last executing test programs:

1.616561539s ago: executing program 2 (id=2291):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x40800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0xd5, 0xb4, 0x6}}, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4007965}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x60}}, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x98, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x50}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x16, 0x34, @random="7f8280758eb98bc917dcdc171d5af8f5a417"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}, @NL80211_ATTR_PMKID={0x14, 0x55, "6052bc8daf78c3e38e59bae90e818b39"}, @NL80211_ATTR_PMK={0x14, 0xfe, "3f1602c07e06bef761b9a034c325396b"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "2bca149235c8c25da4126fabe0f98418"}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000810}, 0x40000)

1.545046773s ago: executing program 2 (id=2293):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth1_to_bridge\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100ff010000060000000c0001007f0008000000000000000100ff000000010000000c000100ff0100000008000008000500", @ANYRES8=r0], 0x78}}, 0x4000000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0xae, 0x2, 0xe, 0x450e}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x9}}]}}}]}, 0x58}}, 0x44080)
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x4, 0x983c}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
listen(r5, 0x80)
accept$netrom(r5, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x59e}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

1.335477501s ago: executing program 2 (id=2299):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xb, @null, @bpq0, 0x5, [@default, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]})
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={<r2=>0x0, 0xd}, &(0x7f0000000100)=0x8)
r3 = socket(0x10, 0x3, 0x0)
recvmmsg$unix(r3, &(0x7f0000002a00)=[{{0xfffffffffffffffe, 0x0, 0x0}}], 0x1, 0x2022, &(0x7f0000002b80)={0x77359400})
close(0x3)
openat$tun(0xffffffffffffff9c, 0x0, 0x8100, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7)
write$cgroup_freezer_state(r6, &(0x7f0000000200)='THAWED\x00', 0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x10)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"})
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r8, 0x0, 0x6)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={r2, @in={{0x2, 0x4e22, @local}}, 0x0, 0x2, 0x9, 0x6, 0x3}, &(0x7f0000000140)=0x98)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4)
sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="620d00e1", @ANYRES16=r11, @ANYBLOB="200026bd700000000000010000000c00020000000000000000000c0005002000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4081}, 0x0)

447.486011ms ago: executing program 2 (id=2313):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@delpolicy={0x50, 0x14, 0x300, 0x70bd2d, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in=@empty, 0x4e23, 0x8, 0x4e21, 0x0, 0x8, 0x20, 0x20, 0x33}, 0x6e6bb4, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@ip4=@rand_addr=0x64010100, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x29, 0xe, 0x0, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x2e}], 0x1}, 0x100080a0)

446.3061ms ago: executing program 2 (id=2314):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000002c0)='rpm_return_int\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r4=>0x0})
setsockopt$inet_mreqn(r2, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local, r4}, 0xc)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r4, 0x25, 0x1d, @void}, 0x10) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) (async, rerun: 64)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) (async)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x53) (async)
unshare(0x2a020400) (async)
r5 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) (rerun: 32)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=ANY=[@ANYBLOB="2af994ad460d0f0f61aad474b0590bbd91c420f3922eb3fb79bd25fbaebcff1f7d9aa1c95745c412b0cecba81a03f7f7c1f4289e9ea957468e33823bbb0e2be90037b973196a9392a325198290c10496de0233241e20b88cea37aff7a864a4108473d4b5d7b33dbbb2f6d88d48875ee8d05a7ba636c105a75ab99765fc830e1a598413f15bffea189fcd482c825222ce726e9c", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, 0x0, &(0x7f0000000100))
r9 = socket(0x1d, 0x2, 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, 0x0, 0x0) (async)
setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000140), 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r10}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20)

386.680366ms ago: executing program 2 (id=2315):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) (rerun: 32)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x148, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000400)={0x2, 'netdevsim0\x00', {0x100}, 0x7ff}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @rand_addr=0x64010101}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}, 0x100, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)='pim6reg1\x00', 0x0, 0x8001, 0x800}) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r3)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r4, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40810) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000640)={<r5=>r1})
sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x15, 0xa, 0x3, 0x0, 0x0, {0xd, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x15, 0x8, "2658d75b5a8cb1ef76716666c43493c87c"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000090}, 0x10010) (async)
getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000007c0), &(0x7f0000000800)=0x4) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) (rerun: 32)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xc0, r6, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x101}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7f}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x15a8, 0x3ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xc}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x0, 0x2d, 0x5, 0x10000, 0x200, 0x9, 0x9]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e8}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6fc}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5a}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xcc}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x296}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x105}, 0x80) (async)
r7 = accept$phonet_pipe(r5, &(0x7f0000000a00), &(0x7f0000000a40)=0x10)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000b80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x1, 0x0, {0xa, 0x4e20, 0x98e3, @rand_addr=' \x01\x00', 0x1ec0}}}, {&(0x7f0000000a80)=""/167, 0xa7}, &(0x7f0000000b40), 0x12}, 0xa0)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r8, &(0x7f0000000c40)="63d3010bd84758f0bc77eb523777c4e443f27cfdb856547db051f7e3631f024093f5a614019f11c0253eff20bf2cb431a78e5c8937c71ea57ebd812c1a66e0fd2b60a983a34720a006a155dbdeaa4e1cd2a7a96eaa2ed81062f2beb2a088d396658513eb58b3d576cb397acd072a0339131c6cbcafb95f95740580c7c24f3363f3da2eec71b598e739085c013529e5f186c87cc1147190d41528c1b5a2c6dd296431c892610c5ef9411c8d36030bfb5a2c38eb7b61e6218025d359ecc1d84fec42e8e2003767cf2579f0771fac7e32746fad546e7f5ae0083e0e1d37841cabf97738d142968e1a7978bfe346d43245f97b61", 0xf2, 0x20000001, &(0x7f0000000d40)={0x2, 0x4e20, @loopback}, 0x10) (async)
getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000e80)={@private0, <r9=>0x0}, &(0x7f0000000ec0)=0x14)
sendto(r3, &(0x7f0000000d80)="d908911519bf5b5f53d643ed18d38ff5c4bd7decd735642ecae73744aa24e29fd877b16dd4d4a89384da1a8b19468b2619e78c6984401d387372425cd58b87ff829e3d113bf4195263ea59af83aac029a3d6b4a7481b5f0dfa518ccdd46cbf0fcff2ffba159f2422e2a780dbe2cb1fb7838cef24b0736473e6d5680986fed0edf15e97d772c2c4f9f2cfa28632eaeea91535bc2d297f62a41024562b4f7686bf5db1d248108a1c741c8b70c0e3865be59facb69b2b82ac4cd81b760ff5b129a3cb4678ec16847fca5b02cac0a68cdf4cdb59d62884064a0e2c53be688ec403f8b83c5a147385e77350cbe9020a3dabbf511b2528", 0xf4, 0x4000000, &(0x7f0000000f00)=@xdp={0x2c, 0x0, r9, 0x39}, 0x80) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000f80)={<r10=>0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x6, 0xfffffffffffff57c, 0x8, 0x1, 0x8, 0xaa, 0x3, 0x9, 0x200, 0x46, 0x9, 0x0, 0x9, 0x200]}, &(0x7f0000001080)=0x100)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000010c0)=@sack_info={r10, 0x4, 0x5}, 0xc)
r11 = openat$cgroup_ro(r1, &(0x7f0000001100)='blkio.bfq.io_merged\x00', 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f0000001140)={0x1, 0x0, 0x0, 0x101, @vifc_lcl_ifindex=r9, @multicast2}, 0x10)
r12 = getuid()
sendmsg$nl_generic(r0, &(0x7f0000001340)={&(0x7f0000001180), 0xc, &(0x7f0000001300)={&(0x7f00000011c0)={0x12c, 0x27, 0x2, 0x70bd28, 0x25dfdbfc, {0xc}, [@nested={0x20, 0xaa, 0x0, 0x1, [@typed={0x8, 0x30, 0x0, 0x0, @fd=r11}, @typed={0x8, 0x70, 0x0, 0x0, @uid=r12}, @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x8}]}, @typed={0x14, 0xd9, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="fbf3889450b35bc6a588e50c87a288700777103f14478039e7f214318c21c406e143da0d96cd59c14c802556bd8183105d06ab249dffc71d36ad98612b7ff38c20f076a6468831b1a7279b750f0e689b86ab5e639243b1a154560dc71baae33cd8e220a3963fcb2ff6a6458465cad6beab4933b48e4737f7baae93e88f3d42010458e18c15da5f5f729591de15afb062ae1ef7c10dcdf6c7e2de6f05b128a600cbf078c82038b30001e4615ab0f8d28f0bf317dc0b46649ca7f16fa6e5a3d601ee91d38b1685b67855a6c74c0ea4eb8a3a48ba1158d5dd9e8826c0fdab6c54c4dd28"]}, 0x12c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) (async)
socket$phonet_pipe(0x23, 0x5, 0x2)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000013c0), r0) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001400)={'batadv_slave_1\x00', <r14=>0x0}) (rerun: 64)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000001540)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0x98, r13, 0x280, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24008090}, 0x800)

254.71754ms ago: executing program 1 (id=2316):
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fcdbdf251200000008000300", @ANYRES32, @ANYBLOB="0a5d6cf53f021100000100"], 0x38}, 0x1, 0x0, 0x0, 0x400c0}, 0x4)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000009c0), r1)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x980)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000740)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x26)
sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000540)={0x1, 0x6d1, 0xb, {}, {}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x5, 0x5, 0x0, 0x0, "c84b0f70ed9a476e"}}, 0x48}}, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=<r8=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8)
socketpair(0x1d, 0x2, 0x8001, &(0x7f00000003c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000001040)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f0000000940)={0x3, {{0x2, 0x4e23, @multicast1}}, 0x0, 0x2, [{{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e24, @broadcast}}]}, 0x190)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001280)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f0000001380)=0xe8)
r13 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001e40)=<r14=>0x0)
r15 = getgid()
sendmsg$netlink(r10, &(0x7f0000001ec0)={&(0x7f0000000b40)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d80)=[{&(0x7f0000000b80)={0x144, 0x31, 0x500, 0x70bd26, 0x25dfdbfd, "", [@generic="e3199cd79acc7286040d0700f1dc4d71d83ddc10187c4f302ca5f314babfe02cfca57669ce76f0bbc9668fffc06edd99f78bbfe6586ee4f77d04545e1a179ebd41faf8ae98e4ef7c62c21932a188587db6abcf427f9db70415b5bb6affe5d7742d2137d0cdfedde3317b48775cf907618d783579bdc253c9df543d4f7e004ea3c27bffa9c6872d4692", @generic="4e0be71c60030bcde775fc208325653b0bd28a69ab4641f5c6400bcb3f827d9df520736038eeb3ff2e9b2c11dd6991335c1504e837490e0cd6c259e144f2bc55d16f402b58583370ce7d5f52c8b9a398fae156387aa12858684d9387fe247ed4f9a90bf9cb4a124e1bbec554335610669ae0bfff46adb56ebe941eeceeca088e5642185bbff1368712a48acd17fb79347e98868143838a6a033b12856e06a8", @nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x13f}]}, @typed={0x4, 0xfb, 0x0, 0x0, @str}]}, 0x144}, {&(0x7f0000000d00)={0x140, 0x16, 0x800, 0x70bd26, 0x25dfdbfc, "", [@generic="7f529949c2c06e6c5af86a0edd351502e7f25ecbd27aaf6930e77ea54803e871a7f0db37c517434441266583926054832bc8f8", @nested={0x8d, 0xb3, 0x0, 0x1, [@nested={0x4, 0x26}, @typed={0x8, 0x147, 0x0, 0x0, @fd=r5}, @generic="6526293f65ce530b767f64bf3cb26f0b846dca064ad0605cec342b22be8dc123c345f486e7badcb7dce3af76e64d6e52b1d873ecb8239cb3a5ee02da6e88811f70c4dcf6489cafad38124571461bef1c2f935be04bcf2e900ab47cacf49f43845c379ddfa37766ae86b19975a298f468f4301f6b99", @typed={0x8, 0x37, 0x0, 0x0, @fd=r11}]}, @nested={0x2b, 0xf1, 0x0, 0x1, [@generic="d66fe2ab7ca18e7ab513bc76b316aac72b1d319d7517d8e2286341f4c82a4a38e34e9f", @nested={0x4, 0xcc}]}, @generic="a564c4135d7d258527310e854dd94b7d27b07034fd51ec536d6068170ccf2da74a1fb85a2f66e5a9443100d222135cd7a68b2b710c47b104211a7c00bc5640fa1c"]}, 0x140}, {&(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0xcc}, {&(0x7f00000023c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="48b425cedbd0c65d2e23c08139e6862cf80e4edcf385e02def7fd32607cded391fc7f3f027a696afd7fce0c184b9a924fd1a8aa925d8b22b6306311ec6c80d3a0f2504464637e9356c5ae692d0ea8f2f201eb3605e330d3675fa6d6612d518f050f8990e0260f742cc9dbbad23fff50160fa54"], 0x2a8}, {&(0x7f0000001240)={0x10, 0x3c, 0x200, 0x70bd29, 0x25dfdbfd}, 0x10}, {&(0x7f00000013c0)={0x1f8, 0x3a, 0x8, 0x70bd28, 0x25dfdbfe, "", [@nested={0x99, 0x75, 0x0, 0x1, [@generic, @typed={0x8, 0x10f, 0x0, 0x0, @uid=r12}, @nested={0x4, 0x86}, @typed={0xc, 0x5c, 0x0, 0x0, @str='pimreg1\x00'}, @generic="5d2982bebda212dc01bd21b85e56b16504f8b37343ee777fe0cdc15f54b0657f3778977afff83b9aed15969e642d0c6752079392c063b9866d84f0333e97385022a5dff80d96f3b5411a0399a74c36779cfa2c245414c29edaf1c8389ff78481dab4505eb4a73b381e20b3a5ab989f0e9d463a75328b410e23464447aa"]}, @typed={0x8, 0x11e, 0x0, 0x0, @u32=0x10000}, @generic="655e956ffac351bfe050844f0cbb3d8ab365e47a99fd0aedbb3b9888729158140584f95775918ad807663a48ae287309a40861ada4f10e3edb9773adb4cee9db8c6f08988ddc2e5428dae9891e181bd23281032b3f392aa0bf8156eb863ae0535c0cf2b0e598d9cab966543390e1e08752b795fce8edcf398c32b2703d7b298c5bb27eb9ab49329f11fb03b0bfd1fe06362e4b2e827ecabc916325d5a85a44cb9f768464c9", @typed={0x8, 0x123, 0x0, 0x0, @fd}, @generic="8dd074aebea4b33f0b304a3d42c1fed6bf497c1e4d27b90f4c30bbec953ddd7656824387a0bf9fd62b9702797ad378f6555a2e85226b9c86d821fafaa9e1d992c97cf1536dad1b744eb372f38d2ba15d954ada8be662a3a2e2e930d79817b9daadc48a93b1e00168f706d529259f1a7f3515df9ef4222b8bb9646c9d08b14f", @generic="78eb2acb427f5951640b279e93d86afea57e02b4e84af3"]}, 0x1f8}, {&(0x7f0000001f00)={0x490, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x163, 0x47, 0x0, 0x1, [@generic="28bf798a3cb72792f8299ae93f51dbace93344bab45df55f10773777b7f8f629d317662a6019679bfa928b490d21480c6e43d12e38ce39954ce214a6c2a6b9e003f8c2cad85e4a7ec252abf29e4e16b8bd2bd0ea9128dc6dc3876dfc752b5896fde2034f6506c09dad7e898eb47f6314ec2c736e43f5b2c2a855b154c140e1a2bb1416752bef828a68c92bbca9b2e9b74dcde4307ebf5a3460ace408d81c1e3e18b59cdeb7f1031bf0289d739eac9ef7bc562a8e8923afec7f77897a74a3de01", @typed={0x5, 0xf8, 0x0, 0x0, @str='\x00'}, @generic="57e6a5b7cc8f02cff690c88baa52ca34003140063ef40f9be927fc76c8153b65d425835875696eca75b5c4b3dc6e98e6f6be2658e73f17b8b9c40588bfcfcd9a053df9922a47c0305e17addd60dea37bb80eca2ff7568a9a2b46332f9056a828a1d03ee44c9e3d3ecf08db4c3a34d38299142067788d4e0177804164578c66f55bc3e9", @typed={0x14, 0x4c, 0x0, 0x0, @ipv6=@private0}]}, @nested={0x10e, 0x51, 0x0, 0x1, [@generic="2962b90492ee1cd36de18fc9a98eccd8e21762af2f0c2bab6966f9666ac8d65fda1c182db98808544ea28866891c4aefa82fa8b5c2cd616750c40194bf0c886c5748bc1e779af82fea0f46cdaed8b1412825fbe872263afbcd38b03cbf32df47d69e690c605145ca474bc5ca442b0e31f837904df4f9713278c225656a6676705c16f55463a43056d674aaff24ffac071dbda90af8d3de47b6a3afee68551515bb674b904bf0fb7ca7cc95a314c4bbb6b2f522e6d4392d49d6d4e38fad7eeed9520132148519364b7d26aa39ec158c608d1e084b4cda326f57106989ce261d418d0ca8cb7fa7198b3db4a44008cb9226d637", @nested={0x4, 0x4}, @typed={0x14, 0xb0, 0x0, 0x0, @ipv6=@remote}]}, @nested={0x1f1, 0x1b, 0x0, 0x1, [@generic="811c173ce84c31cbd4a3bd37cd08ffb1d3f1512b7901bc06490451a0c22ffc6612f93bfd4c57a0357ddee86d7ce785d9e132b42eb4f711ac29bc804b475c8fe32c3f43f02a2d53f03e68cc779f06f5d64314293085c6d952525753f4cf", @typed={0x8, 0x8d, 0x0, 0x0, @uid=r9}, @nested={0x4, 0x87}, @generic="9bd136680602b37af5415a73ed167e4ca685cc6cff77bbf18db91ceb58eb7fd89d7ed38d724c70a4c68bad43beae902603624a0715eacda18d89c279fda9dc9a559c1fa2a903ae568456d642e3bb27ba7318661536c2700e3dd6fa5212308b4f74b3907aae366b508cc384eee40475431fd25aec71f6473e6020d9f8cb24ae46e27d8c1ed36cf65c2549dc81ddd0ee3310528f7957c5f9aa653d5fcd73302b2f242d28cce92f3e5d18166f5b34ed63c9b9f1073b5c9cda08176a", @typed={0x4, 0xaa}, @typed={0x8, 0x131, 0x0, 0x0, @ipv4=@loopback}, @generic="09000000f9ffffffffffffff410ceb890aa1df060cda60a84271ce", @generic="1c772778873a54adaea2bb97bb0645cfbefa4b1bfdddcb3954ea86e17c35b5da65bc1e66555c5f3cb94774bd7ca8bea99b38645786f7b83dc4a3e4ca9857b6777ed5bec23d90b2a702597b246f6d7f514411ea9fb8cd604d0df02b10caa1cd025a5da114804ddb8f050229bc16049f188623f83d45e25e2186cb1b80261dc3fa26063fb8a7d4b83da28cf6a63e7c1f743517b3210c0c503ee49260", @nested={0x4, 0x75}, @nested={0x4, 0x94}]}, @nested={0x18, 0x121, 0x0, 0x1, [@typed={0x8, 0x5b, 0x0, 0x0, @uid=r8}, @nested={0x4, 0x13e}, @nested={0x4, 0x13e}, @nested={0x4, 0x114}]}]}, 0x490}, {&(0x7f0000001a80)={0x128, 0x1d, 0x2, 0x70bd27, 0x25dfdbfb, "", [@generic="3c1a2b8a41719d39fafe73f15cc826994b849b4615c4a975", @typed={0x4, 0x117}, @generic="da20fe3daad84f0c3194e85d161c293ef6c7b544541dddec13d513edaa33a30e441751a9f357291be8df279416cd5547f89cb7150196cc27358bce96bb8dc090a53f40e496316136be059fa8f2728d67c0b2b382765565df4104d7febb284ac002bfda2c1fb5e9ea9381b1034d3a061605d893f64aa1f4e41e3a097d99bb733428ede6455c3823424cf84bdb90037742879408dd3299e6db898bc6850ac6d283d28190c2cdc23f4d12d1c8ab159c02d9add48da1376b54478c3a5e32474b671f0a345536773d8fd501af8a4ccae512aaaa4dd4e5fb958cd4176c2a139b75bbe128071242dda40469", @typed={0x8, 0x98, 0x0, 0x0, @u32=0x7}, @typed={0xc, 0x9e, 0x0, 0x0, @u64=0x3}]}, 0x128}, {&(0x7f0000001c40)={0x124, 0x1b, 0x1, 0x70bd29, 0x25dfdbfb, "", [@typed={0x8, 0x77, 0x0, 0x0, @fd}, @nested={0x103, 0x1, 0x0, 0x1, [@typed={0x8, 0x87, 0x0, 0x0, @fd=r5}, @nested={0x4, 0xcc}, @nested={0x4, 0x3f}, @typed={0x8, 0xcb, 0x0, 0x0, @uid}, @typed={0x8, 0x35, 0x0, 0x0, @u32=0x8}, @generic="5758bce0e32e999b6a5694fe4540b004f99ee0e81c97f109b1d3e4d458a5090805f97c99a88dc1b0230886852641572e4aa0e3f65b777ca2dfdd1a5560ba227514211167040efbac6a064f142dd18cb2df9815fd5aaf85e5ee4297e5e5b71810df6b2dea01d5fbecfc74200a15194d84844d3fc4734aed885ba1378d86ddbc13dc0bfc62117cc748419f2b5b9fbbc200e5", @typed={0xc, 0x12f, 0x0, 0x0, @u64=0x401}, @typed={0xc, 0x27, 0x0, 0x0, @u64=0x2}, @generic="fe2cbdeea90f4d6685b4dfb2ac41c979399905c15d8af118afad106ce487babf50fc4ac40517ca198e3f7ded2d4bea3ec775b2c352b8"]}, @typed={0x8, 0x70, 0x0, 0x0, @fd=r13}]}, 0x124}], 0x9, &(0x7f0000001e80)=[@cred={{0x1c, 0x1, 0x2, {r14, r9, r15}}}], 0x20, 0x40000084}, 0x20000810)
r16 = getgid()
r17 = getgid()
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x5, 0x5f6, [0x0, 0x200000000540, 0x2000000006d6, 0x200000000706], 0x0, &(0x7f0000000000), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0x0, 0x806, 'veth1_to_batadv\x00', 'ip6gretap0\x00', 'dvmrp0\x00', 'nr0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x116, 0x166, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x5, 0x2, 0x953, 0x1, 0x0, "9833fdc110bc62618e3e273c478f2a01f71cfaa94237680dcf4bed9dfa7d20ffa3ddd6ea815a21480b493007d777237b9d22d5e53715726fb07a3972aff3d2d0"}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffff9}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xffffffff, 'syz0\x00', {0x1}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x3, 0x44, 0x5, 'erspan0\x00', 'veth1_to_bridge\x00', 'pimreg1\x00', 'veth1\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @random="e2d442119d45", [0xff, 0xff, 0x3d6b521db1c9b1cd], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8}}, {0x11, 0x40, 0x890d, 'tunl0\x00', 'veth0_vlan\x00', 'veth1_virt_wifi\x00', '\x00', @empty, [0x0, 0x101, 0x0, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0xa6, 0x11e, 0x14e, [@mac={{'mac\x00', 0x0, 0x10}, {{@random="ca74bd644f21"}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x3, 0x6, 0x1, 0x0, 0x0, "a2065187f0e0a74c499e5a714a5379b0cee1c8ea49544225c634f6a59ee14b81cd06c77505a701e4d25f0d99a44f16d008bc1b6b47a3f9cb16729566456d7133"}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x5, 0x5c, 0x61ac, 'veth0_virt_wifi\x00', 'veth0\x00', 'ip6gre0\x00', 'gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xf6, 0xf6, 0x13e, [@limit={{'limit\x00', 0x0, 0x20}, {{0x401, 0x5, 0xffffffffffffffff, 0x3, 0x8, 0x100}}}, @owner={{'owner\x00', 0x0, 0x18}, {{r8, r9, r16, r17, 0x0, 0x1}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0xc8, 0x22, {0x9}}}}}, {0x3, 0x0, 0x1, 'bridge_slave_1\x00', 'bridge0\x00', 'ip6gretap0\x00', 'syz_tun\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @empty, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffd}}}}]}]}, 0x66e)
sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@ipmr_delroute={0x34, 0x19, 0x100, 0x70bd2d, 0x25dfdbfc, {0x80, 0x9e18e3fc79c590d8, 0x0, 0x2, 0xfe, 0x4, 0xff, 0xb, 0x1400}, [@RTA_UID={0x8, 0x19, r8}, @RTA_DST={0x8, 0x1, @loopback}, @RTA_GATEWAY={0x8, 0x5, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbcb25050000000c0006000900000800000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x4000885}, 0x80)

