   T34]  blkdev_open+0x3a8/0x510
[  425.267105][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  425.268879][   T34]  do_dentry_open+0x953/0x13f0
[  425.270663][   T34]  vfs_open+0x3b/0x340
[  425.272081][   T34]  ? path_openat+0x2ecd/0x3830
[  425.273725][   T34]  path_openat+0x2ee5/0x3830
[  425.275314][   T34]  ? arch_stack_walk+0xfc/0x150
[  425.276985][   T34]  ? stack_depot_save_flags+0x40/0x860
[  425.278828][   T34]  ? __pfx_path_openat+0x10/0x10
[  425.280498][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.283014][   T34]  do_filp_open+0x1fa/0x410
[  425.284646][   T34]  ? __lock_acquire+0xab9/0xd20
[  425.286367][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  425.288529][   T34]  ? _raw_spin_unlock+0x28/0x50
[  425.290558][   T34]  ? alloc_fd+0x64c/0x6c0
[  425.292553][   T34]  do_sys_openat2+0x121/0x1c0
[  425.294581][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  425.296855][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  425.299038][   T34]  ? rcu_is_watching+0x15/0xb0
[  425.301101][   T34]  __x64_sys_openat+0x138/0x170
[  425.303176][   T34]  do_syscall_64+0xfa/0x3b0
[  425.305061][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.307566][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  425.309718][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.311714][   T34] RIP: 0033:0x7fbcff7169a4
[  425.313240][   T34] RSP: 002b:00007ffd6aa8bd20 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  425.316143][   T34] RAX: ffffffffffffffda RBX: 000055c82055b220 RCX: 00007fbcff7169a4
[  425.318827][   T34] RDX: 00000000000a0800 RSI: 000055c820552230 RDI: 00000000ffffff9c
[  425.321549][   T34] RBP: 000055c820552230 R08: 0000000000000001 R09: 7fffffffffffffff
[  425.324163][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  425.326801][   T34] R13: 000055c82054e800 R14: 0000000000000001 R15: 000055c82053a910
[  425.329403][   T34]  </TASK>
[  425.330660][   T34] 
[  425.330660][   T34] Showing all locks held in the system:
[  425.333185][   T34] 1 lock held by khungtaskd/34:
[  425.334864][   T34]  #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  425.338237][   T34] 2 locks held by getty/5673:
[  425.340293][   T34]  #0: ffff88810fdf90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  425.344685][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  425.348858][   T34] 1 lock held by udevd/5860:
[  425.351068][   T34]  #0: ffff888020c6e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  425.354838][   T34] 
[  425.355836][   T34] =============================================
[  425.355836][   T34] 
[  425.359135][   T34] NMI backtrace for cpu 0
[  425.359152][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  425.359164][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  425.359171][   T34] Call Trace:
[  425.359179][   T34]  <TASK>
[  425.359187][   T34]  dump_stack_lvl+0x189/0x250
[  425.359209][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  425.359222][   T34]  ? __pfx__printk+0x10/0x10
[  425.359242][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  425.359259][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  425.359274][   T34]  ? __pfx__printk+0x10/0x10
[  425.359289][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  425.359315][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  425.359333][   T34]  watchdog+0xf93/0xfe0
[  425.359353][   T34]  ? watchdog+0x1de/0xfe0
[  425.359369][   T34]  kthread+0x711/0x8a0
[  425.359385][   T34]  ? __pfx_watchdog+0x10/0x10
[  425.359397][   T34]  ? __pfx_kthread+0x10/0x10
[  425.359410][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  425.359427][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  425.359438][   T34]  ? __pfx_kthread+0x10/0x10
[  425.359480][   T34]  ret_from_fork+0x3fc/0x770
[  425.359493][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  425.359506][   T34]  ? __switch_to_asm+0x39/0x70
[  425.359520][   T34]  ? __switch_to_asm+0x33/0x70
[  425.359532][   T34]  ? __pfx_kthread+0x10/0x10
[  425.359545][   T34]  ret_from_fork_asm+0x1a/0x30
[  425.359569][   T34]  </TASK>
[  425.359574][   T34] Sending NMI from CPU 0 to CPUs 1:
[  425.413685][    C1] NMI backtrace for cpu 1
