last executing test programs:

43.458739268s ago: executing program 2 (id=7765):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x88200, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x164}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x180)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x103}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000080)=0x5)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x9, 0x21, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x35efc0a5, 0x0, 0x0, 0x0, 0x70}, {}, {}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x4c3b, 0x1006, &(0x7f0000001bc0)=""/4102, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000017c0)={0x4, 0x0, 0xbb5, 0x4}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001800)=[{0x5, 0x800007, 0x10, 0xa}, {0x2, 0xfffffffd, 0xb, 0x9}, {0x3, 0x1, 0x10, 0x3}, {0x1, 0x4, 0xd, 0x8}, {0x5, 0x2, 0x4, 0xb}, {0x4, 0x3, 0x9, 0xb}, {0x0, 0x1, 0x7, 0x3}, {0x2, 0x5, 0x2, 0x5}], 0x10, 0x4e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001980)={&(0x7f0000000400)='xprtrdma_reply\x00', r8, 0x0, 0x47a}, 0x18)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={r7, 0x39, 0x8, 0x1, 0xb, 0x7fff}, &(0x7f0000000140)=0x14)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0)
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={@null, 0x4, 'vlan1\x00'})
r9 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x44}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="6a5800fa00000000240012800b000168627269646765000014000280050016cea9c0f1fa8c94cbfaa03dc21a6300030000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x10000}, 0x4000000)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f00000019c0)={<r11=>r7, 0xa3, "8bc60e26c578b22f21abbf16491772862023141aa05a04693ee9797dd5700c950bfec247482e514371796bb1e0a7924d607298ab7a97591617d1124d67ddca1d88f074523a3742e44da41c7a6dc27d9dc05294f1a8b9cd9578196e5557aea5d53ea2e23c350fe9d611d0b4865d7ec2d24acd1b748cdc63b91dddc63c53e571e79bb98ddfbbf08e6982d534bcff135c076be0814c4fb823d8d142438daa9017095c773f"}, &(0x7f0000001880)=0xab)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000001a80)={r11, 0x4}, &(0x7f0000001ac0)=0x8)
sendmsg$nl_route(r9, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@mpls_newroute={0x1c, 0x18, 0x10, 0x70bd29, 0x25dfdbfc, {0x1c, 0x80, 0x1fbe864fed8248c0, 0x3, 0x0, 0x0, 0xfd, 0x3, 0x400}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x49643dea468762d3)

43.309000182s ago: executing program 2 (id=7767):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c00028008000340000000e108000140000000130500020094000000080006400000000208000440000000140900010073797a30000000000900020073797a"], 0x94}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f00000000c0)={0x1, 0x1, 0x36})
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x40004)
pipe(&(0x7f0000000040))
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x807, @broadcast, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r3, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x3, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/19, 0x13}, 0xe0000003}], 0x1, 0x102, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000540)=ANY=[@ANYBLOB="320400000000000001080000000000000000c24b6b3409840cee4104c20400000005c20400000000a513bb67f4b4d83ee034d33bf2d8605fee05c7e67bee38cde2a1c375178cc80c2e69ba0cb30e0f93fa91fde093b2590a3916e367e6efe61dae2fc1e1f3a32f0d7162001c86419722acb2f3508b52a57cb2"], 0x28)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="85200000020000008510000000000000b7080000000000007b8af8ff00000000b708000040f735c27b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000108000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18)
socket$phonet(0x23, 0x2, 0x1)
bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
close(0x3)
socket$kcm(0x2, 0xa, 0x2)

43.167036078s ago: executing program 2 (id=7769):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x2000}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000340)={0x7f}, 0x8)

43.108974716s ago: executing program 2 (id=7771):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000000010104000000000000000002000000240002801400018008000100e000000108000264f9aff012b4ad5d02800500010000000008040006cadeadeac4a733f3e5822c53907da618b1bc04c3c8075495c5a5da8ba5a035655d93a214bffc0a20636375e9158572e6370f49cdc82e2fcb9165a8910f044d6c6a60dea6e54e879f62f7055da2e298c1e0bd5f442e066f14827c8a8de35e471521ed4b51515d143bd85d7de4f6c3d41cf582ea8fe237a0fa3479a8a31b873ecfda46b15a95efcf660c1b"], 0x3c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="500000000001010400000000000000000a0000003c0002800c00028005000100060000002c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000447fd35ee9e40b0f"], 0x50}, 0x1, 0x0, 0x0, 0x24044055}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000000010104000000000000000002000000240002801400018008000100e000000108000264f9aff012b4ad5d02800500010000000008040006cadeadeac4a733f3e5822c53907da618b1bc04c3c8075495c5a5da8ba5a035655d93a214bffc0a20636375e9158572e6370f49cdc82e2fcb9165a8910f044d6c6a60dea6e54e879f62f7055da2e298c1e0bd5f442e066f14827c8a8de35e471521ed4b51515d143bd85d7de4f6c3d41cf582ea8fe237a0fa3479a8a31b873ecfda46b15a95efcf660c1b"], 0x3c}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="500000000001010400000000000000000a0000003c0002800c00028005000100060000002c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000447fd35ee9e40b0f"], 0x50}, 0x1, 0x0, 0x0, 0x24044055}, 0x0) (async)

42.979480053s ago: executing program 2 (id=7775):
r0 = socket(0x11, 0x3, 0xb)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4c)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r8, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}]}}}, @IFLA_MTU={0x8, 0x4, 0x800}]}, 0x40}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r11, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1)
getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r12, &(0x7f0000000380), 0x0}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180))
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r13, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYBLOB="da0d79ffba59734493f6c759502e5b6a0f8ae66648d3df5588e05f1b0d570c5dccfcba4784fb199ded01227bb6c3930b9fe2d52035246330f1520b9ef61a8c99e7bbeae2be31aa0d507a62f844beb05db5956763aea13526d80ca7c3b8c23d003af742753f3796d552c3cc816e8821353df880428c0c88a1149c"], 0x32600)
r14 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r14, 0x65, 0x8, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0)

42.742225932s ago: executing program 2 (id=7780):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x601, 0x70bd27, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x24}, @in=@empty, 0x4e22, 0xa, 0x4e23, 0x6, 0x2, 0x0, 0xa0}, {@in=@broadcast, 0x4d3, 0xff}, @in=@private=0xa0100ff, {0x4, 0x9e8, 0x1, 0x100000000, 0x8, 0xbfda, 0x4}, {0x7, 0x7, 0x1000, 0x902}, {0x4, 0x8, 0x7}, 0x3, 0x0, 0x2, 0x0, 0xe, 0x8}}, 0xf0}, 0x1, 0x0, 0x0, 0x4001}, 0x850)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x803, 0x6)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740"], 0x138}}, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x0)

42.467924671s ago: executing program 32 (id=7780):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x601, 0x70bd27, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x24}, @in=@empty, 0x4e22, 0xa, 0x4e23, 0x6, 0x2, 0x0, 0xa0}, {@in=@broadcast, 0x4d3, 0xff}, @in=@private=0xa0100ff, {0x4, 0x9e8, 0x1, 0x100000000, 0x8, 0xbfda, 0x4}, {0x7, 0x7, 0x1000, 0x902}, {0x4, 0x8, 0x7}, 0x3, 0x0, 0x2, 0x0, 0xe, 0x8}}, 0xf0}, 0x1, 0x0, 0x0, 0x4001}, 0x850)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x803, 0x6)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740"], 0x138}}, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x0)

18.426136661s ago: executing program 3 (id=8099):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x14, &(0x7f00000002c0)="1a00000002000000", 0x8) (async)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) (async)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r4, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'xfrm0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x51)

18.418384641s ago: executing program 3 (id=8101):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0xde, &(0x7f0000000040)=0x1)
vmsplice(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="5ba5c971cf0cd752d43e4c08fca410ac909686f94a85f79f4ac50726245913efad40559641bedd066c9747588492f683e576f4e06206188ffa715885407ca396ead572c2889036892a5827eefc5b213d69d8fdccf982cd2d4785c006aa825f873b194de19ecce7864ba4e10768290280e595dfe8e7f1711d035ebc4e95500135eb3aff1804f6ff5801248ce51e01294c0400d106d0f3a0333f2bc7d3e26cdc8c16aa8572f45e56d3ab8991689473b7df74c954393298d0", 0xb7}, {&(0x7f0000000140)="41d2736f59c88fc822fa11729d691a735e11716850b7a88813d4c10edba6f8347898e5fabf48bf90759edb86c342d9cadb663c2e64be86e1ec60d1fec432c9f945c49cd6f2d208ae6e4d56e806dfc57a2ae85685e4dd17a92ed23386fd84a2012225cb8a888b819afb4a2ac058f20d0c2ffc78edcce1c74a58808f0e3aaf9c1036f7adddab", 0x85}, {&(0x7f0000000200)="002965cd2c3684291e50b20a518ffe0563fd55d742a5a04f6f3ee2a8dee530eedc9b6bb13207be981811b832529a1a903e61738d44e9c8e177c4d8866da31d0704d506d61d6b21896ac58bf97f5ac598d0f57ba372564184288e5659e6b7c426e23f54b243b75e8c28d97afea689497a45d452b814d31af0bb8bd0623f08e466c3f0ee9f78ba06f8f83131a5d62e85dfb1eabc97232fadf1659939fc", 0x9c}, {&(0x7f00000002c0)="e28a5fdacf83c4afe8e241c2f0b7ef479a45c90e6c56dd62117b316b", 0x1c}], 0x4, 0xb)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf8, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x4008080)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000500))
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000580)=0x8001, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x0, 0x8, 0x8, @empty, @local, 0x700, 0x8, 0x1, 0x7}})
sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f2, 0x10, 0x70bd26, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000800)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000840)=<r7=>0x0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '^\'$}-'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x30}}, 0x4)
r8 = accept4(r0, &(0x7f0000000940)=@x25={0x9, @remote}, &(0x7f00000009c0)=0x80, 0x80000)
setsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, &(0x7f0000000a00)=0x1, 0x4)
recvfrom(r2, &(0x7f0000000a40)=""/27, 0x1b, 0x1, &(0x7f0000000a80)=@nfc_llcp={0x27, r7, 0x0, 0x5, 0x1, 0x2, "113a458c44d4e028da35520b4d6bea8599d9ae7b17340b67888d9890c07ed86b06729416ad848b20926bd1e57740f356e6c53edd5bde3abb438a8b482236d9", 0x1b}, 0x80)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000b00)={<r9=>r1, 0x4, 0x7f, 0x4})
r10 = accept(r8, 0x0, &(0x7f0000000b40))
recvmsg$kcm(r10, &(0x7f0000001e40)={&(0x7f0000000b80)=@phonet, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000c00)=""/95, 0x5f}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/234, 0xea}, {&(0x7f0000001d80)=""/73, 0x49}], 0x4}, 0x40010020)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000001e80)={'batadv_slave_0\x00'})
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000001f00)=<r12=>0x0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x38, r5, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004005}, 0x20000000)
sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x7}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x4c010)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000002140), r8)
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x38, r13, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x40000)
sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x100}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xfb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x800)

18.049191425s ago: executing program 0 (id=8104):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x56, "644e5d9a356e0a488f471457df1e74b62b73a96773a24989f9730f5052478031b708800887f85e11ed560cca42a4112dea95be6c2ec26668885c7b3e9481a32ea8befde87782539e564fcb80ff47a7f1ca3d248b31bf"}, &(0x7f0000000080)=0x7a)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0)=0x5, 0x4) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000001fc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f80)={&(0x7f00000001c0)={0x1d88, r3, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6c, 0x32}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x20, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x67}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1b30, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1b24, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xee}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_PATTERN={0x76, 0x2, "6cf2e1cd8da660a54042787d9fd56adfa194c4db6c7376fa0d4e3ea5c80396af27ae8e9c12c2c5418d8963a40c89462465228af6ee6a728b28f34e86a5cf375bace1148cce86b14f7478008cc7bb0d0c9125f3b91ae952b31857c27b00f86ccd0289d0ea99d8f56547a444333a73877b8e28"}, @NL80211_PKTPAT_MASK={0xbe, 0x1, "5c3edec44969635f75d29ba4e62cfe2d4eda2482ddb4a7b0bfa75f5fa4192878741bf91c9ecf40ea7bfd1373b0b4570742c0ee6fad805b928e687e27f57e842830080fa6c55799b89426fe7a532b48e84e7a8cbd639f693a4672d235e8a2f0d795ea3d6c9d2e92283df0c73be92000abfa1fb966726164aeae5572b388e1b387532b3c89ab5c4fb5bafdeb578717101ef19f008ec89c312683140c9bb5d108a8de4e4d11c2dd2cc337551d591101c7d48c8c7cc5f6a5842c07d2"}, @NL80211_PKTPAT_MASK={0xd6, 0x1, "fb806eba085be7e059d32dd285367ec96a466704b219789fcf4f2a9d85419502a2bbf83143cf3b15948a8304a771f51df5bd68ef6596b6d9fbc4f03973f55333fac94873dcf87070f2107c9e4eab84e8b9a4e5d08f878dee9034334438958f61ccbbad92d3f02fef7dff100bdc7f3e776540d2e3d7f81bc3e4c2f9bbf233e0cf2e804500539ab299ff06ca1893a3b8995d400bc74e0347a9414b9ac3f4ee9143119096f69653cfcca7c962f63fe48da7af839058c8f06950d5d1b2aa81c87b512efbf3034e542dc27ab92501d721f662ac3d"}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x63, 0x1, "aace448e17eb8a833240d02fb5c9a9354d3310ed43c593965689b9ad3de870cc3fcd34621881bf36e4326e9405b017e2b37218f3ba3c88556ad191ae376ef1129a0aa7b94877d4135fef8ce592b01cb843e5e6d6451a399706adafddaa5865"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3ff}]}, {0x1a0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x3b, 0x1, "e1bd5e6d54fd221dd6927d076b08c037addb072b8b9fc6e33acfa4c101caeae404dacc48754de0fcc11571b92bf52e3257ce28bbd3db44"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_PATTERN={0x83, 0x2, "74db1541c2fffe26d1fb5e14d83c055531b162bc7cdcf081eff21cdf1d351274aa3e038e740629060f675d01c2a89f2f2808dae44ee944625ed9d0bd111d6ba184aae6bc2af9e11a7f5b49276abce380457c2d0a142d62598bf2b79209a4a8ed229b7b17a288ff91d83d0ba6d7813131c5e9b2f69d04235aec40792e81d1e8"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_PATTERN={0xca, 0x2, "33b2b9874bab22c6792aaa29985949059daf911610f99e4cd1894c8ec524922bfb753271e733c7b176f13ff1f88fe7f959d777294db08e1b4a5b5a0a32612c1876afe40276a9bf508da18789a2f4430cdda51866b289fa42464260ed87bfd2fd8b4589f5904b9976609ceb4b271437182169921dc0e23eee1f89e61b93f1bce69078e54b08523e9e4cd156e317b9be0c94ddbfa0f3f1af2129177f54e89bcbc8e564da2d818e841205864edfc342958c772744cbbfa747a436953ea8fe3e571ebf3c3643e5c2"}]}, {0x140, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x88, 0x1, "31848c256e56aff056481c36c822a09b3f41f26822e0057e3e7665e4bb2968daf9222f3988c84fafa5236891a72a74d53687c50a5bd60f783ac1bac9a5a9dae5a9a829a7b633b18270476e394183e3cd37de80c1cbd9a3d49a059a39d28ab82982842ee0aecfa494f14426a2097a4f1ddd8c450c2efdc870cebc734ec56fe98282484092"}, @NL80211_PKTPAT_MASK={0x9b, 0x1, "4941d219c8576ccd31fef863a6b2862b293633a1f96a0439f467a0e9b089ee7d08eeb75b77680c1eaf70a54a4241e958c1c7d8f15f10e4b295bbde8559a9a70c0903bf1fe44aac5bc0f97097b2b0eb14fc832eb5e34116c5619b42f247b00734b8a5adecfd6867bcec62197453db371e2e661c72f3d7929a527806e5c11be26f1c4ccee36dcbb5e3e749a24b4730e04865fc54fe351445"}, @NL80211_PKTPAT_MASK={0xe, 0x1, "0c8da6d367a664c99702"}, @NL80211_PKTPAT_OFFSET={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6000}]}, {0x12c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x12, 0x2, "63ff0043e62cd1f0d359986353d8"}, @NL80211_PKTPAT_MASK={0x15, 0x1, "53bceaee6b37247eb3f3fe8132bd5423db"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_PATTERN={0xe3, 0x2, "6dbc351d343ccf8c3d5cab13fc94c0e19a1c1e6506fde341f896af783cd2baef5bc5ccf4df37aadc9a689b277b2e6f017e9e55d13f8447fd2033658d9c4462f3290409d6c0c8b50c649dd5e64b2e96abf7022bc2efc5c173836bdaf8f34b02834301b26f86a0bbf1e7db69a74df280e0b9e4051fd2f9d9ac44576272651e39c158d858845078e65aca45830eed385334058cef01a97484da3a516c70475f9c4d981fc71a781faac60e613c0f92db8597a93cf041be47cdbcbbcf1543474d26f265fbe35552902453442a662ce7308cb24aaae5bedfb74b448a6cd3ec532a99"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7fffffff}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x40}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x26, 0x2, "eac4657e98b199097a31ca38051f9c29efff5b8947a1dec55de485bfefdf1c5b6acd"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_MASK={0x81, 0x1, "d60c8c7a14ee4f790d1859ab3ffc8d6ba1d0797bcdbc335d849075fae8a434491092286313868b1e015beef1ff70c07d946f69c4c059978f20c3bad6291e60241d8235243d6bb7a87b075bdb9765572555e0373b314d113d826a7ff787994ccb26e512b2b7e93d36e533c4e023ef2b1af63b1253e9d69c5d696df572ec"}]}, {0x1348, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xe1, 0x1, "e0d9bbedb9551143434a813283a7a458fdaaa9e7300eab4d6175b4436458d376efa4082b390645489b047c5a95b7769ba2c600ed90d19cb334b827eec658f7c6e9586219a683755fbd7f786231321031b809322d30f97f71171610682a14ae0a7977fc671ff02e173234d133bd15a2cc039c91a06955faed7f5a6b10e8924fd9299d1f2203f4d017218e161ee036feddbab032960c9f3d7ec029f6f355de50715acbe7861b5c50d96affefffe49830bbc8ed8d994b9c136c543e760a85e32560957361bb5186a15a33de0cddfaf1314bef5257a2c377bfe18694575ed5"}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_MASK={0xfc, 0x1, "4405d82ab6262c9526bcae8f946ec4e0960062299f11e5c3cad20d0522884ca909e1a5e3936e164661c0ea162f80561f94219143d9320e49fa284532a8833d4004ecb4c520b554e37201806ddb7ebbcd2bb8951b9807b1d9854358afc2abfd361eeb19f26d086f9db74e6a2f9c89c8ab096241484c1a13657834ba868747ff24fbfccafacad9d442f5ea4f9f1ca471f200bc5b9798a851e9413097f27a94f036b87f5171802ed1d507fc4a33b28d6b52465cb5ef4a6f538b9d8c2481d3d5af194ad7364f82615fea05a82f094c61ab6779aefe33ff7d339d8edf47b044bf43de197790d059f8e1688476d064ebe47d446395f4a95ce4078c"}, @NL80211_PKTPAT_MASK={0x4}, @NL80211_PKTPAT_MASK={0x69, 0x1, "959be1cd0fb1747e85e07c91e60e2da812a07b991eb4b82056db59f6a49cdb66787e998ca9887e8e0de2af98104d6b8fd9ee948182fb59a604d0636a0cc18191fe2508a69e1651a0cfeb6596adf7d52e178098009c99accf5f11268e5c5367d83e7815a823"}, @NL80211_PKTPAT_MASK={0xf0, 0x1, "ea1f5a7fd34726b48dfb76e5f83380ce7ad2e17adc1ec585546bef891c4897721eb61030eef4c8a9863f26762726e1d0e92c7cd9a301c90cf905ebbf6de1c163e9c5d61382fe0ac086a0255921e1b18e6733781f2f7d3331d800fb205b8c312744b10112b785385bc5460a202dc8248e2d41f60362368877824daa93b8f330472fac4b36cd018ae3fd2500d73edd5c017b86de84a7df6e7ab72ca11ac3fc18a63b07c9042d9d89de68ed24adc4f3f7b6255d97f40e5ebe0acbe66dce46cdf45c20d37d684a2058567b5e7f3c5f9b1f6f638f824793d5444ad465cb64f412e7b7e1d6a8732a1af0555c4bfa91"}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x59, 0x2, "4415bebc4b29403d24f2bc8ebe7d07ea243cdf7b31783f001002f5ccc43d12425d6d164de68d157989a0639b6325540f2c0f7f7cb022329f85d8770a6ad550a348ab1b88bf9352a6e1aefca1c29771abb3a2923c5d"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7ff}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1f4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x1d0, 0x12, 0x0, 0x1, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}, @NL80211_ATTR_IE={0xd3, 0x2a, [@preq={0x82, 0x36, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x6, 0x9, 0x3, @broadcast, 0x3, @value=@broadcast, 0x80000000, 0x6, 0x2, [{{0x1, 0x0, 0x1}, @device_a, 0x724}, {{0x1}, @device_b, 0x1}]}}, @supported_rates={0x1, 0x2, [{0x1b}, {0x46}]}, @dsss={0x3, 0x1, 0xb8}, @perr={0x84, 0x8e, {0x9, 0x8, [{{}, @device_b, 0x5, @void, 0x14}, {{0x0, 0x1}, @device_b, 0x83, @value=@device_b, 0x3c}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x1}, {{0x0, 0x1}, @broadcast, 0x80000000, @value=@device_b, 0x3e}, {{}, @broadcast, 0x8, @void, 0xb}, {{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x1d}, {{0x0, 0x1}, @device_b, 0x101, @value=@device_b, 0x36}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x2a}]}}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xff}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0xdc, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xe, 0x2, "fa1365acb020c0f0e3f1"}, @NL80211_BAND_60GHZ={0xc7, 0x2, "baee314af51eb4cca025d7be017c0315aa433ee610434d3f7fc2cf314f4d26ffe5dbc96dc0844594eab27d2b0b12f294fcb8b8515613b57475167fc8ac93a464ab88bb846d0dcc003761acd78cf2379cc3a141bb397478b8ed14c1b4464eddfe0f64a4585ba5921338968aca295b4baa43bb759b9e799dbeca5598470f14cf741ea82803b03901aeb70b916cee31e6fa0593df75cd175789fecacd1085fa259fd7f77e99d670dffb96dc1a67f56e145648897ccf7d1217dcbf93a099610c404e62b5bb"}]}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x18, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xb, 0xa, "a9bed53ff56c5e"}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x6}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}]}, 0x1d88}, 0x1, 0x0, 0x0, 0x18000}, 0x48040) (async)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x50, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x62}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xa4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x4000090) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000002140)={<r5=>0x0, 0x9, 0x30, 0x0, 0x3ff}, &(0x7f0000002180)=0x18) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002200), r2)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x14, r6, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc0)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000002300)={r5, 0x1, 0x34, "9a291b00236b845f4d5d01b92c0f35b2707fbd3e638f4ce68c492e1457c4b8d05cd2bbae3538d3091d1f03a31d35127308ba6fab"}, 0x3c) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002380), r7)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x30, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}}, 0x40000) (async, rerun: 32)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002480)={0x9}, 0x8) (rerun: 32)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r8, &(0x7f00000024c0)={0x20000002})
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002500)={0x0, 0x2, 0x5}) (async)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000002540)={0x3, 0x200, 0x8002, 0xf, 0x6, 0x4, 0x101, 0x2, <r11=>r5}, &(0x7f0000002580)=0x20)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f00000025c0)={0x9, 0x4, 0x200, 0x0, 0x1d4a630, 0x6, 0x9, 0x7, r11}, &(0x7f0000002600)=0x20) (async)
r12 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r12, 0x84, 0x16, &(0x7f0000002640)={0x9, [0xfff7, 0xd0ff, 0x1, 0x6, 0x1, 0x2, 0xfc00, 0xb, 0xbed]}, 0x16) (async)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002900)={0x6, 0x11, &(0x7f0000002680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4c5, 0x0, 0x0, 0x0, 0x4ff3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@generic={0x7, 0x8, 0x7, 0x1, 0xfffffbff}, @generic={0x4a, 0x6, 0xd, 0xfff9, 0x10a8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002740)='syzkaller\x00', 0x8001, 0x9b, &(0x7f0000002780)=""/155, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002840)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000002880)={0x4, 0x0, 0x0, 0xf6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000028c0)=[0x1, r7], 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002c80)={r13, 0xe0, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000029c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000002a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f0000002a80)=[{}], 0x8, 0x10, &(0x7f0000002ac0), &(0x7f0000002b00), 0x8, 0x3d, 0x8, 0x8, &(0x7f0000002b40)}}, 0x10)
recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000002cc0)=@generic, 0x80, &(0x7f0000003040)=[{&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/168, 0xa8}, {&(0x7f0000002e40)=""/123, 0x7b}, {&(0x7f0000002ec0)=""/63, 0x3f}, {&(0x7f0000002f00)=""/28, 0x1c}, {&(0x7f0000002f40)=""/241, 0xf1}], 0x6, &(0x7f00000030c0)=""/94, 0x5e}, 0x42}, {{&(0x7f0000003140)=@alg, 0x80, &(0x7f0000003340)=[{&(0x7f00000031c0)=""/47, 0x2f}, {&(0x7f0000003200)=""/81, 0x51}, {&(0x7f0000003280)=""/152, 0x98}], 0x3, &(0x7f0000003380)=""/86, 0x56}, 0x1aa1bf31}, {{&(0x7f0000003400)=@rc={0x1f, @none}, 0x80, &(0x7f0000004640)=[{&(0x7f0000003480)=""/133, 0x85}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/186, 0xba}, {&(0x7f0000004600)=""/43, 0x2b}], 0x4, &(0x7f0000004680)=""/225, 0xe1}, 0x8b5}], 0x3, 0x20, &(0x7f0000004840)={0x0, 0x989680})
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000004880)={r5, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x176}, &(0x7f0000004940)=0x90)