197.155105ms ago: executing program 1 (id=2318):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047ce4ff07004280040008000c00018006000600894f"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x20000400)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000007c0)=@newtaction={0x188, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x60, 0x1, [@m_bpf={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x8, 0x6, "05000000"}, {0xc}, {0xc}}}]}, {0x114, 0x1, [@m_ctinfo={0x110, 0x14, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xa11}]}, {0xdb, 0x6, "995f437ca881759635e77e94198aa4faa1d49641a1f0f446099d5f3152d0a3a4b06192c1e53b9ec27bb2534411c7eb7b69f50e7934e1cc788b97553d6bcf782ff255e544c0c2a819a5b6d1aee3d0625ad87c668858bf412d555c29583930054711235045745f43a9721771966a644cda7e93e38adfc01bb7d46a288c90e1514bae638c68fbbc0e1c0974123dd2ce5d64f98bc30c6cc2459008fec4843f3d272752cfd25193f7a2b92e7cb993b400c59b2a3c46f3035593a7b93e88d8f06aa2f801a4f9881d96c895247592fe1f81078c56f9ffa6141710"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = socket$inet(0x2, 0x2, 0x1)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x38, 0x1411, 0x10, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x4000014)
sendmsg$inet(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000000000000010000"], 0x40}, 0x20000000)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="7961fdffffff000000007e0000000c0099006d910000"], 0x20}}, 0x4000054)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x20})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x36, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r5}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, &(0x7f00000001c0), 0x0}, 0x20)
r8 = socket$igmp6(0xa, 0x3, 0x2)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88"], 0x72)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r10)
sendmsg$TIPC_NL_NET_SET(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x30, r11, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
setsockopt$inet_sctp_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xfffffffb, 0x7, 0x6}, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)

127.679086ms ago: executing program 1 (id=2320):
r0 = socket$kcm(0x10, 0x5, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="140000d16c000b63d25a04616e2c80648c2594f9", 0x14}], 0x1}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x7)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000240)={0x1, 0x1}, 0x2)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0x8, 0x4)

127.199673ms ago: executing program 0 (id=2321):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000100)=0x7)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000040a03000000000000000000020000080900010073"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x24008080)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'erspan0\x00', 0x10})
ioctl$TUNGETVNETLE(r1, 0x400454de, 0x0)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022dbd7000ffdbdf432100000005002000000000000c00050001eba9aa0a0001007770616e3300000005002000"/62], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

126.604446ms ago: executing program 0 (id=2322):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900"], 0x48) (async, rerun: 32)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32)
ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x48, r2, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x765a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12b5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x48}}, 0x3000c000)

77.72912ms ago: executing program 0 (id=2323):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r6=>0x0})
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r7, &(0x7f0000000400), 0x8)
bind$bt_sco(r7, &(0x7f0000000100)={0x1f, @none}, 0x8)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r13, &(0x7f0000000080)={0xa, 0x4e20, 0x7ff, @ipv4={'\x00', '\xff\xff', @remote}, 0x100}, 0x1c)

76.391538ms ago: executing program 1 (id=2324):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x1070bd2c, 0x25dfdbff, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x60000074)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r4)
sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800)

76.00799ms ago: executing program 1 (id=2325):
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) (async)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}})
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x7, 0xc, 0x6, 0x6, 0x20, 0x1ff, 0x8]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c060000", @ANYRES16=r5, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000340), &(0x7f00000003c0)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000003c0)}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000580)={'sit0\x00', <r9=>0x0, 0x80, 0x8, 0x4, 0x8, {{0x1f, 0x4, 0x1, 0x2, 0x7c, 0x68, 0x0, 0x4, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102, {[@cipso={0x86, 0x68, 0x3, [{0x2, 0x6, "548a00ee"}, {0x1, 0x12, "5982041e2ef63c7f09ff01e5c90721ab"}, {0x7, 0x7, "55c182a3cb"}, {0x6, 0xf, "2f1527e145419288fed7fa24aa"}, {0x2, 0xc, "5d65faa97c0ab8d932d7"}, {0x2, 0xd, "0d4da42e0052bf8a206329"}, {0x2, 0xf, "b94292fb79eebac85720afd9e2"}, {0x6, 0xc, "463abdde927ce8928807"}]}]}}}}})
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x57, 0x57, 0x4, [@datasec={0x9, 0x6, 0x0, 0xf, 0x3, [{0x1, 0x1, 0xbbc}, {0x2, 0xfffffff5, 0xc28e}, {0x1, 0x4, 0x8}, {0x2, 0x8f21, 0x3}, {0x3, 0x8730, 0x449e91dc}, {0x3, 0x4, 0x7}], "e1a46c"}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000000700)=""/136, 0x74, 0x88, 0x0, 0x2, 0x10000}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r11=>0x0, 0x74, &(0x7f0000000940)=[{}, {}], 0x10, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b80), 0x4) (async)
r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b80), 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{r4, <r13=>0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)='%pI4   \x00'}, 0x20)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)=@o_path={&(0x7f0000000c80)='./file0\x00', 0x0, 0x10, r4}, 0x18) (async)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)=@o_path={&(0x7f0000000c80)='./file0\x00', 0x0, 0x10, r4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x1d, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x840}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000540)='syzkaller\x00', 0xfffffffd, 0x1000, &(0x7f0000001480)=""/4096, 0x41000, 0x44, '\x00', r9, @fallback=0x23, r10, 0x8, &(0x7f0000000800)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x10, 0xc01, 0xfffffe01}, 0x10, r11, r12, 0x4, &(0x7f0000000d00)=[r13, r14], &(0x7f0000000d40)=[{0x4, 0x3, 0x8, 0x7}, {0x0, 0x2, 0x3, 0xa}, {0x2, 0x3, 0x5, 0xb}, {0x2, 0x8000, 0x10}], 0x10, 0x10}, 0x94)
sendto$inet6(r7, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000140), &(0x7f0000000240)=0x4) (async)
getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000140), &(0x7f0000000240)=0x4)
shutdown(r7, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)

7.468914ms ago: executing program 1 (id=2326):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xd50, 0xffffffffffffff60, &(0x7f0000000380)="b9ff0300600d698cff9e14f08edd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x4}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x124, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0xac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5f, 0x2, "6f28cae7e763e81067d4ceb813e7feb2a199aa4d55a1ab96f08a0f0e794136b12fef25420295cc1e507f98d439d24055b3819ebc8073730523a0a085ad7669c2155f69b15be1a3c2c548d7259b70c08e808f7af3a3406f731c9d6e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x41, 0x3, "5ae3420e80c07506bfd5002f75393ca25f1b4eaf61a166ad9b6b03caed34ec7ca2d030cc7a9c46dec5fa602fdf022276c1d032155f658f98a411e682d7"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4a}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000)

6.727082ms ago: executing program 0 (id=2327):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xff0f}]}}}]}, 0x3c}}, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x10, 0x1402, 0x1, 0x70bd29, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x2000e801}, 0x40)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x1bc, r3, 0x108, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x68, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd68b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x627d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe36f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12a1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77f465c6}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f6b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11a73c27}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe8e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c25}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa074}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a84b970}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47086566}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x431a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32042ae4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a2f804}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bc69e63}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6245}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68d27be7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3668967}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35bf952f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa75}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60b7384f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe09}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x88f927}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6406ea1e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1377f30e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e92}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f2e8eba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x424e79f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5becf04a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b71b796}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49a6d483}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x44}, 0x800)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0b062ebd7000fcdbdf2530693ba985657d6c81000000050035000155c052447e0770c3a1ac1caf0000000005003300000000d121735f32d82dfd47007d0b6aef16ef8da695e82f75cf5e993708996d1e5102c8e2efc2eb06402b5f4f48d6be5a83849a2ab30438"], 0x38}, 0x1, 0x0, 0x0, 0x24008800}, 0x0)

1.41264ms ago: executing program 0 (id=2328):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = accept4(r0, &(0x7f0000000180)=@hci, &(0x7f0000000000)=0x80, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x40, r7, 0x1, 0x70bd2a, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x4040000)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r4, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x804)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="b5af2000000000000000010000000c00018008000400ee"], 0x20}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}}, 0x0)