[  425.413706][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  425.413720][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  425.413729][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  425.413750][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 a7 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  425.413761][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  425.413774][    C1] RAX: dab6b40a34d81600 RBX: ffffffff819683f8 RCX: dab6b40a34d81600
[  425.413785][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b9dd7 RDI: ffffffff8be33880
[  425.413794][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  425.413804][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa39430
[  425.413813][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d5000
[  425.413821][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  425.413831][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  425.413840][    C1] CR2: 0000555582c005c8 CR3: 0000000027f2e000 CR4: 00000000000006f0
[  425.413872][    C1] Call Trace:
[  425.413882][    C1]  <TASK>
[  425.413888][    C1]  default_idle+0x13/0x20
[  425.413904][    C1]  default_idle_call+0x74/0xb0
[  425.413920][    C1]  do_idle+0x1e8/0x510
[  425.413935][    C1]  ? __pfx_do_idle+0x10/0x10
[  425.413954][    C1]  cpu_startup_entry+0x44/0x60
[  425.413965][    C1]  start_secondary+0x101/0x110
[  425.413984][    C1]  common_startup_64+0x13e/0x147
[  425.414007][    C1]  </TASK>
[  425.414776][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  425.474412][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  425.478826][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  425.482631][   T34] Call Trace:
[  425.484676][   T34]  <TASK>
[  425.485760][   T34]  dump_stack_lvl+0x99/0x250
[  425.487458][   T34]  ? __asan_memcpy+0x40/0x70
[  425.489145][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  425.490919][   T34]  ? __pfx__printk+0x10/0x10
[  425.492543][   T34]  vpanic+0x281/0x750
[  425.494584][   T34]  ? __pfx_vpanic+0x10/0x10
[  425.496086][   T34]  ? preempt_schedule+0xae/0xc0
[  425.497840][   T34]  ? preempt_schedule_common+0x83/0xd0
[  425.500028][   T34]  panic+0xb9/0xc0
[  425.501256][   T34]  ? __pfx_panic+0x10/0x10
[  425.502886][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  425.504598][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  425.506528][   T34]  watchdog+0xfd2/0xfe0
[  425.507848][   T34]  ? watchdog+0x1de/0xfe0
[  425.509221][   T34]  kthread+0x711/0x8a0
[  425.510523][   T34]  ? __pfx_watchdog+0x10/0x10
[  425.512106][   T34]  ? __pfx_kthread+0x10/0x10
[  425.513985][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  425.516079][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  425.518188][   T34]  ? __pfx_kthread+0x10/0x10
[  425.520064][   T34]  ret_from_fork+0x3fc/0x770
[  425.521829][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  425.523338][   T34]  ? __switch_to_asm+0x39/0x70
[  425.524994][   T34]  ? __switch_to_asm+0x33/0x70
[  425.526662][   T34]  ? __pfx_kthread+0x10/0x10
[  425.528328][   T34]  ret_from_fork_asm+0x1a/0x30
[  425.530300][   T34]  </TASK>
[  425.532262][   T34] Kernel Offset: disabled
[  425.534277][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:22:35  Registers:
info registers vcpu 0

CPU#0
RAX=4aea986694400500 RBX=ffffffff819683f8 RCX=4aea986694400500 RDX=0000000000000001
RSI=ffffffff8d9b9dd7 RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39430 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a83f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005650752bf7e8 CR3=0000000027f2e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f2aa1b97d20
XMM02=0800041000221000 060071a602a81000 XMM03=808080100005b480 80040c0141ce0c80
XMM04=0010000100000008 0622100000100010 XMM05=0100100001080001 c0e410000010000c
XMM06=8080801000408004 0c0141ce00100001 XMM07=0000000806221000 0010001080808010
XMM08=0005b48080040c01 41ce0c8008000410 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bec60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df66b0 RSP=ffffc9000068f650
R8 =ffff888020028237 R9 =1ffff11004005046 R10=dffffc0000000000 R11=ffffffff854f4ab0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4b27 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555582c005c8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000080000010015 0000000c00000028 XMM01=0000000e00000001 0000000000000006
XMM02=0043004400010015 0000000000000040 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