17.989416231s ago: executing program 0 (id=8105):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
r0 = socket(0x8, 0x0, 0x8000)
socket(0x1, 0x2, 0x0) (async)
r1 = socket(0x1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0xa, 0x300) (async)
socket$packet(0x11, 0xa, 0x300)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r4, 0x28, 0x1, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) (async)
getsockopt(r4, 0x28, 0x1, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36)
r5 = getpid()
sendmmsg$unix(r1, &(0x7f0000000dc0)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}], 0x50, 0x208d}}], 0x2, 0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r5) (async)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r5)
ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0)
getpeername$netrom(r0, 0x0, 0x0)

17.392749906s ago: executing program 3 (id=8107):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
epoll_create1(0x80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket$kcm(0x2, 0x1, 0x84)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$sock_attach_bpf(r2, 0x84, 0x84, &(0x7f0000000000), 0x90)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000480)='GPL\x00', 0xdfc, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94)
write$tun(0xffffffffffffffff, 0x0, 0x3e)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r4, 0x5452, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r5, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe)
listen(r5, 0x44)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000280)=0x1, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xd, 0xefff, 0x2, 0x100, 0x200003f, 0x85000040})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0xf)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="28120001cd15060b38381f21062cbd7056890004e6b76390dac68a94e40bd21216dd5a97d712b459e1473418a0bd83bdabe3dd2aca648034e34f9595befc4ec99fbfe5bdec3d46f95d4671995296d8e9f36b78933da5262560bc9706dc5d4943cf7867f86b675871822e5651209e846939825d296571b4ffecb0285f22a7627fc469d7f3eaa1e2cf7986e28cfb851eb28091201b29f56d45e33e98bacdeb961ee0b8efba960905204c47f56411b3dce98c9990229b4195ce", @ANYRES32=r9, @ANYBLOB="6b8a00003015010008001d007f400000"], 0x28}}, 0x84)
setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)

17.279299613s ago: executing program 0 (id=8108):
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
unshare(0x6a040000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000)
sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x4a}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x200000000000000) (async)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x200000000000000)
socket(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

16.758074346s ago: executing program 1 (id=8112):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x9}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x2c}}, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000001c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
syz_emit_ethernet(0x7a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x400}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f0000000000)={0x80})

16.689584954s ago: executing program 1 (id=8113):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt(r0, 0x0, 0x9, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', <r3=>0x0, 0x0, 0x7, 0x3, 0x320e, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x40, 0x7, 0x380, 0x8}})
sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001800010000000000000000001d01080008000900", @ANYRES32=r3, @ANYBLOB="08fa4a00010000e003000060cb825b508c88935ca17bd450e18e8ccc96a2b3e622335456287034d89bd4d3f52c64c3f436459ce85e20bf760e570d8a7933cb4bc21787f5ecdf7d823c878cc8f4c8067c3cd431033adc9fffd9c0078d3daf97861222f03b2556127c455b9028894fb21349aba682"], 0x28}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740000000001400068008000100ac"], 0x78}}, 0x0)

16.577003084s ago: executing program 1 (id=8114):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x2061, 0x0) (async)
unshare(0xf80)

16.574862329s ago: executing program 3 (id=8115):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0), 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x1, r1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f00000002c0), &(0x7f0000000400)=r3}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0xff}, [@RTA_MARK={0x8, 0x10, 0x6}]}, 0x24}}, 0x8000)
sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="06000000d109e342df0eabe755bd194540112471dc9d92d26db3615eeb1c6427bd001809e0f0020853c37d1493fe8a7b5996e9b00d0c104dc9d6a76c8afeed196366cfc431d3efd4d74d5ce2d2c5d0d668443c56d6969ea98381f0e74ba886e4", @ANYRES16=r5, @ANYBLOB="000827bd7000fcdbdf250d00000008000400070000003c000180060002003c000000060004004e2300000c000700170000000c00000008000800070000000c0007000000000020000000060002000600000008000600d10e000008000500090000000c00028008000900aab2000008000500030000000c00038006000400a2f10000140003800500080005000000060007004e2000000800050001010000"], 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x40004)

16.574244384s ago: executing program 1 (id=8116):
socket$tipc(0x1e, 0x5, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0x10)
vmsplice(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000140)="438d9ea065cba49945c7638ceae1ae0ce81d2d58efd38019218141da7ee97f61370daaa59e5e4edee1adfb43605d7933647892544940be4a59f9d63d5aff73ce8b498e0e64898f4d38dfcf9a4ab12a254c24c199e882ca2207e036ddacc2ac995e14ad43c4391ecc34effaadb5d6559ea5669139d9c6f29ebe977a497c310a9c40", 0x81}], 0x1, 0x6)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
unshare(0x68040200)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r2 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={<r3=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@remote, 0x35, r3})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl(r4, 0x8916, &(0x7f0000000000))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRES32=r4, @ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r5}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600640006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$caif_seqpacket(0x25, 0x5, 0x5)
connect$caif(r8, &(0x7f0000000e00)=@dgm={0x25, 0x2, 0x9}, 0x18)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002031f000000000000000000000000000800010001000000"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030f0800"/28], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000340))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1bcd000000000000000000000080000000000000", @ANYRES32=r5, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x88)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=r3, @ANYRES16=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030053d63b9163471f0008000000b70400000000faff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20005}, 0x94)

16.50959566s ago: executing program 3 (id=8117):
socket$igmp(0x2, 0x3, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001380)={'syztnl1\x00', 0x0})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000b0000000200000002000093010000000e000000c80000000000000009000000ff00000003000000005f5f615f2e0061003000"], &(0x7f0000001440)=""/96, 0x47, 0x60, 0x0, 0x2}, 0x28)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001580)=@o_path={&(0x7f0000001540)='./file0\x00', 0x0, 0x8, r2}, 0x18)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001600)=@o_path={&(0x7f00000015c0)='./file0\x00', 0x0, 0x4010, r3}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000016c0)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)='%pI4   \x00'}, 0x20)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001700)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0600100000000000000000000000000000000000b6f331821034d8e2e0c51417dbf133ab88eab5422a254ab159c9e374560825f110dcd715462a65a3e230f11b694d62a29784300366fe5a15f3edb3f3fbc2b0c558decbb725ec12ddf09a7d495eca6bc4d6c32485c78bb6758f0df39992c9867b366f5307e02f6fb876c9750059e29c0a7ce06a96f8ea0864a1f24100ddbbe86059d533a56e6bdacb", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="05000000050000000100"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0x0, &(0x7f0000001240), &(0x7f0000001140)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001500)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001800)=[r2, r5, r6, r7, 0xffffffffffffffff, r8], &(0x7f0000001840)=[{0x5, 0x5, 0xf, 0xc}, {0x2, 0x5, 0xf, 0xa}, {0x4, 0x2, 0xf}, {0x0, 0x3, 0x5, 0x5}], 0x10, 0x3}, 0x94)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="080000000000000000000000000000000000000000000000000000006e73c16e532762869cd9c3c190b139bc24e8a2a1bd45dcca87cc9f7f68d55ba680a3eb511d58bb70ac8eb2f453ae041b8492e6209662bd5e3adb0d2ba0e5f3c9c26ff3430b8973882a686cd7cb909fd86d8786003d0b5dfcfeb81e2b8bf9e9db4772a769ae86abb002170ba077622814353ff277c400"/160], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r9}, 0x38)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b0007"], 0xc4}}, 0x0)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r12, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec)
r13 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r13, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)

16.319356727s ago: executing program 0 (id=8118):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000008b14c9d90b3b302c9046af4d67b8607b97ba8e50f71e6c18c3489e0aa02dd315c422721c91ac2925747f042eae2b001b40434e6703798b6a4e3cdc10a0c1335c"], 0x94}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)

16.249012557s ago: executing program 1 (id=8119):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x73f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2d257606}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb}]}]}, 0x64}}, 0x0)

16.248551024s ago: executing program 0 (id=8120):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0xb8, r1, 0x1, 0x70bd28, 0x25dfdbf8, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe498}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc99}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
socket$can_raw(0x1d, 0x3, 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791048000000000079004f000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
r2 = socket$kcm(0x21, 0x2, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e00010000000000020000ac1414"], 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x2810)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000100)=""/218)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r5, 0x200, 0x70bd24, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="a40000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffe00000010c0002808005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0800074000000000100006800c00038004000200"/164], 0xa4}}, 0x0)

16.23644079s ago: executing program 1 (id=8121):
socket(0x1e, 0x4, 0x0)
r0 = socket(0x9, 0x800, 0x0)
socket(0x1e, 0x4, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
unshare(0x68040200)
socket(0x2a, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r3, 0x3f38e000)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)
bind$bt_hci(r4, 0x0, 0x0)
write(r4, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
unshare(0x6020480)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

10.009409613s ago: executing program 0 (id=8122):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@allocspi={0x114, 0x16, 0x101, 0x70bd27, 0x25dfdbfe, {{{@in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0x8001, 0x4e24, 0x4de2, 0xa, 0x80, 0x80, 0x2c}, {@in=@multicast2, 0x4d6, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, {0x309e, 0x6, 0x800, 0x2, 0x8000000000000001, 0x1, 0x6e, 0x8}, {0x1, 0x3, 0x8001, 0x7}, {0x4, 0xf, 0x3}, 0x70bd27, 0x3507, 0xa, 0x1, 0x0, 0x22}, 0x0, 0x100}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e26, @in=@multicast2}}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}]}, 0x98}}, 0x0)

9.999484842s ago: executing program 3 (id=8123):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0xd}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)="d336bd75243cb9a6418e", 0xa}], 0x1000000000000041)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c00028008000340000000e108000140000000130500020094000000080006400000000208000440000000140900010073797a30000000000900020073797a"], 0x94}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f00000000c0)={0x1, 0x1, 0x36}) (async, rerun: 32)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="480000000001f7040000ff0f00000000020000002400018014008008000100e000000108000200e05f00010c00028005000100000000001000058009000100"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40004) (async, rerun: 32)
pipe(&(0x7f0000000040)) (rerun: 32)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x807, @broadcast, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 32)
setsockopt$inet6_int(r5, 0x29, 0x3, 0x0, 0x0) (async, rerun: 32)
recvmmsg(r5, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/19, 0x13}, 0xe4}], 0x1, 0x102, 0x0) (async)
setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000540)=ANY=[@ANYBLOB="320400000000000001080000000000000000c24b6b3409840cee4104c20400000005c20400000000a513bb67f4b4d83ee034d33bf2d8605fee05c7e67bee38cde2a1c375178cc80c2e69ba0cb30e0f93fa91fde093b2590a3916e367e6efe61dae2fc1e1f3a32f0d7162001c86419722acb2f3508b52a57cb2"], 0x28) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="85200000020000008510000000000000b7080000000000007b8af8ff00000000b708000040f735c27b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="000500000800000085000000a50000003c3000010800"/32], &(0x7f0000000000)='syzkaller\x00'}, 0x94)

991.491914ms ago: executing program 33 (id=8122):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@allocspi={0x114, 0x16, 0x101, 0x70bd27, 0x25dfdbfe, {{{@in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0x8001, 0x4e24, 0x4de2, 0xa, 0x80, 0x80, 0x2c}, {@in=@multicast2, 0x4d6, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, {0x309e, 0x6, 0x800, 0x2, 0x8000000000000001, 0x1, 0x6e, 0x8}, {0x1, 0x3, 0x8001, 0x7}, {0x4, 0xf, 0x3}, 0x70bd27, 0x3507, 0xa, 0x1, 0x0, 0x22}, 0x0, 0x100}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e26, @in=@multicast2}}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}]}, 0x98}}, 0x0)