0s ago: executing program 0 (id=2329):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x15c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x120, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_IE={0xf2, 0x3, "598fb399cd11bb1d7a8711752308e12826f836107cfbc752d44b48317b49bc6c69c8aba4c34ef04bdd399940858d31a90d2a80c20b4c3df25f5f587b8a92a6112a24c1af6172d80d7710c3f960c508dfc2b1a5993f76d19d889bd664626e89964f61fde8163ac244873eb2b6656f107b9420d799fba040fd86185370e65063b8c4b6c7a80b492efe1a00830a94690379339a9f4e1b3ce2cc990d8b6fba851a7ad665a0eae245b4e063ac5b26dd67930dfa4d4e2657a1c3928f867cb8734f7ab5ac5a84d43daefafd3c3c0577211301acc6e29bfd74a61933f23dd1ae409c637accf0155ad27f117992a2a99f5792"}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x800}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x800}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000004)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$6lowpan_control(r1, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg0\x00', <r4=>0x0})
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0xff, 0xa, 0x43a, 0x40004, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file0\x00', 0x0, 0x4008, r1}, 0x18)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0x8001, 0x18}, 0xc)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r3}, @map_idx, @generic={0x40, 0x8, 0xc, 0x6, 0xf7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x7, 0x6c, &(0x7f0000000480)=""/108, 0x41100, 0x0, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000580)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x10, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r6, r7, r8, r9], 0x0, 0x10, 0x8f2}, 0x94)
ioctl$F2FS_IOC_GET_PIN_FILE(r7, 0x8004f50e, &(0x7f00000008c0))
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000900)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000940)=0x14)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x7, &(0x7f0000000980), 0x4)
ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r10, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0], 0x0, 0x13, &(0x7f0000000a80)=[{}, {}], 0x10, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x33, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10)
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r12, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, 0x1404, 0x100, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000)
syz_genetlink_get_family_id$gtp(&(0x7f0000000dc0), r0)
write(r8, &(0x7f0000000e00)="a173fb85abeae9f05f7b4ee3fa91d0663a417887f74d17fffd786309c12c4341973bdb907aeb54bd9c97071932d2a18548bd9ec490fc0d4da4937eac6d492e56cf529cec5b01047c4bd0716d8cea3c9facf17803d1467c6f7f2d80484128749bb5b5806f1d191eb78255df5de2d142dd786502c0187c2ffd098b5b910f7b800090e2268df157e5bb17f581902c10eafcdfb32edf8ec6521e9b131e5113a5fc027daebe03e4c2a8cefe393d014b72e93500c1823a75656fc46e8fbd3d6da2530ce05ee9138f62429f5bb4b01b1a9b307c6dd4f9719ad53952c72f", 0xda)
r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000f00), 0x8)
sendto$l2tp(r13, &(0x7f0000000f40)="5c5d1ebf7e6addc6874900688047d35fa3c2dfe082396617d0ec70428affd5a9a37ef75f8f803e82620c67c62a02ee367779119eae64728614b28cbc19", 0x3d, 0x4040000, &(0x7f0000000f80)={0x2, 0x0, @broadcast, 0x1}, 0x10)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, &(0x7f0000001080)={'gretap0\x00', &(0x7f0000000fc0)={'ip_vti0\x00', <r15=>r4, 0x8, 0x8, 0x9, 0xff, {{0x23, 0x4, 0x1, 0x14, 0x8c, 0x67, 0x0, 0x5, 0x29, 0x0, @remote, @remote, {[@cipso={0x86, 0x33, 0x2, [{0x7, 0xe, "8a181d75ab69051d0415b3ab"}, {0x7, 0x4, "8f8b"}, {0x3, 0xb, "02b19f8ab033c14864"}, {0x1, 0x10, "fbbc6cba3a0c09fb79d44eb8967c"}]}, @ssrr={0x89, 0x1f, 0xcf, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x31}, @remote, @rand_addr=0x64010100, @empty, @private=0xa010101]}, @noop, @ssrr={0x89, 0x1f, 0x31, [@local, @multicast1, @local, @rand_addr=0x64010102, @rand_addr=0x64010100, @remote, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_inet6_SIOCDELRT(r14, 0x890c, &(0x7f00000010c0)={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x3, 0x58, 0x81, 0x100, 0xf, 0x40020000, r15})
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000001140)={0xffffffffffffffa2, 0x4, 0x5, 0x0, 0x8000000000000000, 0x6, 0x7e4e, 0x80}, &(0x7f0000001180)={0x6, 0x2, 0xfffffffffffffffe, 0x9, 0xb324, 0x8000, 0x3e5bdabe, 0x9}, &(0x7f00000011c0)={0xb, 0x2, 0x5, 0x8, 0xffffffffffffff81, 0xff, 0x8, 0x9}, &(0x7f0000001200)={0x0, 0x3938700}, &(0x7f0000001280)={&(0x7f0000001240), 0x8})

kernel console output (not intermixed with test programs):

