last executing test programs:

2.400044409s ago: executing program 0 (id=2930):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000002c0)=0x803, 0x4)
syz_emit_ethernet(0x12e2, &(0x7f0000000600)={@broadcast, @random="00759d7800", @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "0400ed", 0x12ac, 0x11, 0x95219b27d0bb9f63, @mcast1, @local, {[@hopopts={0x33, 0x8, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x6}, @enc_lim, @ra={0x5, 0x2, 0x7f}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x20, {0x1, 0x6, 0x0, 0xfffb, [0x1, 0x6, 0xf8]}}]}, @srh={0x2e, 0x4, 0x4, 0x2, 0x81, 0x68, 0x8, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x21, 0x1c, '\x00', [@generic={0x8, 0x9e, "48bedc8f38f412de62547e7b72595d0b14b8704f530c0bc59f0d18c1bce94d67e5f03df1037a2e50bdf92b07ab46636cdf563417985c18a3856740ebcd45da96eee6e433b199c60620ec5cec5096ebfb2839d2ce3278f8f762922de726044e9275c9db0a4f84839b0f6aee05532be7d7b324e8187f8581021b11c7cc9371c8f1c85b108c626cd4ac08f6d2246cdb8ff355dd321ea99e7be649e675c6e952"}, @enc_lim, @enc_lim={0x4, 0x1, 0xc7}, @calipso={0x7, 0x38, {0x3, 0xc, 0x2, 0x9, [0x6, 0xfffffffffffff000, 0x1, 0x7, 0x7fff, 0xd]}}]}, @fragment={0x67, 0x0, 0x4, 0x0, 0x0, 0x7, 0x65}, @dstopts={0x4c45f7dafac62637, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x7}]}, @routing={0x0, 0xa, 0x1, 0x8, 0x0, [@mcast1, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local]}, @hopopts={0x88, 0x203, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7ff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0xf6, 0x1000, "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"}, @ra={0x5, 0x2, 0x5}]}, @routing={0x2, 0xa, 0x2, 0x5, 0x0, [@mcast2, @loopback, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}]}], {0x4e23, 0x4e22, 0x4c, 0x0, @gue={{0x2, 0x1, 0x3, 0x0, 0x100}, "1f37185a026fcc3597ac06e4b7a82ad784bf2264a702a1ffac7bbc0d634ca46889708446bc85e2c565c3a639c6021822de1ff6e6de2637090c2d778d"}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600894f0000140002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="441f08ee00270bee724ecd8391ab161f02a79f25a6ac65a600926000000000d80990b946f7", 0x25)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40001)
close(r1)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000040)={0x8, 'gretap0\x00', {'veth0_to_hsr\x00'}, 0x8000})

1.440092302s ago: executing program 0 (id=2936):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
listen(0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r2=>0x0})
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/net\x00')
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r4, &(0x7f0000000380)=ANY=[@ANYRES16=r4, @ANYBLOB="e1ed6f24d61a58cec867a7232e84e348930eeb2518c47315734d"], 0xfdef)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0xd66771a5e8224ded, 0x3, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x24}}, 0x0)

1.129291917s ago: executing program 0 (id=2938):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

899.858637ms ago: executing program 1 (id=2940):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r2, 0xda90)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) (async)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x3, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x2c}}, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000800)={{<r4=>r2, &(0x7f0000000380)='syztnl2\x00', 0x2, &(0x7f0000000600)={@_ha_fsid={[0x6, 0x3]}, {0x101, 0x0, 0x0, 0x1}}, 0x101, &(0x7f00000006c0), &(0x7f00000008c0)=0x5}, {[0x6, 0x16, 0x0, 0x5]}, 0x8, 0x9c, &(0x7f0000000740)=""/156})
accept4(r2, 0x0, 0x0, 0x0) (async)
r5 = accept4(r2, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r5, @ANYRES32=r4], 0x80}}, 0x4814)
socket$key(0xf, 0x3, 0x2) (async)
r8 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r8, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', <r9=>0x0, 0x8, 0x7800, 0x401, 0xffff, {{0x1a, 0x4, 0x1, 0x1, 0x68, 0x67, 0x0, 0xa6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@generic={0x83, 0x2}, @generic={0x83, 0xe, "2d6d1f27f16d26e82822712c"}, @timestamp_addr={0x44, 0x44, 0x61, 0x1, 0x7, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x3}, {@private=0xa010102, 0x9}, {@loopback, 0x101}, {@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0x6}, {@local, 0x4}]}]}}}}})
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@mpls_getroute={0xb0, 0x1a, 0x512, 0x70bd2b, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x0, 0xfc, 0x2, 0xc8, 0xa, 0x1000}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x7}, {0x1ff, 0x0, 0x1}, {0xfff80}, {0x51cee, 0x0, 0x1}, {0x7}, {0x4, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7}, {0x80000}, {0x9}, {0x6}, {0x200, 0x0, 0x1}, {0x4}, {0xffffb, 0x0, 0x1}, {0xfffff, 0x0, 0x1}, {0x10}, {0x8001, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x973, 0x0, 0x1}, {0x2}, {0x9}, {0x7}, {0x1ff}, {0x1, 0x0, 0x1}, {0x5}, {0x6}, {0x7, 0x0, 0x1}, {}, {0x10}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5}, @RTA_OIF={0x8, 0x4, r9}]}, 0xb0}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)={0x48, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x22, 0x34, @random="43e9d950d52d001206cadf9a84a83b2a78ed8bc9ca8359f417ad890fb373"}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x10}]}, 0x48}}, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r10, 0x0)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000000880)=0xffffffff) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000000880)=0xffffffff)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async)
setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
syz_80211_inject_frame(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="500000000802010000000802110000000802110000000000000000000000000064000100000602020202020201018294f702700c6a93e2e646bd7b6d293d1d5ca70572b225f198c35ea003b9ac974e6274219fec9073e114b8faa98d4ab6f80bd246f887dc26eaece3fa94c4477e3d4e110f7db8313d62b871591b4da75c42bfb3b0ea68c6103eb902950aaa25195d17637417b54d8617f2a7b8b217865a7e53c7ee48bcfac05e4994872213a1a46ad5219f06e453c104bbe8249ae2926ff5e08e534aa94b8438113cab08c4558f3bcba24d83cfc1e7414cc95e699d35414a903955c1b99a4e68a4ce9a2217e64a4aa1"], 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="180a00000000000000010802110000000802110000001000000002000000"], 0x1e)
r12 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) (async)
ioctl$SIOCSIFHWADDR(r12, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"})

898.303231ms ago: executing program 2 (id=2941):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32)
close(0x4) (async, rerun: 32)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) (async)
recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4}, 0x1}], 0x1, 0x20, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x8) (rerun: 32)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}}, 0x880) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) (async)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x114, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x11, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x39, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000080) (rerun: 32)
pselect6(0x40, &(0x7f0000000140)={0x1000, 0xd2, 0x0, 0xba, 0xfffffffffffffff9, 0x7}, &(0x7f0000000300)={0x7, 0xf, 0x1ff, 0x71a, 0x0, 0x7, 0x7, 0x8001}, &(0x7f0000000340)={0x0, 0xfffffffffffffff8, 0x1, 0xfffffffffffeffff, 0xfffffffffffffffe, 0x5, 0x8000, 0xa08}, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) (async)
ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4, 'syz1\x00', @bcast, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})

718.706426ms ago: executing program 1 (id=2942):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_DEL_DEST(r0, 0x0, 0x48c0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000801)
sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="00022dbd7000ffd3df25010004000000000000410000000fea137564703a6ce2c6989c6f7955"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480), 0x0)
getuid()
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0xd0, 0x270, 0xd0, 0x270, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@local, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00', {}, {}, 0x3c}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000840)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000880)=0x10, 0x40800)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012dbd7000fbdbdf25690000000c009900600000000d0000000500d200010000000500d300070000000600d400000000000500d200090000000500d2000100"/78], 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000007fb22d3800"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, <r5=>0xffffffffffffffff}, 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r5, 0x0, &(0x7f0000001780)=""/4096}, 0x20)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a00)={'team_slave_1\x00'})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(r6, 0x0, 0x40004)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004)
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2800002011986ff560bbcc64013141d21c8ea29b7b49bd42abeb345443ff29d05ca2a5a75350f601fd04251a026de94d70002b09529b1e17840393d85e418b242a59018fb0d90eb16d71a5b94d0620f03079ce58b515c24e592d616f23354ee7d10b380eb8ef810be6f68dc5efbf7defddd75fae53c0e6acf7200c7bd001269df90a056dfafa6eb8a4efebdf05a36db0f663d946c74393d0718b7ab77a18f9fe0187dfedbc363db0a6c2f695ae96055d4fd4e2e8b9", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf252c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900030000006a000000"], 0x28}, 0x1, 0x0, 0x0, 0x4054040}, 0x8040)

650.736654ms ago: executing program 1 (id=2943):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010080ffffff000000e8000000006367f82b080001000300000005000300800000000800020000000000"], 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200}, [@generic={0x81, 0x1, 0x1, 0x78}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000003040)=0x2, 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000)
r6 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x2)

590.575636ms ago: executing program 1 (id=2944):
r0 = socket$netlink(0x10, 0x3, 0xb)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x2, 0x408, 0x5, 0x49}, 0x10)
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x36e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0xa2, &(0x7f0000000240)=""/162, 0x41100, 0x2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0xff, 0x9}, 0x10, 0x202cf, 0xffffffffffffffff, 0x5, &(0x7f0000000380)=[0xffffffffffffffff], &(0x7f00000003c0)=[{0x2, 0x5, 0x8, 0x5}, {0x5, 0x2, 0x4, 0x9}, {0x4, 0x5, 0x2, 0xc}, {0x0, 0x2, 0x10, 0x7}, {0x1, 0x4, 0x3, 0x5}], 0x10, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x8d}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
close(r0)

589.806755ms ago: executing program 1 (id=2945):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
r5 = socket(0x40000000015, 0x5, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "60fba73f4ffedf42", "346af4fbe91c45528ccbb4ad58dc9c7375a5b9f53757718fb80b5427376b2434", "657501c2", "91743178b1f069eb"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r6, 0x5421, &(0x7f0000000140)=0x1)
writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="80020000", @ANYRES16=r3, @ANYBLOB="000201000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x800}, 0x8801)
getsockopt(r5, 0x200000000114, 0x8, 0x0, &(0x7f0000000400))
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="02000000", @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b002d000000"], 0x24}}, 0x8000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d6174636800000034000280180003000f000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r8, &(0x7f0000000000)={&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffc}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
r9 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r9, &(0x7f00000001c0)={0x2, 0xff7f, @loopback}, 0x10)
sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@mask_fadd={0x58, 0x114, 0x8, {{0x5227, 0x20080}, &(0x7f0000000200)=0xd0, 0x0, 0x2, 0x4, 0xfffffffd, 0x66, 0xa5cd07ec1af72f20, 0xfffffffffffffffb}}], 0x58}, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'})

458.064002ms ago: executing program 2 (id=2946):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f0000000200), &(0x7f0000000280)=0x4)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="800000002bfaccaf0001080211000000ffffffffffff00000000000000000000640001000006020202020202010882848b960c121824"], 0x36)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r9=>0x0}) (async, rerun: 32)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 32)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'wg2\x00', 0x20})
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
writev(r11, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001811005abeef4ba0d5", 0xc}, {&(0x7f0000000700)="37a8010059616da007f3c18c191f6ffa1401000000fd2c010000003c6b1bcc4ce1606b67309e18505efb3e0ce4f53252a65aa2e6", 0x34}], 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r10, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x37)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r8, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r6, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac86fa3e823bff705acd262e22"], 0x3c}}, 0x8000)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))

457.427397ms ago: executing program 1 (id=2947):
socket$alg(0x26, 0x5, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r0, 0x23, 0x1, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)}, 0x40) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=<r1=>r0, 0x23, 0x1, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)}, 0x40)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x80000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
ioctl$PPPIOCGNPMODE(r4, 0xc008744c, 0x0) (async)
ioctl$PPPIOCGNPMODE(r4, 0xc008744c, 0x0)
r5 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r6=>0x0, <r7=>0x0})
ppoll(&(0x7f0000000140)=[{r5, 0x43}], 0x1, &(0x7f0000000200)={r6, r7+10000000}, &(0x7f0000000240)={[0x800]}, 0x8)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000002c0)={0x7, 'ip6erspan0\x00', {0x7}, 0x3}) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000002c0)={0x7, 'ip6erspan0\x00', {0x7}, 0x3})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r3, 0x1f4d2000)
close(r3)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2)
sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b", 0x11}], 0x1, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080)

399.99684ms ago: executing program 0 (id=2948):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x7, [{0xa, 0x3}]}, @int={0x5, 0x0, 0x0, 0x1, 0x5, 0x20}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x61, 0x2e, 0x0, 0x61]}}, 0x0, 0x58}, 0x28)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00001b01040101000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
unshare(0x10050200)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40000c0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010100}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x440b0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}, 0x1, 0x0, 0x0, 0x2000094}, 0x80)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x2b8, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa99}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @remote, 0x80000001}}}}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "b63c9e214be5e11c67f9a4d749fd4452abae05ea75c8cd5a8e90f96ed9a2f455"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x89, 0x3, "390dfc75f3d133f09e463343f63dd6bfadd2631f8711a502a72ac6fb886697da559dc72eb390a63255bb32b3383d39d18304b49e332cdbc49701b1b65983a87a40488775dae4ee35b580e17268419c0e847c00ccc3061c43c43a5263f0f7ce5fc247d8e4d347056537e6465eec6b1a2b7edd6ff987bc1441590e5d59a7f29135521f12adc2"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x37}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x2e, 0x2e, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0x51f}, 0x28)

398.964027ms ago: executing program 2 (id=2949):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x402}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x5, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x57, 0x3c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c894)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40008}, 0x80)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9e40496e4616d1a8bff549f3289be4e5c6e29a07c216aaf15590cd32a7d6c9d18577eb63170e236c3e108e90f2e7dde8bbd7ad761a72be39"], 0x7c}}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x2408c004}, 0x4808)
close(0x3)

290.409155ms ago: executing program 2 (id=2950):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x7, [{0xa, 0x3}]}, @int={0x5, 0x0, 0x0, 0x1, 0x5, 0x20}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x61, 0x2e, 0x0, 0x61]}}, 0x0, 0x58}, 0x28)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
writev(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00001b01040101000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800)
close(0x3)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
unshare(0x10050200)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002"], 0x3c}}, 0x40000)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40000c0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010100}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x440b0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x2b8, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa99}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @remote, 0x80000001}}}}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "b63c9e214be5e11c67f9a4d749fd4452abae05ea75c8cd5a8e90f96ed9a2f455"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x89, 0x3, "390dfc75f3d133f09e463343f63dd6bfadd2631f8711a502a72ac6fb886697da559dc72eb390a63255bb32b3383d39d18304b49e332cdbc49701b1b65983a87a40488775dae4ee35b580e17268419c0e847c00ccc3061c43c43a5263f0f7ce5fc247d8e4d347056537e6465eec6b1a2b7edd6ff987bc1441590e5d59a7f29135521f12adc2"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x37}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x2e, 0x2e, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0x51f}, 0x28)
r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x10, r1}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r8, 0xf, 0x0, 0x7, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], <r10=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@fallback=r2, r9, 0x26, 0x14, r4, @void, @value=r4, @void, @void, r10}, 0x20)

209.389255ms ago: executing program 0 (id=2951):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x325, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x24030000, 0x0, 0x4050000}, 0x4008040)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r4)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty=0x2000a00}]}, 0x34}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10)
getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000100)=""/2, &(0x7f0000000140)=0x2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0)
r7 = socket$inet6(0xa, 0x3, 0xff)
sendmmsg$inet6(r7, &(0x7f0000000580)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="06d14dad91515bc88e7941335c6609d36aa2d6a821cd25a5bfdc4b5ba81d41ea69e78a7d167734e25327a369f32067b93d52896c5fca22e1551d0790fe70c16e9e7d102df54bee5ed77a29daecee01baf049291eb2e1e503f4d80c19e8098470cd7f28b09915e0082aa9b9454c3a8f49cacfa0df4e013d34deb61bf2a12815338fa0da", 0x83}, {&(0x7f0000000300)="8d2b639d693f5717bf7540f701c7478aaa4b7f4a16e45ce8b452016098a2591e1952324f3fa26e8fce5e9754bc52e36bf9e9a80db262aa0a2eb97de5466c680e5b96b0fbf15131c254d04f00168043e86c6cad729a33063d95de15f368dc83baeb7f6905ba5b05e576a3317f72478133ae794a7d5f44d71a2f2899cc3b1fa7c1fa1bf3c815233b301bb4c779432912bea3f9a37b11e4a83cd177e32bfa", 0x9d}], 0x2, &(0x7f00000003c0)=[@dstopts_2292={{0xe8, 0x29, 0x4, {0x73, 0x19, '\x00', [@padn={0x1, 0xfffffffffffffe76, [0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x42}}, @pad1, @ra={0x5, 0x2, 0xfffc}, @generic={0x6, 0xf, "14182af466ee04130db53636f309e1"}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x0, 0xc, 0x5, 0x2, [0x4, 0x6, 0x400, 0x1, 0x9, 0x5]}}, @generic={0xf0, 0x54, "9e30dabfb97196d6fae4c4c24355d5af472c42d6624deaac1ff0018520063c43623f4ede5e47a8ac471a77c7205ceea42dda02ec847eb815bab6c4699cf40a55c4cc84f9e2db95dba92acf4df507ac39296393ff"}]}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x32, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0xb4}, @padn, @ra={0x5, 0x2, 0xff00}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0xf}, @jumbo={0xc2, 0x4, 0x400}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0xff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x128}}], 0x2, 0x0)
r8 = accept4(r7, 0x0, &(0x7f0000000640), 0x0)
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r12, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r9, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
recvmsg$kcm(r8, &(0x7f0000001a40)={&(0x7f0000000680)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000700)=""/148, 0x94}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/74, 0x4a}, {&(0x7f0000001840)=""/29, 0x1d}, {&(0x7f0000001880)=""/173, 0xad}, {&(0x7f0000001940)=""/63, 0x3f}], 0x6, &(0x7f0000001a00)=""/5, 0x5}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0)
syz_80211_join_ibss(&(0x7f0000000240)='wlan1\x00', &(0x7f0000000600)=@default_ap_ssid, 0x6, 0x2)