819.764224ms ago: executing program 34 (id=8121):
socket(0x1e, 0x4, 0x0)
r0 = socket(0x9, 0x800, 0x0)
socket(0x1e, 0x4, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
unshare(0x68040200)
socket(0x2a, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r3, 0x3f38e000)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)
bind$bt_hci(r4, 0x0, 0x0)
write(r4, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
unshare(0x6020480)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

0s ago: executing program 35 (id=8123):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0xd}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)="d336bd75243cb9a6418e", 0xa}], 0x1000000000000041)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c00028008000340000000e108000140000000130500020094000000080006400000000208000440000000140900010073797a30000000000900020073797a"], 0x94}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f00000000c0)={0x1, 0x1, 0x36}) (async, rerun: 32)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="480000000001f7040000ff0f00000000020000002400018014008008000100e000000108000200e05f00010c00028005000100000000001000058009000100"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40004) (async, rerun: 32)
pipe(&(0x7f0000000040)) (rerun: 32)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x807, @broadcast, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 32)
setsockopt$inet6_int(r5, 0x29, 0x3, 0x0, 0x0) (async, rerun: 32)
recvmmsg(r5, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/19, 0x13}, 0xe4}], 0x1, 0x102, 0x0) (async)
setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000540)=ANY=[@ANYBLOB="320400000000000001080000000000000000c24b6b3409840cee4104c20400000005c20400000000a513bb67f4b4d83ee034d33bf2d8605fee05c7e67bee38cde2a1c375178cc80c2e69ba0cb30e0f93fa91fde093b2590a3916e367e6efe61dae2fc1e1f3a32f0d7162001c86419722acb2f3508b52a57cb2"], 0x28) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="85200000020000008510000000000000b7080000000000007b8af8ff00000000b708000040f735c27b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="000500000800000085000000a50000003c3000010800"/32], &(0x7f0000000000)='syzkaller\x00'}, 0x94)

kernel console output (not intermixed with test programs):