ticast mode
[   74.742966][ T7849] bridge_slave_1: left promiscuous mode
[   74.745194][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.746188][ T7851] netlink: 'syz.0.463': attribute type 83 has an invalid length.
[   74.753367][ T7849] bond0: (slave bond_slave_0): Releasing backup interface
[   74.757199][ T7849] bond0: (slave bond_slave_1): Releasing backup interface
[   74.763658][ T7849] team0: Port device team_slave_0 removed
[   74.767642][ T7849] team0: Port device team_slave_1 removed
[   74.770059][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.773090][ T7849] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.776520][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.778980][ T7849] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.785060][ T7849] bond0: (slave wlan1): Releasing backup interface
[   74.788314][ T7849] bond2: (slave gretap1): Releasing active interface
[   74.791036][ T7849] gretap1: left allmulticast mode
[   74.890854][ T7865] nbd: couldn't find device at index 536870912
[   75.093160][   T56] block nbd2: Receive control failed (result -104)
[   75.199199][ T7905] trusted_key: syz.0.478 sent an empty control message without MSG_MORE.
[   75.205568][ T7905] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   75.209547][ T7906] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   75.217770][ T7905] bridge4: entered promiscuous mode
[   75.219628][ T7905] bridge4: entered allmulticast mode
[   75.222735][ T7905] team0: Port device bridge4 added
[   75.312676][ T1272] cfg80211: failed to load regulatory.db
[   75.646247][ T7918] bond0: (slave wlan1): Releasing backup interface
[   76.067188][ T7918] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   76.120634][ T7918] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   76.124347][ T7918] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   76.158234][ T7941] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   76.291312][ T7973] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   76.357363][ T7984] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   76.412202][ T8008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.721765][ T8060] dummy0: left promiscuous mode
[   76.724598][ T8060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   76.753208][ T8055] wlan1 speed is unknown, defaulting to 1000
[   76.944077][ T8073] syz_tun: entered allmulticast mode
[   76.952174][ T8073] dvmrp8: entered allmulticast mode
[   76.967140][ T8073] wlan1 speed is unknown, defaulting to 1000
[   77.056727][ T8072] syz_tun: left allmulticast mode
[   77.058624][ T8072] dvmrp8: left allmulticast mode
[   77.144773][ T8082] wlan1 speed is unknown, defaulting to 1000
[   77.371394][ T8089] __nla_validate_parse: 52 callbacks suppressed
[   77.371404][ T8089] netlink: 276 bytes leftover after parsing attributes in process `syz.2.521'.
[   77.378104][ T8089] netlink: 36 bytes leftover after parsing attributes in process `syz.2.521'.
[   77.537832][ T8101] team0: Port device bridge4 removed
[   77.600071][ T8110] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   77.609872][ T8110] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.617008][ T8110] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   77.626905][  T792] wlan1 speed is unknown, defaulting to 1000
[   77.628492][ T8110] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   77.629291][  T792] syz0: Port: 1 Link ACTIVE
[   77.632951][ T8110] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   77.643986][ T8112] bond0: (slave wlan1): Releasing backup interface
[   77.649233][  T792] wlan1 speed is unknown, defaulting to 1000
[   77.806875][ T8118] validate_nla: 7 callbacks suppressed
[   77.806889][ T8118] netlink: 'syz.1.530': attribute type 1 has an invalid length.
[   77.814537][ T8118] netlink: 224 bytes leftover after parsing attributes in process `syz.1.530'.
[   78.319196][ T8131] netlink: 'syz.0.531': attribute type 1 has an invalid length.
[   78.323102][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'.
[   78.326047][ T8131] netlink: 32 bytes leftover after parsing attributes in process `syz.0.531'.
[   78.331287][ T8131] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[   78.335277][ T8131] gretap2: entered promiscuous mode
[   78.339146][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.531'.
[   78.435302][ T8141] netlink: 'syz.0.533': attribute type 13 has an invalid length.
[   78.438074][ T8141] netlink: 'syz.0.533': attribute type 17 has an invalid length.
[   78.450143][ T8141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.456797][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.534'.
[   78.477263][ T8138] wlan1 speed is unknown, defaulting to 1000
[   78.541792][ T8153] netlink: 'syz.1.538': attribute type 1 has an invalid length.
[   78.544364][ T8153] netlink: 224 bytes leftover after parsing attributes in process `syz.1.538'.
[   78.561242][ T8151] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   78.564601][ T8151] netlink: 14 bytes leftover after parsing attributes in process `syz.2.537'.
[   78.567675][ T8158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.539'.
[   78.575515][ T8151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.580198][ T8151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.586019][ T8151] bond0 (unregistering): (slave batadv0): Releasing backup interface
[   78.590771][ T8151] bond0 (unregistering): (slave dummy0): Releasing backup interface
[   78.594130][ T8151] bond0 (unregistering): Released all slaves
[   78.767318][ T8175] netlink: 'syz.1.544': attribute type 21 has an invalid length.
[   79.050527][ T8222] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   79.071586][ T8228] netlink: 'syz.1.558': attribute type 1 has an invalid length.
[   79.074372][ T8228] netlink: 'syz.1.558': attribute type 3 has an invalid length.
[   79.077621][ T8229] netlink: 'syz.1.558': attribute type 1 has an invalid length.
[   79.081847][ T8229] netlink: 'syz.1.558': attribute type 3 has an invalid length.
[   79.127935][ T8237] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[   79.130398][ T8237] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[   79.151886][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.156432][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.315653][ T8273] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   79.318794][ T8273] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   79.323506][ T8273] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   79.540654][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   79.672677][ T8326] wlan1 speed is unknown, defaulting to 1000
[   79.711897][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   79.838213][ T8342] ip6gre1: entered allmulticast mode
[   79.847634][ T8343] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   79.851567][ T8342] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   79.884265][ T8346] bond0: (slave wlan1): Releasing backup interface
[   80.087077][ T8360] wlan1 speed is unknown, defaulting to 1000
[   80.331753][ T8380] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   80.380985][ T8387] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   80.384847][ T8387] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.414697][ T8389] openvswitch: netlink: Flow actions attr not present in new flow.
[   80.496251][ T8400] sctp: [Deprecated]: syz.2.609 (pid 8400) Use of int in max_burst socket option deprecated.
[   80.496251][ T8400] Use struct sctp_assoc_value instead
[   80.524607][ T8405] sctp: [Deprecated]: syz.0.612 (pid 8405) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.524607][ T8405] Use struct sctp_sack_info instead
[   80.562412][ T8414] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.572843][ T8414] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.814427][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.818463][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.837394][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.840152][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.871985][ T8427] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   80.913189][ T8424] wlan1 speed is unknown, defaulting to 1000
[   81.008085][ T8446] openvswitch: netlink: VXLAN extension 2 out of range max 1
[   81.039658][ T8459] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   81.043713][ T8456] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.179980][ T8478] openvswitch: netlink: nsh attribute has 123 unknown bytes.
[   81.183255][ T8478] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.288464][ T8488] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   81.309634][ T8492] bond0: (slave wlan1): Opening slave failed
[   81.309648][   T13] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:0a02:11ff:fe00:0001 error=-28
[   81.315504][   T13] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:0a02:11ff:fe00:0001 error=-28
[   81.568749][ T8512] 8021q: adding VLAN 0 to HW filter on device bond4
[   81.575592][ T8512] macvlan2: entered promiscuous mode
[   81.577356][ T8512] macvlan2: entered allmulticast mode
[   81.579510][ T8512] bond4: entered promiscuous mode
[   81.582005][ T8512] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   81.584782][ T8512] bond4: left promiscuous mode
[   82.000957][ T8523] block nbd2: NBD_DISCONNECT
[   82.002650][ T8523] block nbd2: Send disconnect failed -32
[   82.004718][ T8523] block nbd2: shutting down sockets
[   82.007791][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.010910][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[   82.014077][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.017713][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[   82.021007][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.024824][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[   82.027352][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.030360][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[   82.033462][ T5850] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.036376][ T5850] Buffer I/O error on dev nbd2, logical block 0, async page read
[   82.038958][ T5850] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.042580][ T5850] Buffer I/O error on dev nbd2, logical block 1, async page read
[   82.045475][ T5850] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.048438][ T5850] Buffer I/O error on dev nbd2, logical block 2, async page read
[   82.051115][ T5850] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.054108][ T5850] Buffer I/O error on dev nbd2, logical block 3, async page read
[   82.056882][ T5850] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.059815][ T5850] Buffer I/O error on dev nbd2, logical block 0, async page read
[   82.062967][ T5850] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.066057][ T5850] Buffer I/O error on dev nbd2, logical block 1, async page read
[   82.069918][ T5850] ldm_validate_partition_table(): Disk read failed.
[   82.073700][ T8531] lo: entered allmulticast mode
[   82.076032][ T8531] lo: left allmulticast mode
[   82.080209][ T8532] openvswitch: netlink: Message has 24 unknown bytes.
[   82.081289][ T5850] Dev nbd2: unable to read RDB block 0
[   82.085251][ T5850]  nbd2: unable to read partition table
[   82.097970][ T5850] ldm_validate_partition_table(): Disk read failed.
[   82.101719][ T5850] Dev nbd2: unable to read RDB block 0
[   82.105651][ T5850]  nbd2: unable to read partition table
[   82.426249][ T8573] __nla_validate_parse: 61 callbacks suppressed
[   82.426262][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'.
[   82.493929][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'.
[   82.496868][ T8585] netlink: 844 bytes leftover after parsing attributes in process `syz.0.662'.
[   82.516545][ T8585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.662'.
[   82.606550][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'.
[   82.626119][ T8599] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   82.641031][ T8604] netlink: 27 bytes leftover after parsing attributes in process `syz.0.668'.
[   82.646375][ T8607] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.649489][ T8607] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.721524][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'.
[   82.766524][ T8619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.672'.
[   82.773277][ T8619] netlink: 224 bytes leftover after parsing attributes in process `syz.0.672'.
[   82.847637][ T8645] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   82.867482][ T8641] validate_nla: 13 callbacks suppressed
[   82.867493][ T8641] netlink: 'syz.1.678': attribute type 9 has an invalid length.
[   82.874398][ T8641] netlink: 224 bytes leftover after parsing attributes in process `syz.1.678'.
[   82.888444][ T8649] syzkaller1: entered promiscuous mode
[   82.891256][ T8649] syzkaller1: entered allmulticast mode
[   82.898668][ T8649] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   83.099966][ T8680] wlan1 speed is unknown, defaulting to 1000
[   83.852762][ T8699] netlink: 'syz.2.689': attribute type 1 has an invalid length.
[   83.863059][ T8699] bond6: (slave erspan0): Releasing active interface
[   83.906852][ T8710] ip6tnl0: entered allmulticast mode
[   83.919320][ T8710] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20000
[   83.926992][ T8709] netlink: 'syz.2.691': attribute type 9 has an invalid length.
[   83.959617][ T8719] netlink: 'syz.1.694': attribute type 1 has an invalid length.
[   83.979771][ T8719] 8021q: adding VLAN 0 to HW filter on device bond5
[   84.020643][ T8719] bond5: (slave veth5): Enslaving as an active interface with a down link
[   84.027766][ T8719] gretap1: entered promiscuous mode
[   84.048087][ T8724] netlink: 'syz.0.696': attribute type 6 has an invalid length.
[   84.056639][ T8719] bond5: (slave gretap1): making interface the new active one
[   84.060011][ T8719] bond5: (slave gretap1): Enslaving as an active interface with an up link
[   84.082045][ T8724] netlink: 'syz.0.696': attribute type 12 has an invalid length.
[   84.090480][ T8719] macvlan0: entered promiscuous mode
[   84.092352][ T8719] macvlan0: entered allmulticast mode
[   84.094501][ T8719] bond5: entered promiscuous mode
[   84.096568][ T8719] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   84.101152][ T8719] bond5: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   84.107067][ T8719] bond5: left promiscuous mode
[   84.113477][ T8728] netlink: 'syz.2.697': attribute type 2 has an invalid length.
[   84.120120][ T8728] : entered promiscuous mode
[   84.158012][ T8736] bridge3: port 1(veth9) entered blocking state
[   84.160224][ T8736] bridge3: port 1(veth9) entered disabled state
[   84.163811][ T8736] veth9: entered allmulticast mode
[   84.167878][ T8736] veth9: entered promiscuous mode
[   84.173309][ T8736] bridge3: port 2(veth0_to_bond) entered blocking state
[   84.185311][ T8736] bridge3: port 2(veth0_to_bond) entered disabled state
[   84.187739][ T8736] veth0_to_bond: entered allmulticast mode
[   84.190268][ T8736] veth0_to_bond: entered promiscuous mode
[   84.196886][ T8736] vlan3: entered allmulticast mode
[   84.198618][ T8736] veth1: entered allmulticast mode
[   84.200663][ T8736] bridge3: port 3(vlan3) entered blocking state
[   84.202919][ T8736] bridge3: port 3(vlan3) entered disabled state
[   84.205722][ T8736] vlan3: entered promiscuous mode
[   84.207507][ T8736] veth1: entered promiscuous mode
[   84.285974][ T8757] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.308994][ T8757] tipc: Disabling bearer <eth:syzkaller0>
[   85.069142][ T8746] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   85.391493][ T8823] wlan1 speed is unknown, defaulting to 1000
[   85.652969][ T8844] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000
[   85.679939][ T8846] bond5: (slave veth5): Releasing active interface
[   85.682805][ T8846] bond5: (slave veth5): the permanent HWaddr of slave - 2a:22:fe:21:20:20 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   85.690231][ T8846] bond5: (slave gretap1): Releasing active interface
[   85.726468][ T8846] team0: Mode changed to "activebackup"
[   86.267669][ T8880] netlink: 'syz.2.734': attribute type 11 has an invalid length.
[   86.280397][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[   86.904352][ T8899] wlan1 speed is unknown, defaulting to 1000
[   86.955538][ T8902] ip6gretap0: entered promiscuous mode
[   87.642223][ T8921] __nla_validate_parse: 27 callbacks suppressed
[   87.642232][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'.
[   87.698527][ T8922] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   87.815576][ T8935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.743'.
[   87.880009][ T8957] netlink: 'syz.1.745': attribute type 3 has an invalid length.
[   87.888225][ T8957] netlink: 'syz.1.745': attribute type 1 has an invalid length.
[   87.892631][ T8957] netlink: 220 bytes leftover after parsing attributes in process `syz.1.745'.
[   87.941077][ T8971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.748'.
[   87.944125][ T8971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.748'.
[   88.153941][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'.
[   88.157925][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'.
[   88.189247][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.751'.
[   88.203659][ T8993] netlink: 'syz.1.751': attribute type 1 has an invalid length.
[   88.207223][ T8993] net_ratelimit: 6 callbacks suppressed
[   88.207234][ T8993] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   88.317383][ T9006] netlink: 'syz.1.754': attribute type 7 has an invalid length.
[   88.321903][ T9006] netlink: 224 bytes leftover after parsing attributes in process `syz.1.754'.
[   88.526447][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'.
[   88.628472][ T9015] netlink: 'syz.0.756': attribute type 1 has an invalid length.
[   88.884166][ T9036] netlink: 'syz.2.762': attribute type 1 has an invalid length.
[   90.493969][ T9127] syz_tun: entered allmulticast mode
[   90.498025][ T9127] dvmrp8: entered allmulticast mode
[   90.506219][ T9127] wlan1 speed is unknown, defaulting to 1000
[   90.556617][ T9129] netlink: 'syz.0.772': attribute type 23 has an invalid length.
[   90.568771][ T9128] netlink: 'syz.0.772': attribute type 23 has an invalid length.
[   90.589171][ T9126] syz_tun: left allmulticast mode
[   90.591776][ T9126] dvmrp8: left allmulticast mode
[   90.736265][ T9136] macvlan2: entered promiscuous mode
[   90.738170][ T9136] macvlan2: entered allmulticast mode
[   90.744496][ T9136] bond5: (slave macvlan2): Opening slave failed
[   90.924225][ T9155] netlink: 'syz.2.781': attribute type 16 has an invalid length.
[   90.932281][ T9155] netlink: 'syz.2.781': attribute type 17 has an invalid length.
[   91.159927][ T9155] tipc: Resetting bearer <eth:syzkaller0>
[   91.178697][ T9159] syzkaller1: entered promiscuous mode
[   91.181661][ T9159] syzkaller1: entered allmulticast mode
[   91.185994][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.191053][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.195677][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.199099][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.294034][ T9173] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   91.307412][ T9175] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) !
[   91.314129][ T9175] tipc: Invalid UDP bearer configuration
[   91.314152][ T9175] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   91.454185][ T9182] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.531999][ T9189] _Z`Ԁ@S: entered promiscuous mode
[   92.030203][ T9218] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.245594][ T9229] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[   92.249149][ T9229] gretap2: entered promiscuous mode
[   92.260881][ T9233] sctp: [Deprecated]: syz.1.804 (pid 9233) Use of struct sctp_assoc_value in delayed_ack socket option.
[   92.260881][ T9233] Use struct sctp_sack_info instead
[   92.313350][ T9239] openvswitch: netlink: IP tunnel attribute has 180 unknown bytes.
[   92.368822][ T9245] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   92.377294][ T9245] bond1: option mode: unable to set because the bond device is up
[   92.382728][ T9246] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.391854][ T9246] veth0_to_bond: left allmulticast mode
[   92.394197][ T9246] veth0_to_bond: left promiscuous mode
[   92.396503][ T9246] bridge3: port 2(veth0_to_bond) entered disabled state
[   92.407042][ T9246] team0: Port device team_slave_0 removed
[   92.410867][ T9246] team0: Port device team_slave_1 removed
[   92.414161][ T9246] bond2: (slave gretap1): Releasing active interface
[   92.419201][ T9246] gretap1: left promiscuous mode
[   92.422284][ T9246] gretap1: left allmulticast mode
[   92.427054][ T9246] team0: Port device bond4 removed
[   92.430092][ T9246] team0: Port device bond5 removed
[   92.433092][ T9246] bond6: (slave veth7): Releasing active interface
[   92.436580][ T9246] veth9: left allmulticast mode
[   92.438781][ T9246] veth9: left promiscuous mode
[   92.441999][ T9246] bridge3: port 1(veth9) entered disabled state
[   92.445879][ T9246] vlan3: left promiscuous mode
[   92.448034][ T9246] veth1: left promiscuous mode
[   92.450367][ T9246] bridge3: port 3(vlan3) entered disabled state
[   92.455942][ T9248] tipc: Enabled bearer <eth:gre0>, priority 10
[   92.469295][ T9248] wlan1 speed is unknown, defaulting to 1000
[   92.514988][ T9182] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.568675][ T9182] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.652172][ T9182] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.716741][ T5855] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.726298][ T5886] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.736635][ T5886] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.753427][ T5886] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.764198][ T9262] __nla_validate_parse: 22 callbacks suppressed
[   92.764208][ T9262] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.814'.
[   92.872836][ T9270] IPVS: Error connecting to the multicast addr
[   92.877740][ T9270] syzkaller1: entered promiscuous mode
[   92.879612][ T9270] syzkaller1: entered allmulticast mode
[   92.987385][ T9283] openvswitch: netlink: IP tunnel dst address not specified
[   93.201439][ T9295] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.824'.
[   93.221167][ T9299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.825'.
[   93.224485][ T9299] openvswitch: netlink: Flow key attr not present in new flow.
[   93.243573][ T9291] validate_nla: 8 callbacks suppressed
[   93.243581][ T9291] netlink: 'syz.0.822': attribute type 5 has an invalid length.
[   93.313807][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.831'.
[   93.351870][ T9329] openvswitch: netlink: Key 25 has unexpected len 2 expected 16
[   93.353202][ T9331] netlink: 'syz.2.835': attribute type 1 has an invalid length.
[   93.358204][ T9330] netlink: 'syz.2.835': attribute type 1 has an invalid length.
[   93.369497][ T9330] gretap3: entered allmulticast mode
[   93.374856][ T9330] bond0: (slave gretap3): making interface the new active one
[   93.377679][ T9330] bond0: (slave gretap3): Enslaving as an active interface with an up link
[   93.433968][ T9340] netlink: 'syz.0.838': attribute type 1 has an invalid length.
[   93.447400][ T9342] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.839'.
[   93.459931][ T9340] bond6: (slave geneve2): making interface the new active one
[   93.466317][ T9340] bond6: (slave geneve2): Enslaving as an active interface with an up link
[   93.469956][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[   93.475723][ T9342] netlink: 'syz.2.839': attribute type 10 has an invalid length.
[   93.482233][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[   93.485609][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[   93.489620][ T9340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.838'.
[   93.494416][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[   93.499448][ T9340] 8021q: adding VLAN 0 to HW filter on device bond6
[   93.502605][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.840'.
[   93.582905][ T9347] erspan0: entered promiscuous mode
[   93.588983][ T9347] erspan0: left promiscuous mode
[   93.603777][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.843'.
[   93.607534][ T9351] netlink: 'syz.1.843': attribute type 2 has an invalid length.
[   93.611049][ T9351] netlink: 'syz.1.843': attribute type 1 has an invalid length.
[   93.614277][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'.
[   93.639819][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.841'.
[   93.680412][ T9357] netlink: 'syz.0.844': attribute type 1 has an invalid length.
[   93.711791][ T9365] vlan4: entered promiscuous mode
[   93.713996][ T9365] bond0: entered promiscuous mode
[   93.716084][ T9365] gretap3: entered promiscuous mode
[   93.749498][ T9368] netlink: 'syz.1.846': attribute type 1 has an invalid length.