50.445664ms ago: executing program 2 (id=2952):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_ENABLE_SE(r0, 0x0, 0xc004) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r5 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xffffffffffffff92}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0}, 0x28) (async)
r6 = socket$netlink(0x10, 0x3, 0x6)
writev(r6, &(0x7f00000001c0)=[{}], 0x1) (async)
close(0x3) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000000a01010000e5ed56bff97f770e27a0751b363b8aaf7800000000000073797a3000000000080002400000000108000240000000070c00044000002000000000061400000011000100000a0000000000000200000a"], 0x64}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async)
close(0x3)

282.033µs ago: executing program 0 (id=2953):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
recvmmsg(r3, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x40, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000200), &(0x7f0000000280)=0x4)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="800000002bfaccaf0001080211000000ffffffffffff00000000000000000000640001000006020202020202010882848b960c121824"], 0x36)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r9=>0x0})
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0xaf636000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r10, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r8, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r6, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac86fa3e823bff705acd262e22"], 0x3c}}, 0x8000)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000180)=ANY=[@ANYBLOB="50000000080211000001080211000000080211001700000000000000000000000c0001000006020202020202010882848b960c1218240301af060207002d1a20000c05000000000000000800050019000000060002c70000ea728c030303030303"], 0x61)

0s ago: executing program 2 (id=2954):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x7, [{0xa, 0x3}]}, @int={0x5, 0x0, 0x0, 0x1, 0x5, 0x20}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x61, 0x2e, 0x0, 0x61]}}, 0x0, 0x58}, 0x28)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00001b01040101000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
unshare(0x10050200)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x28000000)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40000c0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010100}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x440b0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x2e, 0x2e, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0x51f}, 0x28)

kernel console output (not intermixed with test programs):