ink: Message has 126 unknown bytes.
[  514.069830][T28588] lo speed is unknown, defaulting to 1000
[  514.083822][T28598] lo speed is unknown, defaulting to 1000
[  514.084549][T28617] netlink: 'syz.1.6330': attribute type 1 has an invalid length.
[  514.690679][T28656] lo speed is unknown, defaulting to 1000
[  514.894370][T28668] netlink: 'syz.0.6344': attribute type 1 has an invalid length.
[  514.915681][T28656] lo speed is unknown, defaulting to 1000
[  514.978417][T28672] IPVS: stopping backup sync thread 28675 ...
[  514.979197][T28675] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  515.786989][T28723] lo speed is unknown, defaulting to 1000
[  515.880694][T28723] lo speed is unknown, defaulting to 1000
[  516.075183][T28743] netlink: 'syz.2.6363': attribute type 21 has an invalid length.
[  516.077849][T28743] netlink: 'syz.2.6363': attribute type 1 has an invalid length.
[  516.323918][T28746] netlink: 'syz.1.6364': attribute type 4 has an invalid length.
[  516.338112][T28746] netlink: 'syz.1.6364': attribute type 4 has an invalid length.
[  516.484554][T28752] lo speed is unknown, defaulting to 1000
[  516.606555][T28752] lo speed is unknown, defaulting to 1000
[  516.864652][T28756] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  516.919565][T28762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  516.922928][T28762] syzkaller0: entered promiscuous mode
[  516.926964][T28762] syzkaller0: entered allmulticast mode
[  516.940947][T28762] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  516.958011][T28762] tipc: Resetting bearer <eth:syzkaller0>
[  516.968379][T28762] netlink: 'syz.0.6367': attribute type 1 has an invalid length.
[  516.996977][T28761] tipc: Resetting bearer <eth:syzkaller0>
[  517.014542][T28761] tipc: Disabling bearer <eth:syzkaller0>
[  517.070033][T28769] netlink: 'syz.2.6370': attribute type 1 has an invalid length.
[  517.074042][T28771] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  517.178923][T28776] veth27: entered allmulticast mode
[  517.314226][T28784] lo speed is unknown, defaulting to 1000
[  517.321882][T28786] __nla_validate_parse: 74 callbacks suppressed
[  517.321926][T28786] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6375'.
[  517.370969][T28789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6376'.
[  517.434446][T28791] netlink: 788 bytes leftover after parsing attributes in process `syz.1.6376'.
[  517.444090][T28793] netlink: 'syz.2.6377': attribute type 1 has an invalid length.
[  517.504394][T28793] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR
[  517.544659][T28800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6378'.
[  517.586121][T28787] lo speed is unknown, defaulting to 1000
[  517.590603][T28784] lo speed is unknown, defaulting to 1000
[  517.611294][T28802] netlink: 788 bytes leftover after parsing attributes in process `syz.2.6378'.
[  517.726571][T28787] lo speed is unknown, defaulting to 1000
[  517.856300][T28810] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6380'.
[  517.859705][T28810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6380'.
[  517.862947][T28810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6380'.
[  518.283461][T28812] lo speed is unknown, defaulting to 1000
[  518.481838][T28819] lo speed is unknown, defaulting to 1000
[  518.483836][T28812] lo speed is unknown, defaulting to 1000
[  518.490774][T28823] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6384'.
[  518.585181][T28826] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6385'.
[  518.722033][T28819] lo speed is unknown, defaulting to 1000
[  519.193724][T28857] syzkaller0: entered promiscuous mode
[  519.198915][T28857] syzkaller0: entered allmulticast mode
[  519.460206][T28881] netlink: 'syz.1.6402': attribute type 4 has an invalid length.
[  519.467345][T28881] netlink: 'syz.1.6402': attribute type 4 has an invalid length.
[  519.680714][T28897] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  519.680720][T28895] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  520.193183][T28932] validate_nla: 2 callbacks suppressed
[  520.193192][T28932] netlink: 'syz.1.6414': attribute type 1 has an invalid length.
[  520.328269][T28937] netlink: 'syz.0.6416': attribute type 1 has an invalid length.
[  520.359745][T28940] lo speed is unknown, defaulting to 1000
[  520.450375][T28940] lo speed is unknown, defaulting to 1000
[  520.869677][T28957] lo speed is unknown, defaulting to 1000
[  520.994043][T28969] !: renamed from dummy0 (while UP)
[  521.020623][T28957] lo speed is unknown, defaulting to 1000
[  521.850846][T29021] netlink: 'syz.0.6435': attribute type 4 has an invalid length.
[  521.862445][ T5875] lo speed is unknown, defaulting to 1000
[  521.865332][ T5875] syz2: Port: 1 Link DOWN
[  521.869176][T29021] netlink: 'syz.0.6435': attribute type 4 has an invalid length.
[  521.878163][ T5875] lo speed is unknown, defaulting to 1000
[  521.880803][ T5875] syz2: Port: 1 Link ACTIVE
[  521.953087][ T5895] lo speed is unknown, defaulting to 1000
[  521.956148][ T5895] syz2: Port: 1 Link DOWN
[  521.988112][T29023] netlink: 'syz.0.6436': attribute type 1 has an invalid length.
[  522.014870][T28981] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  522.042053][T29026] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  522.047754][T29025] IPVS: stopping backup sync thread 29026 ...
[  522.116641][T29030] lo speed is unknown, defaulting to 1000
[  522.169211][T29035] nbd: must specify an index to disconnect
[  522.209275][T29040] netlink: 'syz.2.6441': attribute type 1 has an invalid length.
[  522.321516][T29051] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  522.325398][T29030] lo speed is unknown, defaulting to 1000
[  522.328534][T29050] IPVS: stopping backup sync thread 29051 ...
[  522.333794][T29050] __nla_validate_parse: 34 callbacks suppressed
[  522.333804][T29050] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6445'.
[  522.343808][T29052] netlink: 788 bytes leftover after parsing attributes in process `syz.0.6444'.
[  522.392007][T29050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6445'.
[  522.396678][T29050] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6445'.
[  522.442652][T29057] lo speed is unknown, defaulting to 1000
[  522.545686][T29057] lo speed is unknown, defaulting to 1000
[  522.967382][T29061] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6447'.
[  522.971278][T29061] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6447'.
[  523.008101][T29064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6448'.
[  523.383463][T29083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6454'.
[  523.447083][T29084] netlink: 788 bytes leftover after parsing attributes in process `syz.2.6454'.
[  523.999170][T29088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6455'.
[  524.403026][T29122] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  524.408535][T29120] IPVS: stopping backup sync thread 29122 ...
[  524.414047][T29120] IPVS: set_ctl: invalid protocol: 71 10.1.1.1:20003
[  525.107649][T29132] lo speed is unknown, defaulting to 1000
[  525.240346][T29136] netlink: 'syz.2.6470': attribute type 1 has an invalid length.
[  525.271791][T29132] lo speed is unknown, defaulting to 1000
[  525.349467][T29142] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  525.349722][T29140] IPVS: stopping backup sync thread 29142 ...
[  525.469989][T29145] lo speed is unknown, defaulting to 1000
[  525.626587][T29149] lo speed is unknown, defaulting to 1000
[  525.627621][T29145] lo speed is unknown, defaulting to 1000
[  525.769387][T29157] netlink: 'syz.2.6476': attribute type 1 has an invalid length.
[  525.835614][T29149] lo speed is unknown, defaulting to 1000
[  525.883963][T29160] netlink: 'syz.2.6477': attribute type 2 has an invalid length.
[  525.892504][T29160] netlink: 'syz.2.6477': attribute type 2 has an invalid length.
[  525.934356][T29164] netlink: 'syz.2.6479': attribute type 10 has an invalid length.
[  525.942989][T29164] bond0: option arp_all_targets: invalid value (196616)
[  525.973631][T29168] : renamed from batadv_slave_1
[  526.022349][T29172] sock: sock_timestamping_bind_phc: sock not bind to device
[  526.057235][T29175] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  526.057426][T29173] IPVS: stopping backup sync thread 29175 ...
[  526.223596][T29180] lo speed is unknown, defaulting to 1000
[  526.437091][T29180] lo speed is unknown, defaulting to 1000
[  526.577603][T29196] lo speed is unknown, defaulting to 1000
[  526.791372][T29196] lo speed is unknown, defaulting to 1000
[  526.825102][T29210] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  526.833561][T29208] IPVS: stopping backup sync thread 29210 ...
[  526.881054][T29208] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  527.013544][T29226] netlink: 'syz.1.6497': attribute type 4 has an invalid length.
[  527.080135][T29230] netlink: 'syz.1.6498': attribute type 1 has an invalid length.
[  527.129278][T29230] veth29: entered promiscuous mode
[  527.141555][T29230] team0: Port device vlan0 removed
[  527.147257][T29230] bond16: (slave veth23): Releasing backup interface
[  527.149619][T29230] bond16: (slave veth23): the permanent HWaddr of slave - 0e:8d:cd:d9:bf:eb - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  527.160224][T29230] bond16: (slave veth25): Releasing backup interface
[  527.166531][ T5894] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  527.295395][ T5894] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  527.368601][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  527.386129][T29249] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  527.389460][T29247] IPVS: stopping backup sync thread 29249 ...
[  527.391968][T29248] __nla_validate_parse: 40 callbacks suppressed
[  527.391975][T29248] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6503'.
[  527.483876][T29255] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  527.499444][T29255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6505'.
[  527.644541][T29259] lo speed is unknown, defaulting to 1000
[  527.930798][T29259] lo speed is unknown, defaulting to 1000
[  527.954998][T29284] netlink: 'syz.0.6513': attribute type 1 has an invalid length.
[  527.960864][T29284] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6513'.
[  528.012377][T29266] lo speed is unknown, defaulting to 1000
[  528.048101][T29295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6516'.
[  528.275766][T29266] lo speed is unknown, defaulting to 1000
[  528.316050][T29309] netlink: 'syz.2.6517': attribute type 1 has an invalid length.
[  528.402578][T29312] IPVS: stopping backup sync thread 29314 ...
[  528.402939][T29314] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  528.442821][T29312] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6518'.
[  528.447013][T29312] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6518'.
[  528.450502][T29312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6518'.
[  528.484192][T29313] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6519'.
[  528.506344][T29317] netlink: 'syz.2.6520': attribute type 2 has an invalid length.
[  528.540906][T29319] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6521'.
[  528.600443][T29319] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6521'.
[  528.985723][T29351] lo speed is unknown, defaulting to 1000
[  529.006548][ T5894] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  529.031215][T29360] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  529.034394][T29359] IPVS: stopping backup sync thread 29360 ...
[  529.086247][ T5894] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  529.107873][T29351] lo speed is unknown, defaulting to 1000
[  529.186520][T29368] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  529.191021][T29367] IPVS: stopping backup sync thread 29368 ...
[  529.396339][T29378] lo speed is unknown, defaulting to 1000
[  529.460241][T29379] "syz.2.6540" (29379) uses obsolete ecb(arc4) skcipher
[  529.618737][T29379] wg1: left promiscuous mode
[  529.625131][T29379] wg1: left allmulticast mode
[  529.640815][T29379] bridge_slave_0: left allmulticast mode
[  529.648385][T29379] veth0_to_team: left promiscuous mode
[  529.650965][T29379] batadv_slave_0: left promiscuous mode
[  529.659909][T29379] vlan0: left promiscuous mode
[  529.661659][T29379] vlan1: left promiscuous mode
[  529.663342][T29379] vlan1: left allmulticast mode
[  529.666031][T29379] veth0_vlan: left allmulticast mode
[  529.668038][T29379] macvlan0: left allmulticast mode
[  529.671746][T29379] veth3: left promiscuous mode
[  529.673941][T29379] gretap1: left promiscuous mode
[  529.688138][T29379] veth5: left promiscuous mode
[  529.692781][T29379] veth7: left promiscuous mode
[  529.705531][T29379] gtp2: left promiscuous mode
[  529.747639][T29379] veth11: left promiscuous mode
[  529.750124][T29379] erspan0: left allmulticast mode
[  529.756206][T29379] macvtap1: left promiscuous mode
[  529.757910][T29379] macvtap1: left allmulticast mode
[  529.799364][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  529.809492][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  529.812929][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  529.827994][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  529.831063][T29378] lo speed is unknown, defaulting to 1000
[  529.960110][T29387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  529.970942][T29387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  530.143613][T29393] lo speed is unknown, defaulting to 1000
[  530.357530][T29393] lo speed is unknown, defaulting to 1000
[  530.518854][T29393] validate_nla: 4 callbacks suppressed
[  530.518869][T29393] netlink: 'syz.2.6545': attribute type 13 has an invalid length.
[  530.523486][T29393] netlink: 'syz.2.6545': attribute type 17 has an invalid length.
[  530.532840][T29393] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  530.851392][T29414] batadv1: entered promiscuous mode
[  530.853273][T29414] batadv1: entered allmulticast mode
[  530.961839][T29420] netlink: 'syz.2.6552': attribute type 10 has an invalid length.
[  530.972618][T29420] team0: Cannot enslave team device to itself
[  530.981216][T29420] netlink: 'syz.2.6552': attribute type 6 has an invalid length.
[  531.200939][T29430] netlink: 'syz.1.6554': attribute type 1 has an invalid length.
[  531.247728][T29439] sctp: [Deprecated]: syz.2.6556 (pid 29439) Use of int in maxseg socket option.
[  531.247728][T29439] Use struct sctp_assoc_value instead
[  531.304956][T29441] lo speed is unknown, defaulting to 1000
[  531.530525][T29448] lo speed is unknown, defaulting to 1000
[  531.537509][T29441] lo speed is unknown, defaulting to 1000
[  531.673931][T29463] netlink: 'syz.1.6565': attribute type 1 has an invalid length.
[  531.744586][T29463] 8021q: adding VLAN 0 to HW filter on device bond18
[  531.768301][T29448] lo speed is unknown, defaulting to 1000
[  531.969558][T29459] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  531.983723][T29471] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  532.008061][T29471] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  532.303763][T29455] tipc: Disabling bearer <eth:syzkaller0>
[  532.821332][T29509] lo speed is unknown, defaulting to 1000
[  532.915074][T29513] netlink: 'syz.0.6573': attribute type 21 has an invalid length.
[  532.921529][T29513] netlink: 'syz.0.6573': attribute type 6 has an invalid length.
[  532.924687][T29513] __nla_validate_parse: 30 callbacks suppressed
[  532.924698][T29513] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6573'.
[  532.981140][T29516] netlink: 'syz.1.6575': attribute type 2 has an invalid length.
[  533.042219][T29514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6573'.
[  533.088383][T29527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6576'.
[  533.123945][T29529] netlink: 200 bytes leftover after parsing attributes in process `syz.2.6577'.
[  533.129198][T29529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6577'.
[  533.136103][T29509] lo speed is unknown, defaulting to 1000
[  533.164282][T29533] netlink: 788 bytes leftover after parsing attributes in process `syz.1.6576'.
[  533.231492][T29539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6579'.
[  533.254593][T29537] IPVS: stopping backup sync thread 29540 ...
[  533.254609][T29540] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  533.311242][T29537] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6578'.
[  533.336186][T29537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6578'.
[  533.339999][T29537] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6578'.
[  533.388910][T29550] lo speed is unknown, defaulting to 1000
[  533.430154][T29551] netlink: 'syz.0.6581': attribute type 21 has an invalid length.
[  533.652018][T29550] lo speed is unknown, defaulting to 1000
[  534.388978][    T9] lo speed is unknown, defaulting to 1000
[  534.391231][    T9] syz2: Port: 1 Link ACTIVE
[  534.406610][    T9] lo speed is unknown, defaulting to 1000
[  534.408557][    T9] syz2: Port: 1 Link DOWN
[  534.583038][T29634] lo speed is unknown, defaulting to 1000
[  534.673125][T29634] lo speed is unknown, defaulting to 1000
[  534.683850][T29639] sock: sock_timestamping_bind_phc: sock not bind to device
[  535.186007][T29653] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  535.190199][T29652] IPVS: stopping backup sync thread 29653 ...
[  536.456945][T29738] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  536.544302][T29747] validate_nla: 4 callbacks suppressed
[  536.544316][T29747] netlink: 'syz.0.6636': attribute type 2 has an invalid length.
[  539.295057][T29760] lo speed is unknown, defaulting to 1000
[  539.372887][T29765] netlink: 'syz.1.6638': attribute type 21 has an invalid length.
[  539.377210][T29765] netlink: 'syz.1.6638': attribute type 6 has an invalid length.
[  539.380637][T29765] __nla_validate_parse: 26 callbacks suppressed
[  539.380648][T29765] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6638'.
[  539.398478][T29765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6638'.
[  539.407545][T29768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6641'.
[  539.423997][T29765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6638'.
[  539.502162][T29760] lo speed is unknown, defaulting to 1000
[  539.508760][T29772] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6643'.
[  539.553647][T29779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6644'.
[  539.706455][T29797] netlink: 788 bytes leftover after parsing attributes in process `syz.2.6648'.
[  539.724265][T29796] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6650'.
[  539.729505][T29796] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6650'.
[  539.767737][T29799] netlink: 'syz.1.6649': attribute type 21 has an invalid length.
[  539.770762][T29794] lo speed is unknown, defaulting to 1000
[  539.770816][T29799] netlink: 'syz.1.6649': attribute type 6 has an invalid length.
[  539.778089][T29799] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6649'.
[  539.786768][T29796] netlink: 'syz.0.6650': attribute type 1 has an invalid length.
[  539.789377][T29796] netlink: 'syz.0.6650': attribute type 3 has an invalid length.
[  539.792605][T29796] NCSI netlink: No device for ifindex 246
[  539.881772][T29794] lo speed is unknown, defaulting to 1000
[  540.109536][T29821] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  540.114960][T29820] IPVS: stopping backup sync thread 29821 ...
[  540.139128][T29823] team0: Unable to change to the same mode the team is in
[  540.144493][T29823] team0: Port device vlan0 added
[  540.156016][T29823] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  540.166325][ T5875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  540.177867][T29820] nbd: must specify a device to reconfigure
[  540.299986][T29827] netlink: 'syz.1.6661': attribute type 4 has an invalid length.
[  540.313468][T29827] netlink: 'syz.1.6661': attribute type 4 has an invalid length.
[  540.502042][T29835] lo speed is unknown, defaulting to 1000
[  540.525542][ T5895] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  540.615625][T29835] lo speed is unknown, defaulting to 1000
[  540.756372][T29846] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  540.759733][T29844] IPVS: stopping backup sync thread 29846 ...
[  540.805323][   T62] block nbd4: Possible stuck request ffff888022e78000: control (read@0,1024B). Runtime 120 seconds
[  540.808948][   T62] block nbd4: Possible stuck request ffff888022e78200: control (read@1024,1024B). Runtime 120 seconds
[  540.812902][   T62] block nbd4: Possible stuck request ffff888022e78400: control (read@2048,1024B). Runtime 120 seconds
[  540.816868][   T62] block nbd4: Possible stuck request ffff888022e78600: control (read@3072,1024B). Runtime 120 seconds
[  540.905893][T29858] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001
[  540.938048][T29860] netlink: 'syz.2.6670': attribute type 2 has an invalid length.
[  541.061268][T29871] IPVS: stopping backup sync thread 29872 ...
[  541.063475][T29872] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  541.304218][T29895] lo speed is unknown, defaulting to 1000
[  541.462477][T29911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  541.465057][T29911] IPv6: NLM_F_CREATE should be set when creating new route
[  541.467571][T29911] IPv6: NLM_F_CREATE should be set when creating new route
[  541.559465][T29895] lo speed is unknown, defaulting to 1000
[  541.732440][T29920] validate_nla: 3 callbacks suppressed
[  541.732450][T29920] netlink: 'syz.0.6686': attribute type 12 has an invalid length.
[  542.002820][T29938] lo speed is unknown, defaulting to 1000
[  542.153864][T29938] lo speed is unknown, defaulting to 1000
[  542.509385][T29954] lo speed is unknown, defaulting to 1000
[  542.561911][T29957] netlink: 'syz.2.6697': attribute type 1 has an invalid length.
[  542.685268][T29959] IPVS: length: 212 != 8
[  542.937842][T29954] lo speed is unknown, defaulting to 1000
[  543.110957][T29991] xfrm1: entered promiscuous mode
[  543.112875][T29991] xfrm1: entered allmulticast mode
[  543.506455][T30018] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  543.510080][T30017] IPVS: stopping backup sync thread 30018 ...
[  543.649385][T30033] 8021q: VLANs not supported on ip_vti0
[  543.932793][T30052] netlink: 'syz.0.6729': attribute type 1 has an invalid length.
[  544.023027][T30062] lo speed is unknown, defaulting to 1000
[  544.129813][T30062] lo speed is unknown, defaulting to 1000
[  544.374243][T30100] lo speed is unknown, defaulting to 1000
[  544.489470][T30100] lo speed is unknown, defaulting to 1000
[  544.737049][T30118] lo speed is unknown, defaulting to 1000
[  544.825702][T30118] lo speed is unknown, defaulting to 1000
[  544.865178][T30124] lo speed is unknown, defaulting to 1000
[  545.013638][T30124] lo speed is unknown, defaulting to 1000
[  545.171086][T30143] lo speed is unknown, defaulting to 1000
[  545.309653][T30143] lo speed is unknown, defaulting to 1000
[  545.331090][T30148] __nla_validate_parse: 61 callbacks suppressed
[  545.331100][T30148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6747'.
[  545.355943][T30148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6747'.
[  545.463576][T30161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6750'.
[  545.470393][T30152] lo speed is unknown, defaulting to 1000
[  545.575162][T30161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6750'.
[  545.617344][T30152] lo speed is unknown, defaulting to 1000
[  545.633129][T30168] netlink: 160 bytes leftover after parsing attributes in process `syz.0.6751'.
[  545.678610][T30145] lo speed is unknown, defaulting to 1000
[  545.860094][T30145] lo speed is unknown, defaulting to 1000
[  546.324388][T30193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6754'.