[   93.862633][ T9379] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   93.873192][ T9379] netlink: 'syz.2.851': attribute type 1 has an invalid length.
[   93.948445][ T9393] tipc: Resetting bearer <eth:syzkaller0>
[   94.003866][ T9400] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   94.106421][ T9422] bond1: option mode: unable to set because the bond device is up
[   94.113625][ T9422] bond0: (slave gretap3): Releasing active interface
[   94.116244][ T9422] gretap3: left promiscuous mode
[   94.137469][ T9425] dummy0: entered promiscuous mode
[   94.139725][ T9425] team0: Port device dummy0 added
[   94.144211][ T9425] dummy0: left promiscuous mode
[   94.146336][ T9425] team0: Port device dummy0 removed
[   94.149231][ T9425] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   94.975758][ T9511] openvswitch: netlink: Flow key attr not present in new flow.
[   94.977422][ T9510] openvswitch: netlink: Flow key attr not present in new flow.
[   95.017953][ T9521] block nbd0: must specify backend
[   95.147127][ T9541] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   95.753981][ T9640] openvswitch: netlink: Multiple metadata blocks provided
[   95.877209][ T9662] tipc: Resetting bearer <eth:gre0>
[   95.900009][ T9665] vlan0: entered promiscuous mode
[   96.006128][ T9688] sctp: [Deprecated]: syz.1.897 (pid 9688) Use of struct sctp_assoc_value in delayed_ack socket option.
[   96.006128][ T9688] Use struct sctp_sack_info instead
[   96.089904][ T9696] 8021q: VLANs not supported on ipvlan1
[   96.265627][   T54] Bluetooth: hci2: link tx timeout
[   96.267471][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   96.611607][ T9736] openvswitch: netlink: IP tunnel TTL not specified.
[   96.633089][ T9740] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   96.685622][  T127] block nbd0: Possible stuck request ffff88801ff28000: control (read@0,1024B). Runtime 30 seconds
[   96.689974][  T127] block nbd0: Possible stuck request ffff88801ff28200: control (read@1024,1024B). Runtime 30 seconds
[   96.694870][  T127] block nbd0: Possible stuck request ffff88801ff28400: control (read@2048,1024B). Runtime 30 seconds
[   96.699230][  T127] block nbd0: Possible stuck request ffff88801ff28600: control (read@3072,1024B). Runtime 30 seconds
[   96.719638][ T9748] bond6: (slave geneve2): Releasing active interface
[   96.724711][ T5886] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[   96.730607][ T5886] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[   96.733861][ T5886] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[   96.736863][ T5886] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[   96.740041][ T9748] team0: Mode changed to "broadcast"
[   96.747032][ T9748] tipc: Enabled bearer <eth:team0>, priority 0
[   96.816319][ T9751] bond0: (slave syz_tun): Releasing backup interface
[   96.818635][ T9751] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   96.828044][ T9754] can: request_module (can-proto-0) failed.
[   96.828126][ T9751] bond0: (slave dummy0): Releasing backup interface
[   96.839035][ T9751] bond0: (slave wlan1): refused to change device type
[   96.842971][ T9751] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   96.846323][ T9751] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   97.070801][ T9772] k*]: entered promiscuous mode
[   97.074572][ T9772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.205943][ T9789] wlan1 speed is unknown, defaulting to 1000
[   97.309535][ T9797] netlink: zone id is out of range
[   97.314009][ T9797] netlink: zone id is out of range
[   97.881464][ T9853] ipvlan3: entered promiscuous mode
[   97.961197][ T9859] __nla_validate_parse: 40 callbacks suppressed
[   97.961206][ T9859] netlink: 32 bytes leftover after parsing attributes in process `syz.2.948'.
[   98.025528][ T9874] netlink: 96 bytes leftover after parsing attributes in process `syz.2.951'.
[   98.029263][ T9874] netlink: 256 bytes leftover after parsing attributes in process `syz.2.951'.
[   98.053574][ T9876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.952'.
[   98.135562][ T9890] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   98.146566][ T9890] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   98.224166][ T9894] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   98.228121][ T9894] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[   98.232459][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.958'.
[   98.236573][ T9894] netlink: 608 bytes leftover after parsing attributes in process `syz.2.958'.
[   98.280501][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[   98.316210][ T9899] "syz.2.960" (9899) uses obsolete ecb(arc4) skcipher
[   98.409525][ T9910] net_ratelimit: 5 callbacks suppressed
[   98.409539][ T9910] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[   98.409952][ T9911] netlink: 256 bytes leftover after parsing attributes in process `syz.2.962'.
[   98.575279][ T9918] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[   98.589382][ T9915] netlink: 40 bytes leftover after parsing attributes in process `syz.0.965'.
[   98.614945][ T9922] validate_nla: 15 callbacks suppressed
[   98.614954][ T9922] netlink: 'syz.0.967': attribute type 4 has an invalid length.
[   98.661880][ T9929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.969'.
[   98.705675][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.972'.
[   98.709431][ T9933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.714101][ T9935] netlink: 'syz.0.973': attribute type 29 has an invalid length.
[   98.728158][ T9937] netlink: 'syz.0.974': attribute type 83 has an invalid length.
[   98.773278][ T9945] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20002
[   99.525043][ T9967] geneve3: entered promiscuous mode
[   99.527361][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.529907][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.532880][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.535469][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.551324][ T9970] netlink: 'syz.1.984': attribute type 1 has an invalid length.
[   99.569548][ T9974] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   99.707909][ T9986] netlink: 'syz.1.989': attribute type 10 has an invalid length.
[   99.712367][ T9986] bond0: (slave wlan1): refused to change device type
[   99.716948][ T9986] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   99.732024][ T9989] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   99.736560][ T9988] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   99.948615][T10012] syzkaller0: left promiscuous mode
[   99.951046][T10012] syzkaller0: left allmulticast mode
[   99.955182][ T1096] smc: removing ib device syz0
[  100.785576][T10035] erspan0: entered allmulticast mode
[  100.789456][T10035] dvmrp8: entered allmulticast mode
[  100.823330][T10034] erspan0: left allmulticast mode
[  100.825586][T10034] dvmrp8: left allmulticast mode
[  101.155032][T10074] netlink: 'syz.1.1015': attribute type 10 has an invalid length.
[  101.504846][T10110] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.544540][T10115] netlink: 'syz.1.1027': attribute type 3 has an invalid length.
[  101.549460][T10115] erspan0: entered allmulticast mode
[  101.571806][T10115] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  101.575522][T10115] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  101.592133][T10115] ip6tnl0: left allmulticast mode
[  101.594787][T10115] veth0_to_team: left promiscuous mode
[  101.596468][T10115] veth0_to_team: left allmulticast mode
[  101.598962][T10115] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  101.611581][T10115] veth3: left promiscuous mode
[  101.613790][T10115] gretap1: left promiscuous mode
[  101.616312][T10115] geneve3: left promiscuous mode
[  101.618805][ T9798] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.624384][T10114] erspan0: left allmulticast mode
[  101.626163][ T9798] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.630240][ T9798] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.637386][ T9798] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.656989][T10124] netlink: 'syz.1.1030': attribute type 10 has an invalid length.
[  101.657022][T10125] netlink: 'syz.1.1030': attribute type 10 has an invalid length.
[  101.659606][T10124] bond0: (slave wlan1): refused to change device type
[  101.664962][T10125] bond0: (slave wlan1): refused to change device type
[  101.833455][T10153] netlink: 'syz.1.1037': attribute type 5 has an invalid length.
[  101.839449][T10153] geneve4: entered promiscuous mode
[  101.841992][T10153] geneve4: entered allmulticast mode
[  101.844977][ T9798] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  101.847533][ T9798] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  101.852891][T10152] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  101.893349][T10152] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  101.958241][ T5855] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  101.964908][ T9798] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  101.972431][ T5855] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  101.977582][ T5855] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  102.114433][T10178] block nbd1: Unsupported socket: shutdown callout must be supported.
[  102.497129][T10217] lo: entered allmulticast mode
[  102.499078][T10217] lo: left allmulticast mode
[  102.626968][T10232] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.635046][T10235] team0: Port device dummy0 added
[  102.637039][T10235] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  102.685688][T10232] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.732434][T10232] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.772406][T10232] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.819691][ T5855] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.825644][ T5855] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.831385][ T5855] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.838066][ T5855] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.921381][T10263] tipc: Trying to set illegal importance in message
[  103.498057][T10249] __nla_validate_parse: 19 callbacks suppressed
[  103.498072][T10249] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1061'.
[  103.535664][T10261] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1062'.
[  103.703012][T10268] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1064'.
[  104.452942][T10324] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  104.467961][T10314] infiniband syz!: set down
[  104.470011][T10314] infiniband syz!: added team_slave_0
[  104.488545][T10314] RDS/IB: syz!: added
[  104.492151][T10314] smc: adding ib device syz! with port count 1
[  104.494628][T10314] smc:    ib device syz! port 1 has pnetid 
[  104.686133][T10334] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1081'.
[  104.689554][T10335] xfrm0: entered promiscuous mode
[  104.693775][T10335] xfrm0: entered allmulticast mode
[  104.791909][T10345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1085'.
[  104.835821][T10352] team0: Port device dummy0 removed
[  104.839581][T10352] rdma_op ffff888032a951f0 conn xmit_rdma 0000000000000000
[  104.846753][T10352] validate_nla: 72 callbacks suppressed
[  104.846760][T10352] netlink: 'syz.2.1084': attribute type 10 has an invalid length.
[  104.861066][T10352] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  105.025190][T10368] _Z`Ԁ@: entered promiscuous mode
[  105.046219][T10371] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.149324][T10371] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.204649][T10371] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.255333][T10371] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.351447][T10384] netlink: 'syz.1.1096': attribute type 1 has an invalid length.
[  105.353911][T10384] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1096'.
[  105.359159][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1096'.
[  105.371001][T10384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1096'.
[  105.398815][T10386] Unsupported ieee802154 address type: 0
[  105.445541][T10390] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  105.501755][T10390] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  105.552907][T10390] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  105.593359][T10390] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  105.652656][ T5869] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  105.656261][ T5869] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  105.659742][T10392] netlink: 'syz.2.1099': attribute type 1 has an invalid length.
[  105.664547][T10392] netlink: 'syz.2.1099': attribute type 1 has an invalid length.
[  105.670192][ T5886] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  105.673670][ T5886] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  105.679255][T10392] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  105.734666][T10398] netlink: 'syz.1.1101': attribute type 1 has an invalid length.
[  105.737095][T10398] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.754177][T10400] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1102'.
[  105.757162][T10400] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  105.781617][T10402] netlink: 'syz.1.1103': attribute type 10 has an invalid length.
[  105.785287][T10402] bond0: (slave wlan1): Opening slave failed
[  105.789216][T10402] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  105.868254][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'.
[  106.592530][T10437] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  106.596311][T10437] geneve1: entered allmulticast mode
[  107.535737][T10472] sctp: [Deprecated]: syz.2.1124 (pid 10472) Use of int in maxseg socket option.
[  107.535737][T10472] Use struct sctp_assoc_value instead
[  107.757908][T10493] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  107.763076][T10493] syzkaller0: entered promiscuous mode
[  107.765187][T10493] syzkaller0: entered allmulticast mode
[  107.803516][ T5869] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.820683][ T5869] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.823882][ T5869] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.827026][ T5869] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.861468][T10503] netlink: zone id is out of range
[  107.865763][T10503] netlink: zone id is out of range
[  107.867934][T10503] netlink: zone id is out of range
[  107.870153][T10503] netlink: zone id is out of range
[  107.872472][T10503] netlink: zone id is out of range
[  107.874781][T10503] netlink: zone id is out of range
[  107.876671][T10503] netlink: zone id is out of range
[  108.187178][T10537] netlink: 'syz.2.1139': attribute type 1 has an invalid length.
[  108.203232][T10537] 8021q: adding VLAN 0 to HW filter on device bond7
[  108.445316][T10618] IPVS: set_ctl: invalid protocol: 115 172.30.1.2:20003
[  108.532477][T10626] delete_channel: no stack
[  108.733253][T10642] __nla_validate_parse: 11 callbacks suppressed
[  108.733267][T10642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'.
[  108.786861][T10649] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  108.887601][T10662] netlink: 'syz.2.1167': attribute type 1 has an invalid length.
[  108.890191][T10662] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1167'.
[  108.893895][T10662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1167'.
[  108.898767][T10662] netlink: 'syz.2.1167': attribute type 1 has an invalid length.
[  108.909164][T10662] 8021q: adding VLAN 0 to HW filter on device bond8
[  108.928035][T10662] 8021q: adding VLAN 0 to HW filter on device bond8
[  108.933066][T10662] bond8: (slave vcan0): The slave device specified does not support setting the MAC address
[  108.939624][T10662] bond8: (slave vcan0): Error -95 calling set_mac_address
[  108.961428][T10658] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  108.964819][T10658] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  108.967986][T10658] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  109.086727][T10672] netlink: 'syz.2.1170': attribute type 13 has an invalid length.
[  109.099715][T10672] erspan0: left allmulticast mode
[  109.119968][T10672] 8021q: adding VLAN 0 to HW filter on device team0
[  109.674871][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'.
[  109.774061][T10687] tap0: tun_chr_ioctl cmd 1074025681
[  109.873913][T10694] validate_nla: 3 callbacks suppressed
[  109.873923][T10694] netlink: 'syz.1.1175': attribute type 3 has an invalid length.
[  109.878508][T10693] team0: Port device dummy0 added
[  109.880739][T10694] netlink: 'syz.1.1175': attribute type 1 has an invalid length.
[  109.883507][T10694] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1175'.
[  109.887666][T10693] netlink: 'syz.2.1176': attribute type 10 has an invalid length.
[  109.891584][T10693] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  110.030578][T10693] team0: Failed to send options change via netlink (err -105)
[  110.033882][T10693] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  110.037721][T10693] team0: Port device dummy0 removed
[  110.469081][T10698] netlink: 'syz.1.1177': attribute type 1 has an invalid length.
[  110.559382][T10705] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1178'.
[  110.566764][T10705] team0: entered allmulticast mode
[  110.601569][T10707] raw_sendmsg: syz.1.1179 forgot to set AF_INET. Fix it!
[  110.621395][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'.
[  110.641378][T10711] netlink: 'syz.1.1181': attribute type 1 has an invalid length.
[  110.651831][T10711] bond6: (slave gretap2): making interface the new active one
[  110.654615][T10711] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  110.833370][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1187'.
[  110.902230][T10730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1188'.
[  110.905642][T10730] net_ratelimit: 29 callbacks suppressed
[  110.905654][T10730] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  110.934035][T10743] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1189'.
[  110.964643][T10743] syzkaller1: entered promiscuous mode
[  110.966523][T10743] syzkaller1: entered allmulticast mode
[  111.331432][T10755] nbd: device at index 2 is going down
[  111.358344][T10761] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  111.361103][T10761] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  111.534415][T10776] netlink: 'syz.1.1199': attribute type 9 has an invalid length.
[  111.715372][T10796] netlink: 'syz.2.1205': attribute type 5 has an invalid length.
[  111.718432][T10796] netlink: 'syz.2.1205': attribute type 7 has an invalid length.
[  111.723901][T10796] : entered promiscuous mode
[  111.804658][T10803] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.835352][T10803] netlink: 'syz.2.1208': attribute type 9 has an invalid length.
[  111.873472][T10812] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.877179][T10812] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  112.650706][T10832] netlink: 'syz.1.1217': attribute type 1 has an invalid length.
[  112.653531][T10832] nbd: error processing sock list
[  112.655346][T10832] block nbd1: shutting down sockets
[  112.676961][T10834] 8021q: adding VLAN 0 to HW filter on device bond7
[  112.682985][T10835] bond7: (slave ip6gretap1): making interface the new active one
[  112.686431][T10835] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link
[  112.904928][T10853] 8021q: adding VLAN 0 to HW filter on device bond1
[  113.272096][T10865] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  113.280866][T10865] bond0 (unregistering): Released all slaves
[  113.407920][T10878] tipc: New replicast peer: 0.0.0.0
[  113.598783][T10893] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  113.685311][T10897] syzkaller0: left promiscuous mode
[  113.687550][T10897] syzkaller0: left allmulticast mode
[  113.738805][T10906] openvswitch: netlink: Message has 4 unknown bytes.
[  113.761812][T10910] __nla_validate_parse: 10 callbacks suppressed
[  113.761824][T10910] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1243'.
[  113.859012][T10923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1245'.
[  113.875341][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'.
[  113.934042][T10933] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1246'.
[  114.151635][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1248'.
[  114.327369][T10951] netlink: 824 bytes leftover after parsing attributes in process `syz.1.1253'.
[  114.402867][T10966] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1257'.
[  114.457461][T10974] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1260'.
[  114.463268][T10969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1258'.
[  114.467163][T10969] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073491447809)
[  114.484337][T10969] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1258'.
[  114.582849][T10989] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.752761][T11013] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  114.755967][T11013] syzkaller0: entered promiscuous mode
[  114.758284][T11013] syzkaller0: entered allmulticast mode
[  114.913470][T11030] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  114.935424][T11032] validate_nla: 10 callbacks suppressed
[  114.935433][T11032] netlink: 'syz.1.1278': attribute type 10 has an invalid length.
[  114.941847][T11032] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  114.944489][T11032] bond0: (slave wlan1): Opening slave failed
[  115.002387][T11044] tipc: Resetting bearer <eth:team0>
[  115.028305][T11044] team0: Unable to change to the same mode the team is in
[  115.033165][T11044] vlan0: entered promiscuous mode
[  115.045185][T11044] team0: Port device vlan0 added
[  115.049163][T11044] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  115.083151][T11063] netlink: 'syz.0.1281': attribute type 9 has an invalid length.
[  115.214613][T11104] workqueue: Failed to create a rescuer kthread for wq "nfc21_nci_rx_wq": -EINTR
[  115.705139][T11224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.733021][T11229] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  115.923564][T11252] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  116.009563][T11271] team0: Mode changed to "activebackup"
[  116.014092][T11271] tipc: Enabled bearer <eth:team0>, priority 0
[  116.488028][T11322] can: request_module (can-proto-0) failed.
[  116.495689][T11321] can: request_module (can-proto-0) failed.
[  116.982601][T11330] syz.2.1311 (11330) used obsolete PPPIOCDETACH ioctl
[  117.358164][T11359] _Z`Ԁ@S: entered promiscuous mode
[  117.364409][T11359] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  117.479455][T11377] openvswitch: netlink: IP tunnel dst address not specified
[  117.483773][T11377] openvswitch: netlink: IP tunnel dst address not specified
[  117.486427][T11377] openvswitch: netlink: IP tunnel dst address not specified
[  117.488952][T11377] openvswitch: netlink: IP tunnel dst address not specified
[  117.491887][T11377] openvswitch: netlink: IP tunnel dst address not specified
[  117.496553][T11377] openvswitch: netlink: IP tunnel dst address not specified
[  117.499008][T11377] openvswitch: netlink: IP tunnel dst address not specified
[  117.506524][T11377] openvswitch: netlink: IP tunnel dst address not specified
[  117.509421][T11377] openvswitch: netlink: IP tunnel dst address not specified
[  117.512595][T11377] openvswitch: netlink: IP tunnel dst address not specified
[  117.586174][T11402] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  117.625265][T11408] netlink: 'syz.0.1329': attribute type 13 has an invalid length.
[  117.636830][T11408] netlink: 'syz.0.1329': attribute type 17 has an invalid length.
[  117.644215][T11408] tipc: Resetting bearer <eth:team0>
[  117.752376][T11421] netlink: 'syz.1.1334': attribute type 11 has an invalid length.
[  117.832684][T11438] netlink: 'syz.2.1339': attribute type 1 has an invalid length.
[  117.917319][T11447] netlink: 'syz.1.1342': attribute type 1 has an invalid length.
[  118.045872][T11462] netlink: 'syz.2.1345': attribute type 1 has an invalid length.
[  118.055359][T11462] bond9: entered promiscuous mode
[  118.057188][T11462] 8021q: adding VLAN 0 to HW filter on device bond9
[  118.076774][T11462] 8021q: adding VLAN 0 to HW filter on device bond9
[  118.079775][T11462] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address
[  118.084401][T11462] bond9: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  118.090114][T11462] bond9: (slave wireguard0): making interface the new active one
[  118.093613][T11462] wireguard0: entered promiscuous mode
[  118.096108][T11462] bond9: (slave wireguard0): Enslaving as an active interface with an up link
[  118.361541][T11462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  118.363994][T11462] IPv6: NLM_F_CREATE should be set when creating new route
[  118.366213][T11462] IPv6: NLM_F_CREATE should be set when creating new route