14661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  267.455464][T14695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2087'.
[  267.586725][T14712] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2088'.
[  267.619579][T14709] gre0 speed is unknown, defaulting to 1000
[  267.680897][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2091'.
[  267.909897][T14749] gre0 speed is unknown, defaulting to 1000
[  267.944695][T14752] netlink: 'syz.2.2097': attribute type 10 has an invalid length.
[  267.950560][T14733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  267.954803][T14737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  268.043296][T14754] bond46: entered promiscuous mode
[  268.051849][T14754] 8021q: adding VLAN 0 to HW filter on device bond46
[  268.070691][T14756] 8021q: adding VLAN 0 to HW filter on device bond46
[  268.073966][T14756] bond46: (slave vti0): The slave device specified does not support setting the MAC address
[  268.078548][T14756] bond46: (slave vti0): Error -95 calling set_mac_address
[  268.091056][T14758] Cannot find add_set index 3 as target
[  268.113937][T14754] ip6t_srh: unknown srh match flags  4000
[  268.124898][T14750] gre0 speed is unknown, defaulting to 1000
[  268.155318][T14760] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  268.197464][T14763] syzkaller1: entered promiscuous mode
[  268.199177][T14763] syzkaller1: entered allmulticast mode
[  268.265296][T14765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  268.541581][T14781] gre0 speed is unknown, defaulting to 1000
[  268.647046][T14779] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  268.717535][T14779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  268.779771][T14785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  268.861978][T14792] gre0 speed is unknown, defaulting to 1000
[  269.295352][T14806] gre0 speed is unknown, defaulting to 1000
[  269.441798][T14812] gre0 speed is unknown, defaulting to 1000
[  269.472993][ T1231] block nbd9: Possible stuck request ffff88810aea8000: control (read@0,1024B). Runtime 120 seconds
[  269.476319][ T1231] block nbd9: Possible stuck request ffff88810aea8200: control (read@1024,1024B). Runtime 120 seconds
[  269.477594][   T11] block nbd3: Possible stuck request ffff88810acb8000: control (read@0,1024B). Runtime 150 seconds
[  269.480430][ T1231] block nbd9: Possible stuck request ffff88810aea8400: control (read@2048,1024B). Runtime 120 seconds
[  269.484870][   T11] block nbd3: Possible stuck request ffff88810acb8200: control (read@1024,1024B). Runtime 150 seconds
[  269.488389][ T1231] block nbd9: Possible stuck request ffff88810aea8600: control (read@3072,1024B). Runtime 120 seconds
[  269.492672][   T11] block nbd3: Possible stuck request ffff88810acb8400: control (read@2048,1024B). Runtime 150 seconds
[  269.492689][   T11] block nbd3: Possible stuck request ffff88810acb8600: control (read@3072,1024B). Runtime 150 seconds
[  269.707673][T14815] gre0 speed is unknown, defaulting to 1000
[  269.950435][T14818] nftables ruleset with unbound chain
[  269.959613][T14818] __nla_validate_parse: 6 callbacks suppressed
[  269.959629][T14818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2114'.
[  270.124880][ T1231] block nbd10: Possible stuck request ffff88810aed8000: control (read@0,1024B). Runtime 120 seconds
[  270.128786][ T1231] block nbd10: Possible stuck request ffff88810aed8200: control (read@1024,1024B). Runtime 120 seconds
[  270.133554][ T1231] block nbd10: Possible stuck request ffff88810aed8400: control (read@2048,1024B). Runtime 120 seconds
[  270.137597][ T1231] block nbd10: Possible stuck request ffff88810aed8600: control (read@3072,1024B). Runtime 120 seconds
[  270.182416][T14823] netlink: 'syz.1.2116': attribute type 49 has an invalid length.
[  270.186358][T14823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2116'.
[  270.247842][T14827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2117'.
[  270.434651][T14836] gre0 speed is unknown, defaulting to 1000
[  270.475892][T14841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.762093][   T11] block nbd1: Possible stuck request ffff88810ac10000: control (read@0,1024B). Runtime 180 seconds
[  270.766503][   T11] block nbd1: Possible stuck request ffff88810ac10200: control (read@1024,1024B). Runtime 180 seconds
[  270.770643][   T11] block nbd1: Possible stuck request ffff88810ac10400: control (read@2048,1024B). Runtime 180 seconds
[  270.774702][   T11] block nbd1: Possible stuck request ffff88810ac10600: control (read@3072,1024B). Runtime 180 seconds
[  272.052927][ T1231] block nbd11: Possible stuck request ffff88810af40000: control (read@0,1024B). Runtime 120 seconds
[  272.057384][ T1231] block nbd11: Possible stuck request ffff88810af40200: control (read@1024,1024B). Runtime 120 seconds
[  272.061759][ T1231] block nbd11: Possible stuck request ffff88810af40400: control (read@2048,1024B). Runtime 120 seconds
[  272.066385][ T1231] block nbd11: Possible stuck request ffff88810af40600: control (read@3072,1024B). Runtime 120 seconds
[  273.313396][   T11] block nbd4: Possible stuck request ffff88810ad00000: control (read@0,1024B). Runtime 150 seconds
[  273.317349][   T11] block nbd4: Possible stuck request ffff88810ad00200: control (read@1024,1024B). Runtime 150 seconds
[  273.321848][   T11] block nbd4: Possible stuck request ffff88810ad00400: control (read@2048,1024B). Runtime 150 seconds
[  273.326424][   T11] block nbd4: Possible stuck request ffff88810ad00600: control (read@3072,1024B). Runtime 150 seconds
[  273.475798][T14843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  273.577933][T14864] gre0 speed is unknown, defaulting to 1000
[  273.679371][T14876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2126'.
[  273.737235][T14872] gre0 speed is unknown, defaulting to 1000
[  273.867001][T14869] gre0 speed is unknown, defaulting to 1000
[  273.961656][   T11] block nbd5: Possible stuck request ffff88810ad60000: control (read@0,1024B). Runtime 150 seconds
[  273.965194][   T11] block nbd5: Possible stuck request ffff88810ad60200: control (read@1024,1024B). Runtime 150 seconds
[  273.968703][   T11] block nbd5: Possible stuck request ffff88810ad60400: control (read@2048,1024B). Runtime 150 seconds
[  273.972336][   T11] block nbd5: Possible stuck request ffff88810ad60600: control (read@3072,1024B). Runtime 150 seconds
[  274.291792][T14881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'.
[  274.343669][T14881] gre0 speed is unknown, defaulting to 1000
[  274.371182][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'.
[  274.393985][T14885] bond47: entered promiscuous mode
[  274.396185][T14885] 8021q: adding VLAN 0 to HW filter on device bond47
[  274.411138][T14885] 8021q: adding VLAN 0 to HW filter on device bond47
[  274.422940][T14885] bond47: (slave vti0): The slave device specified does not support setting the MAC address
[  274.427108][T14885] bond47: (slave vti0): Error -95 calling set_mac_address
[  274.445819][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2129'.
[  274.467742][T14895] ip6t_srh: unknown srh match flags  4000
[  274.485158][T14890] bond47: entered promiscuous mode
[  274.487421][T14890] 8021q: adding VLAN 0 to HW filter on device bond47
[  274.535916][T14884] gre0 speed is unknown, defaulting to 1000
[  274.579892][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.595484][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.611849][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.616323][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.623521][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.631311][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.635839][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.643293][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.646939][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.654262][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.658765][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.663412][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.667171][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.674165][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.680683][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.687961][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.693726][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.710856][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.715461][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.719855][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.724315][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.728122][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.732905][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.736765][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.740606][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.744932][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.748537][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.752312][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.756621][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.761123][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.767976][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.772843][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.777093][T14898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.918558][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2133'.
[  275.018598][T14914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2133'.
[  276.513088][ T1231] block nbd12: Possible stuck request ffff88810af68000: control (read@0,1024B). Runtime 120 seconds
[  276.516410][ T1231] block nbd12: Possible stuck request ffff88810af68200: control (read@1024,1024B). Runtime 120 seconds
[  276.520128][ T1231] block nbd12: Possible stuck request ffff88810af68400: control (read@2048,1024B). Runtime 120 seconds
[  276.524199][ T1231] block nbd12: Possible stuck request ffff88810af68600: control (read@3072,1024B). Runtime 120 seconds
[  277.889566][T14907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  278.030676][T14945] gre0 speed is unknown, defaulting to 1000
[  278.122561][T14955] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  278.125559][T14955] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  278.135510][T14955] bond3: left promiscuous mode
[  278.137160][T14955] bond4: left promiscuous mode
[  278.138795][T14955] bond5: left promiscuous mode
[  278.141023][T14955] bond7: left promiscuous mode
[  278.143029][T14955] bridge1: left promiscuous mode
[  278.144998][T14955] bond10: left promiscuous mode
[  278.146952][T14955] bond14: left promiscuous mode
[  278.148633][T14955] bridge3: left promiscuous mode
[  278.150485][T14955] bond15: left promiscuous mode
[  278.152166][T14955] bridge4: left promiscuous mode
[  278.153877][T14955] bond16: left promiscuous mode
[  278.155573][T14955] bridge5: left promiscuous mode
[  278.157485][T14955] bond19: left promiscuous mode
[  278.159111][T14955] bridge6: left promiscuous mode
[  278.161183][T14955] bond20: left promiscuous mode
[  278.163431][T14955] bond21: left promiscuous mode
[  278.178081][T14955] bond23: left promiscuous mode
[  278.195469][T14955] bond26: left promiscuous mode
[  278.200486][T14955] bond27: left promiscuous mode
[  278.257453][T14955] bond33: left promiscuous mode
[  278.259453][T14955] bridge7: left promiscuous mode
[  278.283261][T14955] bond34: left allmulticast mode
[  278.289451][T14955] bond35: left promiscuous mode
[  278.316704][T14956] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  278.323396][T14955] bond42: left promiscuous mode
[  278.325340][T14955] bridge8: left promiscuous mode
[  278.348506][T14955] bond45: left promiscuous mode
[  278.352243][T14955] bridge9: left promiscuous mode
[  278.753888][T14962] gre0 speed is unknown, defaulting to 1000
[  278.790338][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'.
[  278.812722][T14964] bond49: entered promiscuous mode
[  278.815226][T14964] 8021q: adding VLAN 0 to HW filter on device bond49
[  278.824391][T14964] ip6t_srh: unknown srh match flags  4000
[  279.005562][T14967] gre0 speed is unknown, defaulting to 1000
[  279.031261][T14978] netlink: 'syz.0.2147': attribute type 58 has an invalid length.
[  279.033886][T14978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2147'.
[  279.041289][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2144'.
[  279.080128][T14985] bond48: entered promiscuous mode
[  279.082476][T14985] 8021q: adding VLAN 0 to HW filter on device bond48
[  279.087432][T14989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2147'.
[  279.093234][T14985] 8021q: adding VLAN 0 to HW filter on device bond48
[  279.095870][T14985] bond48: (slave vti0): The slave device specified does not support setting the MAC address
[  279.100654][T14985] bond48: (slave vti0): Error -95 calling set_mac_address
[  279.268236][T14996] gre0 speed is unknown, defaulting to 1000
[  279.271313][T14991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  279.928425][T15014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2153'.
[  279.959689][T15011] gre0 speed is unknown, defaulting to 1000
[  280.003374][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2152'.
[  280.020375][T15016] bond48: entered promiscuous mode
[  280.023460][T15016] 8021q: adding VLAN 0 to HW filter on device bond48
[  280.041599][T15016] ip6t_srh: unknown srh match flags  4000
[  280.225948][T15020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.230407][T15020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.341171][T15026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2156'.
[  280.445665][T15028] gre0 speed is unknown, defaulting to 1000
[  280.483120][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2157'.
[  280.530827][T15030] bond49: entered promiscuous mode
[  280.533665][T15030] 8021q: adding VLAN 0 to HW filter on device bond49
[  280.553606][T15032] 8021q: adding VLAN 0 to HW filter on device bond49
[  280.556817][T15032] bond49: (slave vti0): The slave device specified does not support setting the MAC address
[  280.561736][T15032] bond49: (slave vti0): Error -95 calling set_mac_address
[  280.590891][T15030] ip6t_srh: unknown srh match flags  4000
[  280.681314][T15036] gre0 speed is unknown, defaulting to 1000
[  281.077425][T15049] xt_connbytes: Forcing CT accounting to be enabled
[  281.080052][T15049] xt_CT: You must specify a L4 protocol and not use inversions on it
[  281.135900][T15049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.185652][T15049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.253948][T15057] gre0 speed is unknown, defaulting to 1000
[  281.296791][T15059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2164'.
[  281.309543][T15059] bond50: entered promiscuous mode
[  281.311371][T15059] 8021q: adding VLAN 0 to HW filter on device bond50
[  281.318293][T15059] ip6t_srh: unknown srh match flags  4000
[  281.385165][T15063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.399273][T15063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.465877][T15065] gre0 speed is unknown, defaulting to 1000
[  281.547695][T15067] gre0 speed is unknown, defaulting to 1000
[  281.633383][   T11] block nbd6: Possible stuck request ffff88810add0000: control (read@0,1024B). Runtime 150 seconds
[  281.637919][   T11] block nbd6: Possible stuck request ffff88810add0200: control (read@1024,1024B). Runtime 150 seconds
[  281.642840][   T11] block nbd6: Possible stuck request ffff88810add0400: control (read@2048,1024B). Runtime 150 seconds
[  281.647224][   T11] block nbd6: Possible stuck request ffff88810add0600: control (read@3072,1024B). Runtime 150 seconds
[  282.015497][T15089] netlink: 'syz.0.2171': attribute type 1 has an invalid length.
[  282.036848][T15089] bond49: entered promiscuous mode
[  282.039237][T15089] 8021q: adding VLAN 0 to HW filter on device bond49
[  282.159077][T15089] bond49: (slave bridge11): making interface the new active one
[  282.161747][T15089] bridge11: entered promiscuous mode
[  282.165229][T15089] bond49: (slave bridge11): Enslaving as an active interface with an up link
[  282.178853][T15097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  282.186112][T15090] gre0 speed is unknown, defaulting to 1000
[  282.218466][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2174'.
[  282.261448][T15100] team0: Port device team_slave_0 removed
[  282.355249][T15105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  282.359306][T15104] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  282.363475][T15104] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  282.366608][T15104] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  282.375768][T15104] tipc: Resetting bearer <eth:syzkaller0>
[  282.512765][T15109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  282.622077][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2176'.
[  282.677591][T15113] gre0 speed is unknown, defaulting to 1000
[  282.760351][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2178'.
[  282.764306][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2178'.
[  282.768487][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2178'.
[  282.774576][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2178'.
[  282.778244][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2178'.
[  282.841412][T15123] bond51: Unable to set peer notification delay as MII monitoring is disabled
[  282.849328][T15123] bond51 (unregistering): Released all slaves
[  283.024357][T15132] gre0 speed is unknown, defaulting to 1000
[  283.078225][T15141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  283.093743][T15141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  283.318542][T15145] gre0 speed is unknown, defaulting to 1000
[  283.455122][T15147] gre0 speed is unknown, defaulting to 1000
[  283.630968][T15150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  283.659384][T15150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  283.944443][T15163] gre0 speed is unknown, defaulting to 1000
[  284.060673][T15169] gre0 speed is unknown, defaulting to 1000
[  284.369113][T15172] gre0 speed is unknown, defaulting to 1000
[  284.417998][T15175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  284.439643][T15175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  284.489385][T15180] bond50: entered promiscuous mode
[  284.493136][T15180] 8021q: adding VLAN 0 to HW filter on device bond50
[  284.519410][T15180] ip6t_srh: unknown srh match flags  4000
[  284.541864][T15182] 8021q: adding VLAN 0 to HW filter on device bond50
[  284.545112][T15182] bond50: (slave vti0): The slave device specified does not support setting the MAC address
[  284.550045][T15182] bond50: (slave vti0): Error -95 calling set_mac_address
[  284.623123][T15177] gre0 speed is unknown, defaulting to 1000
[  284.807774][T15186] gre0 speed is unknown, defaulting to 1000
[  285.012046][T15194] gre0 speed is unknown, defaulting to 1000
[  285.198312][T15193] gre0 speed is unknown, defaulting to 1000
[  285.474690][ T1231] block nbd2: Possible stuck request ffff88810ac70000: control (read@0,1024B). Runtime 180 seconds
[  285.478244][ T1231] block nbd2: Possible stuck request ffff88810ac70200: control (read@1024,1024B). Runtime 180 seconds
[  285.481786][ T1231] block nbd2: Possible stuck request ffff88810ac70400: control (read@2048,1024B). Runtime 180 seconds
[  285.485457][ T1231] block nbd2: Possible stuck request ffff88810ac70600: control (read@3072,1024B). Runtime 180 seconds
[  285.597710][T15207] gre0 speed is unknown, defaulting to 1000
[  285.743496][T15215] gre0 speed is unknown, defaulting to 1000
[  285.773414][T15219] __nla_validate_parse: 31 callbacks suppressed
[  285.773426][T15219] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2200'.
[  285.832212][T15219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2200'.
[  285.964537][T15227] netlink: 'syz.2.2202': attribute type 1 has an invalid length.
[  286.083938][T15227] bond51: entered promiscuous mode
[  286.086941][T15227] 8021q: adding VLAN 0 to HW filter on device bond51
[  286.098438][T15240] bond51: (slave bridge8): making interface the new active one
[  286.100941][T15240] bridge8: entered promiscuous mode
[  286.113325][T15240] bond51: (slave bridge8): Enslaving as an active interface with an up link
[  286.131845][T15231] gre0 speed is unknown, defaulting to 1000
[  286.397482][T15245] tipc: Resetting bearer <eth:syzkaller0>
[  286.678122][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.685723][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.691550][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.697619][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.706461][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.716831][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.723075][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.728981][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.739242][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.746786][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.758495][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.770804][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.778992][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.799957][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.810467][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.818856][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.822772][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.827595][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.831745][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.837479][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.841205][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.859972][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.877333][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.886828][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.904296][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.921395][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.929928][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.947347][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.952751][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.957614][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.969720][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.985168][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  287.004279][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  287.220105][T15269] gre0 speed is unknown, defaulting to 1000