[  546.329226][T30193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6754'.
[  546.428960][T30195] netlink: 204 bytes leftover after parsing attributes in process `syz.2.6755'.
[  546.450025][T30195] netlink: 'syz.2.6755': attribute type 1 has an invalid length.
[  546.453544][T30195] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6755'.
[  546.457767][T30195] netlink: 'syz.2.6755': attribute type 1 has an invalid length.
[  546.679270][T30200] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  546.686205][T30199] IPVS: stopping backup sync thread 30200 ...
[  546.694206][T30199] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6757'.
[  546.968827][ T5894] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  547.435112][T19415] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  547.731006][T30230] netlink: 'syz.1.6763': attribute type 2 has an invalid length.
[  547.920760][T30248] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  547.925331][T30247] IPVS: stopping backup sync thread 30248 ...
[  548.131316][T30266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  548.447594][T30290] lo speed is unknown, defaulting to 1000
[  548.605504][T30290] lo speed is unknown, defaulting to 1000
[  548.720077][T30314] netlink: 'syz.2.6790': attribute type 4 has an invalid length.
[  548.726675][T30314] netlink: 'syz.2.6790': attribute type 4 has an invalid length.
[  548.891324][T30344] netlink: 'syz.0.6797': attribute type 1 has an invalid length.
[  548.988036][T30354] netlink: 'syz.2.6801': attribute type 2 has an invalid length.
[  549.024621][T30358] netlink: 'syz.2.6803': attribute type 3 has an invalid length.
[  549.036258][T30360] netlink: 'syz.0.6800': attribute type 1 has an invalid length.
[  549.134010][T30369] netlink: 'syz.1.6807': attribute type 10 has an invalid length.
[  549.141604][T30369] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  549.179986][T30378] netlink: 'syz.2.6808': attribute type 8 has an invalid length.
[  549.192968][T30368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  549.253264][T30378] syz.2.6808: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  549.258966][T30378] CPU: 0 UID: 0 PID: 30378 Comm: syz.2.6808 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59-dirty #0 PREEMPT(full) 
[  549.258984][T30378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  549.258992][T30378] Call Trace:
[  549.258997][T30378]  <TASK>
[  549.259003][T30378]  dump_stack_lvl+0x189/0x250
[  549.259026][T30378]  ? __pfx_dump_stack_lvl+0x10/0x10
[  549.259035][T30378]  ? __pfx__printk+0x10/0x10
[  549.259046][T30378]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  549.259056][T30378]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  549.259065][T30378]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  549.259075][T30378]  warn_alloc+0x214/0x310
[  549.259087][T30378]  ? stack_depot_save_flags+0x40/0x860
[  549.259099][T30378]  ? __pfx_warn_alloc+0x10/0x10
[  549.259110][T30378]  ? kasan_save_track+0x4f/0x80
[  549.259119][T30378]  ? xskq_create+0x56/0x170
[  549.259127][T30378]  ? xsk_init_queue+0xb0/0x110
[  549.259133][T30378]  ? xsk_setsockopt+0x4dc/0x8d0
[  549.259140][T30378]  ? do_sock_setsockopt+0x17c/0x1b0
[  549.259146][T30378]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  549.259152][T30378]  ? do_syscall_64+0xfa/0x3b0
[  549.259160][T30378]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.259171][T30378]  __vmalloc_node_range_noprof+0x125/0x12f0
[  549.259193][T30378]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  549.259206][T30378]  ? __kasan_kmalloc+0x93/0xb0
[  549.259216][T30378]  vmalloc_user_noprof+0xad/0xf0
[  549.259227][T30378]  ? xskq_create+0xbf/0x170
[  549.259235][T30378]  xskq_create+0xbf/0x170
[  549.259244][T30378]  xsk_init_queue+0xb0/0x110
[  549.259254][T30378]  xsk_setsockopt+0x4dc/0x8d0
[  549.259263][T30378]  ? __pfx_xsk_setsockopt+0x10/0x10
[  549.259273][T30378]  ? __pfx_aa_sk_perm+0x10/0x10
[  549.259284][T30378]  ? aa_sock_opt_perm+0xff/0x1b0
[  549.259292][T30378]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  549.259302][T30378]  ? __pfx_xsk_setsockopt+0x10/0x10
[  549.259316][T30378]  do_sock_setsockopt+0x17c/0x1b0
[  549.259328][T30378]  __x64_sys_setsockopt+0x13f/0x1b0
[  549.259342][T30378]  do_syscall_64+0xfa/0x3b0
[  549.259356][T30378]  ? lockdep_hardirqs_on+0x9c/0x150
[  549.259369][T30378]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.259380][T30378]  ? exc_page_fault+0x9f/0xf0
[  549.259395][T30378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.259401][T30378] RIP: 0033:0x7f4047f8ebe9
[  549.259409][T30378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  549.259415][T30378] RSP: 002b:00007f4048d3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  549.259423][T30378] RAX: ffffffffffffffda RBX: 00007f40481b5fa0 RCX: 00007f4047f8ebe9
[  549.259428][T30378] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  549.259435][T30378] RBP: 00007f4048011e19 R08: 0000000000000004 R09: 0000000000000000
[  549.259441][T30378] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  549.259447][T30378] R13: 00007f40481b6038 R14: 00007f40481b5fa0 R15: 00007fffed9979c8
[  549.259468][T30378]  </TASK>
[  549.259473][T30378] Mem-Info:
[  549.374708][T30378] active_anon:13304 inactive_anon:0 isolated_anon:0
[  549.374708][T30378]  active_file:1488 inactive_file:38406 isolated_file:0
[  549.374708][T30378]  unevictable:1768 dirty:115 writeback:0
[  549.374708][T30378]  slab_reclaimable:17475 slab_unreclaimable:148213
[  549.374708][T30378]  mapped:18499 shmem:2470 pagetables:1090
[  549.374708][T30378]  sec_pagetables:0 bounce:0
[  549.374708][T30378]  kernel_misc_reclaimable:0
[  549.374708][T30378]  free:177993 free_pcp:18499 free_cma:0
[  549.392629][T30378] Node 0 active_anon:45304kB inactive_anon:0kB active_file:3692kB inactive_file:3368kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35588kB dirty:384kB writeback:0kB shmem:5020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9052kB pagetables:2644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  549.403503][T30378] Node 1 active_anon:7912kB inactive_anon:0kB active_file:2260kB inactive_file:150256kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38408kB dirty:76kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5092kB pagetables:1716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  549.414347][T30378] Node 0 DMA free:12804kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:508kB local_pcp:200kB free_cma:0kB
[  549.425469][T30378] lowmem_reserve[]: 0 811 811 811 811
[  549.427550][T30378] Node 0 DMA32 free:98052kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45304kB inactive_anon:0kB active_file:3692kB inactive_file:3368kB unevictable:3536kB writepending:384kB present:1556484kB managed:830952kB mlocked:0kB bounce:0kB free_pcp:26556kB local_pcp:8668kB free_cma:0kB
[  549.438397][T30378] lowmem_reserve[]: 0 0 0 0 0
[  549.440165][T30378] Node 1 DMA32 free:435140kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:14816kB local_pcp:6712kB free_cma:0kB
[  549.450912][T30378] lowmem_reserve[]: 0 0 854 854 854
[  549.452935][T30378] Node 1 Normal free:165976kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7912kB inactive_anon:0kB active_file:2260kB inactive_file:150256kB unevictable:3536kB writepending:76kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:32112kB local_pcp:18800kB free_cma:0kB
[  549.464252][T30378] lowmem_reserve[]: 0 0 0 0 0
[  549.466016][T30378] Node 0 DMA: 3*4kB (UM) 1*8kB (U) 3*16kB (U) 6*32kB (UM) 6*64kB (UM) 5*128kB (UM) 5*256kB (UM) 4*512kB (UM) 4*1024kB (UM) 0*2048kB 1*4096kB (U) = 12804kB
[  549.472045][T30378] Node 0 DMA32: 966*4kB (UM) 542*8kB (UM) 655*16kB (UME) 436*32kB (UME) 254*64kB (UME) 78*128kB (UME) 27*256kB (UM) 9*512kB (ME) 7*1024kB (UME) 4*2048kB (UME) 3*4096kB (U) = 98040kB
[  549.479780][T30378] Node 1 DMA32: 27*4kB (UM) 21*8kB (UME) 29*16kB (UME) 27*32kB (UE) 20*64kB (UE) 11*128kB (U) 11*256kB (UM) 8*512kB (UME) 6*1024kB (UME) 6*2048kB (UME) 99*4096kB (UM) = 435140kB
[  549.487784][T30378] Node 1 Normal: 2228*4kB (UME) 1511*8kB (UME) 903*16kB (UME) 119*32kB (UME) 273*64kB (UME) 109*128kB (UME) 94*256kB (UM) 11*512kB (UME) 8*1024kB (UME) 4*2048kB (UME) 12*4096kB (U) = 165912kB
[  549.495352][T30378] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  549.499149][T30378] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  549.502367][T30378] 42364 total pagecache pages
[  549.504098][T30378] 0 pages in swap cache
[  549.505883][T30378] Free swap  = 124996kB
[  549.507373][T30378] Total swap = 124996kB
[  549.508873][T30378] 786301 pages RAM
[  549.510148][T30378] 0 pages HighMem/MovableOnly
[  549.511758][T30378] 241331 pages reserved
[  549.513162][T30378] 0 pages cma reserved
[  549.781386][T10867] tipc: Subscription rejected, illegal request
[  549.881269][T30401] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  549.888093][T30400] IPVS: stopping backup sync thread 30401 ...
[  549.956747][T30408] netlink: 'syz.0.6815': attribute type 3 has an invalid length.
[  550.502458][T30429] __nla_validate_parse: 46 callbacks suppressed
[  550.502472][T30429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6823'.
[  550.911309][T30433] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6824'.
[  551.070909][T30447] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6828'.
[  551.081935][T30449] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6829'.
[  551.085233][T30449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6829'.
[  551.088148][T30449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6829'.
[  551.630382][T30467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6833'.
[  551.633983][T30468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6833'.
[  551.698255][T30471] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6834'.
[  551.785880][T30474] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6835'.
[  551.930054][T30476] nbd: must specify an index to disconnect
[  552.087000][T30489] IPVS: set_ctl: invalid protocol: 2 172.20.20.43:20000
[  552.736529][T30509] lo speed is unknown, defaulting to 1000
[  552.778727][T30510] validate_nla: 6 callbacks suppressed
[  552.778741][T30510] netlink: 'syz.2.6848': attribute type 23 has an invalid length.
[  552.860429][T30509] lo speed is unknown, defaulting to 1000
[  553.009834][T30521] openvswitch: netlink: Message has 4 unknown bytes.
[  553.139508][T30528] netlink: 'syz.0.6852': attribute type 1 has an invalid length.
[  553.185544][T30526] lo speed is unknown, defaulting to 1000
[  553.422936][T30526] lo speed is unknown, defaulting to 1000
[  553.567870][T30554] lo speed is unknown, defaulting to 1000
[  553.635585][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  553.709519][T30554] lo speed is unknown, defaulting to 1000
[  553.813124][T30573] lo speed is unknown, defaulting to 1000
[  553.960742][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  554.026826][T30572] lo speed is unknown, defaulting to 1000
[  554.034134][T30573] lo speed is unknown, defaulting to 1000
[  554.221777][T30572] lo speed is unknown, defaulting to 1000
[  554.786506][T30603] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  554.795111][T30602] IPVS: stopping backup sync thread 30603 ...
[  554.857993][T30588] delete_channel: no stack
[  555.005858][T30607] pimreg: tun_chr_ioctl cmd 2147767506
[  555.159387][T30611] lo speed is unknown, defaulting to 1000
[  555.346965][T30611] lo speed is unknown, defaulting to 1000
[  555.614642][T30646] netlink: 'syz.0.6887': attribute type 4 has an invalid length.
[  555.618896][T30646] netlink: 'syz.0.6887': attribute type 4 has an invalid length.
[  555.623870][ T5875] lo speed is unknown, defaulting to 1000
[  555.626163][ T5875] syz2: Port: 1 Link ACTIVE
[  555.666532][T30647] __nla_validate_parse: 30 callbacks suppressed
[  555.666544][T30647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6887'.
[  555.677673][ T5875] lo speed is unknown, defaulting to 1000
[  555.679624][ T5875] syz2: Port: 1 Link DOWN
[  555.689249][T30650] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6888'.
[  555.760532][T30656] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  555.771302][T30659] netlink: 200 bytes leftover after parsing attributes in process `syz.2.6891'.
[  555.819533][T30663] lo speed is unknown, defaulting to 1000
[  555.970400][T30666] lo speed is unknown, defaulting to 1000
[  555.979963][T30663] lo speed is unknown, defaulting to 1000
[  556.097476][T30666] lo speed is unknown, defaulting to 1000
[  556.272189][T30681] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6896'.
[  556.382532][T30687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6898'.
[  556.489537][T30692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6900'.
[  556.502105][   T33] audit: type=1800 audit(1755295459.661:21): pid=30694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6901" name=CB dev="tmpfs" ino=11728 res=0 errno=0
[  556.527302][T30696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6902'.
[  556.531248][T30696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6902'.
[  556.541222][T30696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6902'.
[  556.547813][T30698] lo speed is unknown, defaulting to 1000
[  556.569441][T30700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6904'.
[  556.643828][T30698] lo speed is unknown, defaulting to 1000
[  556.764394][T30708] netlink: 'syz.2.6908': attribute type 58 has an invalid length.
[  556.931037][T30713] netlink: 'syz.1.6909': attribute type 1 has an invalid length.
[  556.971461][T30730] 8021q: VLANs not supported on lo
[  556.982490][T30730] 8021q: VLANs not supported on lo
[  557.021149][T30732] lo speed is unknown, defaulting to 1000
[  557.170811][T30741] lo speed is unknown, defaulting to 1000
[  557.171775][T30732] lo speed is unknown, defaulting to 1000
[  557.321959][T30754] netlink: 'syz.2.6919': attribute type 14 has an invalid length.
[  557.322128][T30741] lo speed is unknown, defaulting to 1000
[  557.328822][T30754] netlink: 'syz.2.6919': attribute type 13 has an invalid length.
[  557.452513][T30756] pimreg: tun_chr_ioctl cmd 2147767506
[  557.467186][T30756] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  557.863369][T30769] lo speed is unknown, defaulting to 1000
[  558.018094][T30769] lo speed is unknown, defaulting to 1000
[  558.024526][T30774] lo speed is unknown, defaulting to 1000
[  558.170891][T30774] lo speed is unknown, defaulting to 1000
[  558.538016][T30792] lo speed is unknown, defaulting to 1000
[  558.651191][T30792] lo speed is unknown, defaulting to 1000
[  558.670357][T30793] lo speed is unknown, defaulting to 1000
[  558.818844][T30812] lo speed is unknown, defaulting to 1000
[  558.834358][T30793] lo speed is unknown, defaulting to 1000
[  559.036218][T30812] lo speed is unknown, defaulting to 1000
[  559.210970][T30837] 8021q: adding VLAN 0 to HW filter on device team0
[  559.214046][T30837] tipc: Resetting bearer <eth:team0>
[  559.222119][T30837] tipc: Resetting bearer <eth:team0>
[  559.237526][ T5894] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  559.247205][T30837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  559.424956][ T5894] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  559.912103][T30874] team0: Device gtp3 is up. Set it down before adding it as a team port
[  560.374981][T30893] bridge0 (unregistering): left allmulticast mode
[  560.480661][T30895] lo speed is unknown, defaulting to 1000
[  561.709466][T30895] lo speed is unknown, defaulting to 1000
[  561.767214][T30911] __nla_validate_parse: 31 callbacks suppressed
[  561.767225][T30911] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6958'.
[  561.813481][T30914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6959'.
[  561.859128][T30924] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  561.862098][T30923] IPVS: stopping backup sync thread 30924 ...
[  561.893078][T30922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6961'.
[  561.900782][T30922] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6961'.
[  561.904624][T30928] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  561.910802][T30926] IPVS: stopping backup sync thread 30928 ...
[  561.931250][T30930] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6962'.
[  561.935263][T30931] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6962'.
[  561.940356][T30926] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  561.944265][T30930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6962'.
[  561.947978][T30930] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6962'.
[  561.952724][T30926] sctp: [Deprecated]: syz.1.6962 (pid 30926) Use of struct sctp_assoc_value in delayed_ack socket option.
[  561.952724][T30926] Use struct sctp_sack_info instead
[  561.961267][T30930] sctp: [Deprecated]: syz.1.6962 (pid 30930) Use of struct sctp_assoc_value in delayed_ack socket option.
[  561.961267][T30930] Use struct sctp_sack_info instead
[  562.013628][T30935] netlink: 'syz.2.6963': attribute type 1 has an invalid length.
[  562.026803][T30935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6963'.
[  562.032351][T30932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6963'.
[  562.100897][T30932] atomic_op ffff88811b0f8198 conn xmit_atomic 0000000000000000
[  562.108415][T30932] vlan3: entered allmulticast mode
[  562.110623][T30932] veth1: entered allmulticast mode
[  562.113057][T30932] batman_adv: batadv0: Adding interface: vlan3
[  562.116017][T30932] batman_adv: batadv0: The MTU of interface vlan3 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  562.126991][T30932] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active
[  562.162693][T30946] netlink: 'syz.2.6965': attribute type 74 has an invalid length.
[  562.168077][T30946] sch_tbf: burst 240 is lower than device lo mtu (11337746) !
[  562.249283][T30950] lo speed is unknown, defaulting to 1000
[  562.308754][T30951] netlink: 'syz.2.6967': attribute type 21 has an invalid length.
[  562.313748][T30951] netlink: 'syz.2.6967': attribute type 6 has an invalid length.
[  562.415579][T30950] lo speed is unknown, defaulting to 1000
[  567.684988][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  570.886878][   T62] block nbd4: Possible stuck request ffff888022e78000: control (read@0,1024B). Runtime 150 seconds
[  570.890429][   T62] block nbd4: Possible stuck request ffff888022e78200: control (read@1024,1024B). Runtime 150 seconds
[  570.893997][   T62] block nbd4: Possible stuck request ffff888022e78400: control (read@2048,1024B). Runtime 150 seconds
[  570.897896][   T62] block nbd4: Possible stuck request ffff888022e78600: control (read@3072,1024B). Runtime 150 seconds
[  582.651586][T30989] netlink: 'syz.0.6978': attribute type 6 has an invalid length.
[  582.768184][T31005] __nla_validate_parse: 8 callbacks suppressed
[  582.768199][T31005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6983'.
[  582.801842][T31009] lo speed is unknown, defaulting to 1000
[  582.844675][T31010] netlink: 788 bytes leftover after parsing attributes in process `syz.0.6983'.
[  582.849145][T31011] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6985'.
[  582.948755][T31009] lo speed is unknown, defaulting to 1000
[  583.147898][T31018] netlink: 'syz.1.6987': attribute type 7 has an invalid length.
[  583.664362][T31024] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6989'.
[  583.671024][T31024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6989'.
[  583.686138][T31026] netlink: 'syz.1.6990': attribute type 9 has an invalid length.
[  583.689661][T31026] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6990'.
[  583.751457][T31034] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6993'.
[  583.760595][T31033] lo speed is unknown, defaulting to 1000
[  583.771661][T31035] netlink: 788 bytes leftover after parsing attributes in process `syz.1.6990'.
[  583.970364][T31033] lo speed is unknown, defaulting to 1000
[  584.264241][T31049] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6996'.
[  584.513185][T31061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6999'.
[  584.549243][T31063] netlink: 'syz.1.7000': attribute type 1 has an invalid length.
[  584.954355][T31093] lo speed is unknown, defaulting to 1000
[  585.081799][T31093] lo speed is unknown, defaulting to 1000
[  585.349705][T31118] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  585.349774][T31116] IPVS: stopping backup sync thread 31118 ...
[  585.456644][T31133] netlink: 'syz.0.7019': attribute type 20 has an invalid length.
[  585.470869][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  585.473799][T31133] netlink: 'syz.0.7019': attribute type 20 has an invalid length.
[  585.479985][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  585.483577][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  585.491107][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  585.531576][T31138] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  585.536250][T31137] IPVS: stopping backup sync thread 31138 ...
[  585.623950][T31140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  585.638846][T31140] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  585.679415][T31144] netlink: 'syz.1.7023': attribute type 4 has an invalid length.
[  585.692298][T31144] netlink: 'syz.1.7023': attribute type 4 has an invalid length.
[  585.742469][T31143] netlink: 'syz.0.7024': attribute type 21 has an invalid length.
[  585.745221][T31143] netlink: 'syz.0.7024': attribute type 4 has an invalid length.
[  586.040063][T31170] lo speed is unknown, defaulting to 1000
[  586.107749][T31177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  586.159534][T31170] lo speed is unknown, defaulting to 1000
[  586.289660][T31185] lo speed is unknown, defaulting to 1000
[  586.386911][T31185] lo speed is unknown, defaulting to 1000
[  586.603488][T31191] lo speed is unknown, defaulting to 1000
[  586.746487][T31191] lo speed is unknown, defaulting to 1000
[  587.016857][T31214] 8021q: adding VLAN 0 to HW filter on device bond19
[  587.322269][T31233] lo speed is unknown, defaulting to 1000
[  587.475117][T31234] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  587.498197][T31234] tipc: Resetting bearer <eth:team0>
[  587.500798][T31234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  587.508955][T31233] lo speed is unknown, defaulting to 1000
[  587.527756][ T5894] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  587.657747][T31239] lo speed is unknown, defaulting to 1000
[  587.806190][T31239] lo speed is unknown, defaulting to 1000
[  587.912891][T31250] __nla_validate_parse: 31 callbacks suppressed
[  587.912904][T31250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7051'.
[  587.919798][T31252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7051'.
[  588.043041][T31255] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7052'.
[  588.096259][T31238] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7047'.
[  588.118808][T31258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7054'.
[  588.122755][T31258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7054'.
[  588.129503][T31258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7054'.
[  588.337087][T31276] siw: device registration error -23
[  588.342067][T31277] siw: device registration error -23
[  588.345692][ T5894] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  588.531854][T31284] validate_nla: 4 callbacks suppressed
[  588.531869][T31284] netlink: 'syz.0.7059': attribute type 1 has an invalid length.
[  588.547280][T31289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7059'.
[  588.551419][T31287] netlink: 'syz.2.7060': attribute type 1 has an invalid length.
[  588.554159][T31287] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7060'.