[  118.368805][T11462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  118.823384][T11473] netlink: 'syz.1.1347': attribute type 10 has an invalid length.
[  118.826364][T11473] bond0: (slave wlan1): Opening slave failed
[  118.905901][T11490] geneve3: entered promiscuous mode
[  118.907746][T11490] geneve3: entered allmulticast mode
[  118.910613][T11490] __nla_validate_parse: 30 callbacks suppressed
[  118.910621][T11490] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1353'.
[  118.936613][T11496] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1355'.
[  118.938086][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'.
[  118.944046][T11498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1356'.
[  119.244373][T11539] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1365'.
[  119.476700][T11562] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.480987][T11563] syzkaller0: Caught tx_queue_len zero misconfig
[  119.510063][T11568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1372'.
[  119.542568][T11573] netlink: 'syz.2.1374': attribute type 10 has an invalid length.
[  119.546610][T11573] netlink: 'syz.2.1374': attribute type 1 has an invalid length.
[  119.605991][T11575] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1375'.
[  119.608936][T11575] nbd: illegal input index 65508
[  119.682481][T11584] syzkaller1: entered promiscuous mode
[  119.684381][T11584] syzkaller1: entered allmulticast mode
[  119.788185][T11594] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1379'.
[  119.816531][T11602] syzkaller0: left promiscuous mode
[  119.818730][T11602] syzkaller0: left allmulticast mode
[  119.822322][T11602] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1381'.
[  119.934827][T11616] can: request_module (can-proto-0) failed.
[  119.960609][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'.
[  119.966786][T11633] validate_nla: 4 callbacks suppressed
[  119.966794][T11633] netlink: 'syz.0.1389': attribute type 83 has an invalid length.
[  119.974924][T11633] netlink: 'syz.0.1389': attribute type 3 has an invalid length.
[  119.977621][T11633] netlink: 'syz.0.1389': attribute type 1 has an invalid length.
[  119.996775][T11636] netlink: 'syz.1.1391': attribute type 4 has an invalid length.
[  120.001202][T11636] netlink: 'syz.1.1391': attribute type 4 has an invalid length.
[  120.064376][T11654] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  120.102340][T11654] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  120.143691][T11654] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  120.159429][T11670] netlink: 'syz.0.1399': attribute type 1 has an invalid length.
[  120.185053][T11654] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  120.252784][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  120.255148][T11688] netlink: 'syz.0.1402': attribute type 1 has an invalid length.
[  120.260730][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  120.271882][ T9798] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  120.276867][ T9798] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  120.869705][T11711] netlink: 'syz.2.1407': attribute type 10 has an invalid length.
[  120.942264][T11729] tipc: New replicast peer: 255.255.255.255
[  120.944536][T11729] tipc: Enabled bearer <udp:syz2>, priority 10
[  121.314340][T11766] IPv6: Can't replace route, no match found
[  121.948767][T11812] netlink: 'syz.1.1431': attribute type 10 has an invalid length.
[  121.953418][T11813] netlink: 'syz.1.1431': attribute type 10 has an invalid length.
[  121.953996][T11812] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  121.982140][T11818] bridge8: port 1(veth13) entered blocking state
[  121.984639][T11818] bridge8: port 1(veth13) entered disabled state
[  121.986736][T11818] veth13: entered allmulticast mode
[  121.989269][T11818] veth13: entered promiscuous mode
[  121.997565][T11818] bridge8: port 2(veth0_to_bond) entered blocking state
[  122.001980][T11818] bridge8: port 2(veth0_to_bond) entered disabled state
[  122.005085][T11818] veth0_to_bond: entered allmulticast mode
[  122.011171][T11818] veth0_to_bond: entered promiscuous mode
[  122.054577][T11820] NCSI netlink: No device for ifindex 0
[  122.066954][T11830] sctp: [Deprecated]: syz.1.1437 (pid 11830) Use of struct sctp_assoc_value in delayed_ack socket option.
[  122.066954][T11830] Use struct sctp_sack_info instead
[  122.072804][T11831] tipc: Bearer <eth:team0>: already 2 bearers with priority 10
[  122.075936][T11831] tipc: Bearer <eth:team0>: trying with adjusted priority
[  122.078861][T11831] tipc: Enabled bearer <eth:team0>, priority 9
[  123.312012][T11910] IPv6: sit2: Disabled Multicast RS
[  123.472443][T11938] net_ratelimit: 32 callbacks suppressed
[  123.472454][T11938] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  123.485737][T11939] syzkaller1: entered allmulticast mode
[  123.585083][T11952] erspan0: entered promiscuous mode
[  123.587352][T11952] erspan0: left promiscuous mode
[  123.711216][T11974] openvswitch: netlink: Key type 8208 is out of range max 32
[  123.729253][T11976] 8021q: adding VLAN 0 to HW filter on device bond10
[  123.963611][T12014] syzkaller0: entered promiscuous mode
[  123.965543][T12014] syzkaller0: entered allmulticast mode
[  123.967643][T12013] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  123.987218][T12019] __nla_validate_parse: 35 callbacks suppressed
[  123.987227][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1497'.
[  124.082727][T12029] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  124.089474][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1500'.
[  124.094799][T12029] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  124.099484][T12029] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  124.105145][T12029] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  124.360442][ T5843] Bluetooth: hci2: command 0x0406 tx timeout
[  124.963002][T12070] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1510'.
[  125.073386][T12091] validate_nla: 13 callbacks suppressed
[  125.073421][T12091] netlink: 'syz.2.1516': attribute type 6 has an invalid length.
[  125.084819][T12088] netlink: 'syz.1.1517': attribute type 2 has an invalid length.
[  125.090106][T12088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1517'.
[  125.096118][T12091] netlink: 'syz.2.1516': attribute type 12 has an invalid length.
[  125.098793][T12091] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1516'.
[  125.122754][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'.
[  125.136610][T12100] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  125.144232][T12101] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  125.147515][T12101] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  125.155319][T12104] netlink: 'syz.1.1520': attribute type 1 has an invalid length.
[  125.158651][T12104] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1520'.
[  125.186565][T12109] netlink: 'syz.1.1521': attribute type 1 has an invalid length.
[  125.189083][T12109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1521'.
[  125.246766][T12117] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1523'.
[  125.285872][T12122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'.
[  125.328841][T12127] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  125.332297][T12127] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  125.403537][ T5855] nci: nci_rx_work: unknown MT 0x1
[  126.097148][T12136] bond1: option mode: unable to set because the bond device is up
[  126.100564][T12138] bond1: option mode: unable to set because the bond device is up
[  126.110066][T12136] tipc: Resetting bearer <eth:team0>
[  126.113558][T12136] veth0_to_bond: left allmulticast mode
[  126.115643][T12136] veth0_to_bond: left promiscuous mode
[  126.117740][T12136] bridge8: port 2(veth0_to_bond) entered disabled state
[  126.124639][T12136] bond9: (slave wireguard0): Releasing backup interface
[  126.127199][T12136] wireguard0: left promiscuous mode
[  126.135987][T12136] veth13: left allmulticast mode
[  126.137632][T12136] veth13: left promiscuous mode
[  126.139238][T12136] bridge8: port 1(veth13) entered disabled state
[  126.167201][T12144] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  126.179906][T12144] netlink: 'syz.0.1531': attribute type 1 has an invalid length.
[  126.289288][T12152] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  126.347016][T12156] netlink: 'syz.0.1534': attribute type 6 has an invalid length.
[  126.350263][T12156] IPv6: NLM_F_CREATE should be specified when creating new route
[  126.506833][T12160] infiniband syz2: set down
[  126.508802][T12160] infiniband syz2: added bond_slave_0
[  126.515706][T12167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.518831][T12167] IPv6: NLM_F_CREATE should be set when creating new route
[  126.522004][T12167] IPv6: NLM_F_CREATE should be set when creating new route
[  126.525037][T12167] IPv6: NLM_F_CREATE should be set when creating new route
[  126.528087][T12160] RDS/IB: syz2: added
[  126.533228][T12160] smc: adding ib device syz2 with port count 1
[  126.535846][T12160] smc:    ib device syz2 port 1 has pnetid 
[  126.586674][T12171] netlink: 'syz.0.1537': attribute type 1 has an invalid length.
[  126.603286][T12171] 8021q: adding VLAN 0 to HW filter on device bond7
[  126.785886][  T127] block nbd0: Possible stuck request ffff88801ff28000: control (read@0,1024B). Runtime 60 seconds
[  126.790103][  T127] block nbd0: Possible stuck request ffff88801ff28200: control (read@1024,1024B). Runtime 60 seconds
[  126.794656][  T127] block nbd0: Possible stuck request ffff88801ff28400: control (read@2048,1024B). Runtime 60 seconds
[  126.798911][  T127] block nbd0: Possible stuck request ffff88801ff28600: control (read@3072,1024B). Runtime 60 seconds
[  126.802569][T12177] netlink: 'syz.1.1539': attribute type 5 has an invalid length.
[  126.806872][T12177] netlink: 'syz.1.1539': attribute type 7 has an invalid length.
[  126.844867][T12177] : entered promiscuous mode
[  126.911972][T12189] bond0: (slave dummy0): Releasing backup interface
[  126.916366][T12189] bond6: (slave gretap2): Releasing active interface
[  126.922778][T12189] bond7: (slave ip6gretap1): Releasing active interface
[  126.963204][T12198] syzkaller0: Caught tx_queue_len zero misconfig
[  127.115029][T12216] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  127.176640][T12223] pimreg: entered allmulticast mode
[  127.182214][T12221] pimreg: left allmulticast mode
[  127.299704][T12229] syzkaller1: entered promiscuous mode
[  127.301773][T12229] syzkaller1: entered allmulticast mode
[  127.419231][T12240] tipc: Resetting bearer <eth:team0>
[  127.477810][T12242] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  127.478877][T12243] Bluetooth: MGMT ver 1.23
[  127.481924][T12242] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  127.627484][T12264] tipc: Resetting bearer <eth:team0>
[  127.637839][T12264] team0: Port device vlan0 removed
[  127.776852][T12280] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.843048][T12287] 8021q: adding VLAN 0 to HW filter on device bond8
[  127.957773][T12303] team0: Port device dummy0 added
[  127.960964][T12303] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  127.966625][T12303] team0: Failed to send options change via netlink (err -105)
[  127.969026][T12303] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  127.972745][T12303] team0: Port device dummy0 removed
[  128.313282][T12309] geneve2: entered promiscuous mode
[  128.314964][T12309] geneve2: entered allmulticast mode
[  128.547195][T12319] dummy0: entered promiscuous mode
[  128.549587][T12319] dummy0: entered allmulticast mode
[  128.552328][T12319] team0: Failed to send options change via netlink (err -105)
[  128.555409][T12319] team0: Port device dummy0 added
[  129.458113][T12371] __nla_validate_parse: 25 callbacks suppressed
[  129.458133][T12371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1591'.
[  129.530477][T12371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1591'.
[  129.620172][T11885] IPVS: starting estimator thread 0...
[  129.710472][T12389] IPVS: using max 138 ests per chain, 331200 per kthread
[  129.900466][T12410] nbd3: detected capacity change from 0 to 127
[  129.904570][   T56] block nbd3: Receive control failed (result -104)
[  129.970415][T12416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1608'.
[  130.045083][T12424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.071930][T12425] tipc: Resetting bearer <eth:team0>
[  130.076692][T12425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  130.098832][T12432] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1612'.
[  130.144721][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'.
[  130.149178][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'.
[  130.180673][T12439] validate_nla: 9 callbacks suppressed
[  130.180683][T12439] netlink: 'syz.2.1615': attribute type 1 has an invalid length.
[  130.185730][T12439] netlink: 'syz.2.1615': attribute type 3 has an invalid length.
[  130.188285][T12439] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1615'.
[  130.209634][T12442] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1616'.
[  130.373500][T12446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1617'.
[  130.398908][T12450] syzkaller1: entered promiscuous mode
[  130.404200][T12450] syzkaller1: entered allmulticast mode
[  130.635098][T12465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1622'.
[  130.704726][T11885] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  130.707252][T11885] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  130.712862][T11885] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  131.388191][T12490] bridge9: port 1(bond11) entered blocking state
[  131.394163][T12490] bridge9: port 1(bond11) entered disabled state
[  131.396886][T12490] bond11: entered allmulticast mode
[  131.399887][T12490] bond11: entered promiscuous mode
[  131.691033][T12502] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  131.694211][T12502] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  131.697292][T12502] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  131.718269][T12509] netlink: zone id is out of range
[  131.719954][T12509] netlink: zone id is out of range
[  131.725781][T12509] netlink: zone id is out of range
[  131.727942][T12509] netlink: get zone limit has 8 unknown bytes
[  131.829002][T12536] bridge0: port 1(batadv1) entered blocking state
[  131.831437][T12536] bridge0: port 1(batadv1) entered disabled state
[  131.833938][T12536] batadv1: entered allmulticast mode
[  131.836142][T12536] batadv1: entered promiscuous mode
[  131.988922][T12553] netlink: 'syz.1.1644': attribute type 11 has an invalid length.
[  132.106804][T12563] netem: change failed
[  132.157411][T12569] tipc: Resetting bearer <eth:syzkaller0>
[  132.287712][T12584] netlink: 'syz.2.1654': attribute type 1 has an invalid length.
[  132.330458][ T5855] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  132.333604][ T5855] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  132.338162][T12588] netlink: 'syz.2.1655': attribute type 12 has an invalid length.
[  132.346050][ T5855] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  132.348922][ T5855] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  132.354489][ T5855] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  132.357539][ T5855] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  132.434728][T12599] netlink: 'syz.2.1658': attribute type 6 has an invalid length.
[  132.471411][T12603] netlink: 'syz.2.1660': attribute type 23 has an invalid length.
[  132.493209][T12606] netlink: 'syz.2.1661': attribute type 13 has an invalid length.
[  132.496470][T12606] netlink: 'syz.2.1661': attribute type 17 has an invalid length.
[  132.505177][T12606] tipc: Resetting bearer <eth:team0>
[  132.508450][T12606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.816991][T12619] batadv_slave_0: entered promiscuous mode
[  133.025646][T12623] netlink: 'syz.1.1667': attribute type 27 has an invalid length.
[  133.038362][T12623] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.041386][T12623] 8021q: adding VLAN 0 to HW filter on device team0
[  133.044554][T12623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.240994][  T127] block nbd3: Connection timed out, retrying (0/1 alive)
[  133.243581][  T127] block nbd3: Connection timed out, retrying (0/1 alive)
[  133.246408][  T127] block nbd3: Connection timed out, retrying (0/1 alive)
[  133.248650][  T127] block nbd3: Connection timed out, retrying (0/1 alive)
[  133.251365][  T127] block nbd3: Dead connection, failed to find a fallback
[  133.253859][  T127] block nbd3: shutting down sockets
[  133.255528][  T127] blk_print_req_error: 138 callbacks suppressed
[  133.255535][  T127] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.260773][  T127] buffer_io_error: 138 callbacks suppressed
[  133.260780][  T127] Buffer I/O error on dev nbd3, logical block 3, async page read
[  133.265099][  T127] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.267984][  T127] Buffer I/O error on dev nbd3, logical block 2, async page read
[  133.271734][  T127] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.275092][  T127] Buffer I/O error on dev nbd3, logical block 1, async page read
[  133.277742][  T127] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.281269][  T127] Buffer I/O error on dev nbd3, logical block 0, async page read
[  133.290610][ T8766] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.295568][ T8766] Buffer I/O error on dev nbd3, logical block 0, async page read
[  133.300830][ T8766] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.309663][ T8766] Buffer I/O error on dev nbd3, logical block 1, async page read
[  133.314804][ T8766] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.319307][ T8766] Buffer I/O error on dev nbd3, logical block 2, async page read
[  133.324956][T12650] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  133.328590][ T8766] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.334068][ T8766] Buffer I/O error on dev nbd3, logical block 3, async page read
[  133.338172][ T8766] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.343632][ T8766] Buffer I/O error on dev nbd3, logical block 0, async page read
[  133.346864][ T8766] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.351585][ T8766] Buffer I/O error on dev nbd3, logical block 1, async page read
[  133.356769][ T8766] ldm_validate_partition_table(): Disk read failed.
[  133.364268][ T8766] Dev nbd3: unable to read RDB block 0
[  133.368893][T12650] tipc: Resetting bearer <eth:syzkaller0>
[  133.371692][ T8766]  nbd3: unable to read partition table
[  133.377860][ T8766] ldm_validate_partition_table(): Disk read failed.
[  133.381671][ T8766] Dev nbd3: unable to read RDB block 0
[  133.384051][ T8766]  nbd3: unable to read partition table
[  133.456855][T12657] netlink: 'syz.0.1675': attribute type 10 has an invalid length.
[  133.459503][T12657] tipc: Resetting bearer <eth:team0>
[  133.592599][T12675] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.634814][T12675] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.694243][T12675] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.734780][T12675] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.794871][ T5855] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.803171][ T9798] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.811194][ T5886] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.817113][ T5855] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.849465][T12678] bond9: entered promiscuous mode
[  133.851304][T12678] 8021q: adding VLAN 0 to HW filter on device bond9
[  133.857818][T12678] 8021q: adding VLAN 0 to HW filter on device bond9
[  133.860084][T12678] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address
[  133.863772][T12678] bond9: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  133.868074][T12678] bond9: (slave wireguard0): making interface the new active one
[  133.871515][T12678] wireguard0: entered promiscuous mode
[  133.874218][T12678] bond9: (slave wireguard0): Enslaving as an active interface with an up link
[  133.879432][T12678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  133.882275][T12678] IPv6: NLM_F_CREATE should be set when creating new route
[  133.884914][T12678] IPv6: NLM_F_CREATE should be set when creating new route
[  133.888012][T12678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  133.893709][T12678] bond9: (slave wireguard1): The slave device specified does not support setting the MAC address
[  133.898532][T12678] bond9: (slave wireguard1): Enslaving as a backup interface with an up link
[  133.949689][T12692] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  134.465477][T12734] __nla_validate_parse: 17 callbacks suppressed
[  134.465491][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1695'.
[  134.471850][T12734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1695'.
[  134.500205][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1696'.
[  134.743937][T12742] syz_tun: entered allmulticast mode
[  134.749484][T12742] dvmrp8: entered allmulticast mode
[  134.753989][T12741] syz_tun: left allmulticast mode
[  134.756178][T12741] dvmrp8: left allmulticast mode
[  135.743755][T12786] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  135.795587][T12795] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1711'.
[  135.880607][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'.
[  135.886783][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1715'.
[  135.892700][T12809] validate_nla: 2 callbacks suppressed
[  135.892710][T12809] netlink: 'syz.1.1715': attribute type 5 has an invalid length.
[  135.898851][T12809] netlink: 'syz.1.1715': attribute type 6 has an invalid length.
[  135.929852][T12815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1714'.
[  136.016124][T12819] dummy0: left promiscuous mode
[  136.018421][T12819] dummy0: left allmulticast mode
[  136.036768][T12819] team0: Port device dummy0 removed
[  136.077103][   T40] tipc: Resetting bearer <eth:team0>
[  136.232371][T12840] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1721'.
[  136.258222][T12846] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  136.260475][T12847] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1722'.
[  136.260757][T12846] IPv6: NLM_F_CREATE should be set when creating new route
[  136.266871][T12845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  136.311965][T12854] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1724'.
[  136.388746][T12860] openvswitch: netlink: Flow key attr not present in new flow.
[  136.431106][ T5886] batman_adv: batadv1: IGMP Querier appeared
[  136.433990][ T5886] batman_adv: batadv1: MLD Querier appeared
[  136.508871][T12872] IPv6: sit4: Disabled Multicast RS
[  136.583812][T12882] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  138.653631][T13009] netlink: 'syz.1.1766': attribute type 1 has an invalid length.
[  138.711803][T13011] netlink: 'syz.1.1767': attribute type 1 has an invalid length.
[  138.715473][T13011] netlink: 'syz.1.1767': attribute type 1 has an invalid length.
[  138.734028][T13020] openvswitch: netlink: IPv4 tun info is not correct
[  138.815149][T13030] netlink: 'syz.1.1770': attribute type 10 has an invalid length.
[  139.135872][T13040] netlink: 'syz.2.1772': attribute type 58 has an invalid length.
[  139.839529][T13052] __nla_validate_parse: 17 callbacks suppressed
[  139.839547][T13052] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1775'.
[  139.849048][T13052] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1775'.
[  139.931436][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1776'.
[  140.128638][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'.
[  140.151146][T13077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1782'.
[  140.154983][T13077] tipc: Disabling bearer <udp:syz2>
[  140.566239][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1784'.
[  140.569440][T13088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1784'.
[  140.603831][T13095] netlink: 'syz.1.1786': attribute type 1 has an invalid length.
[  140.606485][T13095] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1786'.
[  140.609603][T13095] netlink: 'syz.1.1786': attribute type 2 has an invalid length.
[  140.613347][T13095] netlink: 'syz.1.1786': attribute type 1 has an invalid length.
[  140.662169][T13102] openvswitch: netlink: Key type 227 is out of range max 32
[  140.685797][T13104] dvmrp8: entered allmulticast mode
[  140.812792][T13103] dvmrp8: left allmulticast mode
[  140.979590][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1797'.
[  141.013046][T13127] validate_nla: 3 callbacks suppressed
[  141.013060][T13127] netlink: 'syz.1.1796': attribute type 3 has an invalid length.
[  141.225111][T13166] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1803'.
[  141.228022][T13166] netlink: 'syz.2.1803': attribute type 1 has an invalid length.
[  141.234558][T13166] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  141.239645][T13166] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  142.165013][T13180] nbd: socks must be embedded in a SOCK_ITEM attr