[  287.335866][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2210'.
[  287.339072][T15266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2210'.
[  287.418103][ T1231] block nbd0: Possible stuck request ffff88810abe8000: control (read@0,1024B). Runtime 210 seconds
[  287.422648][ T1231] block nbd0: Possible stuck request ffff88810abe8200: control (read@1024,1024B). Runtime 210 seconds
[  287.426798][ T1231] block nbd0: Possible stuck request ffff88810abe8400: control (read@2048,1024B). Runtime 210 seconds
[  287.431033][ T1231] block nbd0: Possible stuck request ffff88810abe8600: control (read@3072,1024B). Runtime 210 seconds
[  287.569479][T15301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  287.599644][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2214'.
[  287.643483][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2214'.
[  287.668040][T15266] gre0 speed is unknown, defaulting to 1000
[  287.670446][T15308] netlink: 211368 bytes leftover after parsing attributes in process `syz.0.2215'.
[  287.674387][T15308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2215'.
[  287.678262][T15308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2215'.
[  287.686672][T15308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  287.980682][T15317] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2216'.
[  288.083989][T15320] netlink: 'syz.1.2217': attribute type 4 has an invalid length.
[  288.084024][T15319] netlink: 'syz.1.2217': attribute type 4 has an invalid length.
[  288.090429][ T1959] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  288.290948][T15331] netlink: 'syz.0.2220': attribute type 1 has an invalid length.
[  288.293583][T15331] netlink: 'syz.0.2220': attribute type 2 has an invalid length.
[  288.295944][T15331] netlink: 'syz.0.2220': attribute type 1 has an invalid length.
[  288.298438][T15331] netlink: 'syz.0.2220': attribute type 2 has an invalid length.
[  288.300838][T15331] netlink: 'syz.0.2220': attribute type 2 has an invalid length.
[  288.303439][T15331] netlink: 'syz.0.2220': attribute type 2 has an invalid length.
[  288.306104][T15331] netlink: 'syz.0.2220': attribute type 1 has an invalid length.
[  288.395979][T15341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  288.461131][T15345] gre0 speed is unknown, defaulting to 1000
[  288.711181][T15356] gre0 speed is unknown, defaulting to 1000
[  288.841768][T15351] gre0 speed is unknown, defaulting to 1000
[  288.935628][T15365] gre0 speed is unknown, defaulting to 1000
[  289.054990][T15367] gre0 speed is unknown, defaulting to 1000
[  289.161713][T15379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  289.186889][T15380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  289.798626][T15388] gre0 speed is unknown, defaulting to 1000
[  289.960500][T15394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  289.999194][T15394] 8021q: adding VLAN 0 to HW filter on device bond50
[  290.002283][T15390] gre0 speed is unknown, defaulting to 1000
[  290.025144][T15394] bond50: (slave veth15): Enslaving as an active interface with a down link
[  290.113218][T15394] bond30: (slave dummy0): Releasing active interface
[  290.130630][T15394] bond50: (slave dummy0): making interface the new active one
[  290.135247][T15397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  290.141251][T15397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  290.144516][T15394] dummy0: entered promiscuous mode
[  290.147524][T15394] bond50: (slave dummy0): Enslaving as an active interface with an up link
[  290.479494][T15417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  290.492818][T15417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  290.828979][T15435] 8021q: adding VLAN 0 to HW filter on device team0
[  290.840480][T15435] bond0: (slave team0): Enslaving as an active interface with an up link
[  290.898597][T15437] gre0 speed is unknown, defaulting to 1000
[  290.945584][T15442] __nla_validate_parse: 11 callbacks suppressed
[  290.945600][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'.
[  290.969007][T15442] bond52: entered promiscuous mode
[  290.971444][T15442] 8021q: adding VLAN 0 to HW filter on device bond52
[  290.994286][T15442] 8021q: adding VLAN 0 to HW filter on device bond52
[  290.997543][T15442] bond52: (slave vti0): The slave device specified does not support setting the MAC address
[  291.008328][T15442] bond52: (slave vti0): Error -95 calling set_mac_address
[  291.037427][T15447] ip6t_srh: unknown srh match flags  4000
[  291.061345][T15440] gre0 speed is unknown, defaulting to 1000
[  291.137743][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2248'.
[  291.141362][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2248'.
[  291.280302][T15464] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2251'.
[  291.298901][T15444] gre0 speed is unknown, defaulting to 1000
[  291.463605][T15465] gre0 speed is unknown, defaulting to 1000
[  291.535746][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2253'.
[  291.582683][T15475] nbd18: detected capacity change from 0 to 63
[  291.588685][   T56] block nbd18: Receive control failed (result -32)
[  291.628698][T15486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2255'.
[  291.642318][T15487] pimreg9: entered allmulticast mode
[  291.874512][ T1231] block nbd8: Possible stuck request ffff88810ae78000: control (read@0,1024B). Runtime 150 seconds
[  291.877997][ T1231] block nbd8: Possible stuck request ffff88810ae78200: control (read@1024,1024B). Runtime 150 seconds
[  291.882333][ T1231] block nbd8: Possible stuck request ffff88810ae78400: control (read@2048,1024B). Runtime 150 seconds
[  291.886439][ T1231] block nbd8: Possible stuck request ffff88810ae78600: control (read@3072,1024B). Runtime 150 seconds
[  292.470623][T15506] gre0 speed is unknown, defaulting to 1000
[  292.530789][T15510] validate_nla: 6 callbacks suppressed
[  292.530800][T15510] netlink: 'syz.0.2261': attribute type 1 has an invalid length.
[  292.550248][T15510] bond51: entered promiscuous mode
[  292.552997][T15510] 8021q: adding VLAN 0 to HW filter on device bond51
[  292.574542][T15510] bond51: (slave bridge13): making interface the new active one
[  292.578550][T15510] bridge13: entered promiscuous mode
[  292.581492][T15510] bond51: (slave bridge13): Enslaving as an active interface with an up link
[  292.622433][T15514] gre0 speed is unknown, defaulting to 1000
[  292.936685][T15531] gre0 speed is unknown, defaulting to 1000
[  293.151518][T15533] gre0 speed is unknown, defaulting to 1000
[  293.210946][T15539] netlink: 'syz.2.2266': attribute type 12 has an invalid length.
[  293.214774][T15539] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2266'.
[  293.219187][T15539] netlink: 'syz.2.2266': attribute type 4 has an invalid length.
[  293.280746][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.284445][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.297355][T15534] gre0 speed is unknown, defaulting to 1000
[  293.460192][T15550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  293.473299][T15550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  293.476742][T15552] netlink: 'syz.0.2269': attribute type 1 has an invalid length.
[  293.499056][T15552] bond52: entered promiscuous mode
[  293.501213][T15552] 8021q: adding VLAN 0 to HW filter on device bond52
[  293.539424][T15552] bond52: (slave bridge14): making interface the new active one
[  293.542641][T15552] bridge14: entered promiscuous mode
[  293.545170][T15552] bond52: (slave bridge14): Enslaving as an active interface with an up link
[  293.806761][T15558] gre0 speed is unknown, defaulting to 1000
[  293.874917][T15560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2271'.
[  294.136294][T15566] gre0 speed is unknown, defaulting to 1000
[  294.168540][T15571] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2272'.
[  294.286124][T15569] gre0 speed is unknown, defaulting to 1000
[  294.479595][T15592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2278'.
[  294.488088][T15574] gre0 speed is unknown, defaulting to 1000
[  294.967900][T15618] gre0 speed is unknown, defaulting to 1000
[  294.983436][T15612] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  295.222815][T15624] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  295.367471][T15631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  295.418886][ T9895] gre0 speed is unknown, defaulting to 1000
[  295.421356][ T9895] syz1: Port: 1 Link DOWN
[  295.433876][ T9895] gre0 speed is unknown, defaulting to 1000
[  295.525370][T15636] gre0 speed is unknown, defaulting to 1000
[  295.618357][T15638] bond53: entered promiscuous mode
[  295.626584][T15638] 8021q: adding VLAN 0 to HW filter on device bond53
[  295.644719][T15638] 8021q: adding VLAN 0 to HW filter on device bond53
[  295.647873][T15638] bond53: (slave vti0): The slave device specified does not support setting the MAC address
[  295.654410][T15638] bond53: (slave vti0): Error -95 calling set_mac_address
[  295.699663][T15640] ip6t_srh: unknown srh match flags  4000
[  295.856159][   T27] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  295.858554][T15650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  295.872733][T15650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  296.016449][T15656] gre0 speed is unknown, defaulting to 1000
[  296.038431][T15662] __nla_validate_parse: 5 callbacks suppressed
[  296.038446][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2292'.
[  296.061691][T15662] bond53: entered promiscuous mode
[  296.064279][T15662] 8021q: adding VLAN 0 to HW filter on device bond53
[  296.085276][T15662] 8021q: adding VLAN 0 to HW filter on device bond53
[  296.088457][T15662] bond53: (slave vti0): The slave device specified does not support setting the MAC address
[  296.093564][T15662] bond53: (slave vti0): Error -95 calling set_mac_address
[  296.119694][T15658] gre0 speed is unknown, defaulting to 1000
[  296.129129][T15664] ip6t_srh: unknown srh match flags  4000
[  296.176040][T15667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  296.320676][T15670] netlink: 'syz.0.2295': attribute type 1 has an invalid length.
[  296.332821][T15670] bond54: entered promiscuous mode
[  296.334703][T15670] 8021q: adding VLAN 0 to HW filter on device bond54
[  296.349257][T15670] bond54: (slave bridge15): making interface the new active one
[  296.355129][T15670] bridge15: entered promiscuous mode
[  296.357440][T15670] bond54: (slave bridge15): Enslaving as an active interface with an up link
[  296.411015][T15676] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2297'.
[  296.424877][T15677] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2297'.
[  296.509800][T15681] gre0 speed is unknown, defaulting to 1000
[  296.573291][T15686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2298'.
[  296.598061][T15685] gre0 speed is unknown, defaulting to 1000
[  296.707603][T15687] gre0 speed is unknown, defaulting to 1000
[  296.830500][T15700] netlink: 'syz.2.2302': attribute type 1 has an invalid length.
[  296.869673][T15700] bond54: entered promiscuous mode
[  296.873268][T15700] 8021q: adding VLAN 0 to HW filter on device bond54
[  296.889500][T15697] gre0 speed is unknown, defaulting to 1000
[  296.916714][T15700] bond54: (slave bridge9): making interface the new active one
[  296.920210][T15700] bridge9: entered promiscuous mode
[  296.922506][T15700] bond54: (slave bridge9): Enslaving as an active interface with an up link
[  296.964829][T15706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  296.973945][T15706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  297.066665][T15703] gre0 speed is unknown, defaulting to 1000
[  297.266955][T15713] gre0 speed is unknown, defaulting to 1000
[  297.428736][T15717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  297.441875][T15717] netlink: 'syz.1.2305': attribute type 1 has an invalid length.
[  297.471616][T15717] 8021q: adding VLAN 0 to HW filter on device bond51
[  297.541215][ T5951] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  297.565597][T15721] lo: entered allmulticast mode
[  297.567249][T15721] tunl0: entered allmulticast mode
[  297.568846][T15721] gre0: entered allmulticast mode
[  297.570410][T15721] gretap0: entered allmulticast mode
[  297.572211][T15721] erspan0: entered allmulticast mode
[  297.573941][T15721] ip_vti0: entered allmulticast mode
[  297.580894][T15721] ip6_vti0: entered allmulticast mode
[  297.585829][T15721] sit0: entered allmulticast mode
[  297.602168][T15721] ip6tnl0: entered allmulticast mode
[  297.605926][T15721] ip6gre0: entered allmulticast mode
[  297.617569][T15721] syz_tun: entered allmulticast mode
[  297.621288][T15721] ip6gretap0: entered allmulticast mode
[  297.625843][T15721] bridge0: port 1(batadv0) entered disabled state
[  297.628499][T15721] bridge0: entered allmulticast mode
[  297.633670][T15721] vcan0: entered allmulticast mode
[  297.683702][T15721] bond0: entered allmulticast mode
[  297.692162][T15721] team0: entered allmulticast mode
[  297.693853][T15721] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  297.711703][T15721] dummy0: entered allmulticast mode
[  297.721262][T15721] nlmon0: entered allmulticast mode
[  297.725901][T15721] caif0: entered allmulticast mode
[  297.740435][T15721] vxcan0: entered allmulticast mode
[  297.745916][T15721] vxcan1: entered allmulticast mode
[  297.756307][T15721] veth0: entered allmulticast mode
[  297.761052][T15721] veth1: entered allmulticast mode
[  297.769954][T15721] wg0: entered allmulticast mode
[  297.774487][T15721] wg1: entered allmulticast mode
[  297.778980][T15721] wg2: entered allmulticast mode
[  297.783412][T15721] veth0_to_bridge: entered allmulticast mode
[  297.786991][T15721] bridge_slave_0: entered allmulticast mode
[  297.790261][T15721] veth1_to_bridge: entered allmulticast mode
[  297.797350][T15721] bridge_slave_1: entered allmulticast mode
[  297.801556][T15721] veth0_to_bond: entered allmulticast mode
[  297.807353][T15721] bond_slave_0: entered allmulticast mode
[  297.809922][T15721] veth1_to_bond: entered allmulticast mode
[  297.816205][T15721] bond_slave_1: entered allmulticast mode
[  297.820283][T15721] veth0_to_team: entered allmulticast mode
[  297.823977][T15721] team_slave_0: entered allmulticast mode
[  297.827037][T15721] veth1_to_team: entered allmulticast mode
[  297.830637][T15721] team_slave_1: entered allmulticast mode
[  297.833477][T15721] veth0_to_batadv: entered allmulticast mode
[  297.838329][T15721] batadv_slave_0: entered allmulticast mode
[  297.843991][T15721] veth1_to_batadv: entered allmulticast mode
[  297.847499][T15721] batadv_slave_1: entered allmulticast mode
[  297.850880][T15721] xfrm0: entered allmulticast mode
[  297.854204][T15721] veth0_to_hsr: entered allmulticast mode
[  297.858803][T15721] hsr_slave_0: entered allmulticast mode
[  297.862712][T15721] veth1_to_hsr: entered allmulticast mode
[  297.867310][T15721] hsr_slave_1: entered allmulticast mode
[  297.871534][T15721] hsr0: entered allmulticast mode
[  297.876406][T15721] veth1_virt_wifi: entered allmulticast mode
[  297.881216][T15721] veth0_virt_wifi: entered allmulticast mode
[  297.886160][T15721] virt_wifi0: entered allmulticast mode
[  297.888535][T15721] veth1_macvtap: entered allmulticast mode
[  297.899335][T15721] macvtap0: left promiscuous mode
[  297.904866][T15721] macsec0: entered allmulticast mode
[  297.909304][T15721] geneve0: entered allmulticast mode
[  297.912742][T15721] geneve1: entered allmulticast mode
[  297.916137][T15721] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  297.923931][T15721] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  297.927842][T15721] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  297.934354][T15721] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[  297.938940][T15721] mac80211_hwsim hwsim6 ;: entered allmulticast mode
[  297.947387][T15721] syztnl2: entered allmulticast mode
[  297.949090][T15721] syztnl1: entered allmulticast mode
[  297.951050][T15721] bond1: entered allmulticast mode
[  297.953486][T15721] geneve2: entered allmulticast mode
[  297.955924][T15721] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  297.958882][T15721] gre1: entered allmulticast mode
[  297.961001][T15721] bond2: entered allmulticast mode
[  297.963948][T15721] bridge1: left promiscuous mode
[  297.967335][T15721] ip6tnl1: entered allmulticast mode
[  297.971200][T15721] bond3: entered allmulticast mode
[  297.973682][T15721] geneve3: entered allmulticast mode
[  297.978663][T15721] bond4: entered allmulticast mode
[  297.981150][T15721] bond5: left promiscuous mode
[  297.984693][T15721] bond5: entered allmulticast mode
[  297.988039][T15721] bond6: entered allmulticast mode
[  297.991713][T15721] veth2: entered allmulticast mode
[  297.999659][T15721] veth3: entered allmulticast mode
[  298.003526][T15721] bridge2: entered allmulticast mode
[  298.006102][T15721] bond7: left promiscuous mode
[  298.008104][T15721] bond7: entered allmulticast mode
[  298.011067][T15721] ip6gretap1: entered allmulticast mode
[  298.013460][T15721] bond8: left promiscuous mode
[  298.014959][T15721] bond8: entered allmulticast mode
[  298.017046][T15721] bond9: entered allmulticast mode
[  298.018949][T15721] bond10: left promiscuous mode
[  298.020541][T15721] bridge3: left promiscuous mode
[  298.022885][T15721] bond10: entered allmulticast mode
[  298.024469][T15721] bridge3: entered allmulticast mode
[  298.028474][T15721] vlan2: entered allmulticast mode
[  298.031228][T15721] bond11: entered allmulticast mode
[  298.033564][T15721] bond12: entered allmulticast mode
[  298.036383][T15721] bond13: entered allmulticast mode
[  298.038730][T15721] bond14: entered allmulticast mode
[  298.049956][T15721] veth4: entered allmulticast mode
[  298.052186][T15721] veth5: entered allmulticast mode
[  298.054207][T15721] bridge4: entered allmulticast mode
[  298.057002][T15721] bond15: left promiscuous mode
[  298.058478][T15721] bond15: entered allmulticast mode
[  298.060927][T15721] ip6gre1: entered allmulticast mode
[  298.063842][T15721] bond16: entered allmulticast mode
[  298.065449][T15721] bond17: entered allmulticast mode
[  298.067244][T15721] bond18: entered allmulticast mode
[  298.069557][T15721] bond19: entered allmulticast mode
[  298.074368][T15721] bond20: entered allmulticast mode
[  298.077621][T15721] veth6: entered allmulticast mode
[  298.079474][T15721] veth7: entered allmulticast mode
[  298.082656][T15721] bond21: entered allmulticast mode
[  298.085494][T15721] veth8: entered allmulticast mode
[  298.087310][T15721] veth9: entered allmulticast mode
[  298.090310][T15721] bond22: left promiscuous mode
[  298.091889][T15721] bond22: entered allmulticast mode
[  298.094895][T15721] bond23: left promiscuous mode
[  298.096458][T15721] bond23: entered allmulticast mode
[  298.099088][T15721] bond24: left promiscuous mode
[  298.100642][T15721] bond24: entered allmulticast mode
[  298.105964][T15721] bond25: left promiscuous mode
[  298.107537][T15721] bond25: entered allmulticast mode
[  298.110163][T15721] bond26: left promiscuous mode
[  298.111696][T15721] bond26: entered allmulticast mode
[  298.115705][T15721] bond27: entered allmulticast mode
[  298.118167][T15721] bond28: entered allmulticast mode
[  298.120717][T15721] veth10: entered allmulticast mode
[  298.122956][T15721] veth11: entered allmulticast mode
[  298.125374][T15721] bond29: entered allmulticast mode
[  298.127492][T15721] bond30: entered allmulticast mode
[  298.129249][T15721] bond31: entered allmulticast mode
[  298.130992][T15721] bond32: entered allmulticast mode
[  298.133268][T15721] bond33: entered allmulticast mode
[  298.135493][T15721] bond34: entered allmulticast mode
[  298.137280][T15721] bond35: entered allmulticast mode
[  298.139051][T15721] veth12: entered allmulticast mode
[  298.140830][T15721] veth13: entered allmulticast mode
[  298.143054][T15721] veth14: entered allmulticast mode
[  298.144824][T15721] veth15: entered allmulticast mode
[  298.146628][T15721] bond36: entered allmulticast mode
[  298.148335][T15721] bridge5: entered allmulticast mode
[  298.150927][T15721] mac80211_hwsim hwsim57 wlan0: entered allmulticast mode
[  298.154067][T15721] bond37: left promiscuous mode
[  298.155674][T15721] bridge6: left promiscuous mode
[  298.157422][T15721] bond37: entered allmulticast mode
[  298.159124][T15721] bridge6: entered allmulticast mode
[  298.163432][T15721] bond38: entered allmulticast mode
[  298.166892][T15721] bond39: entered allmulticast mode
[  298.169209][T15721] bond40: left promiscuous mode
[  298.170703][T15721] bond40: entered allmulticast mode
[  298.173287][T15721] sit1: entered allmulticast mode
[  298.182857][T15721] bond41: left promiscuous mode
[  298.184386][T15721] bond41: entered allmulticast mode
[  298.186686][T15721] bond42: entered allmulticast mode
[  298.188733][T15721] veth16: entered allmulticast mode
[  298.190543][T15721] veth17: entered allmulticast mode
[  298.193093][T15721] bond43: left promiscuous mode
[  298.194624][T15721] bond43: entered allmulticast mode
[  298.197147][T15721] bond44: entered allmulticast mode
[  298.199709][T15721] veth18: entered allmulticast mode
[  298.201629][T15721] veth19: entered allmulticast mode
[  298.204085][T15721] bond45: entered allmulticast mode
[  298.205895][T15721] bond46: left promiscuous mode
[  298.207424][T15721] bridge7: left promiscuous mode
[  298.209042][T15721] bond46: entered allmulticast mode
[  298.210668][T15721] bridge7: entered allmulticast mode
[  298.216017][T15721] bond47: left promiscuous mode
[  298.217555][T15721] bond47: entered allmulticast mode
[  298.219593][T15721] bond48: entered allmulticast mode
[  298.221277][T15721] bond49: entered allmulticast mode
[  298.223681][T15721] bond50: entered allmulticast mode