[  588.578694][T31290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  589.175999][T31296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7063'.
[  589.480376][T31311] netlink: 'syz.0.7070': attribute type 1 has an invalid length.
[  589.527240][T31316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  589.530667][T31316] syzkaller0: entered promiscuous mode
[  589.532778][T31316] syzkaller0: entered allmulticast mode
[  589.545991][T31316] tipc: Resetting bearer <eth:syzkaller0>
[  589.552144][T31315] tipc: Resetting bearer <eth:syzkaller0>
[  589.562826][T31315] tipc: Disabling bearer <eth:syzkaller0>
[  589.596992][T31322] netlink: 'syz.1.7075': attribute type 2 has an invalid length.
[  589.603156][T31323] batman_adv: batadv0: Removing interface: vlan3
[  589.643988][T31325] tipc: Resetting bearer <eth:team0>
[  589.646459][T31323] netlink: 'syz.2.7074': attribute type 10 has an invalid length.
[  589.651995][T31325] team0: Port device vlan0 removed
[  589.659827][T31325] bond0: (slave wlan1): Releasing backup interface
[  589.666820][ T5895] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  589.683261][T31323] bond0: (slave wlan1): refused to change device type
[  589.691984][T31323] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  589.699957][T31323] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  589.703925][T31325] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  589.779906][T31334] lo speed is unknown, defaulting to 1000
[  589.855357][T31336] syzkaller0: entered promiscuous mode
[  589.857784][T31336] syzkaller0: entered allmulticast mode
[  590.000016][T31334] lo speed is unknown, defaulting to 1000
[  590.248598][T31362] lo speed is unknown, defaulting to 1000
[  590.295138][ T5895] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  590.419096][T31362] lo speed is unknown, defaulting to 1000
[  591.019942][T31418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  591.469247][T31448] lo speed is unknown, defaulting to 1000
[  591.604991][T31448] lo speed is unknown, defaulting to 1000
[  591.934481][T31473] netlink: 'syz.2.7121': attribute type 1 has an invalid length.
[  592.223962][T31495] netlink: 'syz.0.7128': attribute type 1 has an invalid length.
[  592.452478][T31511] lo speed is unknown, defaulting to 1000
[  592.553849][T31511] lo speed is unknown, defaulting to 1000
[  592.581446][T31517] IPVS: stopping backup sync thread 31518 ...
[  592.582951][T31518] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  592.597262][T31509] lo speed is unknown, defaulting to 1000
[  592.673579][T31524] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  592.728236][T31533] tipc: Resetting bearer <eth:team0>
[  592.738058][T31533] team0: Port device vlan0 added
[  592.741018][T31533] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  592.757168][ T5895] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  592.833585][T31539] bridge18: port 1(veth31) entered blocking state
[  592.837021][T31539] bridge18: port 1(veth31) entered disabled state
[  592.839599][T31539] veth31: entered allmulticast mode
[  592.842410][T31539] veth31: entered promiscuous mode
[  592.863936][T31509] lo speed is unknown, defaulting to 1000
[  592.929224][T31543] __nla_validate_parse: 84 callbacks suppressed
[  592.929239][T31543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7143'.
[  592.937775][T31543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7143'.
[  592.962750][T31546] lo speed is unknown, defaulting to 1000
[  593.004646][T31552] IPVS: sync thread started: state = BACKUP, mcast_ifn = virt_wifi0, syncid = 8, id = 0
[  593.010862][T31551] IPVS: stopping backup sync thread 31552 ...
[  593.019016][T31551] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7146'.
[  593.023856][T31551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7146'.
[  593.037264][T31551] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7146'.
[  593.113086][T31553] lo speed is unknown, defaulting to 1000
[  593.132686][T31546] lo speed is unknown, defaulting to 1000
[  593.152934][T31555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7147'.
[  593.156592][T31555] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7147'.
[  593.295176][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  593.322510][T31563] netlink: 200 bytes leftover after parsing attributes in process `syz.0.7148'.
[  593.605280][ T5895] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  594.254391][T31553] lo speed is unknown, defaulting to 1000
[  600.965072][   T62] block nbd4: Possible stuck request ffff888022e78000: control (read@0,1024B). Runtime 180 seconds
[  600.968861][   T62] block nbd4: Possible stuck request ffff888022e78200: control (read@1024,1024B). Runtime 180 seconds
[  600.972432][   T62] block nbd4: Possible stuck request ffff888022e78400: control (read@2048,1024B). Runtime 180 seconds
[  600.976742][   T62] block nbd4: Possible stuck request ffff888022e78600: control (read@3072,1024B). Runtime 180 seconds
[  603.738826][T31572] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7151'.
[  603.741750][T31568] lo speed is unknown, defaulting to 1000
[  603.802681][T31577] netlink: 'syz.0.7152': attribute type 1 has an invalid length.
[  603.807895][T31577] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7152'.
[  603.816613][T31577] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7152'.
[  603.821279][T31577] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7152'.
[  603.843810][T31578] sock: sock_timestamping_bind_phc: sock not bind to device
[  603.875984][T31570] lo speed is unknown, defaulting to 1000
[  603.876352][T31568] lo speed is unknown, defaulting to 1000
[  603.909036][T31580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  603.915497][T31580] syzkaller0: entered promiscuous mode
[  603.917603][T31580] syzkaller0: entered allmulticast mode
[  603.929540][T31580] tipc: Resetting bearer <eth:syzkaller0>
[  603.933724][T31579] tipc: Resetting bearer <eth:syzkaller0>
[  603.942162][T31579] tipc: Disabling bearer <eth:syzkaller0>
[  604.007554][T31570] lo speed is unknown, defaulting to 1000
[  604.020306][T31584] wg1 speed is unknown, defaulting to 1000
[  604.024558][T31584] wg1 speed is unknown, defaulting to 1000
[  604.031110][T31584] wg1 speed is unknown, defaulting to 1000
[  604.049490][T31584] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  604.071729][T31584] wg1 speed is unknown, defaulting to 1000
[  604.079757][T31584] wg1 speed is unknown, defaulting to 1000
[  604.083674][T31584] wg1 speed is unknown, defaulting to 1000
[  604.087928][T31584] wg1 speed is unknown, defaulting to 1000
[  604.091774][T31584] wg1 speed is unknown, defaulting to 1000
[  604.154123][T31591] vxcan3: entered allmulticast mode
[  604.194374][T31592] netlink: 'syz.2.7155': attribute type 1 has an invalid length.
[  604.212772][T31592] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7155'.
[  604.239324][T31592] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7155'.
[  604.368637][T31601] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7159'.
[  604.372287][T31602] netlink: 'syz.2.7158': attribute type 1 has an invalid length.
[  604.375250][T31602] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7158'.
[  604.383952][T31602] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7158'.
[  604.481279][T31606] netlink: 'syz.2.7161': attribute type 2 has an invalid length.
[  604.753907][T31630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7168'.
[  604.851832][T31642] lo speed is unknown, defaulting to 1000
[  604.985121][T31642] lo speed is unknown, defaulting to 1000
[  604.987874][T31642] wg1 speed is unknown, defaulting to 1000
[  605.050354][T31645] IPv6: NLM_F_REPLACE set, but no existing node found!
[  605.557258][T31682] pimreg0: mtu less than device minimum
[  605.593735][T31685] netlink: 'syz.2.7184': attribute type 1 has an invalid length.
[  605.631358][T31688] IPVS: set_ctl: invalid protocol: 41 172.20.20.46:20000
[  607.086564][T31710] lo speed is unknown, defaulting to 1000
[  607.177636][T31710] lo speed is unknown, defaulting to 1000
[  607.180291][T31710] wg1 speed is unknown, defaulting to 1000
[  607.404242][T31718] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  607.404941][T31717] IPVS: stopping backup sync thread 31718 ...
[  607.568313][T31730] netlink: 'syz.1.7195': attribute type 1 has an invalid length.
[  607.573056][T31730] netlink: 'syz.1.7195': attribute type 7 has an invalid length.
[  607.631851][T31738] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  607.635560][T31737] IPVS: stopping backup sync thread 31738 ...
[  607.721945][T31743] netlink: 'syz.2.7201': attribute type 1 has an invalid length.
[  607.898467][T31758] netlink: 'syz.2.7206': attribute type 1 has an invalid length.
[  608.344012][T31788] netlink: 'syz.2.7212': attribute type 2 has an invalid length.
[  608.828297][T31811] __nla_validate_parse: 58 callbacks suppressed
[  608.828307][T31811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7219'.
[  608.834395][T31811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7219'.
[  608.931390][T31817] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7221'.
[  608.937496][T31817] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7221'.
[  609.361893][T31824] lo speed is unknown, defaulting to 1000
[  609.428470][T31828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7223'.
[  609.479882][T31832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7224'.
[  609.507115][T31824] lo speed is unknown, defaulting to 1000
[  609.510270][T31824] wg1 speed is unknown, defaulting to 1000
[  609.542683][T31839] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7226'.
[  609.612863][T31844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7227'.
[  609.689321][T31854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7230'.
[  609.792398][T31854] netlink: 788 bytes leftover after parsing attributes in process `syz.2.7230'.
[  610.123524][T31911] validate_nla: 1 callbacks suppressed
[  610.123533][T31911] netlink: 'syz.1.7243': attribute type 1 has an invalid length.
[  610.219611][T31919] lo speed is unknown, defaulting to 1000
[  610.229892][T31920] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  610.241312][T31920] gtp0: entered promiscuous mode
[  610.307897][T31926] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  610.319787][T31924] IPVS: stopping backup sync thread 31926 ...
[  610.391336][T31919] lo speed is unknown, defaulting to 1000
[  610.397281][T31919] wg1 speed is unknown, defaulting to 1000
[  610.603683][T31944] syzkaller0: entered promiscuous mode
[  610.605834][T31944] syzkaller0: entered allmulticast mode
[  610.658317][T22107] Bluetooth: hci2: command 0x0406 tx timeout
[  610.671466][T31947] netlink: 'syz.2.7254': attribute type 1 has an invalid length.
[  610.725361][T31952] lo speed is unknown, defaulting to 1000
[  610.740574][T31957] netlink: 'syz.2.7256': attribute type 1 has an invalid length.
[  610.882588][T31952] lo speed is unknown, defaulting to 1000
[  610.892883][T31952] wg1 speed is unknown, defaulting to 1000
[  611.135351][T31983] netlink: 'syz.2.7263': attribute type 1 has an invalid length.
[  611.145829][T31985] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  611.280559][T31991] lo speed is unknown, defaulting to 1000
[  611.431939][T32008] tipc: Resetting bearer <eth:team0>
[  611.438619][T32008] xt_limit: Overflow, try lower: 604147548/4200216962
[  611.465588][T31991] lo speed is unknown, defaulting to 1000
[  611.468698][T31991] wg1 speed is unknown, defaulting to 1000
[  611.491328][T32010] lo speed is unknown, defaulting to 1000
[  611.689978][T32010] lo speed is unknown, defaulting to 1000
[  611.701562][T32010] wg1 speed is unknown, defaulting to 1000
[  612.137523][T32020] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  612.141759][T32019] IPVS: stopping backup sync thread 32020 ...
[  612.405483][T32036] syzkaller0: entered promiscuous mode
[  612.407836][T32036] syzkaller0: entered allmulticast mode
[  612.456801][T32036] lo speed is unknown, defaulting to 1000
[  612.679865][T32053] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  612.682712][T32053] IPv6: NLM_F_CREATE should be set when creating new route
[  612.685436][T32053] IPv6: NLM_F_CREATE should be set when creating new route
[  612.688296][T32053] IPv6: NLM_F_CREATE should be set when creating new route
[  612.691312][T32053] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  612.853383][T32036] lo speed is unknown, defaulting to 1000
[  612.861820][T32036] wg1 speed is unknown, defaulting to 1000
[  612.892274][T32070] netlink: 'syz.1.7288': attribute type 3 has an invalid length.
[  612.985312][T32076] lo speed is unknown, defaulting to 1000
[  613.210805][T32076] lo speed is unknown, defaulting to 1000
[  613.213657][T32076] wg1 speed is unknown, defaulting to 1000
[  613.306046][T32088] lo speed is unknown, defaulting to 1000
[  613.451206][T32088] lo speed is unknown, defaulting to 1000
[  613.453839][T32088] wg1 speed is unknown, defaulting to 1000
[  613.843390][T32096] __nla_validate_parse: 46 callbacks suppressed
[  613.843405][T32096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7296'.
[  613.898877][T32099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7297'.
[  614.153343][T32117] netlink: 'syz.2.7300': attribute type 2 has an invalid length.
[  614.176715][T32121] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  614.180767][T32120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7301'.
[  614.250240][T32125] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7303'.
[  614.260766][T32129] netlink: 788 bytes leftover after parsing attributes in process `syz.1.7301'.
[  614.262842][T32128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7304'.
[  614.271433][T32128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7304'.
[  614.281704][T32128] netlink: 200 bytes leftover after parsing attributes in process `syz.0.7304'.
[  614.631879][T32146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7309'.
[  614.693853][T32151] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  614.696475][T32150] IPVS: stopping backup sync thread 32151 ...
[  614.701387][T32150] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7311'.
[  614.866772][T32161] lo speed is unknown, defaulting to 1000
[  614.958238][T32161] lo speed is unknown, defaulting to 1000
[  614.961096][T32161] wg1 speed is unknown, defaulting to 1000
[  615.500415][T32208] IPVS: stopping backup sync thread 32211 ...
[  615.533871][T32215] netlink: 'syz.0.7329': attribute type 2 has an invalid length.
[  615.919795][T32227] netlink: 'syz.1.7333': attribute type 1 has an invalid length.
[  616.027514][T32231] lo speed is unknown, defaulting to 1000
[  616.122949][T32231] lo speed is unknown, defaulting to 1000
[  616.125816][T32231] wg1 speed is unknown, defaulting to 1000
[  616.456574][T32237] netlink: 'syz.2.7336': attribute type 1 has an invalid length.
[  616.550536][T32248] netlink: 'syz.1.7340': attribute type 1 has an invalid length.
[  616.583682][T32248] 8021q: adding VLAN 0 to HW filter on device bond20
[  616.616386][T32248] veth33: entered promiscuous mode
[  616.621919][T32248] bond20: (slave veth33): Enslaving as a backup interface with a down link
[  616.739666][T32263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  616.766427][T32263] netlink: 'syz.0.7347': attribute type 1 has an invalid length.
[  616.870837][T32272] lo speed is unknown, defaulting to 1000
[  617.057358][T32272] lo speed is unknown, defaulting to 1000
[  617.061258][T32272] wg1 speed is unknown, defaulting to 1000
[  617.282476][T32307] ipvlan0: entered promiscuous mode
[  617.398561][T32310] netlink: 'syz.0.7357': attribute type 2 has an invalid length.
[  617.472822][T32312] lo speed is unknown, defaulting to 1000
[  617.642012][T32312] lo speed is unknown, defaulting to 1000
[  617.646096][T32312] wg1 speed is unknown, defaulting to 1000
[  617.700237][T32335] lo speed is unknown, defaulting to 1000
[  617.829280][T32335] lo speed is unknown, defaulting to 1000
[  617.832036][T32335] wg1 speed is unknown, defaulting to 1000
[  617.998314][T32335] syzkaller1: entered promiscuous mode
[  618.006778][T32335] syzkaller1: entered allmulticast mode
[  618.190247][T32366] netlink: 'syz.1.7372': attribute type 3 has an invalid length.
[  618.202816][T32369] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  618.206988][T32364] IPVS: stopping backup sync thread 32369 ...
[  618.296074][T32373] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  618.303435][T32373] syzkaller0: entered promiscuous mode
[  618.306444][T32373] syzkaller0: entered allmulticast mode
[  618.334366][T32373] tipc: Resetting bearer <eth:syzkaller0>
[  618.342936][T32379] nbd: must specify a device to reconfigure
[  618.352128][T32373] tipc: Resetting bearer <eth:syzkaller0>
[  618.362915][T32373] tipc: Disabling bearer <eth:syzkaller0>
[  618.667632][T32412] netlink: 'syz.2.7387': attribute type 1 has an invalid length.
[  618.795351][T32427] netlink: 'syz.2.7392': attribute type 1 has an invalid length.
[  618.857021][T32427] __nla_validate_parse: 62 callbacks suppressed
[  618.857030][T32427] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7392'.
[  618.859136][T32430] lo speed is unknown, defaulting to 1000
[  618.903561][T32433] netlink: 'syz.2.7394': attribute type 29 has an invalid length.
[  618.998989][T32430] lo speed is unknown, defaulting to 1000
[  619.010981][T32430] wg1 speed is unknown, defaulting to 1000
[  619.062191][T32437] lo speed is unknown, defaulting to 1000
[  619.177390][T32437] lo speed is unknown, defaulting to 1000
[  619.180257][T32437] wg1 speed is unknown, defaulting to 1000
[  619.429030][T32448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7397'.
[  619.507014][T32449] netlink: 788 bytes leftover after parsing attributes in process `syz.0.7397'.
[  619.605601][T32451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7398'.
[  619.733833][T32458] lo speed is unknown, defaulting to 1000
[  619.760669][T32459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7400'.
[  619.864712][T32458] lo speed is unknown, defaulting to 1000
[  619.867504][T32458] wg1 speed is unknown, defaulting to 1000
[  620.319317][T32467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7402'.
[  620.344735][T32465] lo speed is unknown, defaulting to 1000
[  620.468000][T32465] lo speed is unknown, defaulting to 1000
[  620.470942][T32465] wg1 speed is unknown, defaulting to 1000
[  620.621995][T32485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7407'.
[  620.676198][T32485] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7407'.
[  620.869910][T32497] lo speed is unknown, defaulting to 1000
[  621.032447][T32497] lo speed is unknown, defaulting to 1000
[  621.035444][T32497] wg1 speed is unknown, defaulting to 1000
[  621.487901][T32503] bond0: option ad_select: unable to set because the bond device is up
[  621.539182][T32505] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7412'.
[  621.543170][T32505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7412'.
[  621.733895][T32522] validate_nla: 1 callbacks suppressed
[  621.733909][T32522] netlink: 'syz.1.7419': attribute type 1 has an invalid length.
[  622.127286][T32554] netlink: 'syz.2.7427': attribute type 1 has an invalid length.
[  622.202514][T32570] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  622.209206][T32569] IPVS: stopping backup sync thread 32570 ...
[  622.477053][T32592] netlink: 'syz.1.7438': attribute type 2 has an invalid length.
[  622.520356][T32594] netlink: 'syz.1.7439': attribute type 1 has an invalid length.
[  622.617845][T32602] netlink: 'syz.1.7441': attribute type 1 has an invalid length.
[  622.930141][T32610] team0: Port device vlan0 removed
[  623.776611][T32636] netlink: 'syz.1.7452': attribute type 1 has an invalid length.
[  623.993885][T32647] __nla_validate_parse: 29 callbacks suppressed
[  623.993898][T32647] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7456'.
[  624.003417][T32647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7456'.
[  624.040293][T32650] veth19: entered promiscuous mode
[  624.065081][T32652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7458'.
[  624.118261][T32660] netlink: 'syz.1.7460': attribute type 1 has an invalid length.
[  624.120846][T32660] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7460'.
[  624.128114][T32660] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7460'.
[  624.160739][T32666] netlink: 200 bytes leftover after parsing attributes in process `syz.1.7463'.
[  624.165147][T32668] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7463'.
[  624.217547][T32673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7464'.
[  624.223837][T32673] netlink: 788 bytes leftover after parsing attributes in process `syz.1.7464'.
[  624.277375][T32675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7465'.
[  624.295537][T32675] netlink: 'syz.2.7465': attribute type 2 has an invalid length.
[  624.333854][T32680] netlink: 'syz.2.7467': attribute type 2 has an invalid length.
[  624.512824][T32690] lo speed is unknown, defaulting to 1000
[  624.704300][T32682] lo speed is unknown, defaulting to 1000
[  624.704888][T32690] lo speed is unknown, defaulting to 1000
[  624.709524][T32690] wg1 speed is unknown, defaulting to 1000
[  624.833783][T32682] lo speed is unknown, defaulting to 1000
[  624.836495][T32682] wg1 speed is unknown, defaulting to 1000
[  624.972279][T32707] sctp: [Deprecated]: syz.2.7476 (pid 32707) Use of int in maxseg socket option.
[  624.972279][T32707] Use struct sctp_assoc_value instead
[  624.996464][T32708] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  624.999513][T32707] IPVS: stopping backup sync thread 32708 ...
[  625.159415][T32712] netlink: 'syz.1.7477': attribute type 3 has an invalid length.
[  625.227659][T32711] lo speed is unknown, defaulting to 1000
[  625.455933][T32711] lo speed is unknown, defaulting to 1000
[  625.458539][T32711] wg1 speed is unknown, defaulting to 1000
[  625.939706][T32766] lo speed is unknown, defaulting to 1000
[  626.058178][T32766] lo speed is unknown, defaulting to 1000
[  626.061223][T32766] wg1 speed is unknown, defaulting to 1000
[  626.750663][  T352] lo speed is unknown, defaulting to 1000
[  626.866694][  T358] sock: sock_timestamping_bind_phc: sock not bind to device
[  626.897888][  T355] lo speed is unknown, defaulting to 1000
[  626.898415][  T352] lo speed is unknown, defaulting to 1000
[  626.902700][  T352] wg1 speed is unknown, defaulting to 1000
[  627.022930][  T362] lo speed is unknown, defaulting to 1000
[  627.026286][  T355] lo speed is unknown, defaulting to 1000
[  627.029968][  T355] wg1 speed is unknown, defaulting to 1000
[  627.241068][  T362] lo speed is unknown, defaulting to 1000
[  627.245358][  T362] wg1 speed is unknown, defaulting to 1000
[  627.492944][  T387] lo speed is unknown, defaulting to 1000
[  627.640933][  T387] lo speed is unknown, defaulting to 1000
[  627.644270][  T387] wg1 speed is unknown, defaulting to 1000
[  627.743816][  T393] validate_nla: 9 callbacks suppressed
[  627.743825][  T393] netlink: 'syz.0.7518': attribute type 1 has an invalid length.
[  628.101391][  T417] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  628.104901][  T416] IPVS: stopping backup sync thread 417 ...
[  628.158449][  T421] lo speed is unknown, defaulting to 1000
[  628.256093][   T33] audit: type=1800 audit(1755295531.411:22): pid=432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7527" name="blkio.bfq.time_recursive" dev="tmpfs" ino=12548 res=0 errno=0
[  628.266257][  T421] lo speed is unknown, defaulting to 1000
[  628.269771][  T421] wg1 speed is unknown, defaulting to 1000
[  628.450212][  T450] netlink: 'syz.1.7534': attribute type 1 has an invalid length.