[  142.203933][T13184] pim6reg9: entered allmulticast mode
[  142.411769][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.415336][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.603583][T13244] netlink: 'syz.2.1821': attribute type 1 has an invalid length.
[  142.615098][T13244] bond12: entered promiscuous mode
[  142.617340][T13244] 8021q: adding VLAN 0 to HW filter on device bond12
[  142.631509][T13244] 8021q: adding VLAN 0 to HW filter on device bond12
[  142.636828][T13244] bond12: (slave wireguard1): The slave device specified does not support setting the MAC address
[  142.641315][T13244] bond12: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  142.646290][T13244] bond12: (slave wireguard1): making interface the new active one
[  142.649312][T13244] wireguard1: entered promiscuous mode
[  142.651954][T13244] bond12: (slave wireguard1): Enslaving as an active interface with an up link
[  142.674349][T13257] netlink: 'syz.2.1822': attribute type 1 has an invalid length.
[  142.684147][T13257] bond13: entered promiscuous mode
[  142.686030][T13257] 8021q: adding VLAN 0 to HW filter on device bond13
[  142.695013][T13257] 8021q: adding VLAN 0 to HW filter on device bond13
[  142.697412][T13257] bond13: (slave wireguard2): The slave device specified does not support setting the MAC address
[  142.701155][T13257] bond13: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  142.705529][T13257] bond13: (slave wireguard2): making interface the new active one
[  142.708091][T13257] wireguard2: entered promiscuous mode
[  142.710965][T13257] bond13: (slave wireguard2): Enslaving as an active interface with an up link
[  142.715018][T13257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  142.717445][T13257] IPv6: NLM_F_CREATE should be set when creating new route
[  142.719832][T13257] IPv6: NLM_F_CREATE should be set when creating new route
[  142.723104][T13257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  142.739743][T13268] netlink: 'syz.2.1823': attribute type 2 has an invalid length.
[  142.744351][T13268] k*]: entered promiscuous mode
[  142.753318][T13268] tipc: Resetting bearer <eth:team0>
[  142.755466][T13268] tipc: Resetting bearer <eth:team0>
[  142.757809][T13268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.777556][T13268] veth0_to_team: entered promiscuous mode
[  142.782456][T13268] veth0_to_team: entered allmulticast mode
[  142.803869][T13274] syz_tun: entered allmulticast mode
[  142.808446][T13274] dvmrp8: entered allmulticast mode
[  142.911593][T13273] syz_tun: left allmulticast mode
[  142.913589][T13273] dvmrp8: left allmulticast mode
[  142.982634][T13298] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  142.998645][T13298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  144.454344][T13362] netlink: 'syz.1.1841': attribute type 1 has an invalid length.
[  144.472520][T13362] bond8: (slave bridge0): making interface the new active one
[  144.475390][T13362] bond8: (slave bridge0): Enslaving as an active interface with an up link
[  144.496396][T13367] netlink: 'syz.1.1843': attribute type 1 has an invalid length.
[  144.533480][T13367] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  144.593192][T13375] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590)
[  144.596865][T13375] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  144.603346][T13375] netlink: 'syz.0.1847': attribute type 11 has an invalid length.
[  144.717849][T13384] netlink: 'syz.0.1850': attribute type 3 has an invalid length.
[  144.741814][T13386] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.773525][T13386] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.824031][T13386] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.863935][T13386] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.913780][ T5869] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.921174][ T5869] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.928812][ T5869] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.937264][ T5869] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.046101][T13394] __nla_validate_parse: 19 callbacks suppressed
[  145.046115][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1853'.
[  145.105184][T13403] macvtap1: entered allmulticast mode
[  145.107061][T13403] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  145.113938][T13403] batman_adv: batadv0: Adding interface: macvtap1
[  145.116777][T13403] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.128927][T13403] batman_adv: batadv0: Interface activated: macvtap1
[  145.135354][T13403] debugfs: 'netdev:nicvf0' already exists in '.e'
[  145.147538][T13405] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1858'.
[  145.170078][T13408] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  145.173182][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.177382][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.180818][T13408] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1859'.
[  145.389402][T13423] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  145.403859][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1866'.
[  145.479408][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'.
[  145.487270][T13442] netlink: 'syz.2.1871': attribute type 2 has an invalid length.
[  145.493895][T13446] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  145.497042][T13446] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  145.504904][T13452] netlink: 'syz.1.1873': attribute type 10 has an invalid length.
[  145.567328][T13464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'.
[  145.920698][T13494] block nbd4: server does not support multiple connections per device.
[  145.923954][T13494] block nbd4: shutting down sockets
[  145.944501][T13501] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1888'.
[  146.116650][T13533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1895'.
[  146.180823][T13538] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.204340][T13548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1898'.
[  146.222891][T13548] validate_nla: 55 callbacks suppressed
[  146.222906][T13548] netlink: 'syz.1.1898': attribute type 1 has an invalid length.
[  146.228912][T13548] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1898'.
[  146.229588][T13538] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.232879][T13548] netlink: 'syz.1.1898': attribute type 1 has an invalid length.
[  146.263399][T13538] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.355787][T13538] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.227708][T13585] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  147.257472][T13596] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  147.297448][T13600] netlink: zone id is out of range
[  147.299674][T13600] netlink: zone id is out of range
[  147.302970][T13600] netlink: zone id is out of range
[  147.304860][T13600] netlink: zone id is out of range
[  147.306584][T13600] netlink: zone id is out of range
[  147.310432][T13600] netlink: zone id is out of range
[  147.399404][T13609] IPVS: Unknown mcast interface: batadv0
[  147.508341][T13633] netlink: 'syz.1.1916': attribute type 1 has an invalid length.
[  147.649228][T13646] netlink: 'syz.1.1921': attribute type 1 has an invalid length.
[  147.663859][T13646] bond9: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  147.674289][T13646] veth11: entered promiscuous mode
[  147.677256][T13646] bond9: (slave veth11): Enslaving as a backup interface with a down link
[  147.713873][T13654] dvmrp8: entered allmulticast mode
[  147.823046][T13653] dvmrp8: left allmulticast mode
[  147.868042][T13662] IPv6: NLM_F_CREATE should be specified when creating new route
[  147.871799][T13663] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.926476][T13666] netlink: 'syz.1.1926': attribute type 9 has an invalid length.
[  147.952865][T13663] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.050131][T13663] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.081471][T13675] netlink: 'syz.1.1930': attribute type 10 has an invalid length.
[  148.086515][T13675] bond0: (slave wlan1): Opening slave failed
[  148.093300][T13663] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.133270][ T5855] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  148.136256][T13675] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  148.139282][T13675] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  148.150414][ T5855] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  148.154410][ T5855] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  148.167977][ T5855] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  148.212078][T13683] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.236242][T13686] netlink: 'syz.2.1934': attribute type 142 has an invalid length.
[  148.293471][T13694] net_ratelimit: 25 callbacks suppressed
[  148.293486][T13694] openvswitch: netlink: Message has 4 unknown bytes.
[  148.399345][T13698] netlink: 'syz.1.1938': attribute type 12 has an invalid length.
[  148.458315][T13703] netlink: 'syz.1.1940': attribute type 3 has an invalid length.
[  148.909638][T13727] ip6tnl1: entered promiscuous mode
[  148.913607][T13727] ip6tnl1: entered allmulticast mode
[  148.926556][ T5869] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.932478][ T5886] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.940732][ T5886] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.944286][ T5886] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.427786][T13768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.447074][T13770] netlink: 'syz.0.1957': attribute type 7 has an invalid length.
[  149.493271][T13772] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.515046][T13776] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.016380][T13797] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  150.118822][T13811] __nla_validate_parse: 20 callbacks suppressed
[  150.118832][T13811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1967'.
[  150.124784][T13811] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1967'.
[  150.127906][T13811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1967'.
[  150.136481][T13811] tipc: Resetting bearer <eth:team0>
[  150.141628][T13811] bond11: left allmulticast mode
[  150.143570][T13811] bond11: left promiscuous mode
[  150.145494][T13811] bridge9: port 1(bond11) entered disabled state
[  150.149743][T13811] bond12: (slave wireguard1): Releasing backup interface
[  150.152397][T13811] wireguard1: left promiscuous mode
[  150.156734][T13811] bond13: (slave wireguard2): Releasing backup interface
[  150.159388][T13811] wireguard2: left promiscuous mode
[  150.167956][T13811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1967'.
[  150.256278][T13816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1968'.
[  150.261926][T13816] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1968'.
[  150.293264][T13818] openvswitch: netlink: Missing key (keys=40, expected=80)
[  150.371708][T13834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1972'.
[  150.416117][T13846] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1976'.
[  150.427732][T13846] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1976'.
[  150.430906][T13846] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1976'.
[  150.436242][T13846] tipc: Enabling of bearer <et:g> rejected, media not registered
[  150.439508][T13845] tipc: Enabled bearer <eth:gre0>, priority 10
[  150.444352][T13843] tipc: Enabling of bearer <eth:gre0> rejected, already enabled
[  150.602854][T13876] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  150.664599][T13890] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  150.692462][T13890] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  150.733496][T13890] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  150.762555][T13890] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  150.796844][ T5855] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  150.805642][ T5855] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  150.813365][ T5855] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  150.828335][ T5855] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  151.168081][T13960] : left promiscuous mode
[  151.404621][T13991] validate_nla: 36 callbacks suppressed
[  151.404631][T13991] netlink: 'syz.2.1999': attribute type 10 has an invalid length.
[  151.465506][T13997] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.502296][T13997] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.517386][T13999] netlink: 'syz.2.2000': attribute type 10 has an invalid length.
[  151.542425][T13997] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.582495][T13997] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.629219][T14003] netlink: 'syz.0.2001': attribute type 10 has an invalid length.
[  151.633681][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  151.641219][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  151.644670][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  151.650523][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  151.800172][T14025] netlink: 'syz.1.2008': attribute type 9 has an invalid length.
[  151.819685][T14030] netlink: 'syz.1.2010': attribute type 1 has an invalid length.
[  151.875515][T14035] netlink: 'syz.2.2012': attribute type 1 has an invalid length.
[  152.154496][T14065] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  152.213259][T14065] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  152.253848][T14065] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  152.260820][T14067] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  152.317452][T14065] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  152.524055][ T5855] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  152.528392][ T5855] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  152.532767][ T5855] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  152.536967][ T5855] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  152.623940][T14104] syzkaller1: entered promiscuous mode
[  152.625789][T14104] syzkaller1: entered allmulticast mode
[  152.632199][T14104] netlink: 'syz.0.2030': attribute type 1 has an invalid length.
[  152.639957][T14104] 8021q: adding VLAN 0 to HW filter on device bond10
[  152.651830][T14104] veth7: entered promiscuous mode
[  153.228557][T14129] netlink: 'syz.0.2038': attribute type 4 has an invalid length.
[  153.679173][ T5869] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  153.687580][ T5869] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  153.696398][ T5869] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  153.705621][ T5869] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  153.809317][T14151] 8021q: adding VLAN 0 to HW filter on device bond14
[  153.814208][T14151] bridge0: port 1(bond14) entered blocking state
[  153.816684][T14151] bridge0: port 1(bond14) entered disabled state
[  153.820399][T14151] bond14: entered allmulticast mode
[  153.822954][T14151] bond14: entered promiscuous mode
[  154.013899][T14174] tipc: Enabling of bearer <et:g> rejected, media not registered
[  154.092220][T14185] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.115219][T14187] sctp: [Deprecated]: syz.2.2054 (pid 14187) Use of int in max_burst socket option.
[  154.115219][T14187] Use struct sctp_assoc_value instead
[  154.295593][T14193] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  154.333043][T14217] dvmrp0: entered allmulticast mode
[  154.486334][T14250] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.523392][T14250] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.582851][T14250] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.612910][T14250] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.386059][T14273] IPVS: Scheduler module ip_vs_sip not found
[  155.533458][T14291] __nla_validate_parse: 75 callbacks suppressed
[  155.533473][T14291] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2085'.
[  155.539702][T14291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2085'.
[  155.544472][T14291] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2085'.
[  155.548078][T14291] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2085'.
[  155.600418][T14296] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.604032][T14296] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.652598][T14296] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.656038][T14296] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.702289][T14296] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.705690][T14296] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.743187][T14296] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.746885][T14296] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.798939][ T5886] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  155.805788][ T5886] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.823628][ T5886] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  155.827184][ T5886] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.839485][ T5886] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  155.843082][ T5886] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  155.845705][ T5886] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.848317][ T5886] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  155.855855][ T5886] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  155.858746][ T5886] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.869737][ T5886] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  155.878249][ T5886] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  155.888759][T14303] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  155.896976][T14306] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.992511][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2094'.
[  156.016301][T14325] 8021q: adding VLAN 0 to HW filter on device bond11
[  156.033272][T14328] syz.2.2096: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  156.036719][T14325] batadv1: left allmulticast mode
[  156.037913][T14328] CPU: 1 UID: 0 PID: 14328 Comm: syz.2.2096 Not tainted syzkaller #0 PREEMPT(full) 
[  156.037925][T14328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  156.037930][T14328] Call Trace:
[  156.037933][T14328]  <TASK>
[  156.037937][T14328]  dump_stack_lvl+0x189/0x250
[  156.037950][T14328]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.037958][T14328]  ? __pfx__printk+0x10/0x10
[  156.037968][T14328]  ? lock_release+0x4b/0x3e0
[  156.037980][T14328]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  156.037989][T14328]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  156.037998][T14328]  warn_alloc+0x214/0x310
[  156.038008][T14328]  ? stack_depot_save_flags+0x40/0x860
[  156.038019][T14328]  ? __pfx_warn_alloc+0x10/0x10
[  156.038029][T14328]  ? kasan_save_track+0x4f/0x80
[  156.038037][T14328]  ? xskq_create+0x56/0x170
[  156.038046][T14328]  ? xsk_init_queue+0xb0/0x110
[  156.038055][T14328]  ? xsk_setsockopt+0x4dc/0x8d0
[  156.038062][T14328]  ? do_sock_setsockopt+0x17c/0x1b0
[  156.038069][T14328]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  156.038075][T14328]  ? do_syscall_64+0xfa/0x3b0
[  156.038085][T14328]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.038093][T14328]  __vmalloc_node_range_noprof+0x125/0x12f0
[  156.038127][T14328]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  156.038140][T14328]  ? xsk_setsockopt+0x462/0x8d0
[  156.038150][T14328]  ? __kasan_kmalloc+0x93/0xb0
[  156.038160][T14328]  vmalloc_user_noprof+0xad/0xf0
[  156.038170][T14328]  ? xskq_create+0xbf/0x170
[  156.038179][T14328]  xskq_create+0xbf/0x170
[  156.038189][T14328]  xsk_init_queue+0xb0/0x110
[  156.038198][T14328]  xsk_setsockopt+0x4dc/0x8d0
[  156.038207][T14328]  ? __pfx_xsk_setsockopt+0x10/0x10
[  156.038217][T14328]  ? __pfx_aa_sk_perm+0x10/0x10
[  156.038227][T14328]  ? lock_release+0x4b/0x3e0
[  156.038237][T14328]  ? aa_sock_opt_perm+0xff/0x1b0
[  156.038243][T14328]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  156.038252][T14328]  ? __pfx_xsk_setsockopt+0x10/0x10
[  156.038260][T14328]  do_sock_setsockopt+0x17c/0x1b0
[  156.038267][T14328]  __x64_sys_setsockopt+0x13f/0x1b0
[  156.038274][T14328]  do_syscall_64+0xfa/0x3b0
[  156.038284][T14328]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.038291][T14328]  ? exc_page_fault+0x9f/0xf0
[  156.038300][T14328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.038306][T14328] RIP: 0033:0x7fda2898ebe9
[  156.038313][T14328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.038319][T14328] RSP: 002b:00007fda2985d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  156.038329][T14328] RAX: ffffffffffffffda RBX: 00007fda28bc5fa0 RCX: 00007fda2898ebe9
[  156.038337][T14328] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  156.038343][T14328] RBP: 00007fda28a11e19 R08: 0000000000000004 R09: 0000000000000000
[  156.038350][T14328] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.038356][T14328] R13: 00007fda28bc6038 R14: 00007fda28bc5fa0 R15: 00007ffe6ba9ba28
[  156.038368][T14328]  </TASK>
[  156.038372][T14328] Mem-Info:
[  156.039562][T14325] batadv1: left promiscuous mode
[  156.044255][T14328] active_anon:6238 inactive_anon:0 isolated_anon:0
[  156.044255][T14328]  active_file:1318 inactive_file:38271 isolated_file:0
[  156.044255][T14328]  unevictable:1768 dirty:84 writeback:0
[  156.044255][T14328]  slab_reclaimable:12372 slab_unreclaimable:160465
[  156.044255][T14328]  mapped:18439 shmem:2464 pagetables:1063
[  156.044255][T14328]  sec_pagetables:0 bounce:0
[  156.044255][T14328]  kernel_misc_reclaimable:0
[  156.044255][T14328]  free:181040 free_pcp:22990 free_cma:0
[  156.047086][T14325] bridge0: port 1(batadv1) entered disabled state
[  156.047521][T14328] Node 0 active_anon:14056kB inactive_anon:0kB active_file:4116kB inactive_file:12000kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34556kB dirty:304kB writeback:0kB shmem:4840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4848kB pagetables:2236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  156.170598][T14328] Node 1 active_anon:10896kB inactive_anon:0kB active_file:1156kB inactive_file:141084kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39200kB dirty:32kB writeback:0kB shmem:5016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7996kB pagetables:2016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  156.181262][T14328] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  156.181376][T14325] bond9: (slave wireguard0): Releasing backup interface
[  156.190599][T14328] lowmem_reserve[]: 0 811 811 811 811
[  156.194816][T14328] Node 0 DMA32 free:347208kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14056kB inactive_anon:0kB active_file:4116kB inactive_file:12000kB unevictable:3536kB writepending:304kB present:1556484kB managed:830936kB mlocked:0kB bounce:0kB free_pcp:43448kB local_pcp:16852kB free_cma:0kB
[  156.206185][T14328] lowmem_reserve[]: 0 0 0 0 0
[  156.207285][T14325] wireguard0: left promiscuous mode
[  156.207858][T14328] Node 1 DMA32 free:311744kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:17516kB local_pcp:6680kB free_cma:0kB
[  156.209783][T14325] bond9: (slave wireguard1): making interface the new active one
[  156.219349][T14328] lowmem_reserve[]: 0 0 854 854 854
[  156.219380][T14328] Node 1 Normal free:49848kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10892kB inactive_anon:0kB active_file:1156kB inactive_file:141076kB unevictable:3536kB writepending:32kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:30936kB local_pcp:14468kB free_cma:0kB
[  156.219419][T14328] lowmem_reserve[]: 0 0 0 0 0
[  156.219443][T14328] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  156.219522][T14328] Node 0 DMA32: 618*4kB (ME) 260*8kB (UME) 363*16kB (UME) 188*32kB (UME) 99*64kB (UME) 47*128kB (UME) 16*256kB (UME) 4*512kB (UME) 5*1024kB (UM) 4*2048kB (ME) 73*4096kB (UM) = 347192kB
[  156.219631][T14328] Node 1 DMA32: 101*4kB (UME) 66*8kB (UME) 45*16kB (UME) 27*32kB (UME) 32*64kB (UM) 18*128kB (UM) 11*256kB (UME) 14*512kB (UM) 12*1024kB (UME) 10*2048kB (UME) 64*4096kB (UM) = 311764kB
[  156.219738][T14328] Node 1 Normal: 854*4kB (UME) 282*8kB (UME) 3*16kB (UE) 136*32kB 
[  156.236083][T14325] wireguard1: entered promiscuous mode
[  156.240264][T14328] (UM) 135*64kB (UM) 49*128kB (UM) 21*256kB (UM) 10*512kB (M) 8*1024kB (ME) 3*2048kB (UM) 0*4096kB = 49816kB
[  156.260863][T14328] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  156.264059][T14328] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  156.267200][T14328] 42053 total pagecache pages
[  156.268841][T14328] 0 pages in swap cache
[  156.269003][T14325] bond9: (slave wireguard1): Releasing backup interface
[  156.270552][T14328] Free swap  = 124996kB
[  156.273086][T14325] wireguard1: left promiscuous mode
[  156.274250][T14328] Total swap = 124996kB
[  156.274259][T14328] 786301 pages RAM
[  156.274262][T14328] 0 pages HighMem/MovableOnly
[  156.274265][T14328] 241335 pages reserved