[  298.225609][T15721] bond51: left promiscuous mode
[  298.227131][T15721] bridge8: left promiscuous mode
[  298.228723][T15721] bond51: entered allmulticast mode
[  298.230330][T15721] bridge8: entered allmulticast mode
[  298.234161][T15721] bond52: entered allmulticast mode
[  298.235894][T15721] veth0_to_hsr.4: entered allmulticast mode
[  298.237722][T15721] bond53: entered allmulticast mode
[  298.239622][T15721] bond54: left promiscuous mode
[  298.241158][T15721] bridge9: left promiscuous mode
[  298.243181][T15721] bond54: entered allmulticast mode
[  298.244819][T15721] bridge9: entered allmulticast mode
[  298.258738][ T5840] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.261545][ T5840] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  298.264662][ T5840] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.267773][ T5840] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  298.282025][ T5840] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.284919][ T5840] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  298.287641][ T5840] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.290312][ T5840] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  298.300698][T15724] gre0 speed is unknown, defaulting to 1000
[  298.364891][T15732] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2308'.
[  298.783269][T15744] netlink: zone id is out of range
[  298.787156][T15744] netlink: zone id is out of range
[  298.791144][T15744] netlink: zone id is out of range
[  298.795140][T15744] netlink: zone id is out of range
[  298.797967][T15744] netlink: zone id is out of range
[  298.802894][T15744] netlink: zone id is out of range
[  298.806932][T15744] netlink: zone id is out of range
[  298.810367][T15744] netlink: zone id is out of range
[  298.814413][T15744] netlink: zone id is out of range
[  298.944254][T15748] netlink: 'syz.1.2312': attribute type 49 has an invalid length.
[  299.040463][T15750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  299.110121][ T4908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.116042][ T4908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.155837][T15764] gre0 speed is unknown, defaulting to 1000
[  299.380222][T15781] gre0 speed is unknown, defaulting to 1000
[  299.463615][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2323'.
[  299.556375][ T1231] block nbd9: Possible stuck request ffff88810aea8000: control (read@0,1024B). Runtime 150 seconds
[  299.559826][ T1231] block nbd9: Possible stuck request ffff88810aea8200: control (read@1024,1024B). Runtime 150 seconds
[  299.565841][T15801] netlink: 1300 bytes leftover after parsing attributes in process `syz.1.2325'.
[  299.572970][ T1231] block nbd9: Possible stuck request ffff88810aea8400: control (read@2048,1024B). Runtime 150 seconds
[  299.576414][ T1231] block nbd9: Possible stuck request ffff88810aea8600: control (read@3072,1024B). Runtime 150 seconds
[  299.582966][   T11] block nbd3: Possible stuck request ffff88810acb8000: control (read@0,1024B). Runtime 180 seconds
[  299.586817][   T11] block nbd3: Possible stuck request ffff88810acb8200: control (read@1024,1024B). Runtime 180 seconds
[  299.590264][   T11] block nbd3: Possible stuck request ffff88810acb8400: control (read@2048,1024B). Runtime 180 seconds
[  299.593873][   T11] block nbd3: Possible stuck request ffff88810acb8600: control (read@3072,1024B). Runtime 180 seconds
[  299.640478][T15809] netlink: 'syz.1.2327': attribute type 16 has an invalid length.
[  299.649023][T15809] netlink: 'syz.1.2327': attribute type 16 has an invalid length.
[  299.753971][T15807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2326'.
[  299.792995][T15807] nbd19: detected capacity change from 0 to 63
[  299.798522][   T57] block nbd19: Receive control failed (result -32)
[  299.804749][T15822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  299.832977][ T4908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.835499][ T4908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.846661][T15827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  299.911095][T15830] gre0 speed is unknown, defaulting to 1000
[  299.917224][T15833] netlink: 'syz.2.2333': attribute type 4 has an invalid length.
[  299.928379][   T40] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  300.003083][T15836] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2334'.
[  300.007586][T15836] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2334'.
[  300.025915][T15834] gre0 speed is unknown, defaulting to 1000
[  300.198211][ T1231] block nbd10: Possible stuck request ffff88810aed8000: control (read@0,1024B). Runtime 150 seconds
[  300.201619][ T1231] block nbd10: Possible stuck request ffff88810aed8200: control (read@1024,1024B). Runtime 150 seconds
[  300.205207][ T1231] block nbd10: Possible stuck request ffff88810aed8400: control (read@2048,1024B). Runtime 150 seconds
[  300.208600][ T1231] block nbd10: Possible stuck request ffff88810aed8600: control (read@3072,1024B). Runtime 150 seconds
[  300.247998][T15844] net_ratelimit: 9 callbacks suppressed
[  300.248008][T15844] openvswitch: netlink: Flow key attr not present in new flow.
[  300.345194][T15856] sctp: [Deprecated]: syz.2.2338 (pid 15856) Use of int in maxseg socket option.
[  300.345194][T15856] Use struct sctp_assoc_value instead
[  300.434634][T15860] syzkaller1: entered promiscuous mode
[  300.436737][T15860] syzkaller1: entered allmulticast mode
[  300.605470][T15880] dummy0: entered promiscuous mode
[  300.607231][T15880] dummy0: entered allmulticast mode
[  300.677675][T15887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  300.806097][T15892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  300.832145][   T11] block nbd1: Possible stuck request ffff88810ac10000: control (read@0,1024B). Runtime 210 seconds
[  300.835473][   T11] block nbd1: Possible stuck request ffff88810ac10200: control (read@1024,1024B). Runtime 210 seconds
[  300.838991][   T11] block nbd1: Possible stuck request ffff88810ac10400: control (read@2048,1024B). Runtime 210 seconds
[  300.842620][   T11] block nbd1: Possible stuck request ffff88810ac10600: control (read@3072,1024B). Runtime 210 seconds
[  300.888826][T15895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  300.898278][T15906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  301.252632][ T8153] dummy0: left promiscuous mode
[  301.425169][T15914] SET target dimension over the limit!
[  301.429183][T15914] __nla_validate_parse: 3 callbacks suppressed
[  301.429192][T15914] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2354'.
[  301.444204][T15914] netlink: 'syz.1.2354': attribute type 1 has an invalid length.
[  301.464746][T15914] veth13: entered promiscuous mode
[  301.508119][T15917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  301.518463][T15917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  301.596041][T15915] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  301.654082][T15930] netlink: 'syz.1.2356': attribute type 2 has an invalid length.
[  301.657121][T15930] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2356'.
[  301.674439][T15924] netlink: 'syz.2.2353': attribute type 4 has an invalid length.
[  301.693692][T15930] gre0 speed is unknown, defaulting to 1000
[  302.100349][T15945] gre0 speed is unknown, defaulting to 1000
[  302.132129][ T1231] block nbd11: Possible stuck request ffff88810af40000: control (read@0,1024B). Runtime 150 seconds
[  302.135609][ T1231] block nbd11: Possible stuck request ffff88810af40200: control (read@1024,1024B). Runtime 150 seconds
[  302.139604][ T1231] block nbd11: Possible stuck request ffff88810af40400: control (read@2048,1024B). Runtime 150 seconds
[  302.144331][ T1231] block nbd11: Possible stuck request ffff88810af40600: control (read@3072,1024B). Runtime 150 seconds
[  302.159619][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2361'.
[  302.182667][T15953] bond55: entered promiscuous mode
[  302.191399][T15953] 8021q: adding VLAN 0 to HW filter on device bond55
[  302.228680][T15953] 8021q: adding VLAN 0 to HW filter on device bond55
[  302.233079][T15953] bond55: (slave vti0): The slave device specified does not support setting the MAC address
[  302.236557][T15953] bond55: (slave vti0): Error -95 calling set_mac_address
[  302.256251][T15961] ip6t_srh: unknown srh match flags  4000
[  302.298615][T15958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  302.363652][T15970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2367'.
[  302.454196][T15975] gre0 speed is unknown, defaulting to 1000
[  302.503354][T15982] ip6t_srh: unknown srh match flags  4000
[  302.657865][T15990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2371'.
[  302.702866][T15984] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  302.713863][T15984] netlink: 'syz.0.2370': attribute type 4 has an invalid length.
[  302.716721][T15994] netlink: 'syz.2.2372': attribute type 21 has an invalid length.
[  302.719174][T15994] netlink: 'syz.2.2372': attribute type 22 has an invalid length.
[  302.722903][T15994] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2372'.
[  302.755967][T15994] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2372'.
[  302.912540][T16002] gre0 speed is unknown, defaulting to 1000
[  303.011088][T16003] gre0 speed is unknown, defaulting to 1000
[  303.127765][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2375'.
[  303.140997][T16010] bond55: entered promiscuous mode
[  303.142997][T16010] 8021q: adding VLAN 0 to HW filter on device bond55
[  303.156150][T16010] 8021q: adding VLAN 0 to HW filter on device bond55
[  303.158543][T16010] bond55: (slave vti0): The slave device specified does not support setting the MAC address
[  303.162652][T16010] bond55: (slave vti0): Error -95 calling set_mac_address
[  303.178651][T16008] gre0 speed is unknown, defaulting to 1000
[  303.207509][T16010] ip6t_srh: unknown srh match flags  4000
[  303.413450][   T11] block nbd4: Possible stuck request ffff88810ad00000: control (read@0,1024B). Runtime 180 seconds
[  303.416667][   T11] block nbd4: Possible stuck request ffff88810ad00200: control (read@1024,1024B). Runtime 180 seconds
[  303.420225][   T11] block nbd4: Possible stuck request ffff88810ad00400: control (read@2048,1024B). Runtime 180 seconds
[  303.425171][   T11] block nbd4: Possible stuck request ffff88810ad00600: control (read@3072,1024B). Runtime 180 seconds
[  303.426337][T16022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2379'.
[  303.457192][T16022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.553970][T16029] gre0 speed is unknown, defaulting to 1000
[  303.575606][T16032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2381'.
[  303.926330][T16050] gre0 speed is unknown, defaulting to 1000
[  304.000766][T16048] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  304.015641][T16062] syzkaller1: entered promiscuous mode
[  304.017641][T16062] syzkaller1: entered allmulticast mode
[  304.046985][   T11] block nbd5: Possible stuck request ffff88810ad60000: control (read@0,1024B). Runtime 180 seconds
[  304.050486][   T11] block nbd5: Possible stuck request ffff88810ad60200: control (read@1024,1024B). Runtime 180 seconds
[  304.054991][   T11] block nbd5: Possible stuck request ffff88810ad60400: control (read@2048,1024B). Runtime 180 seconds
[  304.058764][   T11] block nbd5: Possible stuck request ffff88810ad60600: control (read@3072,1024B). Runtime 180 seconds
[  304.082997][T16059] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  304.819105][T16074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.860165][T16078] validate_nla: 2 callbacks suppressed
[  304.860179][T16078] netlink: 'syz.2.2391': attribute type 4 has an invalid length.
[  304.872471][ T5951] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  304.929815][T16080] gre0 speed is unknown, defaulting to 1000
[  305.163310][T16099] gre0 speed is unknown, defaulting to 1000
[  305.398718][ T5951] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  305.408931][T16108] gre0 speed is unknown, defaulting to 1000
[  305.447533][T16113] netlink: 'syz.0.2398': attribute type 1 has an invalid length.
[  305.463733][T16118] netlink: 'syz.1.2401': attribute type 22 has an invalid length.
[  305.481839][T15729] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  305.481894][T16118] netlink: 'syz.1.2401': attribute type 22 has an invalid length.
[  305.488335][T15729] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  305.491098][T15729] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  305.494135][T15729] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  305.578762][T16115] gre0 speed is unknown, defaulting to 1000
[  305.887516][T16122] gre0 speed is unknown, defaulting to 1000
[  306.075460][T16138] gre0 speed is unknown, defaulting to 1000
[  306.178782][T16137] gre0 speed is unknown, defaulting to 1000
[  306.311274][T16151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  306.314429][T16145] gre0 speed is unknown, defaulting to 1000
[  306.324675][T16151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  306.596680][ T1231] block nbd12: Possible stuck request ffff88810af68000: control (read@0,1024B). Runtime 150 seconds
[  306.600069][ T1231] block nbd12: Possible stuck request ffff88810af68200: control (read@1024,1024B). Runtime 150 seconds
[  306.612197][ T1231] block nbd12: Possible stuck request ffff88810af68400: control (read@2048,1024B). Runtime 150 seconds
[  306.615595][ T1231] block nbd12: Possible stuck request ffff88810af68600: control (read@3072,1024B). Runtime 150 seconds
[  306.857134][T16155] __nla_validate_parse: 11 callbacks suppressed
[  306.857144][T16155] netlink: 820 bytes leftover after parsing attributes in process `syz.1.2408'.
[  306.867485][T16155] netlink: 820 bytes leftover after parsing attributes in process `syz.1.2408'.
[  306.871690][T16155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  307.225865][T16167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  307.263991][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2412'.
[  307.321150][T16162] gre0 speed is unknown, defaulting to 1000
[  307.372453][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'.
[  307.486999][T16177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2413'.
[  307.488724][T16175] gre0 speed is unknown, defaulting to 1000
[  307.505044][T16177] bond52: entered promiscuous mode
[  307.506970][T16177] 8021q: adding VLAN 0 to HW filter on device bond52
[  307.528737][T16177] ip6t_srh: unknown srh match flags  4000
[  307.636254][T16181] gre0 speed is unknown, defaulting to 1000
[  307.673746][T16184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2414'.
[  307.744845][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2416'.
[  307.748061][T16191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2416'.
[  307.751252][T16184] bond56: entered promiscuous mode
[  307.753464][T16184] 8021q: adding VLAN 0 to HW filter on device bond56
[  307.773090][T16190] 8021q: adding VLAN 0 to HW filter on device bond56
[  307.775602][T16190] bond56: (slave vti0): The slave device specified does not support setting the MAC address
[  307.779132][T16190] bond56: (slave vti0): Error -95 calling set_mac_address
[  307.806281][T16184] ip6t_srh: unknown srh match flags  4000
[  307.838455][T16189] gre0 speed is unknown, defaulting to 1000
[  307.960558][T16204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.378188][T16210] gre0 speed is unknown, defaulting to 1000
[  308.480308][T16207] gre0 speed is unknown, defaulting to 1000
[  308.689717][   T40] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  308.809481][T16218] gre0 speed is unknown, defaulting to 1000
[  308.964300][T16220] gre0 speed is unknown, defaulting to 1000
[  309.272378][T16230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2424'.
[  309.285589][T16230] gre0 speed is unknown, defaulting to 1000
[  309.550013][T16243] gre0 speed is unknown, defaulting to 1000
[  309.581279][T16248] netlink: 'syz.2.2427': attribute type 1 has an invalid length.
[  309.585014][T16248] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2427'.
[  309.588804][T16248] NCSI netlink: No device for ifindex 0
[  309.741505][T16241] gre0 speed is unknown, defaulting to 1000
[  309.850915][T16245] gre0 speed is unknown, defaulting to 1000
[  309.944386][T16251] gre0 speed is unknown, defaulting to 1000
[  310.158954][T16258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  310.242373][T16266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  310.250995][T16266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  310.280959][T16273] openvswitch: netlink: EtherType 50a is less than min 600
[  310.425635][T16280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  310.436457][T16280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  310.799501][T16289] gre0 speed is unknown, defaulting to 1000
[  310.933174][T16291] gre0 speed is unknown, defaulting to 1000
[  311.140845][T16299] gre0 speed is unknown, defaulting to 1000
[  311.347362][T16314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  311.360303][T16314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  311.587345][T16318] workqueue: Failed to create a rescuer kthread for wq "nbd20-recv": -EINTR
[  311.587942][T16318] block (null): Could not allocate knbd recv work queue.
[  311.632942][T16318] nbd: failed to add new device
[  311.731425][   T11] block nbd6: Possible stuck request ffff88810add0000: control (read@0,1024B). Runtime 180 seconds
[  311.738159][   T11] block nbd6: Possible stuck request ffff88810add0200: control (read@1024,1024B). Runtime 180 seconds
[  311.745479][   T11] block nbd6: Possible stuck request ffff88810add0400: control (read@2048,1024B). Runtime 180 seconds
[  311.749746][   T11] block nbd6: Possible stuck request ffff88810add0600: control (read@3072,1024B). Runtime 180 seconds
[  311.838172][T16332] gre0 speed is unknown, defaulting to 1000
[  311.887198][T16338] __nla_validate_parse: 10 callbacks suppressed
[  311.887216][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2449'.
[  311.925924][T16338] bond53: entered promiscuous mode
[  311.927871][T16342] Unsupported ieee802154 address type: 0
[  311.927932][T16338] 8021q: adding VLAN 0 to HW filter on device bond53
[  311.948317][T16338] netlink: 'syz.1.2449': attribute type 1 has an invalid length.
[  311.951836][T16338] ip6t_srh: unknown srh match flags  4000
[  311.970936][T16344] netlink: 'syz.2.2453': attribute type 1 has an invalid length.
[  312.033311][T16337] gre0 speed is unknown, defaulting to 1000
[  312.159203][T16353] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2454'.
[  312.163110][T16353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2454'.
[  312.166484][T16353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2454'.
[  312.350307][T16357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  312.365959][T16357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  312.751681][T16362] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  312.977275][T16371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  313.083245][T16378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2461'.
[  313.132018][T16378] nbd20: detected capacity change from 0 to 63
[  313.543639][T16385] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2462'.
[  314.334243][T16386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  314.405668][T16389] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  314.412279][T16389] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2464'.
[  314.870895][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2465'.
[  314.875114][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2465'.
[  314.885039][T16393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  314.890205][T16393] netlink: 'syz.1.2465': attribute type 1 has an invalid length.
[  315.221044][T16400] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  315.558891][ T1231] block nbd2: Possible stuck request ffff88810ac70000: control (read@0,1024B). Runtime 210 seconds
[  315.563544][ T1231] block nbd2: Possible stuck request ffff88810ac70200: control (read@1024,1024B). Runtime 210 seconds
[  315.567187][T16428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2468'.
[  315.567730][ T1231] block nbd2: Possible stuck request ffff88810ac70400: control (read@2048,1024B). Runtime 210 seconds
[  315.575724][ T1231] block nbd2: Possible stuck request ffff88810ac70600: control (read@3072,1024B). Runtime 210 seconds
[  315.584418][ T5972] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  315.719896][T16439] gre0 speed is unknown, defaulting to 1000
[  315.748330][T16446] netlink: 'syz.1.2470': attribute type 1 has an invalid length.
[  315.809815][T16446] bond54: entered promiscuous mode
[  315.831891][T16446] 8021q: adding VLAN 0 to HW filter on device bond54
[  315.903571][T16446] 8021q: adding VLAN 0 to HW filter on device bond55
[  315.908983][T16446] bond54: (slave bond55): making interface the new active one
[  315.914617][T16446] bond55: entered promiscuous mode
[  315.917341][T16446] bond54: (slave bond55): Enslaving as an active interface with an up link
[  316.069834][   T56] block nbd20: Receive control failed (result -32)
[  316.297609][T16484] gre0 speed is unknown, defaulting to 1000
[  316.375623][T16489] bond57: entered promiscuous mode
[  316.377679][T16489] 8021q: adding VLAN 0 to HW filter on device bond57
[  316.454799][T16489] 8021q: adding VLAN 0 to HW filter on device bond57
[  316.460663][T16489] bond57: (slave vti0): The slave device specified does not support setting the MAC address
[  316.467559][T16489] bond57: (slave vti0): Error -95 calling set_mac_address
[  316.480658][T16487] gre0 speed is unknown, defaulting to 1000
[  316.515932][T16493] ip6t_srh: unknown srh match flags  4000
[  316.670364][T16491] gre0 speed is unknown, defaulting to 1000
[  316.827131][T16499] gre0 speed is unknown, defaulting to 1000
[  317.087260][T16509] __nla_validate_parse: 3 callbacks suppressed
[  317.087273][T16509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2478'.
[  317.241564][T16501] gre0 speed is unknown, defaulting to 1000