[  628.512062][  T456] netlink: 'syz.0.7537': attribute type 1 has an invalid length.
[  628.568260][  T456] 8021q: adding VLAN 0 to HW filter on device bond23
[  628.573744][  T456] bond22: (slave bond23): making interface the new active one
[  628.580112][  T456] bond22: (slave bond23): Enslaving as an active interface with an up link
[  628.599559][  T456] 8021q: adding VLAN 0 to HW filter on device bond22
[  629.088190][  T495] netlink: 'syz.1.7550': attribute type 2 has an invalid length.
[  629.196260][  T499] lo speed is unknown, defaulting to 1000
[  629.232530][  T503] __nla_validate_parse: 130 callbacks suppressed
[  629.232543][  T503] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7553'.
[  629.433333][  T499] lo speed is unknown, defaulting to 1000
[  629.436928][  T499] wg1 speed is unknown, defaulting to 1000
[  629.464583][  T518] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7557'.
[  629.528276][  T522] delete_channel: no stack
[  629.540662][  T522] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.7558'.
[  629.544260][  T522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7558'.
[  629.595294][  T526] netlink: 'syz.1.7560': attribute type 1 has an invalid length.
[  629.632702][  T530] netlink: 'syz.0.7561': attribute type 2 has an invalid length.
[  629.659094][  T526] 8021q: adding VLAN 0 to HW filter on device bond22
[  629.717000][  T526] veth35: entered promiscuous mode
[  629.729555][  T526] bond22: (slave veth35): Enslaving as a backup interface with a down link
[  629.750370][  T536] tipc: Resetting bearer <eth:team0>
[  629.757399][  T536] veth31: left allmulticast mode
[  629.759657][  T536] veth31: left promiscuous mode
[  629.762081][  T536] bridge18: port 1(veth31) entered disabled state
[  629.772102][  T536] bond20: (slave veth33): Releasing backup interface
[  629.777128][ T5875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  629.783708][  T536] bond22: (slave veth35): Releasing backup interface
[  629.823985][  T534] lo speed is unknown, defaulting to 1000
[  629.842283][  T542] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  629.910463][  T545] netlink: 'syz.1.7566': attribute type 2 has an invalid length.
[  629.970444][  T554] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  629.973875][  T553] IPVS: stopping backup sync thread 554 ...
[  629.983229][  T553] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7569'.
[  629.991328][  T553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7569'.
[  629.994606][  T553] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7569'.
[  630.049209][  T534] lo speed is unknown, defaulting to 1000
[  630.051941][  T534] wg1 speed is unknown, defaulting to 1000
[  630.063238][  T560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7571'.
[  630.191586][  T568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7573'.
[  630.301651][  T580] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7577'.
[  630.315406][ T5895] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  630.339916][  T577] lo speed is unknown, defaulting to 1000
[  630.350687][  T582] openvswitch: netlink: Message has 16 unknown bytes.
[  630.435083][  T577] lo speed is unknown, defaulting to 1000
[  630.437710][  T577] wg1 speed is unknown, defaulting to 1000
[  630.453730][  T588] netlink: 'syz.2.7579': attribute type 1 has an invalid length.
[  630.501373][  T588] bond18: (slave gretap2): making interface the new active one
[  630.506735][  T588] bond18: (slave gretap2): Enslaving as an active interface with an up link
[  630.623482][  T602] netlink: 'syz.2.7582': attribute type 1 has an invalid length.
[  630.854717][  T626] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  630.855271][  T624] IPVS: stopping backup sync thread 626 ...
[  630.861115][  T619] lo speed is unknown, defaulting to 1000
[  630.881187][  T624] syzkaller1: entered promiscuous mode
[  630.883047][  T624] syzkaller1: entered allmulticast mode
[  631.041126][  T619] lo speed is unknown, defaulting to 1000
[  631.046096][  T619] wg1 speed is unknown, defaulting to 1000
[  631.051787][  T637] netlink: 'syz.2.7592': attribute type 1 has an invalid length.
[  631.063090][   T62] block nbd4: Possible stuck request ffff888022e78000: control (read@0,1024B). Runtime 210 seconds
[  631.067831][   T62] block nbd4: Possible stuck request ffff888022e78200: control (read@1024,1024B). Runtime 210 seconds
[  631.072199][   T62] block nbd4: Possible stuck request ffff888022e78400: control (read@2048,1024B). Runtime 210 seconds
[  631.076222][   T62] block nbd4: Possible stuck request ffff888022e78600: control (read@3072,1024B). Runtime 210 seconds
[  631.461587][  T668] can: request_module (can-proto-4) failed.
[  631.466723][  T669] can: request_module (can-proto-4) failed.
[  631.912552][  T695] lo speed is unknown, defaulting to 1000
[  632.036058][  T701] lo speed is unknown, defaulting to 1000
[  632.045465][  T695] lo speed is unknown, defaulting to 1000
[  632.048086][  T695] wg1 speed is unknown, defaulting to 1000
[  632.259214][  T701] lo speed is unknown, defaulting to 1000
[  632.262149][  T701] wg1 speed is unknown, defaulting to 1000
[  632.708111][  T755] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  632.708158][  T753] IPVS: stopping backup sync thread 755 ...
[  632.752115][  T759] IPVS: stopping backup sync thread 760 ...
[  632.754589][  T760] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  633.631254][  T780] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  633.638776][  T780] syzkaller0: entered promiscuous mode
[  633.641195][  T780] syzkaller0: entered allmulticast mode
[  633.647138][  T780] tipc: Resetting bearer <eth:syzkaller0>
[  633.649400][  T782] validate_nla: 2 callbacks suppressed
[  633.649409][  T782] netlink: 'syz.1.7635': attribute type 4 has an invalid length.
[  633.654319][  T779] tipc: Resetting bearer <eth:syzkaller0>
[  633.666679][  T779] tipc: Disabling bearer <eth:syzkaller0>
[  633.677438][  T782] netlink: 'syz.1.7635': attribute type 4 has an invalid length.
[  633.725838][  T782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  633.761416][  T787] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  633.762498][  T789] netlink: 'syz.1.7638': attribute type 1 has an invalid length.
[  634.286731][  T798] __nla_validate_parse: 65 callbacks suppressed
[  634.286742][  T798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7640'.
[  634.340621][  T805] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7642'.
[  634.343719][  T805] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  634.399663][  T807] lo speed is unknown, defaulting to 1000
[  634.442775][  T809] netlink: 192 bytes leftover after parsing attributes in process `syz.2.7643'.
[  634.451539][  T809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7643'.
[  634.466907][  T809] netlink: 'syz.2.7643': attribute type 2 has an invalid length.
[  634.470180][  T809] netlink: 'syz.2.7643': attribute type 2 has an invalid length.
[  634.524359][  T807] lo speed is unknown, defaulting to 1000
[  634.531665][  T807] wg1 speed is unknown, defaulting to 1000
[  634.609756][  T822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7646'.
[  634.609802][  T823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7646'.
[  634.629698][  T825] netlink: 'syz.1.7647': attribute type 1 has an invalid length.
[  634.637197][  T825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7647'.
[  634.642215][  T816] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7645'.
[  634.728698][  T829] ip6tnl0: entered allmulticast mode
[  634.731378][  T829] dvmrp1: left allmulticast mode
[  634.791164][  T832] tipc: Resetting bearer <eth:team0>
[  634.803564][  T832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  634.815336][ T5875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  634.827994][  T826] ip6tnl0: left allmulticast mode
[  634.891652][  T837] pim6reg1: entered promiscuous mode
[  634.893489][  T837] pim6reg1: entered allmulticast mode
[  634.984922][  T841] netlink: 'syz.2.7652': attribute type 1 has an invalid length.
[  634.988574][  T841] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7652'.
[  635.068390][  T848] netlink: 204 bytes leftover after parsing attributes in process `syz.1.7654'.
[  635.198462][  T863] IPv4: Oversized IP packet from 127.202.26.0
[  635.236717][ T5895] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  635.254506][  T865] netlink: 'syz.1.7659': attribute type 1 has an invalid length.
[  635.951922][  T896] netlink: 'syz.2.7668': attribute type 1 has an invalid length.
[  636.111718][  T920] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  636.129328][  T926] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  636.172599][  T929] netlink: 'syz.2.7675': attribute type 1 has an invalid length.
[  636.225047][  T942] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  636.225944][  T943] IPVS: stopping backup sync thread 942 ...
[  636.298585][  T954] IPVS: set_ctl: invalid protocol: 255 172.30.0.3:20001
[  636.349155][  T957] netlink: zone id is out of range
[  636.351440][  T957] netlink: zone id is out of range
[  636.459278][  T970] bond19: entered promiscuous mode
[  636.461157][  T970] bond19: entered allmulticast mode
[  636.463317][  T970] 8021q: adding VLAN 0 to HW filter on device bond19
[  636.473249][  T970] bridge20: entered promiscuous mode
[  636.476247][  T970] bridge20: entered allmulticast mode
[  636.479694][  T970] bond19: (slave bridge20): Enslaving as a backup interface with an up link
[  636.575956][T10867] bond19: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  636.695368][T10867] bond19: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  636.743340][ T1014] lo speed is unknown, defaulting to 1000
[  636.897796][ T1014] lo speed is unknown, defaulting to 1000
[  636.901000][ T1014] wg1 speed is unknown, defaulting to 1000
[  636.934119][ T1029] pim6reg9: entered allmulticast mode
[  637.142802][ T1044] lo speed is unknown, defaulting to 1000
[  637.304108][ T1057] lo speed is unknown, defaulting to 1000
[  637.306135][ T1044] lo speed is unknown, defaulting to 1000
[  637.309175][ T1044] wg1 speed is unknown, defaulting to 1000
[  637.418772][ T1057] lo speed is unknown, defaulting to 1000
[  637.423075][ T1057] wg1 speed is unknown, defaulting to 1000
[  637.904188][ T1085] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  637.905552][ T1082] IPVS: stopping backup sync thread 1085 ...
[  637.963431][ T1097] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  637.972393][ T1096] IPVS: stopping backup sync thread 1097 ...
[  637.978898][ T1087] lo speed is unknown, defaulting to 1000
[  638.128520][ T1113] delete_channel: no stack
[  638.162342][ T1087] lo speed is unknown, defaulting to 1000
[  638.165349][ T1087] wg1 speed is unknown, defaulting to 1000
[  638.243319][ T1121] lo speed is unknown, defaulting to 1000
[  638.349407][ T1121] lo speed is unknown, defaulting to 1000
[  638.352746][ T1121] wg1 speed is unknown, defaulting to 1000
[  638.602815][ T1128] lo speed is unknown, defaulting to 1000
[  638.701867][ T1128] lo speed is unknown, defaulting to 1000
[  638.706623][ T1128] wg1 speed is unknown, defaulting to 1000
[  638.822608][ T1135] sit0: entered promiscuous mode
[  638.824387][ T1135] validate_nla: 8 callbacks suppressed
[  638.824394][ T1135] netlink: 'syz.2.7720': attribute type 1 has an invalid length.
[  638.906425][ T1141] IPVS: set_ctl: invalid protocol: 60 172.30.0.3:20001
[  639.097119][ T1153] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  639.118079][ T1153] syzkaller0: entered promiscuous mode
[  639.120063][ T1153] syzkaller0: entered allmulticast mode
[  639.148539][ T1153] tipc: Resetting bearer <eth:syzkaller0>
[  639.292933][ T1165] netlink: 'syz.2.7730': attribute type 1 has an invalid length.
[  639.299043][ T1165] __nla_validate_parse: 99 callbacks suppressed
[  639.299051][ T1165] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7730'.
[  639.307130][ T1166] netlink: 'syz.2.7730': attribute type 1 has an invalid length.
[  639.310579][ T1166] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7730'.
[  639.316266][ T1165] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7730'.
[  639.372422][ T1172] openvswitch: netlink: Multiple metadata blocks provided
[  639.401811][ T1177] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7733'.
[  639.435362][ T1179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7734'.
[  639.682147][ T1207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7743'.
[  639.687128][ T1207] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7743'.
[  639.726967][ T1210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7744'.
[  639.730140][ T1210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7744'.
[  639.733603][ T1210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7744'.
[  639.868269][ T1149] tipc: Resetting bearer <eth:syzkaller0>
[  639.951537][ T1230] netlink: 'syz.2.7750': attribute type 1 has an invalid length.
[  640.994696][ T1149] tipc: Disabling bearer <eth:syzkaller0>
[  641.017634][ T1236] lo speed is unknown, defaulting to 1000
[  641.181816][ T1237] lo speed is unknown, defaulting to 1000
[  641.183807][ T1236] lo speed is unknown, defaulting to 1000
[  641.188482][ T1236] wg1 speed is unknown, defaulting to 1000
[  641.326467][ T1254] syzkaller0: entered promiscuous mode
[  641.328962][ T1254] syzkaller0: entered allmulticast mode
[  642.520215][ T1237] lo speed is unknown, defaulting to 1000
[  642.564879][ T1237] wg1 speed is unknown, defaulting to 1000
[  642.643228][ T1271] lo speed is unknown, defaulting to 1000
[  642.945969][ T1273] lo speed is unknown, defaulting to 1000
[  642.955583][ T1271] lo speed is unknown, defaulting to 1000
[  642.966535][ T1271] wg1 speed is unknown, defaulting to 1000
[  643.219177][ T1288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  643.365630][ T1273] lo speed is unknown, defaulting to 1000
[  643.369171][ T1273] wg1 speed is unknown, defaulting to 1000
[  643.502196][ T1293] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20002
[  643.741648][ T1318] netlink: 'syz.0.7774': attribute type 1 has an invalid length.
[  643.897502][   T57] block nbd6: Receive control failed (result -107)
[  643.946304][ T1322] nbd6: detected capacity change from 0 to 32
[  643.950705][ T5845] block nbd6: Dead connection, failed to find a fallback
[  643.953643][ T5845] block nbd6: shutting down sockets
[  643.978216][ T5845] blk_print_req_error: 138 callbacks suppressed
[  643.978231][ T5845] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  643.984582][ T5845] buffer_io_error: 138 callbacks suppressed
[  643.984592][ T5845] Buffer I/O error on dev nbd6, logical block 0, async page read
[  644.026807][ T5845] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.029777][ T5845] Buffer I/O error on dev nbd6, logical block 0, async page read
[  644.038202][ T1338] pimreg: tun_chr_ioctl cmd 2147767506
[  644.042668][ T1336] lo speed is unknown, defaulting to 1000
[  644.053006][ T5845] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.065090][ T5845] Buffer I/O error on dev nbd6, logical block 0, async page read
[  644.067979][ T5845] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.071186][ T5845] Buffer I/O error on dev nbd6, logical block 0, async page read
[  644.074170][ T5845] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.097097][ T5845] Buffer I/O error on dev nbd6, logical block 0, async page read
[  644.109475][ T5845] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.112726][ T5845] Buffer I/O error on dev nbd6, logical block 0, async page read
[  644.124696][ T5845] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.163215][ T5845] Buffer I/O error on dev nbd6, logical block 0, async page read
[  644.177205][ T5845] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.180801][ T5845] Buffer I/O error on dev nbd6, logical block 0, async page read
[  644.184037][ T5845] ldm_validate_partition_table(): Disk read failed.
[  644.205042][ T5845] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.208514][ T5845] Buffer I/O error on dev nbd6, logical block 0, async page read
[  644.212404][ T5845] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.229874][ T5845] Buffer I/O error on dev nbd6, logical block 0, async page read
[  644.233386][ T5845] Dev nbd6: unable to read RDB block 0
[  644.236185][ T5845]  nbd6: unable to read partition table
[  644.275039][ T5845] ldm_validate_partition_table(): Disk read failed.
[  644.277660][ T5845] Dev nbd6: unable to read RDB block 0
[  644.280827][ T5845]  nbd6: unable to read partition table
[  644.387306][ T1342] __nla_validate_parse: 29 callbacks suppressed
[  644.387316][ T1342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7783'.
[  644.391197][ T1336] lo speed is unknown, defaulting to 1000
[  644.413165][ T1336] wg1 speed is unknown, defaulting to 1000
[  644.458021][ T1344] netlink: 324 bytes leftover after parsing attributes in process `syz.1.7784'.
[  644.460999][ T1344] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7784'.
[  644.474800][ T1344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7784'.
[  644.492133][ T1344] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.7784'.
[  644.503740][ T1344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7784'.
[  644.506580][ T1345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7784'.
[  644.506736][ T1344] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7784'.
[  644.513516][ T1345] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7784'.
[  644.522698][T22107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  644.528521][T22107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  644.532368][T22107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  644.537057][T22107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  644.540608][T22107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  644.614632][ T1355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7785'.
[  644.622423][ T1346] lo speed is unknown, defaulting to 1000
[  644.797153][ T1346] lo speed is unknown, defaulting to 1000
[  644.799768][ T1346] wg1 speed is unknown, defaulting to 1000
[  644.924000][ T1374] netlink: 'syz.0.7788': attribute type 1 has an invalid length.
[  644.971541][ T1370] lo speed is unknown, defaulting to 1000
[  645.032928][ T1346] chnl_net:caif_netlink_parms(): no params data found
[  645.187491][ T1346] bridge0: port 1(bridge_slave_0) entered blocking state
[  645.190558][ T1346] bridge0: port 1(bridge_slave_0) entered disabled state
[  645.199554][ T1346] bridge_slave_0: entered allmulticast mode
[  645.203540][ T1346] bridge_slave_0: entered promiscuous mode
[  645.217234][ T1346] bridge0: port 2(bridge_slave_1) entered blocking state
[  645.219809][ T1346] bridge0: port 2(bridge_slave_1) entered disabled state
[  645.222459][ T1346] bridge_slave_1: entered allmulticast mode
[  645.228107][ T1346] bridge_slave_1: entered promiscuous mode
[  645.282113][ T1346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  645.294400][ T1346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  645.343422][ T1346] team0: Port device team_slave_0 added
[  645.346526][ T1370] lo speed is unknown, defaulting to 1000
[  645.349111][ T1370] wg1 speed is unknown, defaulting to 1000
[  645.356532][ T1346] team0: Port device team_slave_1 added
[  645.358726][ T1382] lo speed is unknown, defaulting to 1000
[  645.379519][ T1346] batman_adv: batadv0: Adding interface: batadv_slave_0
[  645.382207][ T1346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  645.391325][ T1346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  645.403760][ T1346] batman_adv: batadv0: Adding interface: batadv_slave_1
[  645.406265][ T1346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  645.416116][ T1346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  645.462591][ T1397] lo speed is unknown, defaulting to 1000
[  645.488600][ T1382] lo speed is unknown, defaulting to 1000
[  645.494708][ T1346] hsr_slave_0: entered promiscuous mode
[  645.499103][ T1346] hsr_slave_1: entered promiscuous mode
[  645.501444][ T1346] debugfs: 'hsr0' already exists in 'hsr'
[  645.503385][ T1346] Cannot create hsr debugfs directory
[  645.509545][ T1382] wg1 speed is unknown, defaulting to 1000
[  645.592748][ T1397] lo speed is unknown, defaulting to 1000
[  645.597069][ T1397] wg1 speed is unknown, defaulting to 1000
[  645.873125][ T1346] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  645.879461][ T1346] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  645.903650][ T1346] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  645.942702][ T1346] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  646.006353][ T1346] 8021q: adding VLAN 0 to HW filter on device bond0
[  646.017400][ T1346] 8021q: adding VLAN 0 to HW filter on device team0
[  646.024609][T14682] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.027636][T14682] bridge0: port 1(bridge_slave_0) entered forwarding state
[  646.040687][T14682] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.042985][T14682] bridge0: port 2(bridge_slave_1) entered forwarding state
[  646.195355][ T1346] 8021q: adding VLAN 0 to HW filter on device batadv0
[  646.231813][ T1346] veth0_vlan: entered promiscuous mode
[  646.240664][ T1346] veth1_vlan: entered promiscuous mode
[  646.263474][ T1346] veth0_macvtap: entered promiscuous mode
[  646.279994][ T1346] veth1_macvtap: entered promiscuous mode
[  646.292164][ T1346] batman_adv: batadv0: Interface activated: batadv_slave_0
[  646.299012][ T1346] batman_adv: batadv0: Interface activated: batadv_slave_1
[  646.307053][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  646.310450][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  646.313716][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  646.320311][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  646.403705][T27133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  646.408601][T27133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  646.451554][T14676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  646.454149][T14676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  646.565377][ T5236] Bluetooth: hci0: command tx timeout
[  646.691939][ T1456] netlink: 'syz.1.7800': attribute type 3 has an invalid length.
[  646.748461][ T1462] sctp: [Deprecated]: syz.1.7802 (pid 1462) Use of struct sctp_assoc_value in delayed_ack socket option.
[  646.748461][ T1462] Use struct sctp_sack_info instead
[  647.140672][ T1493] bond22: (slave bond23): Releasing backup interface
[  647.212162][ T1496] lo speed is unknown, defaulting to 1000
[  647.243313][ T1497] netlink: 'syz.0.7812': attribute type 21 has an invalid length.
[  647.249085][ T1497] netlink: 'syz.0.7812': attribute type 6 has an invalid length.
[  647.304135][ T1496] lo speed is unknown, defaulting to 1000
[  647.306929][ T1496] wg1 speed is unknown, defaulting to 1000
[  647.773225][ T1504] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  648.189046][ T1531] netlink: 'syz.3.7823': attribute type 1 has an invalid length.
[  648.269062][ T1531] veth3: entered promiscuous mode
[  648.291986][ T1538] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  648.304256][ T1546] bridge_slave_0: left allmulticast mode
[  648.309569][ T1546] bridge_slave_0: left promiscuous mode
[  648.312198][ T1546] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.324007][ T1546] bridge_slave_1: left allmulticast mode
[  648.329258][ T1546] bridge_slave_1: left promiscuous mode
[  648.331847][ T1546] bridge0: port 2(bridge_slave_1) entered disabled state
[  648.339427][ T1546] bond0: (slave bond_slave_0): Releasing backup interface
[  648.350590][ T1546] bond0: (slave bond_slave_1): Releasing backup interface