[  156.274268][T14328] 0 pages cma reserved
[  156.285533][T14325] batman_adv: batadv0: Interface deactivated: macvtap1
[  156.287662][T14325] batman_adv: batadv0: Removing interface: macvtap1
[  156.310931][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2097'.
[  156.345234][T14338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2099'.
[  156.422503][T14345] netlink: 'syz.2.2101': attribute type 10 has an invalid length.
[  156.827234][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2104'.
[  156.830057][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2104'.
[  156.833060][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2104'.
[  156.854573][  T127] block nbd0: Possible stuck request ffff88801ff28000: control (read@0,1024B). Runtime 90 seconds
[  156.858963][  T127] block nbd0: Possible stuck request ffff88801ff28200: control (read@1024,1024B). Runtime 90 seconds
[  156.863675][  T127] block nbd0: Possible stuck request ffff88801ff28400: control (read@2048,1024B). Runtime 90 seconds
[  156.864722][T14361] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  156.868856][  T127] block nbd0: Possible stuck request ffff88801ff28600: control (read@3072,1024B). Runtime 90 seconds
[  156.932926][T14371] netlink: 'syz.1.2109': attribute type 12 has an invalid length.
[  157.090483][T14380] pim6reg1: entered promiscuous mode
[  157.092552][T14380] pim6reg1: entered allmulticast mode
[  157.357783][T14395] netlink: 'syz.1.2117': attribute type 10 has an invalid length.
[  157.367188][T14395] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  157.446201][T14398] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.452317][T14398] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1855644703/1855644705
[  157.457018][T14398] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1855644703/1855644705
[  157.461054][T14398] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1855644703/1855644705
[  157.632652][T14415] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  157.654778][T14420] openvswitch: netlink: Flow key attr not present in new flow.
[  157.658145][T14410] netlink: 'syz.1.2121': attribute type 2 has an invalid length.
[  157.665901][T14410] ave_0: entered promiscuous mode
[  161.535121][ T5293] udevd[5293]: worker [5846] /devices/virtual/block/nbd0 is taking a long time
[  167.854127][T14430] netlink: 'syz.2.2126': attribute type 1 has an invalid length.
[  167.949895][T14444] __nla_validate_parse: 3 callbacks suppressed
[  167.949909][T14444] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.2128'.
[  167.959145][T14444] openvswitch: netlink: Message has 5 unknown bytes.
[  167.965572][T14439] can: request_module (can-proto-0) failed.
[  168.030960][T14448] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  168.129343][T14453] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2131'.
[  168.280273][T14468] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2133'.
[  168.719292][T14470] netlink: 'syz.0.2134': attribute type 2 has an invalid length.
[  168.726339][T14470] : entered promiscuous mode
[  168.796366][T14474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2136'.
[  168.799479][T14474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2136'.
[  168.803810][T14474] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2136'.
[  168.821172][T14481] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.828707][T14483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2139'.
[  168.834847][T14483] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  168.838514][T14483] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.876289][T14489] netlink: 'syz.2.2142': attribute type 1 has an invalid length.
[  168.904114][T14494] netlink: 'syz.0.2143': attribute type 1 has an invalid length.
[  169.072295][T14506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2146'.
[  169.553421][T14509] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2147'.
[  169.619619][T14513] netlink: zone id is out of range
[  169.622261][T14513] netlink: zone id is out of range
[  169.624490][T14513] netlink: zone id is out of range
[  169.627193][T14513] netlink: zone id is out of range
[  169.629517][T14513] netlink: zone id is out of range
[  169.685710][T14515] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  169.736013][T14522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2151'.
[  169.889570][T14535] netlink: 'syz.0.2155': attribute type 12 has an invalid length.
[  169.932341][T14545] netlink: 'syz.2.2157': attribute type 303 has an invalid length.
[  169.979281][T14559] netlink: 'syz.2.2160': attribute type 10 has an invalid length.
[  170.006393][T14564] netlink: 'syz.2.2162': attribute type 1 has an invalid length.
[  170.189358][T14599] netlink: 'syz.0.2172': attribute type 4 has an invalid length.
[  170.219369][T14602] netlink: 'syz.1.2173': attribute type 1 has an invalid length.
[  170.289899][   T33] audit: type=1804 audit(1756674251.953:2): pid=14617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2177" name="/newroot/631/cgroup.controllers" dev="tmpfs" ino=3242 res=1 errno=0
[  170.297737][   T33] audit: type=1800 audit(1756674251.953:3): pid=14617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2177" name="cgroup.controllers" dev="tmpfs" ino=3242 res=0 errno=0
[  170.450625][ T5843] Bluetooth: hci1: command 0x0406 tx timeout
[  170.529108][T14648] xt_socket: unknown flags 0xfc
[  170.828191][T14696] !: renamed from dummy0
[  170.875376][T14703] NCSI netlink: No device for ifindex 0
[  170.917475][T14709] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  170.944452][T14713] tipc: Resetting bearer <eth:team0>
[  171.041529][T14730] team0: Port device dummy0 added
[  171.048554][T14730] team0: Port device dummy0 removed
[  171.154469][T14750] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  171.204894][T14754] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR
[  171.435066][T14783] tunl0: entered promiscuous mode
[  171.703604][T14804] tipc: Resetting bearer <eth:team0>
[  171.706396][T14804] bond0: (slave batadv_slave_0): Releasing backup interface
[  171.711616][T14804] bond8: (slave bridge0): Releasing active interface
[  171.715577][T14804] bond9: (slave ip6gretap3): Releasing backup interface
[  171.717889][T14804] bond9: (slave ip6gretap3): the permanent HWaddr of slave - 86:9f:cb:cb:20:4a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  171.727514][T14804] bond9: (slave veth11): Releasing backup interface
[  171.928371][T14839] geneve6: entered promiscuous mode
[  171.930126][T14839] geneve6: entered allmulticast mode
[  171.934815][T14271] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  171.937459][T14271] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  171.940086][T14271] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  171.943915][T14271] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  171.954568][T14836] bond17: (slave veth17): Enslaving as an active interface with a down link
[  171.966263][T14836] 8021q: adding VLAN 0 to HW filter on device bond17
[  171.991337][T14854] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  173.111695][T14904] __nla_validate_parse: 34 callbacks suppressed
[  173.111706][T14904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2261'.
[  173.192557][T14923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2266'.
[  173.203924][T14923] net_ratelimit: 6 callbacks suppressed
[  173.203938][T14923] openvswitch: netlink: EtherType 0 is less than min 600
[  173.203983][T14921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2265'.
[  173.211044][T14923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2266'.
[  173.214904][T14926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2266'.
[  173.218751][T14923] openvswitch: netlink: EtherType 0 is less than min 600
[  173.226898][T14926] openvswitch: netlink: EtherType 0 is less than min 600
[  173.230210][T14921] netlink: 212296 bytes leftover after parsing attributes in process `syz.0.2265'.
[  173.339271][T14943] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  173.346483][T14943] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  173.353187][T14943] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  173.370213][T14943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2271'.
[  173.380132][T14943] validate_nla: 23 callbacks suppressed
[  173.380145][T14943] netlink: 'syz.1.2271': attribute type 47 has an invalid length.
[  173.385807][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2271'.
[  173.428789][T14953] tipc: Resetting bearer <eth:team0>
[  173.440068][T14955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.496701][T14953] team0: Unable to change to the same mode the team is in
[  173.546847][T14966] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  173.563348][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2277'.
[  173.607581][T14966] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  173.624603][T14976] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2279'.
[  173.628300][T14976] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  173.655600][T14979] netlink: 'syz.0.2280': attribute type 1 has an invalid length.
[  173.714240][T14966] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  173.727016][T14991] sctp: [Deprecated]: syz.0.2283 (pid 14991) Use of int in max_burst socket option.
[  173.727016][T14991] Use struct sctp_assoc_value instead
[  173.742329][T14966] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  173.773909][T15001] openvswitch: netlink: Flow key attr not present in new flow.
[  173.774653][T15002] openvswitch: netlink: Unknown key attributes 2
[  173.798609][ T9798] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  173.807091][ T9798] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  173.817618][ T9798] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  173.824863][ T9798] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  173.891466][T15010] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001
[  173.897272][T15010] netlink: 'syz.0.2290': attribute type 1 has an invalid length.
[  173.925221][T15014] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  173.949022][T15019] netlink: 'syz.0.2294': attribute type 10 has an invalid length.
[  173.957278][T15019] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode
[  174.033456][T15024] syzkaller1: entered promiscuous mode
[  174.035361][T15024] syzkaller1: entered allmulticast mode
[  174.039563][T15024] netlink: 'syz.0.2295': attribute type 12 has an invalid length.
[  174.174661][T15032] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  174.177870][T15032] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.181515][T15032] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  174.202310][T15032] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  174.205395][T15032] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.208593][T15032] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  174.225250][T15035] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  174.263513][T15032] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  174.266823][T15032] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.270037][T15032] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  174.302927][T15032] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  174.306297][T15032] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.309607][T15032] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  174.353427][ T9798] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  174.356185][ T9798] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  174.359055][ T9798] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  174.365440][ T9798] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  174.368377][ T9798] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  174.371171][ T9798] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  174.382310][ T9798] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  174.385052][ T9798] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  174.390572][ T9798] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  174.393481][ T9798] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.396726][ T9798] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  174.400383][ T9798] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  174.456515][T15048] team0: invalid flags given to default FDB implementation
[  174.492210][T15056] netlink: 'syz.1.2304': attribute type 1 has an invalid length.
[  174.513874][T15056] 8021q: adding VLAN 0 to HW filter on device bond10
[  174.522280][T15056] veth17: entered promiscuous mode
[  174.526792][T15056] bond10: (slave veth17): Enslaving as a backup interface with a down link
[  174.534758][T15056] tipc: Resetting bearer <eth:team0>
[  174.540474][T15056] bond10: (slave veth17): Releasing backup interface
[  174.657889][T15065] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  175.526239][    C1] ------------[ cut here ]------------
[  175.528141][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  175.531658][    C1] WARNING: CPU: 1 PID: 0 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  175.534890][    C1] Modules linked in:
[  175.536394][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  175.540085][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.543507][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  175.545592][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 72 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 92 2e 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  175.552007][    C1] RSP: 0018:ffffc900001e0538 EFLAGS: 00010246
[  175.554232][    C1] RAX: dccab38fcb151800 RBX: 000000000000000c RCX: ffff8881006a0000
[  175.557029][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  175.559618][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  175.562243][    C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888110eb1228
[  175.564712][    C1] R13: 0000000000000000 R14: ffff888032c40e40 R15: ffff888032c430d8
[  175.567293][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  175.570270][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  175.572515][    C1] CR2: 000000110c32f37d CR3: 000000002c882000 CR4: 00000000000006f0
[  175.575191][    C1] Call Trace:
[  175.576329][    C1]  <IRQ>
[  175.577308][    C1]  rate_control_send_low+0x194/0x7a0
[  175.579453][    C1]  rate_control_get_rate+0x20b/0x5d0
[  175.581469][    C1]  ieee80211_beacon_get_finish+0x39a/0x6c0
[  175.583408][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  175.585411][    C1]  ? rcu_is_watching+0x15/0xb0
[  175.586919][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  175.588740][    C1]  ieee80211_beacon_get_ap+0x1868/0x1f30
[  175.590626][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  175.592539][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  175.594333][    C1]  ? rcu_is_watching+0x15/0xb0
[  175.595863][    C1]  ? lock_acquire+0x5f/0x360
[  175.597419][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  175.599242][    C1]  __ieee80211_beacon_get+0x118e/0x1880
[  175.601118][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  175.602943][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  175.604732][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  175.606755][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  175.608564][    C1]  ? lock_acquire+0x5f/0x360
[  175.610109][    C1]  __iterate_interfaces+0x2ab/0x590
[  175.611846][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  175.613878][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  175.616249][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  175.618200][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  175.620519][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  175.622234][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  175.624127][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  175.625777][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  175.627646][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  175.629513][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  175.631217][    C1]  handle_softirqs+0x286/0x870
[  175.632724][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  175.634242][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  175.635973][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  175.637700][    C1]  __irq_exit_rcu+0xca/0x1f0
[  175.639242][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  175.640961][    C1]  irq_exit_rcu+0x9/0x30
[  175.642322][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  175.644109][    C1]  </IRQ>
[  175.645081][    C1]  <TASK>
[  175.646055][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  175.648042][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  175.649916][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 96 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  175.656265][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  175.658277][    C1] RAX: dccab38fcb151800 RBX: ffffffff819683b8 RCX: dccab38fcb151800
[  175.660898][    C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  175.663452][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  175.666065][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38430
[  175.668673][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d4000
[  175.671371][    C1]  ? do_idle+0x1e8/0x510
[  175.672797][    C1]  ? do_idle+0x1e8/0x510
[  175.674237][    C1]  default_idle+0x13/0x20
[  175.675684][    C1]  default_idle_call+0x74/0xb0
[  175.677306][    C1]  do_idle+0x1e8/0x510
[  175.678685][    C1]  ? __pfx_do_idle+0x10/0x10
[  175.680233][    C1]  cpu_startup_entry+0x44/0x60
[  175.681858][    C1]  start_secondary+0x101/0x110
[  175.683453][    C1]  common_startup_64+0x13e/0x147
[  175.685121][    C1]  </TASK>
[  175.686164][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  175.688563][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  175.691429][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.694641][    C1] Call Trace:
[  175.695725][    C1]  <IRQ>
[  175.696656][    C1]  dump_stack_lvl+0x99/0x250
[  175.698186][    C1]  ? __asan_memcpy+0x40/0x70
[  175.699648][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.701270][    C1]  ? __pfx__printk+0x10/0x10
[  175.702743][    C1]  vpanic+0x281/0x750
[  175.704064][    C1]  ? __pfx__printk+0x10/0x10
[  175.705544][    C1]  ? __pfx_vpanic+0x10/0x10
[  175.707062][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  175.708818][    C1]  panic+0xb9/0xc0
[  175.710090][    C1]  ? __pfx_panic+0x10/0x10
[  175.711539][    C1]  __warn+0x31b/0x4b0
[  175.712822][    C1]  ? __rate_control_send_low+0x5df/0x820
[  175.714608][    C1]  ? __rate_control_send_low+0x5df/0x820
[  175.716382][    C1]  report_bug+0x2be/0x4f0
[  175.717734][    C1]  ? __rate_control_send_low+0x5df/0x820
[  175.719575][    C1]  ? __rate_control_send_low+0x5df/0x820
[  175.721401][    C1]  ? __rate_control_send_low+0x5e1/0x820
[  175.723205][    C1]  handle_bug+0x84/0x160
[  175.724599][    C1]  exc_invalid_op+0x1a/0x50
[  175.726073][    C1]  asm_exc_invalid_op+0x1a/0x20
[  175.727625][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  175.729679][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 72 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 92 2e 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  175.735988][    C1] RSP: 0018:ffffc900001e0538 EFLAGS: 00010246
[  175.738004][    C1] RAX: dccab38fcb151800 RBX: 000000000000000c RCX: ffff8881006a0000
[  175.740587][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  175.743212][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  175.745811][    C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888110eb1228
[  175.748441][    C1] R13: 0000000000000000 R14: ffff888032c40e40 R15: ffff888032c430d8
[  175.750981][    C1]  ? __rate_control_send_low+0x5de/0x820
[  175.752845][    C1]  rate_control_send_low+0x194/0x7a0
[  175.754592][    C1]  rate_control_get_rate+0x20b/0x5d0
[  175.756343][    C1]  ieee80211_beacon_get_finish+0x39a/0x6c0
[  175.758266][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  175.760376][    C1]  ? rcu_is_watching+0x15/0xb0
[  175.761940][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  175.763754][    C1]  ieee80211_beacon_get_ap+0x1868/0x1f30
[  175.765570][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  175.767501][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  175.769271][    C1]  ? rcu_is_watching+0x15/0xb0
[  175.770849][    C1]  ? lock_acquire+0x5f/0x360
[  175.772361][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  175.774126][    C1]  __ieee80211_beacon_get+0x118e/0x1880
[  175.775910][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  175.777730][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  175.779480][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  175.781464][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  175.783285][    C1]  ? lock_acquire+0x5f/0x360
[  175.784850][    C1]  __iterate_interfaces+0x2ab/0x590
[  175.786711][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  175.788770][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  175.791132][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  175.793141][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  175.795441][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  175.797166][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  175.799103][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  175.800822][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  175.802723][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  175.804642][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  175.806344][    C1]  handle_softirqs+0x286/0x870
[  175.807949][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  175.809528][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  175.811276][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  175.813011][    C1]  __irq_exit_rcu+0xca/0x1f0
[  175.814549][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  175.816279][    C1]  irq_exit_rcu+0x9/0x30
[  175.817699][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  175.819569][    C1]  </IRQ>
[  175.820564][    C1]  <TASK>
[  175.821570][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  175.823550][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  175.825386][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 96 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  175.831595][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  175.833599][    C1] RAX: dccab38fcb151800 RBX: ffffffff819683b8 RCX: dccab38fcb151800
[  175.836210][    C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  175.838728][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  175.841288][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38430
[  175.843867][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d4000
[  175.846448][    C1]  ? do_idle+0x1e8/0x510
[  175.847832][    C1]  ? do_idle+0x1e8/0x510
[  175.849241][    C1]  default_idle+0x13/0x20
[  175.850646][    C1]  default_idle_call+0x74/0xb0
[  175.852237][    C1]  do_idle+0x1e8/0x510
[  175.853589][    C1]  ? __pfx_do_idle+0x10/0x10
[  175.855133][    C1]  cpu_startup_entry+0x44/0x60
[  175.856716][    C1]  start_secondary+0x101/0x110
[  175.858272][    C1]  common_startup_64+0x13e/0x147
[  175.859887][    C1]  </TASK>
[  175.861837][    C1] Kernel Offset: disabled
[  175.863295][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:04:17  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81ac37bc RBX=ffffc9000936ee00 RCX=8969a7e12f3e9600 RDX=ffffc9000936ed01
RSI=ffffffff81ac37bc RDI=ffffc9000936ee00 RBP=ffffc9000936edd0 RSP=ffffc9000936ed40
R8 =ffffc9000936edd0 R9 =0000000000000000 R10=ffffc9000936ed98 R11=ffffffff81ac3810
R12=ffff888106720000 R13=1ffff9200126ddd4 R14=ffffffff81ac3810 R15=ffffc9000936ed48
RIP=ffffffff81ac3810 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f06a50980d0 CR3=0000000011634000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9c61997498 00007f9c61997470 XMM03=00007f9c619974a8 00007f9c619974a0
XMM04=00007f9c624fd100 00007f9c61997460 XMM05=00007f9c61997478 00007f9c619974c0
XMM06=00007f9c619974b8 00007f9c619974b0 XMM07=00007f9c619974a8 00007f9c619974a0
XMM08=0000000000000000 00007f9c61812ee7 XMM09=0000000000000000 00007f9c61812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfcd0
R8 =ffff888108d50237 R9 =1ffff110211aa046 R10=dffffc0000000000 R11=ffffffff854f1e80
R12=dffffc0000000000 R13=ffffffff99afa907 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1efc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c32f37d CR3=000000002c882000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000003068746576
XMM02=b1318846a676f020 8cf37f2b6198ad36 XMM03=1dc7ff9d24ab065d 108381bd5625804c
XMM04=c159cd960dda43e1 06c4218c3114f2e7 XMM05=06c4218c3114f2e7 398047143f107707
XMM06=108381bd5625804c c159cd960dda43e1 XMM07=8cf37f2b6198ad36 1dc7ff9d24ab065d
XMM08=28ddc4546cabfdc0 26889eddd55811ba XMM09=0000000000000000 00007fda28a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