[  317.448289][T16505] gre0 speed is unknown, defaulting to 1000
[  317.474349][ T1231] block nbd0: Possible stuck request ffff88810abe8000: control (read@0,1024B). Runtime 240 seconds
[  317.478650][ T1231] block nbd0: Possible stuck request ffff88810abe8200: control (read@1024,1024B). Runtime 240 seconds
[  317.484698][ T1231] block nbd0: Possible stuck request ffff88810abe8400: control (read@2048,1024B). Runtime 240 seconds
[  317.489167][ T1231] block nbd0: Possible stuck request ffff88810abe8600: control (read@3072,1024B). Runtime 240 seconds
[  317.557419][T16511] gre0 speed is unknown, defaulting to 1000
[  317.672783][T16518] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  317.844898][T16516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  317.848572][T16524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  317.984931][T16530] gre0 speed is unknown, defaulting to 1000
[  318.327814][T16535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  318.333952][T16536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  318.473324][T16539] gre0 speed is unknown, defaulting to 1000
[  318.690219][T16540] gre0 speed is unknown, defaulting to 1000
[  318.869199][T16544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2486'.
[  319.009590][T16547] gre0 speed is unknown, defaulting to 1000
[  319.069348][T16548] netlink: 'syz.1.2487': attribute type 10 has an invalid length.
[  319.090324][T16548] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2487'.
[  319.195171][T16552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  319.204031][T16550] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  319.221730][T16552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  319.307525][T16559] netlink: 'syz.1.2490': attribute type 4 has an invalid length.
[  319.311096][T16559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2490'.
[  319.319320][ T5951] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  319.460824][T16575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  319.468276][T16575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  319.853155][T16577] gre0 speed is unknown, defaulting to 1000
[  320.088158][T16593] netlink: 'syz.2.2498': attribute type 4 has an invalid length.
[  320.092272][T16578] gre0 speed is unknown, defaulting to 1000
[  320.100614][ T5951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.103247][ T5951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.128270][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2497'.
[  320.154209][T16594] bond56: entered promiscuous mode
[  320.156604][T16594] 8021q: adding VLAN 0 to HW filter on device bond56
[  320.173065][T16594] ip6t_srh: unknown srh match flags  4000
[  320.277735][T16605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2501'.
[  320.283254][T16605] netlink: 'syz.2.2501': attribute type 1 has an invalid length.
[  320.286539][T16605] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2501'.
[  320.295725][T16590] gre0 speed is unknown, defaulting to 1000
[  320.469290][T16608] gre0 speed is unknown, defaulting to 1000
[  320.676361][T16615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'.
[  320.734393][T16621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  320.786850][T16623] gre0 speed is unknown, defaulting to 1000
[  320.842844][T16625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2505'.
[  320.869842][T16625] bond57: entered promiscuous mode
[  320.871677][T16625] 8021q: adding VLAN 0 to HW filter on device bond57
[  320.879830][T16625] ip6t_srh: unknown srh match flags  4000
[  321.000695][T16637] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2508'.
[  321.112531][T16639] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  321.117292][T16639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  321.305722][T16647] gre0 speed is unknown, defaulting to 1000
[  321.512527][T16650] gre0 speed is unknown, defaulting to 1000
[  321.636319][T16653] gre0 speed is unknown, defaulting to 1000
[  321.704381][T16663] netlink: 'syz.1.2515': attribute type 12 has an invalid length.
[  321.730913][T16659] delete_channel: no stack
[  321.768897][T16667] pim6reg: entered allmulticast mode
[  321.786887][T16668] pim6reg: left allmulticast mode
[  321.972431][ T1231] block nbd8: Possible stuck request ffff88810ae78000: control (read@0,1024B). Runtime 180 seconds
[  321.976858][ T1231] block nbd8: Possible stuck request ffff88810ae78200: control (read@1024,1024B). Runtime 180 seconds
[  321.980223][T16682] gre0 speed is unknown, defaulting to 1000
[  321.981212][ T1231] block nbd8: Possible stuck request ffff88810ae78400: control (read@2048,1024B). Runtime 180 seconds
[  321.989824][ T1231] block nbd8: Possible stuck request ffff88810ae78600: control (read@3072,1024B). Runtime 180 seconds
[  322.013626][T16686] ip6t_srh: unknown srh match flags  4000
[  322.236287][T16697] netlink: 'syz.2.2524': attribute type 1 has an invalid length.
[  322.283575][T16697] bond56: entered promiscuous mode
[  322.285407][T16697] 8021q: adding VLAN 0 to HW filter on device bond56
[  322.338170][T16697] bond56: (slave bridge10): making interface the new active one
[  322.341975][T16697] bridge10: entered promiscuous mode
[  322.344260][T16697] bond56: (slave bridge10): Enslaving as an active interface with an up link
[  322.439613][T16707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  322.495991][T16709] gre0 speed is unknown, defaulting to 1000
[  322.503667][T16707] __nla_validate_parse: 1 callbacks suppressed
[  322.503681][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2525'.
[  322.844389][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'.
[  322.902249][T16714] bond58: entered promiscuous mode
[  322.904838][T16714] 8021q: adding VLAN 0 to HW filter on device bond58
[  322.908356][T16724] gre0 speed is unknown, defaulting to 1000
[  323.145215][T16745] gre0 speed is unknown, defaulting to 1000
[  323.220947][T16749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2529'.
[  323.561175][T16760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  323.654728][T16776] gre0 speed is unknown, defaulting to 1000
[  323.962385][T16789] gre0 speed is unknown, defaulting to 1000
[  324.240955][T16797] gre0 speed is unknown, defaulting to 1000
[  324.330397][T16802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  324.347569][T16802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  324.360360][T16805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  324.378304][T16805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  324.944575][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'.
[  324.948342][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'.
[  324.954602][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'.
[  324.960124][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'.
[  324.967226][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'.
[  324.970996][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'.
[  324.982622][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'.
[  325.083936][T16820] gre0 speed is unknown, defaulting to 1000
[  325.251994][T16829] gre0 speed is unknown, defaulting to 1000
[  325.278646][T16832] netlink: 'syz.1.2544': attribute type 1 has an invalid length.
[  325.281759][T16832] netlink: 'syz.1.2544': attribute type 1 has an invalid length.
[  325.299289][T16832] netlink: 'syz.1.2544': attribute type 8 has an invalid length.
[  325.614312][T16832] gre0 speed is unknown, defaulting to 1000
[  325.736238][T16844] gre0 speed is unknown, defaulting to 1000
[  325.774237][T16847] bond57: entered promiscuous mode
[  325.776334][T16847] 8021q: adding VLAN 0 to HW filter on device bond57
[  325.857595][T16850] x_tables: ip6_tables: mh match: only valid for protocol 135
[  326.088825][T16858] netlink: 'syz.1.2550': attribute type 2 has an invalid length.
[  326.107820][T16854] gre0 speed is unknown, defaulting to 1000
[  326.519681][T16867] gre0 speed is unknown, defaulting to 1000
[  326.714607][ T5951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.717248][ T5951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.939146][T16875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  326.966697][T16882] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  326.972156][T16882] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  327.127904][T16892] gre0 speed is unknown, defaulting to 1000
[  327.224523][T16896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.242340][T16886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.487280][T16902] netlink: 'syz.1.2562': attribute type 5 has an invalid length.
[  327.490646][T16902] netlink: 'syz.1.2562': attribute type 6 has an invalid length.
[  327.494148][T16902] netlink: 'syz.1.2562': attribute type 5 has an invalid length.
[  327.497648][T16902] netlink: 'syz.1.2562': attribute type 6 has an invalid length.
[  327.608509][T16919] gre0 speed is unknown, defaulting to 1000
[  327.646006][T16917] x_tables: duplicate underflow at hook 1
[  327.648515][T16916] x_tables: duplicate underflow at hook 1
[  327.720281][T16923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.756649][T16923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.863851][T16921] gre0 speed is unknown, defaulting to 1000
[  328.307994][T16932] netlink: 'syz.1.2570': attribute type 3 has an invalid length.
[  328.311797][T16932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  328.380494][T16940] __nla_validate_parse: 19 callbacks suppressed
[  328.380513][T16940] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2572'.
[  328.385395][T16932] SET target dimension over the limit!
[  328.390418][T16931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.442942][T16942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2573'.
[  328.467760][ T5840] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  328.470770][ T5840] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  328.473771][T16942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2573'.
[  328.481401][ T5840] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  328.484317][ T5840] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  328.557961][T16942] gre0 speed is unknown, defaulting to 1000
[  328.807958][T16956] netlink: 'syz.0.2576': attribute type 1 has an invalid length.
[  328.821447][T16956] bond59: entered promiscuous mode
[  328.824851][T16956] 8021q: adding VLAN 0 to HW filter on device bond59
[  328.855291][T16956] bond59: (slave bridge16): making interface the new active one
[  328.857733][T16956] bridge16: entered promiscuous mode
[  328.860310][T16956] bond59: (slave bridge16): Enslaving as an active interface with an up link
[  328.957678][T16964] gre0 speed is unknown, defaulting to 1000
[  329.120242][T16980] gre0 speed is unknown, defaulting to 1000
[  329.194072][T16990] ip6t_srh: unknown srh match flags  4000
[  329.359065][T16972] gre0 speed is unknown, defaulting to 1000
[  329.529280][T16986] gre0 speed is unknown, defaulting to 1000
[  329.630881][T17002] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2587'.
[  329.634311][   T11] block nbd3: Possible stuck request ffff88810acb8000: control (read@0,1024B). Runtime 210 seconds
[  329.639078][   T11] block nbd3: Possible stuck request ffff88810acb8200: control (read@1024,1024B). Runtime 210 seconds
[  329.643184][   T11] block nbd3: Possible stuck request ffff88810acb8400: control (read@2048,1024B). Runtime 210 seconds
[  329.646824][   T11] block nbd3: Possible stuck request ffff88810acb8600: control (read@3072,1024B). Runtime 210 seconds
[  329.651868][ T1231] block nbd9: Possible stuck request ffff88810aea8000: control (read@0,1024B). Runtime 180 seconds
[  329.655857][ T1231] block nbd9: Possible stuck request ffff88810aea8200: control (read@1024,1024B). Runtime 180 seconds
[  329.659331][ T1231] block nbd9: Possible stuck request ffff88810aea8400: control (read@2048,1024B). Runtime 180 seconds
[  329.659615][T17005] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2587'.
[  329.663442][ T1231] block nbd9: Possible stuck request ffff88810aea8600: control (read@3072,1024B). Runtime 180 seconds
[  329.732967][T17008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  329.807378][T17008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2589'.
[  329.894250][T17015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  329.916165][T17016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2589'.
[  329.919652][T17016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2589'.
[  329.970610][T17014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.169270][T17023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.178634][T17023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.280119][ T1231] block nbd10: Possible stuck request ffff88810aed8000: control (read@0,1024B). Runtime 180 seconds
[  330.284252][ T1231] block nbd10: Possible stuck request ffff88810aed8200: control (read@1024,1024B). Runtime 180 seconds
[  330.288068][ T1231] block nbd10: Possible stuck request ffff88810aed8400: control (read@2048,1024B). Runtime 180 seconds
[  330.291769][ T1231] block nbd10: Possible stuck request ffff88810aed8600: control (read@3072,1024B). Runtime 180 seconds
[  330.533436][T17031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.595049][T17041] netlink: 'syz.2.2597': attribute type 13 has an invalid length.
[  330.601499][ T7951] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  330.605052][ T7951] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  330.607799][ T7951] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  330.610638][ T7951] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  330.613916][T17041] netlink: 'syz.2.2597': attribute type 13 has an invalid length.
[  330.617796][T17041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.689125][T17046] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2599'.
[  330.770405][T17045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.772145][T17048] gre0 speed is unknown, defaulting to 1000
[  330.870145][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2600'.
[  330.890402][T17051] bond60: entered promiscuous mode
[  330.892551][T17051] 8021q: adding VLAN 0 to HW filter on device bond60
[  330.912548][   T11] block nbd1: Possible stuck request ffff88810ac10000: control (read@0,1024B). Runtime 240 seconds
[  330.916643][   T11] block nbd1: Possible stuck request ffff88810ac10200: control (read@1024,1024B). Runtime 240 seconds
[  330.921031][   T11] block nbd1: Possible stuck request ffff88810ac10400: control (read@2048,1024B). Runtime 240 seconds
[  330.925710][   T11] block nbd1: Possible stuck request ffff88810ac10600: control (read@3072,1024B). Runtime 240 seconds
[  330.940372][T17048] 8021q: adding VLAN 0 to HW filter on device bond60
[  330.943125][T17048] bond60: (slave vti0): The slave device specified does not support setting the MAC address
[  330.947511][T17048] bond60: (slave vti0): Error -95 calling set_mac_address
[  330.988174][T17050] ip6t_srh: unknown srh match flags  4000
[  331.510811][T17079] gre0 speed is unknown, defaulting to 1000
[  331.553624][T17081] netlink: 'syz.2.2607': attribute type 11 has an invalid length.
[  331.583869][T17081] bond58: entered promiscuous mode
[  331.586465][T17081] 8021q: adding VLAN 0 to HW filter on device bond58
[  331.599483][T17081] 8021q: adding VLAN 0 to HW filter on device bond58
[  331.602804][T17081] bond58: (slave vti1): The slave device specified does not support setting the MAC address
[  331.607631][T17081] bond58: (slave vti1): Error -95 calling set_mac_address
[  331.643431][T17083] ip6t_srh: unknown srh match flags  4000
[  331.813444][T17085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.015431][T17090] netlink: 'syz.0.2609': attribute type 4 has an invalid length.
[  332.178370][T17104] netlink: 'syz.0.2612': attribute type 1 has an invalid length.
[  332.193845][ T1231] block nbd11: Possible stuck request ffff88810af40000: control (read@0,1024B). Runtime 180 seconds
[  332.197432][ T1231] block nbd11: Possible stuck request ffff88810af40200: control (read@1024,1024B). Runtime 180 seconds
[  332.201023][ T1231] block nbd11: Possible stuck request ffff88810af40400: control (read@2048,1024B). Runtime 180 seconds
[  332.205955][ T1231] block nbd11: Possible stuck request ffff88810af40600: control (read@3072,1024B). Runtime 180 seconds
[  332.209986][T17104] bond61: entered promiscuous mode
[  332.214935][T17104] 8021q: adding VLAN 0 to HW filter on device bond61
[  332.231730][T17104] bond61: (slave bridge17): making interface the new active one
[  332.234670][T17104] bridge17: entered promiscuous mode
[  332.237118][T17104] bond61: (slave bridge17): Enslaving as an active interface with an up link
[  332.309663][T17107] gre0 speed is unknown, defaulting to 1000
[  332.488099][T17117] tap0: tun_chr_ioctl cmd 2148553947
[  332.596679][T17119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.606107][T17119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.173999][T17127] syzkaller1: entered promiscuous mode
[  333.175836][T17127] syzkaller1: entered allmulticast mode
[  333.289518][T17134] gre0 speed is unknown, defaulting to 1000
[  333.428273][T17137] gre0 speed is unknown, defaulting to 1000
[  333.482191][   T11] block nbd4: Possible stuck request ffff88810ad00000: control (read@0,1024B). Runtime 210 seconds
[  333.486007][   T11] block nbd4: Possible stuck request ffff88810ad00200: control (read@1024,1024B). Runtime 210 seconds
[  333.490052][   T11] block nbd4: Possible stuck request ffff88810ad00400: control (read@2048,1024B). Runtime 210 seconds
[  333.494504][   T11] block nbd4: Possible stuck request ffff88810ad00600: control (read@3072,1024B). Runtime 210 seconds
[  333.774444][T17147] __nla_validate_parse: 6 callbacks suppressed
[  333.774463][T17147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2622'.
[  333.852640][T17149] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2622'.
[  333.969498][T17151] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2623'.
[  333.972536][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2623'.
[  333.991889][T17151] gre0 speed is unknown, defaulting to 1000
[  334.034643][T17153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2623'.
[  334.112316][   T11] block nbd5: Possible stuck request ffff88810ad60000: control (read@0,1024B). Runtime 210 seconds
[  334.115396][   T11] block nbd5: Possible stuck request ffff88810ad60200: control (read@1024,1024B). Runtime 210 seconds
[  334.118492][   T11] block nbd5: Possible stuck request ffff88810ad60400: control (read@2048,1024B). Runtime 210 seconds
[  334.121621][   T11] block nbd5: Possible stuck request ffff88810ad60600: control (read@3072,1024B). Runtime 210 seconds
[  334.143330][T17156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  334.193943][T17161] gre0 speed is unknown, defaulting to 1000
[  334.229254][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'.
[  334.244620][T17163] bond59: entered promiscuous mode
[  334.246623][T17163] 8021q: adding VLAN 0 to HW filter on device bond59
[  334.251677][T17163] ip6t_srh: unknown srh match flags  4000
[  334.465968][T17167] gre0 speed is unknown, defaulting to 1000
[  334.547650][T17174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2627'.
[  334.613926][T17173] gre0 speed is unknown, defaulting to 1000
[  334.956657][T17182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  334.974120][T17182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  335.273590][   T40] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  335.361150][T17200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2633'.
[  335.376988][T17198] gre0 speed is unknown, defaulting to 1000
[  335.463092][T17205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2634'.
[  335.568002][T17215] netlink: 'syz.0.2636': attribute type 1 has an invalid length.
[  335.571090][T17215] netlink: 'syz.0.2636': attribute type 3 has an invalid length.
[  335.585398][T17215] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2636'.
[  335.617683][T17217] lo speed is unknown, defaulting to 1000
[  335.620177][T17217] lo speed is unknown, defaulting to 1000
[  335.624514][T17217] lo speed is unknown, defaulting to 1000
[  335.636145][T17217] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  335.656843][T17217] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  335.699326][T17217] lo speed is unknown, defaulting to 1000
[  335.703333][T17217] lo speed is unknown, defaulting to 1000
[  335.706863][T17217] lo speed is unknown, defaulting to 1000
[  335.715032][T17219] smc: removing ib device syz1
[  335.734612][T17217] syzkaller1: entered promiscuous mode
[  335.736359][T17217] syzkaller1: entered allmulticast mode
[  335.870321][T17218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.375305][T17232] netlink: 'syz.1.2641': attribute type 1 has an invalid length.
[  336.398993][T17232] bond58: entered promiscuous mode
[  336.400919][T17232] 8021q: adding VLAN 0 to HW filter on device bond58
[  336.421631][T17232] bond58: (slave bridge12): making interface the new active one
[  336.425618][T17232] bridge12: entered promiscuous mode
[  336.428010][T17232] bond58: (slave bridge12): Enslaving as an active interface with an up link
[  336.516910][T17240] lo speed is unknown, defaulting to 1000
[  336.557548][T17246] lo speed is unknown, defaulting to 1000
[  336.575359][T17240] syzkaller1: entered promiscuous mode
[  336.577684][T17240] syzkaller1: entered allmulticast mode
[  336.682747][ T1231] block nbd12: Possible stuck request ffff88810af68000: control (read@0,1024B). Runtime 180 seconds
[  336.687081][ T1231] block nbd12: Possible stuck request ffff88810af68200: control (read@1024,1024B). Runtime 180 seconds
[  336.691636][ T1231] block nbd12: Possible stuck request ffff88810af68400: control (read@2048,1024B). Runtime 180 seconds
[  336.697061][ T1231] block nbd12: Possible stuck request ffff88810af68600: control (read@3072,1024B). Runtime 180 seconds
[  336.932603][T17262] nbd21: detected capacity change from 0 to 63
[  336.938839][   T56] block nbd21: Receive control failed (result -32)
[  336.944915][T17264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.976053][T17268] netlink: 'syz.0.2651': attribute type 1 has an invalid length.
[  336.997055][T17268] bond62: entered promiscuous mode
[  336.999497][T17268] 8021q: adding VLAN 0 to HW filter on device bond62
[  337.016556][T17268] bond62: (slave bridge18): making interface the new active one
[  337.019396][T17268] bridge18: entered promiscuous mode
[  337.022513][T17268] bond62: (slave bridge18): Enslaving as an active interface with an up link
[  337.093415][T17273] netlink: 'syz.0.2653': attribute type 29 has an invalid length.
[  337.096319][T17273] netlink: 'syz.0.2653': attribute type 29 has an invalid length.
[  337.098889][T17273] netlink: 'syz.0.2653': attribute type 29 has an invalid length.
[  337.101577][T17273] netlink: 'syz.0.2653': attribute type 29 has an invalid length.
[  337.104773][T17273] netlink: 'syz.0.2653': attribute type 29 has an invalid length.
[  337.107365][T17273] netlink: 'syz.0.2653': attribute type 29 has an invalid length.
[  337.110052][T17273] netlink: 'syz.0.2653': attribute type 29 has an invalid length.
[  337.113099][T17273] netlink: 'syz.0.2653': attribute type 29 has an invalid length.
[  337.294135][T17282] lo speed is unknown, defaulting to 1000
[  337.375037][T17286] lo speed is unknown, defaulting to 1000
[  337.432651][T17289] lo speed is unknown, defaulting to 1000
[  337.555989][T17303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.714330][T17314] bond60: entered promiscuous mode
[  337.716286][T17314] 8021q: adding VLAN 0 to HW filter on device bond60
[  337.729458][T17314] bond60: (slave bridge11): making interface the new active one
[  337.732713][T17314] bridge11: entered promiscuous mode
[  337.735014][T17314] bond60: (slave bridge11): Enslaving as an active interface with an up link
[  337.753552][T17317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.773115][T17317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  338.009433][ T5951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.013286][ T5951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.142571][T17349] lo speed is unknown, defaulting to 1000
[  338.276368][T17365] lo speed is unknown, defaulting to 1000
[  338.337334][T17368] lo speed is unknown, defaulting to 1000
[  338.484504][T17381] lo speed is unknown, defaulting to 1000
[  338.510195][T17386] lo speed is unknown, defaulting to 1000
[  338.797302][T17399] lo speed is unknown, defaulting to 1000
[  338.930305][T17399] __nla_validate_parse: 70 callbacks suppressed
[  338.930323][T17399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2682'.
[  339.000886][T17410] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  339.132969][T17422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  339.154905][T17417] lo speed is unknown, defaulting to 1000
[  339.171071][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2687'.
[  339.194150][T17422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2687'.
[  339.197034][T17422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2687'.
[  339.397402][T17444] lo speed is unknown, defaulting to 1000
[  339.921412][T17494] lo speed is unknown, defaulting to 1000
[  339.923369][T17496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  339.927982][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2695'.
[  339.930993][T17498] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2695'.
[  339.937402][T17496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  339.943692][T17498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  339.948920][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2695'.
[  339.968633][T17499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2696'.
[  340.121106][T17504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2699'.
[  340.124042][T17504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2699'.
[  340.492374][T17513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.558537][T17518] lo speed is unknown, defaulting to 1000
[  340.592140][T17515] nbd22: detected capacity change from 0 to 63
[  340.595733][   T57] block nbd22: Receive control failed (result -32)
[  340.600332][T17513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.753613][T17527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.883295][T17536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.913347][T17540] chnl_net:caif_netlink_parms(): no params data found
[  340.951066][T17541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  341.168033][T17559] lo speed is unknown, defaulting to 1000
[  341.325556][T17563] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  341.794044][   T11] block nbd6: Possible stuck request ffff88810add0000: control (read@0,1024B). Runtime 210 seconds
[  341.798346][   T11] block nbd6: Possible stuck request ffff88810add0200: control (read@1024,1024B). Runtime 210 seconds
[  341.803291][   T11] block nbd6: Possible stuck request ffff88810add0400: control (read@2048,1024B). Runtime 210 seconds
[  341.807709][   T11] block nbd6: Possible stuck request ffff88810add0600: control (read@3072,1024B). Runtime 210 seconds
[  341.832386][T17567] lo speed is unknown, defaulting to 1000
[  341.871313][T17567] lo speed is unknown, defaulting to 1000
[  341.984299][T17572] lo speed is unknown, defaulting to 1000
[  342.207449][T17586] lo speed is unknown, defaulting to 1000
[  342.217952][T17589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  342.518920][T17604] lo speed is unknown, defaulting to 1000
[  342.615017][T17613] lo speed is unknown, defaulting to 1000
[  342.905101][T17631] lo speed is unknown, defaulting to 1000
[  343.019720][T17631] lo speed is unknown, defaulting to 1000
[  343.057157][T17636] lo speed is unknown, defaulting to 1000
[  343.193782][T17636] validate_nla: 50 callbacks suppressed
[  343.193792][T17636] netlink: 'syz.0.2733': attribute type 10 has an invalid length.
[  343.240773][T17648] bond44: (slave dummy0): Releasing active interface
[  343.346890][T17654] netlink: 'syz.2.2737': attribute type 4 has an invalid length.
[  343.456683][T17656] lo speed is unknown, defaulting to 1000
[  343.527961][T17665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.531792][T17659] lo speed is unknown, defaulting to 1000
[  343.624873][T17670] bond0: (slave sit0): Error: Device type is different from other slaves
[  343.890931][T17687] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  343.983307][T17691] __nla_validate_parse: 12 callbacks suppressed
[  343.983317][T17691] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2748'.
[  344.059892][T17697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  344.065401][T17697] netlink: 'syz.2.2750': attribute type 1 has an invalid length.
[  344.080567][T17697] 8021q: adding VLAN 0 to HW filter on device bond61
[  344.092844][T17697] bond61: (slave veth21): Enslaving as an active interface with a down link
[  344.131000][T17697] netlink: 364 bytes leftover after parsing attributes in process `syz.2.2750'.
[  344.138505][T17697] dummy0: left allmulticast mode
[  344.142437][T17697] bond61: (slave dummy0): making interface the new active one
[  344.145762][T17697] dummy0: entered promiscuous mode
[  344.146636][T17704] netlink: 'syz.1.2752': attribute type 1 has an invalid length.
[  344.147737][T17697] bond61: (slave dummy0): Enslaving as an active interface with an up link
[  344.162667][T17697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  344.170951][T17704] bond59: entered promiscuous mode
[  344.174009][T17704] 8021q: adding VLAN 0 to HW filter on device bond59
[  344.192917][T17704] bond59: (slave bridge13): making interface the new active one
[  344.196205][T17704] bridge13: entered promiscuous mode
[  344.199094][T17704] bond59: (slave bridge13): Enslaving as an active interface with an up link
[  344.326731][T17715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  344.331210][T17716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  344.738446][T17719] lo speed is unknown, defaulting to 1000
[  344.887994][T17726] lo speed is unknown, defaulting to 1000
[  344.942980][T17726] lo speed is unknown, defaulting to 1000
[  344.966870][T17729] lo speed is unknown, defaulting to 1000
[  345.020692][T17725] netlink: 'syz.0.2757': attribute type 4 has an invalid length.
[  345.056609][T17744] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2760'.
[  345.376767][T17755] lo speed is unknown, defaulting to 1000
[  345.381379][T17750] netlink: 'syz.1.2762': attribute type 10 has an invalid length.
[  345.464203][T17764] netlink: 'syz.1.2764': attribute type 2 has an invalid length.
[  345.466996][T17764] netlink: 'syz.1.2764': attribute type 1 has an invalid length.
[  345.470025][T17764] netlink: 'syz.1.2764': attribute type 1 has an invalid length.
[  345.476851][T17765] netlink: 'syz.1.2764': attribute type 2 has an invalid length.
[  345.531216][T17765] lo speed is unknown, defaulting to 1000
[  345.632666][T17774] gretap0: refused to change device tx_queue_len
[  345.635341][T17774] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  345.646203][ T1231] block nbd2: Possible stuck request ffff88810ac70000: control (read@0,1024B). Runtime 240 seconds
[  345.650433][ T1231] block nbd2: Possible stuck request ffff88810ac70200: control (read@1024,1024B). Runtime 240 seconds
[  345.655473][ T1231] block nbd2: Possible stuck request ffff88810ac70400: control (read@2048,1024B). Runtime 240 seconds
[  345.659846][ T1231] block nbd2: Possible stuck request ffff88810ac70600: control (read@3072,1024B). Runtime 240 seconds
[  345.771084][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'.
[  345.777326][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'.
[  345.781498][T17789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2771'.
[  345.788332][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'.
[  345.794116][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'.
[  345.797956][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'.
[  345.801759][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'.
[  346.076119][T17802] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  346.514897][T17828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.524560][T17828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.663065][T17838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.673586][T17838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.879792][T17846] lo speed is unknown, defaulting to 1000
[  346.920960][T17846] bond0: entered promiscuous mode
[  346.922953][T17846] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.930779][T17846] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.933513][T17846] bond0: (slave vti0): The slave device specified does not support setting the MAC address
[  346.937239][T17846] bond0: (slave vti0): Error -95 calling set_mac_address
[  346.978460][T17852] ip6t_srh: unknown srh match flags  4000
[  347.069308][ T7951] bond0 (unregistering): Released all slaves
[  347.089838][T17854] lo speed is unknown, defaulting to 1000
[  347.414725][T17878] lo speed is unknown, defaulting to 1000
[  347.513829][T17887] lo speed is unknown, defaulting to 1000
[  347.558719][ T1231] block nbd0: Possible stuck request ffff88810abe8000: control (read@0,1024B). Runtime 270 seconds
[  347.563201][ T1231] block nbd0: Possible stuck request ffff88810abe8200: control (read@1024,1024B). Runtime 270 seconds
[  347.567417][ T1231] block nbd0: Possible stuck request ffff88810abe8400: control (read@2048,1024B). Runtime 270 seconds
[  347.571738][ T1231] block nbd0: Possible stuck request ffff88810abe8600: control (read@3072,1024B). Runtime 270 seconds
[  347.604705][T17893] lo speed is unknown, defaulting to 1000
[  347.621089][T17891] lo speed is unknown, defaulting to 1000
[  347.924728][T17910] lo speed is unknown, defaulting to 1000
[  348.208374][T17934] validate_nla: 8 callbacks suppressed
[  348.208388][T17934] netlink: 'syz.2.2805': attribute type 1 has an invalid length.
[  348.311438][T17936] lo speed is unknown, defaulting to 1000
[  348.491529][T17942] lo speed is unknown, defaulting to 1000
[  348.669257][T17961] netlink: 'syz.1.2813': attribute type 4 has an invalid length.
[  348.675887][   T27] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  348.719542][T17964] lo speed is unknown, defaulting to 1000
[  348.730288][T17966] bridge14: entered promiscuous mode
[  348.878762][T17964] lo speed is unknown, defaulting to 1000
[  349.070178][T17976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  349.149332][T17973] __nla_validate_parse: 13 callbacks suppressed
[  349.149343][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2816'.
[  349.174430][ T5951] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  349.263161][T17983] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2819'.
[  349.320775][T17988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2819'.
[  349.325608][T17988] netem: incorrect ge model size
[  349.328340][T17988] netem: change failed
[  349.461601][T17993] lo speed is unknown, defaulting to 1000
[  349.494577][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2820'.
[  349.506962][T17993] bond0: entered promiscuous mode
[  349.509010][T17993] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.516230][T17993] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.518481][T17993] bond0: (slave vti0): The slave device specified does not support setting the MAC address
[  349.522106][T17993] bond0: (slave vti0): Error -95 calling set_mac_address
[  349.568372][T17997] ip6t_srh: unknown srh match flags  4000
[  349.639899][ T7951] bond0 (unregistering): Released all slaves
[  349.665071][T18007] lo speed is unknown, defaulting to 1000
[  349.667838][T18008] netlink: 'syz.1.2823': attribute type 4 has an invalid length.
[  349.898751][T18016] lo speed is unknown, defaulting to 1000
[  349.919862][T18019] netlink: 'syz.1.2826': attribute type 1 has an invalid length.
[  349.948592][T18019] bond60: entered promiscuous mode
[  349.951069][T18019] 8021q: adding VLAN 0 to HW filter on device bond60
[  349.970673][T18019] bond60: (slave bridge15): making interface the new active one
[  349.974396][T18019] bridge15: entered promiscuous mode
[  349.978554][T18019] bond60: (slave bridge15): Enslaving as an active interface with an up link
[  350.034397][T18028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.056228][T18025] lo speed is unknown, defaulting to 1000
[  350.151636][T18029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.184225][T18036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2830'.
[  350.259348][T18038] lo speed is unknown, defaulting to 1000
[  350.277219][T18039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2831'.
[  350.410475][T18045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.583272][T18056] netlink: 876 bytes leftover after parsing attributes in process `syz.1.2836'.
[  350.586886][T18056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2836'.
[  350.591771][T18056] netlink: 'syz.1.2836': attribute type 83 has an invalid length.
[  350.594259][T18058] netlink: 'syz.0.2837': attribute type 4 has an invalid length.
[  350.656919][T18061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2836'.
[  350.924205][T18077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2842'.
[  351.059172][T18086] lo speed is unknown, defaulting to 1000
[  351.121559][T18091] netlink: 'syz.0.2845': attribute type 1 has an invalid length.
[  351.133911][T18091] bond63: entered promiscuous mode
[  351.135748][T18091] 8021q: adding VLAN 0 to HW filter on device bond63
[  351.166043][T18091] bond63: (slave bridge19): making interface the new active one
[  351.168503][T18091] bridge19: entered promiscuous mode
[  351.170707][T18091] bond63: (slave bridge19): Enslaving as an active interface with an up link
[  351.299642][T18097] lo speed is unknown, defaulting to 1000
[  351.359320][T18097] netlink: 'syz.0.2847': attribute type 10 has an invalid length.
[  351.444001][T18099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  351.675209][T18122] lo speed is unknown, defaulting to 1000
[  351.705220][T18124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  351.715361][T18124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  352.000822][T18130] lo speed is unknown, defaulting to 1000
[  352.044928][ T1231] block nbd8: Possible stuck request ffff88810ae78000: control (read@0,1024B). Runtime 210 seconds
[  352.048375][ T1231] block nbd8: Possible stuck request ffff88810ae78200: control (read@1024,1024B). Runtime 210 seconds
[  352.051880][ T1231] block nbd8: Possible stuck request ffff88810ae78400: control (read@2048,1024B). Runtime 210 seconds
[  352.056121][ T1231] block nbd8: Possible stuck request ffff88810ae78600: control (read@3072,1024B). Runtime 210 seconds
[  352.231438][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.234478][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.303648][T18139] lo speed is unknown, defaulting to 1000
[  352.444430][T18139] bond61: entered promiscuous mode
[  352.446283][T18139] 8021q: adding VLAN 0 to HW filter on device bond61
[  352.569997][T18164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  353.076298][T18175] netlink: 'syz.0.2866': attribute type 61 has an invalid length.
[  353.078897][T18175] netlink: 'syz.0.2866': attribute type 62 has an invalid length.
[  353.216242][T18189] lo speed is unknown, defaulting to 1000
[  353.360485][T18201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  353.470444][T18201] bond61: (slave dummy0): Releasing active interface
[  353.474391][T18201] dummy0: left promiscuous mode
[  353.484193][T18201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.194929][T18227] __nla_validate_parse: 15 callbacks suppressed
[  354.194943][T18227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2877'.
[  354.222602][T18232] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2878'.
[  354.226380][T18232] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2878'.
[  354.230953][T18232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.241362][T18232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.400936][T18245] pimreg: entered allmulticast mode
[  354.412753][T18245] pimreg: left allmulticast mode
[  354.433419][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2881'.
[  354.473395][T18242] nbd23: detected capacity change from 0 to 63
[  354.480347][   T57] block nbd23: Receive control failed (result -32)
[  354.527741][T18251] lo speed is unknown, defaulting to 1000
[  354.535236][T18252] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  354.591322][T18255] syzkaller1: entered promiscuous mode
[  354.598287][T18255] syzkaller1: entered allmulticast mode
[  354.682438][T18259] lo speed is unknown, defaulting to 1000
[  354.736894][T18259] lo speed is unknown, defaulting to 1000
[  354.775523][T18265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.787937][T18265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.857764][T18279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2889'.
[  355.300256][T18315] syzkaller1: entered promiscuous mode
[  355.302096][T18315] syzkaller1: entered allmulticast mode
[  355.385368][T18320] lo speed is unknown, defaulting to 1000
[  355.392678][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2899'.
[  355.398848][T18321] netlink: 'syz.1.2900': attribute type 10 has an invalid length.
[  355.401345][T18321] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2900'.
[  355.422356][T18317] nbd24: detected capacity change from 0 to 63
[  355.426964][   T56] block nbd24: Receive control failed (result -32)
[  355.460094][T18326] netlink: 'syz.0.2901': attribute type 25 has an invalid length.
[  355.462697][T18326] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2901'.
[  355.478200][T18329] netlink: 'syz.1.2903': attribute type 1 has an invalid length.
[  355.494294][T18325] bond62: entered promiscuous mode
[  355.496294][T18325] 8021q: adding VLAN 0 to HW filter on device bond62
[  355.518827][T18331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  355.533466][T18329] bond62: entered promiscuous mode
[  355.535262][T18329] 8021q: adding VLAN 0 to HW filter on device bond62
[  355.549810][T18329] bond62: (slave bridge16): making interface the new active one
[  355.552365][T18329] bridge16: entered promiscuous mode
[  355.555844][T18329] bond62: (slave bridge16): Enslaving as an active interface with an up link
[  355.575653][T18325] lo speed is unknown, defaulting to 1000
[  355.662266][ T5833] tipc: Node number set to 3700481
[  355.725219][T18339] lo speed is unknown, defaulting to 1000
[  355.779369][T18339] lo speed is unknown, defaulting to 1000
[  355.840067][T18345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  355.919497][   T27] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  356.073781][T18354] lo speed is unknown, defaulting to 1000
[  356.105203][T18354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2909'.
[  356.116817][T18354] bond0: entered promiscuous mode
[  356.118635][T18354] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.126043][T18354] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.128313][T18354] bond0: (slave vti0): The slave device specified does not support setting the MAC address
[  356.131784][T18354] bond0: (slave vti0): Error -95 calling set_mac_address
[  356.174347][T18358] ip6t_srh: unknown srh match flags  4000
[  356.248500][ T7951] bond0 (unregistering): Released all slaves
[  356.267627][T18360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.346353][T18363] bond50: (slave dummy0): Releasing active interface
[  356.366409][T18360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.857173][T18382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2916'.
[  357.045354][T18389] netlink: 'syz.0.2919': attribute type 10 has an invalid length.
[  357.077335][T18389] lo speed is unknown, defaulting to 1000
[  357.140614][T18389] netlink: 'syz.0.2919': attribute type 6 has an invalid length.
[  357.143962][T18389] netlink: 'syz.0.2919': attribute type 7 has an invalid length.
[  357.146935][T18389] netlink: 'syz.0.2919': attribute type 8 has an invalid length.
[  357.238613][T18366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.256759][   T57] block nbd25: Receive control failed (result -1)
[  357.910808][T18411] lo speed is unknown, defaulting to 1000
[  358.029358][T18423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  358.056897][T18424] dummy0: entered promiscuous mode
[  358.059561][T18424] dummy0: entered allmulticast mode
[  358.150558][T18427] lo speed is unknown, defaulting to 1000
[  358.245168][T18435] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  358.628605][T18441] lo speed is unknown, defaulting to 1000
[  358.734804][T18441] lo speed is unknown, defaulting to 1000
[  359.111313][T18450] lo speed is unknown, defaulting to 1000
[  359.337649][T18456] __nla_validate_parse: 8 callbacks suppressed
[  359.337661][T18456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2937'.
[  359.466220][T18460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  359.481584][T18460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  359.713509][   T11] block nbd3: Possible stuck request ffff88810acb8000: control (read@0,1024B). Runtime 240 seconds
[  359.717789][   T11] block nbd3: Possible stuck request ffff88810acb8200: control (read@1024,1024B). Runtime 240 seconds
[  359.722312][   T11] block nbd3: Possible stuck request ffff88810acb8400: control (read@2048,1024B). Runtime 240 seconds
[  359.726510][   T11] block nbd3: Possible stuck request ffff88810acb8600: control (read@3072,1024B). Runtime 240 seconds
[  359.747328][ T1231] block nbd9: Possible stuck request ffff88810aea8000: control (read@0,1024B). Runtime 210 seconds
[  359.751356][ T1231] block nbd9: Possible stuck request ffff88810aea8200: control (read@1024,1024B). Runtime 210 seconds
[  359.755100][ T1231] block nbd9: Possible stuck request ffff88810aea8400: control (read@2048,1024B). Runtime 210 seconds
[  359.758509][ T1231] block nbd9: Possible stuck request ffff88810aea8600: control (read@3072,1024B). Runtime 210 seconds
[  359.780706][T18487] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  360.015846][T18496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  360.023812][T18497] netlink: 'syz.2.2946': attribute type 1 has an invalid length.
[  360.051867][T18497] 8021q: adding VLAN 0 to HW filter on device bond63
[  360.108349][T18505] lo speed is unknown, defaulting to 1000
[  360.151886][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2948'.
[  360.165430][T18505] bond0: entered promiscuous mode
[  360.167322][T18505] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.176629][T18505] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.179233][T18505] bond0: (slave vti0): The slave device specified does not support setting the MAC address
[  360.183509][T18505] bond0: (slave vti0): Error -95 calling set_mac_address
[  360.230301][T18511] ip6t_srh: unknown srh match flags  4000
[  360.240020][T18514] lo speed is unknown, defaulting to 1000
[  360.278088][T18516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2950'.
[  360.326370][T15729] bond0 (unregistering): Released all slaves
[  360.341202][T18520] netlink: 'syz.0.2951': attribute type 4 has an invalid length.
[  360.356421][T18516] bond64: entered promiscuous mode
[  360.358456][T18516] 8021q: adding VLAN 0 to HW filter on device bond64
[  360.381348][T18514] ip6t_srh: unknown srh match flags  4000
[  360.383535][ T1231] block nbd10: Possible stuck request ffff88810aed8000: control (read@0,1024B). Runtime 210 seconds
[  360.387057][ T1231] block nbd10: Possible stuck request ffff88810aed8200: control (read@1024,1024B). Runtime 210 seconds
[  360.391096][ T1231] block nbd10: Possible stuck request ffff88810aed8400: control (read@2048,1024B). Runtime 210 seconds
[  360.395654][ T1231] block nbd10: Possible stuck request ffff88810aed8600: control (read@3072,1024B). Runtime 210 seconds
[  360.450162][T18525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2952'.
[  360.519427][T18532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  360.523837][T18532] netlink: 'syz.0.2953': attribute type 1 has an invalid length.
[  360.540683][T18532] 8021q: adding VLAN 0 to HW filter on device bond64
[  360.555001][T18532] bond64: (slave veth17): Enslaving as an active interface with a down link
[  360.594354][T18530] lo speed is unknown, defaulting to 1000
[  360.598460][T18532] bond64: (slave dummy0): making interface the new active one
[  360.601575][T18532] dummy0: entered promiscuous mode
[  360.604724][T18532] bond64: (slave dummy0): Enslaving as an active interface with an up link
[  360.618300][T18532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  360.655674][T18539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2954'.
[  360.660240][T18537] bond65 (unregistering): Released all slaves
[  360.688080][T18539] bond65: entered promiscuous mode
[  360.690083][T18539] 8021q: adding VLAN 0 to HW filter on device bond65
[  360.704049][T18539] ip6t_srh: unknown srh match flags  4000
[  360.734026][ T5840] 
[  360.734823][ T5840] ======================================================
[  360.737067][ T5840] WARNING: possible circular locking dependency detected
[  360.739370][ T5840] syzkaller #0 Not tainted
[  360.741175][ T5840] ------------------------------------------------------
[  360.743719][ T5840] kworker/u8:3/5840 is trying to acquire lock:
[  360.746008][ T5840] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690
[  360.749586][ T5840] 
[  360.749586][ T5840] but task is already holding lock:
[  360.752307][ T5840] ffff8881bb77c538 (&idev->mc_lock){+.+.}-{4:4}, at: ipv6_mc_netdev_event+0xe1/0x5a0
[  360.755642][ T5840] 
[  360.755642][ T5840] which lock already depends on the new lock.
[  360.755642][ T5840] 
[  360.759378][ T5840] 
[  360.759378][ T5840] the existing dependency chain (in reverse order) is:
[  360.762547][ T5840] 
[  360.762547][ T5840] -> #7 (&idev->mc_lock){+.+.}-{4:4}:
[  360.765239][ T5840]        __mutex_lock+0x19f/0x1300
[  360.767116][ T5840]        __ipv6_dev_mc_inc+0x4e/0xa50
[  360.769075][ T5840]        addrconf_join_solict+0x104/0x190
[  360.771137][ T5840]        __ipv6_dev_ac_inc+0x87b/0xaf0
[  360.773128][ T5840]        ipv6_sock_ac_join+0x6a8/0x880
[  360.775144][ T5840]        do_ipv6_setsockopt+0x2031/0x31c0
[  360.777242][ T5840]        ipv6_setsockopt+0x59/0x170
[  360.779148][ T5840]        do_sock_setsockopt+0x17c/0x1b0
[  360.781177][ T5840]        __x64_sys_setsockopt+0x13d/0x1b0
[  360.783260][ T5840]        do_syscall_64+0x14d/0xf80
[  360.785176][ T5840]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.787535][ T5840] 
[  360.787535][ T5840] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  360.790303][ T5840]        lock_sock_nested+0x48/0x100
[  360.792260][ T5840]        inet_shutdown+0x6a/0x390
[  360.794156][ T5840]        nbd_mark_nsock_dead+0x2e9/0x560
[  360.796176][ T5840]        recv_work+0x1c7f/0x1d90
[  360.798003][ T5840]        process_scheduled_works+0xb6e/0x18c0
[  360.800229][ T5840]        worker_thread+0xa53/0xfc0
[  360.802123][ T5840]        kthread+0x388/0x470
[  360.803832][ T5840]        ret_from_fork+0x51e/0xb90
[  360.805700][ T5840]        ret_from_fork_asm+0x1a/0x30
[  360.807570][ T5840] 
[  360.807570][ T5840] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  360.810364][ T5840]        __mutex_lock+0x19f/0x1300
[  360.812228][ T5840]        nbd_queue_rq+0x37b/0x1100
[  360.814116][ T5840]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  360.816342][ T5840]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  360.818791][ T5840]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  360.821139][ T5840]        blk_mq_run_hw_queue+0x348/0x4f0
[  360.823152][ T5840]        blk_mq_dispatch_list+0xd16/0xe10
[  360.825228][ T5840]        blk_mq_flush_plug_list+0x48d/0x570
[  360.827397][ T5840]        __blk_flush_plug+0x3ed/0x4d0
[  360.829325][ T5840]        __submit_bio+0x28d/0x580
[  360.831104][ T5840]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  360.833394][ T5840]        block_read_full_folio+0x599/0x830
[  360.835553][ T5840]        filemap_read_folio+0x137/0x3b0
[  360.837573][ T5840]        do_read_cache_folio+0x358/0x590
[  360.839667][ T5840]        read_part_sector+0xb6/0x2b0
[  360.841641][ T5840]        adfspart_check_ICS+0xa5/0xa40
[  360.843614][ T5840]        bdev_disk_changed+0x7ba/0x1550
[  360.845622][ T5840]        blkdev_get_whole+0x380/0x510
[  360.847600][ T5840]        bdev_open+0x31e/0xd30
[  360.849377][ T5840]        blkdev_open+0x470/0x610
[  360.851199][ T5840]        do_dentry_open+0x785/0x14e0
[  360.853147][ T5840]        vfs_open+0x3b/0x340
[  360.854878][ T5840]        path_openat+0x2e08/0x3860
[  360.856763][ T5840]        do_file_open+0x23e/0x4a0
[  360.858608][ T5840]        do_sys_openat2+0x113/0x200
[  360.860520][ T5840]        __x64_sys_openat+0x138/0x170
[  360.862471][ T5840]        do_syscall_64+0x14d/0xf80
[  360.864391][ T5840]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.866744][ T5840] 
[  360.866744][ T5840] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  360.869339][ T5840]        __mutex_lock+0x19f/0x1300
[  360.871219][ T5840]        nbd_queue_rq+0xc6/0x1100
[  360.873033][ T5840]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  360.875261][ T5840]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  360.877648][ T5840]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  360.879910][ T5840]        blk_mq_run_hw_queue+0x348/0x4f0
[  360.881959][ T5840]        blk_mq_dispatch_list+0xd16/0xe10
[  360.883909][ T5840]        blk_mq_flush_plug_list+0x48d/0x570
[  360.885991][ T5840]        __blk_flush_plug+0x3ed/0x4d0
[  360.887883][ T5840]        __submit_bio+0x28d/0x580
[  360.889676][ T5840]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  360.891896][ T5840]        block_read_full_folio+0x599/0x830
[  360.894005][ T5840]        filemap_read_folio+0x137/0x3b0
[  360.895855][ T5840]        do_read_cache_folio+0x358/0x590
[  360.897735][ T5840]        read_part_sector+0xb6/0x2b0
[  360.899511][ T5840]        adfspart_check_ICS+0xa5/0xa40
[  360.901348][ T5840]        bdev_disk_changed+0x7ba/0x1550
[  360.903205][ T5840]        blkdev_get_whole+0x380/0x510
[  360.905033][ T5840]        bdev_open+0x31e/0xd30
[  360.906650][ T5840]        blkdev_open+0x470/0x610
[  360.908331][ T5840]        do_dentry_open+0x785/0x14e0
[  360.910127][ T5840]        vfs_open+0x3b/0x340
[  360.911687][ T5840]        path_openat+0x2e08/0x3860
[  360.913434][ T5840]        do_file_open+0x23e/0x4a0
[  360.915157][ T5840]        do_sys_openat2+0x113/0x200
[  360.916901][ T5840]        __x64_sys_openat+0x138/0x170
[  360.918730][ T5840]        do_syscall_64+0x14d/0xf80
[  360.920469][ T5840]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.922619][ T5840] 
[  360.922619][ T5840] -> #3 (set->srcu){.+.+}-{0:0}:
[  360.924988][ T5840]        __synchronize_srcu+0xca/0x300
[  360.926799][ T5840]        elevator_switch+0x1e8/0x7a0
[  360.928589][ T5840]        elevator_change+0x2cc/0x450
[  360.930365][ T5840]        elevator_set_default+0x36c/0x430
[  360.932297][ T5840]        blk_register_queue+0x366/0x430
[  360.936073][ T5840]        __add_disk+0x677/0xd50
[  360.938054][ T5840]        add_disk_fwnode+0xfb/0x480
[  360.940099][ T5840]        nbd_dev_add+0x72c/0xb50
[  360.942019][ T5840]        nbd_init+0x168/0x1f0
[  360.944043][ T5840]        do_one_initcall+0x250/0x8d0
[  360.946079][ T5840]        do_initcall_level+0x104/0x190
[  360.948214][ T5840]        do_initcalls+0x59/0xa0
[  360.950141][ T5840]        kernel_init_freeable+0x2a6/0x3e0
[  360.952376][ T5840]        kernel_init+0x1d/0x1d0
[  360.954348][ T5840]        ret_from_fork+0x51e/0xb90
[  360.956372][ T5840]        ret_from_fork_asm+0x1a/0x30
[  360.958438][ T5840] 
[  360.958438][ T5840] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  360.961583][ T5840]        __mutex_lock+0x19f/0x1300
[  360.963655][ T5840]        elevator_change+0x1b3/0x450
[  360.965766][ T5840]        elevator_set_none+0xb5/0x140
[  360.967927][ T5840]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  360.970474][ T5840]        nbd_start_device+0x17f/0xb10
[  360.972604][ T5840]        nbd_genl_connect+0x165b/0x1cf0
[  360.974854][ T5840]        genl_family_rcv_msg_doit+0x22a/0x330
[  360.977291][ T5840]        genl_rcv_msg+0x61c/0x7a0
[  360.979341][ T5840]        netlink_rcv_skb+0x232/0x4b0
[  360.981510][ T5840]        genl_rcv+0x28/0x40
[  360.983360][ T5840]        netlink_unicast+0x80f/0x9b0
[  360.985506][ T5840]        netlink_sendmsg+0x813/0xb40
[  360.987553][ T5840]        ____sys_sendmsg+0x972/0x9f0
[  360.989674][ T5840]        ___sys_sendmsg+0x2a5/0x360
[  360.991773][ T5840]        __x64_sys_sendmsg+0x1bd/0x2a0
[  360.993996][ T5840]        do_syscall_64+0x14d/0xf80
[  360.996053][ T5840]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.997993][ T5840] 
[  360.997993][ T5840] -> #1 (&q->q_usage_counter(io)#71){++++}-{0:0}:
[  361.001197][ T5840]        blk_alloc_queue+0x546/0x680
[  361.003368][ T5840]        __blk_mq_alloc_disk+0x197/0x390
[  361.005613][ T5840]        nbd_dev_add+0x499/0xb50
[  361.007551][ T5840]        nbd_genl_connect+0x962/0x1cf0
[  361.009703][ T5840]        genl_family_rcv_msg_doit+0x22a/0x330
[  361.012073][ T5840]        genl_rcv_msg+0x61c/0x7a0
[  361.014073][ T5840]        netlink_rcv_skb+0x232/0x4b0
[  361.016239][ T5840]        genl_rcv+0x28/0x40
[  361.018126][ T5840]        netlink_unicast+0x80f/0x9b0
[  361.020237][ T5840]        netlink_sendmsg+0x813/0xb40
[  361.022299][ T5840]        ____sys_sendmsg+0x972/0x9f0
[  361.024401][ T5840]        ___sys_sendmsg+0x2a5/0x360
[  361.026136][ T5840]        __x64_sys_sendmsg+0x1bd/0x2a0
[  361.027920][ T5840]        do_syscall_64+0x14d/0xf80
[  361.029521][ T5840]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.031694][ T5840] 
[  361.031694][ T5840] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  361.034037][ T5840]        __lock_acquire+0x15a5/0x2cf0
[  361.035679][ T5840]        lock_acquire+0xf0/0x2e0
[  361.037225][ T5840]        fs_reclaim_acquire+0x71/0x100
[  361.039057][ T5840]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  361.041236][ T5840]        __alloc_skb+0x1d0/0x7d0
[  361.042904][ T5840]        mld_newpack+0x14c/0xc90
[  361.044498][ T5840]        add_grhead+0x5a/0x2a0
[  361.045986][ T5840]        add_grec+0x1452/0x1740
[  361.047536][ T5840]        mld_send_report+0x1ed/0x380
[  361.049158][ T5840]        ipv6_mc_netdev_event+0x1b7/0x5a0
[  361.051253][ T5840]        notifier_call_chain+0x1be/0x400
[  361.053416][ T5840]        call_netdevice_notifiers+0x90/0xd0
[  361.055213][ T5840]        bond_resend_igmp_join_requests_delayed+0x61/0x170
[  361.057403][ T5840]        process_scheduled_works+0xb6e/0x18c0
[  361.059269][ T5840]        worker_thread+0xa53/0xfc0
[  361.060893][ T5840]        kthread+0x388/0x470
[  361.062337][ T5840]        ret_from_fork+0x51e/0xb90
[  361.063901][ T5840]        ret_from_fork_asm+0x1a/0x30
[  361.065526][ T5840] 
[  361.065526][ T5840] other info that might help us debug this:
[  361.065526][ T5840] 
[  361.068631][ T5840] Chain exists of:
[  361.068631][ T5840]   fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock
[  361.068631][ T5840] 
[  361.072578][ T5840]  Possible unsafe locking scenario:
[  361.072578][ T5840] 
[  361.074854][ T5840]        CPU0                    CPU1
[  361.076486][ T5840]        ----                    ----
[  361.078157][ T5840]   lock(&idev->mc_lock);
[  361.079497][ T5840]                                lock(sk_lock-AF_INET6);
[  361.081726][ T5840]                                lock(&idev->mc_lock);
[  361.084316][ T5840]   lock(fs_reclaim);
[  361.085760][ T5840] 
[  361.085760][ T5840]  *** DEADLOCK ***
[  361.085760][ T5840] 
[  361.088346][ T5840] 4 locks held by kworker/u8:3/5840:
[  361.090035][ T5840]  #0: ffff88816be4e948 ((wq_completion)bond64){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  361.093650][ T5840]  #1: ffffc90006d2fc40 ((work_completion)(&(&bond->mcast_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  361.098284][ T5840]  #2: ffffffff8fbcf1c8 (rtnl_mutex){+.+.}-{4:4}, at: bond_resend_igmp_join_requests_delayed+0x23/0x170
[  361.101704][ T5840]  #3: ffff8881bb77c538 (&idev->mc_lock){+.+.}-{4:4}, at: ipv6_mc_netdev_event+0xe1/0x5a0
[  361.105337][ T5840] 
[  361.105337][ T5840] stack backtrace:
[  361.107743][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  361.107759][ T5840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  361.107767][ T5840] Workqueue: bond64 bond_resend_igmp_join_requests_delayed
[  361.107788][ T5840] Call Trace:
[  361.107794][ T5840]  <TASK>
[  361.107800][ T5840]  dump_stack_lvl+0xe8/0x150
[  361.107817][ T5840]  print_circular_bug+0x2e1/0x300
[  361.107836][ T5840]  check_noncircular+0x12e/0x150
[  361.107855][ T5840]  __lock_acquire+0x15a5/0x2cf0
[  361.107871][ T5840]  ? lockdep_unlock+0x5d/0xd0
[  361.107883][ T5840]  ? __lock_acquire+0x146e/0x2cf0
[  361.107901][ T5840]  lock_acquire+0xf0/0x2e0
[  361.107915][ T5840]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  361.107954][ T5840]  fs_reclaim_acquire+0x71/0x100
[  361.107975][ T5840]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  361.107987][ T5840]  kmem_cache_alloc_node_noprof+0x4a/0x690
[  361.108000][ T5840]  ? __alloc_skb+0x1d0/0x7d0
[  361.108011][ T5840]  ? __local_bh_enable_ip+0xd0/0x130
[  361.108027][ T5840]  __alloc_skb+0x1d0/0x7d0
[  361.108040][ T5840]  mld_newpack+0x14c/0xc90
[  361.108054][ T5840]  ? __pfx___mutex_trylock_common+0x10/0x10
[  361.108072][ T5840]  ? __pfx_mld_newpack+0x10/0x10
[  361.108083][ T5840]  ? rcu_is_watching+0x15/0xb0
[  361.108099][ T5840]  ? trace_contention_end+0x3d/0x150
[  361.108117][ T5840]  ? __mutex_lock+0x319/0x1300
[  361.108133][ T5840]  add_grhead+0x5a/0x2a0
[  361.108144][ T5840]  ? add_grec+0x1360/0x1740
[  361.108156][ T5840]  add_grec+0x1452/0x1740
[  361.108168][ T5840]  ? __pfx___mutex_lock+0x10/0x10
[  361.108186][ T5840]  mld_send_report+0x1ed/0x380
[  361.108200][ T5840]  ipv6_mc_netdev_event+0x1b7/0x5a0
[  361.108214][ T5840]  notifier_call_chain+0x1be/0x400
[  361.108233][ T5840]  call_netdevice_notifiers+0x90/0xd0
[  361.108250][ T5840]  ? __pfx_call_netdevice_notifiers+0x10/0x10
[  361.108268][ T5840]  bond_resend_igmp_join_requests_delayed+0x61/0x170
[  361.108282][ T5840]  ? process_scheduled_works+0xa8d/0x18c0
[  361.108297][ T5840]  process_scheduled_works+0xb6e/0x18c0
[  361.108316][ T5840]  ? __pfx_process_scheduled_works+0x10/0x10
[  361.108331][ T5840]  ? assign_work+0x3d5/0x5e0
[  361.108345][ T5840]  worker_thread+0xa53/0xfc0
[  361.108365][ T5840]  kthread+0x388/0x470
[  361.108375][ T5840]  ? __pfx_worker_thread+0x10/0x10
[  361.108388][ T5840]  ? __pfx_kthread+0x10/0x10
[  361.108399][ T5840]  ret_from_fork+0x51e/0xb90
[  361.108414][ T5840]  ? __pfx_ret_from_fork+0x10/0x10
[  361.108429][ T5840]  ? __switch_to+0xc7d/0x1450
[  361.108441][ T5840]  ? __pfx_kthread+0x10/0x10
[  361.108452][ T5840]  ret_from_fork_asm+0x1a/0x30
[  361.108471][ T5840]  </TASK>
[  361.225732][   T11] block nbd1: Possible stuck request ffff88810ac10000: control (read@0,1024B). Runtime 270 seconds
[  361.229009][   T11] block nbd1: Possible stuck request ffff88810ac10200: control (read@1024,1024B). Runtime 270 seconds
[  361.233352][   T11] block nbd1: Possible stuck request ffff88810ac10400: control (read@2048,1024B). Runtime 270 seconds
[  361.237270][   T11] block nbd1: Possible stuck request ffff88810ac10600: control (read@3072,1024B). Runtime 270 seconds
[  362.282414][ T1231] block nbd11: Possible stuck request ffff88810af40000: control (read@0,1024B). Runtime 210 seconds
[  362.286804][ T1231] block nbd11: Possible stuck request ffff88810af40200: control (read@1024,1024B). Runtime 210 seconds
[  362.291140][ T1231] block nbd11: Possible stuck request ffff88810af40400: control (read@2048,1024B). Runtime 210 seconds
[  362.294615][ T1231] block nbd11: Possible stuck request ffff88810af40600: control (read@3072,1024B). Runtime 210 seconds
[  363.554678][  T124] block nbd4: Possible stuck request ffff88810ad00000: control (read@0,1024B). Runtime 240 seconds
[  363.557992][  T124] block nbd4: Possible stuck request ffff88810ad00200: control (read@1024,1024B). Runtime 240 seconds
[  363.561564][  T124] block nbd4: Possible stuck request ffff88810ad00400: control (read@2048,1024B). Runtime 240 seconds
[  363.565176][  T124] block nbd4: Possible stuck request ffff88810ad00600: control (read@3072,1024B). Runtime 240 seconds
[  364.192852][  T124] block nbd5: Possible stuck request ffff88810ad60000: control (read@0,1024B). Runtime 240 seconds
[  364.195988][  T124] block nbd5: Possible stuck request ffff88810ad60200: control (read@1024,1024B). Runtime 240 seconds
[  364.199447][  T124] block nbd5: Possible stuck request ffff88810ad60400: control (read@2048,1024B). Runtime 240 seconds
[  364.203928][  T124] block nbd5: Possible stuck request ffff88810ad60600: control (read@3072,1024B). Runtime 240 seconds
[  364.580022][ T5256] udevd[5256]: worker [10108] /devices/virtual/block/nbd12 timeout; kill it
[  364.583663][ T5256] udevd[5256]: seq 23592 '/devices/virtual/block/nbd12' killed
[  364.586825][ T5256] udevd[5256]: worker [8987] /devices/virtual/block/nbd6 timeout; kill it
[  364.590350][ T5256] udevd[5256]: seq 20147 '/devices/virtual/block/nbd6' killed
[  364.592776][ T5256] udevd[5256]: worker [5813] /devices/virtual/block/nbd0 timeout; kill it
[  364.595680][ T5256] udevd[5256]: seq 12221 '/devices/virtual/block/nbd0' killed
[  364.597968][ T5256] udevd[5256]: worker [9652] /devices/virtual/block/nbd9 timeout; kill it
[  364.600503][ T5256] udevd[5256]: seq 22895 '/devices/virtual/block/nbd9' killed
[  364.602859][ T5256] udevd[5256]: worker [9552] /devices/virtual/block/nbd8 timeout; kill it
[  364.605494][ T5256] udevd[5256]: seq 21871 '/devices/virtual/block/nbd8' killed
[  366.763403][ T1231] block nbd12: Possible stuck request ffff88810af68000: control (read@0,1024B). Runtime 210 seconds
[  366.767019][ T1231] block nbd12: Possible stuck request ffff88810af68200: control (read@1024,1024B). Runtime 210 seconds
[  366.770546][ T1231] block nbd12: Possible stuck request ffff88810af68400: control (read@2048,1024B). Runtime 210 seconds
[  366.774326][ T1231] block nbd12: Possible stuck request ffff88810af68600: control (read@3072,1024B). Runtime 210 seconds