[  648.361089][ T1546] team0: Port device team_slave_0 removed
[  648.369305][ T1546] team0: Port device team_slave_1 removed
[  648.372462][ T1546] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  648.376991][ T1546] batman_adv: batadv0: Removing interface: batadv_slave_0
[  648.381533][ T1546] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  648.384674][ T1546] batman_adv: batadv0: Removing interface: batadv_slave_1
[  648.397196][ T1548] netlink: 'syz.1.7828': attribute type 1 has an invalid length.
[  648.473514][ T1554] lo speed is unknown, defaulting to 1000
[  648.648094][ T5236] Bluetooth: hci0: command tx timeout
[  648.731203][ T1557] lo speed is unknown, defaulting to 1000
[  648.735812][ T1554] lo speed is unknown, defaulting to 1000
[  648.747481][ T1554] wg1 speed is unknown, defaulting to 1000
[  648.901702][ T1566] lo speed is unknown, defaulting to 1000
[  648.902275][ T1557] lo speed is unknown, defaulting to 1000
[  648.907250][ T1557] wg1 speed is unknown, defaulting to 1000
[  649.034405][ T1566] lo speed is unknown, defaulting to 1000
[  649.037128][ T1566] wg1 speed is unknown, defaulting to 1000
[  649.187348][ T1595] netlink: 'syz.1.7842': attribute type 1 has an invalid length.
[  649.344191][ T1603] IPVS: stopping backup sync thread 926 ...
[  649.402491][ T1601] __nla_validate_parse: 42 callbacks suppressed
[  649.402501][ T1601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7843'.
[  649.438713][ T1613] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7845'.
[  649.442385][ T1613] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7845'.
[  649.455096][ T1613] netlink: 'syz.0.7845': attribute type 6 has an invalid length.
[  649.457906][ T1613] netlink: 'syz.0.7845': attribute type 5 has an invalid length.
[  649.460701][ T1613] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7845'.
[  649.464081][ T1612] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7845'.
[  649.467840][ T1612] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7845'.
[  649.472360][ T1612] netlink: 'syz.0.7845': attribute type 6 has an invalid length.
[  649.478081][ T1612] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7845'.
[  649.519240][ T1615] netlink: 200 bytes leftover after parsing attributes in process `syz.0.7846'.
[  649.589624][ T1615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7846'.
[  649.744099][ T1620] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7848'.
[  649.782556][ T1617] lo speed is unknown, defaulting to 1000
[  649.915073][ T1617] lo speed is unknown, defaulting to 1000
[  649.918211][ T1617] wg1 speed is unknown, defaulting to 1000
[  650.133930][ T1631] validate_nla: 1 callbacks suppressed
[  650.133945][ T1631] netlink: 'syz.1.7851': attribute type 1 has an invalid length.
[  650.155739][ T1631] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR
[  650.430498][ T1649] lo speed is unknown, defaulting to 1000
[  650.509887][ T1649] lo speed is unknown, defaulting to 1000
[  650.512910][ T1649] wg1 speed is unknown, defaulting to 1000
[  650.720938][ T1655] lo speed is unknown, defaulting to 1000
[  650.725075][ T5236] Bluetooth: hci0: command tx timeout
[  650.879493][ T1655] lo speed is unknown, defaulting to 1000
[  650.885388][ T1655] wg1 speed is unknown, defaulting to 1000
[  651.319426][ T1672] lo speed is unknown, defaulting to 1000
[  651.462173][ T1672] lo speed is unknown, defaulting to 1000
[  651.464360][ T1676] lo speed is unknown, defaulting to 1000
[  651.469062][ T1672] wg1 speed is unknown, defaulting to 1000
[  651.624415][ T1683] 8021q: adding VLAN 0 to HW filter on device bond24
[  651.650961][ T1676] lo speed is unknown, defaulting to 1000
[  651.667399][ T1676] wg1 speed is unknown, defaulting to 1000
[  651.966176][ T1705] netlink: 'syz.3.7872': attribute type 1 has an invalid length.
[  651.988474][ T1692] netlink: 'syz.1.7869': attribute type 11 has an invalid length.
[  651.994027][ T1692] netlink: 'syz.1.7869': attribute type 11 has an invalid length.
[  652.078081][ T1707] lo speed is unknown, defaulting to 1000
[  652.086610][ T5236] Bluetooth: hci2: command 0x0406 tx timeout
[  652.178643][ T1723] sock: sock_timestamping_bind_phc: sock not bind to device
[  652.338065][ T1707] lo speed is unknown, defaulting to 1000
[  652.365370][ T1707] wg1 speed is unknown, defaulting to 1000
[  652.573698][ T1747] lo speed is unknown, defaulting to 1000
[  652.745978][ T1744] lo speed is unknown, defaulting to 1000
[  652.805185][ T5236] Bluetooth: hci0: command tx timeout
[  652.840576][ T1744] lo speed is unknown, defaulting to 1000
[  652.843579][ T1744] wg1 speed is unknown, defaulting to 1000
[  652.909148][ T1747] lo speed is unknown, defaulting to 1000
[  652.923470][ T1747] wg1 speed is unknown, defaulting to 1000
[  652.967337][ T1755] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  652.969026][ T1756] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  653.310532][ T1777] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  653.319027][ T1775] IPVS: stopping backup sync thread 1777 ...
[  653.324668][ T1779] netlink: 'syz.3.7891': attribute type 1 has an invalid length.
[  653.449353][ T1787] netlink: 'syz.1.7893': attribute type 30 has an invalid length.
[  653.496513][ T1790] lo speed is unknown, defaulting to 1000
[  653.593621][ T1798] netlink: 'syz.0.7895': attribute type 21 has an invalid length.
[  653.596988][ T1798] netlink: 'syz.0.7895': attribute type 6 has an invalid length.
[  653.624073][ T1801] bridge0: entered allmulticast mode
[  653.632073][ T1801] pim6reg: entered allmulticast mode
[  653.775762][ T1790] lo speed is unknown, defaulting to 1000
[  653.780497][ T1790] wg1 speed is unknown, defaulting to 1000
[  654.317246][ T1826] netlink: 'syz.0.7901': attribute type 2 has an invalid length.
[  654.799286][ T1839] __nla_validate_parse: 40 callbacks suppressed
[  654.799300][ T1839] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7904'.
[  654.952739][ T1841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7906'.
[  655.004446][ T1848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7908'.
[  655.092310][ T1850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7910'.
[  655.140473][ T1853] lo speed is unknown, defaulting to 1000
[  655.247954][ T1860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7911'.
[  655.308175][ T1853] lo speed is unknown, defaulting to 1000
[  655.311052][ T1853] wg1 speed is unknown, defaulting to 1000
[  655.355626][ T1873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7913'.
[  655.359642][ T1873] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7913'.
[  655.362526][ T1873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7913'.
[  655.376572][ T1873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7913'.
[  655.479350][ T1877] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7916'.
[  655.654616][ T1894] lo speed is unknown, defaulting to 1000
[  655.746057][ T1894] lo speed is unknown, defaulting to 1000
[  655.748744][ T1894] wg1 speed is unknown, defaulting to 1000
[  656.160327][ T1903] netlink: 'syz.3.7923': attribute type 1 has an invalid length.
[  656.263517][ T1912] lo speed is unknown, defaulting to 1000
[  656.302656][ T1918] netlink: 'syz.0.7927': attribute type 20 has an invalid length.
[  656.416974][ T1912] lo speed is unknown, defaulting to 1000
[  656.419591][ T1912] wg1 speed is unknown, defaulting to 1000
[  656.710344][ T1929] lo speed is unknown, defaulting to 1000
[  656.747579][ T1933] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  656.750505][ T1933] syzkaller0: entered promiscuous mode
[  656.752340][ T1933] syzkaller0: entered allmulticast mode
[  656.808053][ T1929] lo speed is unknown, defaulting to 1000
[  656.810950][ T1929] wg1 speed is unknown, defaulting to 1000
[  656.865429][ T1928] tipc: Resetting bearer <eth:syzkaller0>
[  656.887948][ T1928] tipc: Disabling bearer <eth:syzkaller0>
[  656.922509][ T1938] lo: entered allmulticast mode
[  656.924584][ T1938] lo: left allmulticast mode
[  657.235037][ T1949] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  657.549706][ T1981] netlink: 'syz.1.7946': attribute type 2 has an invalid length.
[  657.600210][ T1985] netdevsim netdevsim3: Direct firmware load for  failed with error -2
[  657.605371][ T1985] netdevsim netdevsim3: Falling back to sysfs fallback for: 
[  657.661717][ T1989] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  657.668764][ T1989] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  658.495735][ T1994] openvswitch: netlink: Unknown nsh attribute 0
[  658.498267][ T1994] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  658.550194][ T1996] lo speed is unknown, defaulting to 1000
[  658.584326][ T5875] IPVS: starting estimator thread 0...
[  658.658200][ T1996] lo speed is unknown, defaulting to 1000
[  658.661374][ T1996] wg1 speed is unknown, defaulting to 1000
[  658.675183][ T2000] IPVS: using max 46 ests per chain, 110400 per kthread
[  659.858364][ T2046] sock: sock_set_timeout: `syz.1.7963' (pid 2046) tries to set negative timeout
[  659.878187][ T2048] __nla_validate_parse: 37 callbacks suppressed
[  659.878203][ T2048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7964'.
[  660.002021][ T2057] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7967'.
[  660.008047][ T2057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7967'.
[  660.030244][ T2054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7966'.
[  660.037759][ T2054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7966'.
[  660.043896][ T2054] netlink: 'syz.0.7966': attribute type 1 has an invalid length.
[  660.141824][ T2060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7968'.
[  660.147819][ T2060] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7968'.
[  660.261594][ T2066] batadv_slave_1: Device is already in use.
[  660.403268][ T2075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7972'.
[  660.442501][ T2077] IPVS: length: 226 != 186376
[  660.600644][ T2086] netlink: 'syz.0.7977': attribute type 2 has an invalid length.
[  660.605527][ T2086] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20000
[  660.718025][ T2092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7979'.
[  660.838372][ T2103] netlink: 788 bytes leftover after parsing attributes in process `syz.0.7981'.
[  661.014231][ T2109] netlink: 'syz.1.7984': attribute type 4 has an invalid length.
[  661.021074][ T2109] netlink: 'syz.1.7984': attribute type 4 has an invalid length.
[  661.102054][ T2111] netlink: 'syz.1.7985': attribute type 1 has an invalid length.
[  661.138013][   T62] block nbd4: Possible stuck request ffff888022e78000: control (read@0,1024B). Runtime 240 seconds
[  661.142703][   T62] block nbd4: Possible stuck request ffff888022e78200: control (read@1024,1024B). Runtime 240 seconds
[  661.147315][   T62] block nbd4: Possible stuck request ffff888022e78400: control (read@2048,1024B). Runtime 240 seconds
[  661.151034][   T62] block nbd4: Possible stuck request ffff888022e78600: control (read@3072,1024B). Runtime 240 seconds
[  661.158188][ T2113] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  661.161168][ T2114] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  661.307504][ T2122] lo speed is unknown, defaulting to 1000
[  661.449454][ T2121] lo speed is unknown, defaulting to 1000
[  661.449757][ T2122] lo speed is unknown, defaulting to 1000
[  661.454690][ T2122] wg1 speed is unknown, defaulting to 1000
[  661.591626][ T2121] lo speed is unknown, defaulting to 1000
[  661.597713][ T2121] wg1 speed is unknown, defaulting to 1000
[  661.818672][ T2139] lo speed is unknown, defaulting to 1000
[  661.926441][ T2139] lo speed is unknown, defaulting to 1000
[  661.929467][ T2139] wg1 speed is unknown, defaulting to 1000
[  662.177843][ T2155] can: request_module (can-proto-0) failed.
[  662.220800][ T2166] netlink: 'syz.0.7996': attribute type 6 has an invalid length.
[  662.224158][ T2166] netlink: 'syz.0.7996': attribute type 4 has an invalid length.
[  662.437802][ T2177] lo speed is unknown, defaulting to 1000
[  662.562377][ T2187] sock: sock_timestamping_bind_phc: sock not bind to device
[  662.610306][ T2190] lo speed is unknown, defaulting to 1000
[  662.614188][ T2177] lo speed is unknown, defaulting to 1000
[  662.621137][ T2177] wg1 speed is unknown, defaulting to 1000
[  662.794162][ T2190] lo speed is unknown, defaulting to 1000
[  662.797669][ T2190] wg1 speed is unknown, defaulting to 1000
[  662.798353][ T2181] lo speed is unknown, defaulting to 1000
[  663.038327][ T2181] lo speed is unknown, defaulting to 1000
[  663.042215][ T2181] wg1 speed is unknown, defaulting to 1000
[  663.644263][ T5874] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  663.647721][ T5874] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  663.651777][ T5874] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  663.660256][ T5874] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  663.671055][ T2238] lo speed is unknown, defaulting to 1000
[  663.812693][ T2238] lo speed is unknown, defaulting to 1000
[  663.816563][ T2238] wg1 speed is unknown, defaulting to 1000
[  663.863202][ T2258] netlink: 'syz.3.8015': attribute type 1 has an invalid length.
[  664.012180][ T2264] lo speed is unknown, defaulting to 1000
[  664.280179][ T2264] lo speed is unknown, defaulting to 1000
[  664.283922][ T2264] wg1 speed is unknown, defaulting to 1000
[  664.537210][ T2306] netlink: 'syz.1.8027': attribute type 2 has an invalid length.
[  664.661566][ T2311] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  664.673403][ T2311] openvswitch: netlink: Duplicate key (type 0).
[  664.677542][ T2311] nbd: couldn't find a device at index 0
[  664.783009][ T2318] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  664.904116][ T2327] __nla_validate_parse: 29 callbacks suppressed
[  664.904132][ T2327] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8035'.
[  664.910990][ T2327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8035'.
[  664.914979][ T2327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8035'.
[  664.948975][ T2331] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8037'.
[  664.952668][ T2331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8037'.
[  665.072234][ T2336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8039'.
[  665.089483][ T2336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8039'.
[  665.093199][ T2336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8039'.
[  665.255098][ T2351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8044'.
[  665.258906][ T2351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8044'.
[  665.299957][ T2356] lo speed is unknown, defaulting to 1000
[  665.397105][ T2356] lo speed is unknown, defaulting to 1000
[  665.400093][ T2356] wg1 speed is unknown, defaulting to 1000
[  665.480636][ T2368] netlink: 'syz.3.8050': attribute type 4 has an invalid length.
[  665.487199][ T2368] netlink: 'syz.3.8050': attribute type 4 has an invalid length.
[  665.656895][ T2378] Bluetooth: MGMT ver 1.23
[  665.691364][ T2382] netlink: ct family unspecified
[  665.693588][ T2382] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  665.755856][ T2388] netlink: 'syz.3.8055': attribute type 1 has an invalid length.
[  665.875501][ T2395] netlink: 'syz.3.8057': attribute type 4 has an invalid length.
[  666.044384][ T2412] netlink: 'syz.1.8063': attribute type 4 has an invalid length.
[  666.089624][ T2418] netlink: 'syz.0.8065': attribute type 2 has an invalid length.
[  666.252143][ T2430] lo speed is unknown, defaulting to 1000
[  666.342396][ T2430] lo speed is unknown, defaulting to 1000
[  666.345616][ T2430] wg1 speed is unknown, defaulting to 1000
[  666.885580][ T2439] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  666.888794][ T2438] IPVS: stopping backup sync thread 2439 ...
[  666.954394][ T2452] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  666.958229][ T2451] IPVS: stopping backup sync thread 2452 ...
[  667.040822][ T2461] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  667.048416][ T2460] IPVS: stopping backup sync thread 2461 ...
[  667.214241][ T2489] 8021q: adding VLAN 0 to HW filter on device team0
[  667.219247][ T2489] bond0: (slave team0): Enslaving as an active interface with an up link
[  667.276938][ T2494] validate_nla: 2 callbacks suppressed
[  667.276947][ T2494] netlink: 'syz.3.8085': attribute type 3 has an invalid length.
[  667.591477][ T2507] netlink: 'syz.0.8087': attribute type 1 has an invalid length.
[  668.249765][ T2541] sch_tbf: burst 88 is lower than device veth37 mtu (1514) !
[  668.342633][ T2568] netlink: 'syz.1.8100': attribute type 1 has an invalid length.
[  668.440204][ T2584] lo speed is unknown, defaulting to 1000
[  668.539830][ T2584] lo speed is unknown, defaulting to 1000
[  668.542570][ T2584] wg1 speed is unknown, defaulting to 1000
[  668.583796][ T2590] lo speed is unknown, defaulting to 1000
[  668.844240][ T2613] lo speed is unknown, defaulting to 1000
[  668.848425][ T2590] lo speed is unknown, defaulting to 1000
[  668.851673][ T2590] wg1 speed is unknown, defaulting to 1000
[  669.051195][ T2613] lo speed is unknown, defaulting to 1000
[  669.054024][ T2613] wg1 speed is unknown, defaulting to 1000
[  669.307744][ T2630] lo speed is unknown, defaulting to 1000
[  669.420981][ T2636] lo speed is unknown, defaulting to 1000
[  669.439429][ T2630] lo speed is unknown, defaulting to 1000
[  669.442067][ T2630] wg1 speed is unknown, defaulting to 1000
[  669.571615][ T2643] lo speed is unknown, defaulting to 1000
[  669.575964][ T2636] lo speed is unknown, defaulting to 1000
[  669.578482][ T2636] wg1 speed is unknown, defaulting to 1000
[  669.719527][ T2643] lo speed is unknown, defaulting to 1000
[  669.726465][ T2643] wg1 speed is unknown, defaulting to 1000
[  669.884235][ T2660] netlink: 'syz.1.8111': attribute type 2 has an invalid length.
[  669.892130][ T2659] netlink: 'syz.1.8111': attribute type 9 has an invalid length.
[  669.951591][ T2663] netlink: 'syz.1.8112': attribute type 1 has an invalid length.
[  669.954213][ T2663] __nla_validate_parse: 43 callbacks suppressed
[  669.954221][ T2663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8112'.
[  670.109167][ T2667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8113'.
[  670.115872][ T2667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8113'.
[  670.191385][ T2678] lo speed is unknown, defaulting to 1000
[  670.261155][ T2681] netlink: 'syz.1.8116': attribute type 21 has an invalid length.
[  670.269657][ T2681] netlink: 'syz.1.8116': attribute type 6 has an invalid length.
[  670.273137][ T2681] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8116'.
[  670.285568][ T2681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8116'.
[  670.337307][ T2678] lo speed is unknown, defaulting to 1000
[  670.340029][ T2678] wg1 speed is unknown, defaulting to 1000
[  670.487437][ T2695] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  670.501631][ T2695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8120'.
[  670.507507][ T2695] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8120'.
[  670.511152][ T2695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8120'.
[  670.531595][ T2698] lo speed is unknown, defaulting to 1000
[  670.639997][ T2698] lo speed is unknown, defaulting to 1000
[  670.642690][ T2698] wg1 speed is unknown, defaulting to 1000
[  671.090961][ T2709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8123'.
[  673.525327][ T5295] udevd[5295]: worker [5852] /devices/virtual/block/nbd4 timeout; kill it
[  673.528892][ T5295] udevd[5295]: seq 41737 '/devices/virtual/block/nbd4' killed
[  686.113917][ T2717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  686.119508][ T2717] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  686.123679][ T2717] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  686.126942][ T2717] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  686.130166][ T2717] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  686.132758][ T2717] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  686.135974][ T2717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  686.139853][T22107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  686.142634][T22107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  686.146142][T22107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  686.194017][ T2715] lo speed is unknown, defaulting to 1000
[  686.289860][ T2718] lo speed is unknown, defaulting to 1000
[  686.296024][ T2715] lo speed is unknown, defaulting to 1000
[  686.298564][ T2715] wg1 speed is unknown, defaulting to 1000
[  686.485130][ T2718] lo speed is unknown, defaulting to 1000
[  686.488901][ T2718] wg1 speed is unknown, defaulting to 1000
[  686.629008][ T2718] chnl_net:caif_netlink_parms(): no params data found
[  686.892936][ T2723] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  686.896686][ T2723] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  686.899642][ T2723] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  686.902452][ T2723] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  686.907827][ T2723] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  688.166144][ T2723] Bluetooth: hci3: command tx timeout
[  688.168528][ T2723] Bluetooth: hci4: command tx timeout
[  688.965001][ T2724] Bluetooth: hci5: command tx timeout
[  690.246318][ T2724] Bluetooth: hci4: command tx timeout
[  690.248141][ T2724] Bluetooth: hci3: command tx timeout
[  691.046917][ T2723] Bluetooth: hci5: command tx timeout
[  692.325082][ T2723] Bluetooth: hci3: command tx timeout
[  692.327420][ T2723] Bluetooth: hci4: command tx timeout
[  693.124899][ T2724] Bluetooth: hci5: command tx timeout
[  694.405022][ T2724] Bluetooth: hci4: command tx timeout
[  694.407424][ T2724] Bluetooth: hci3: command tx timeout
[  695.207404][ T2723] Bluetooth: hci5: command tx timeout
[  721.285024][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  747.227936][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  747.232423][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  747.239797][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  747.243424][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  747.247848][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  747.282873][ T5236] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  747.287632][ T5236] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  747.291077][ T5236] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  747.294197][ T5236] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  747.299252][ T5236] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  747.319053][ T5236] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  747.323310][ T5236] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  747.326737][ T5236] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  747.329483][ T5236] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  747.332749][ T5236] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  749.284955][ T5236] Bluetooth: hci6: command tx timeout
[  749.364982][ T5236] Bluetooth: hci7: command tx timeout
[  749.367738][ T5236] Bluetooth: hci8: command tx timeout
[  751.365004][ T2724] Bluetooth: hci6: command tx timeout
[  751.444949][ T2724] Bluetooth: hci8: command tx timeout
[  751.446963][ T2724] Bluetooth: hci7: command tx timeout
[  753.444953][ T5236] Bluetooth: hci6: command tx timeout
[  753.525041][ T5236] Bluetooth: hci7: command tx timeout
[  753.527361][ T5236] Bluetooth: hci8: command tx timeout
[  755.525132][ T2724] Bluetooth: hci6: command tx timeout
[  755.604934][ T2724] Bluetooth: hci8: command tx timeout
[  755.607168][ T2724] Bluetooth: hci7: command tx timeout
[  775.564767][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  775.567622][    C0] rcu: 	0-....: (1 GPs behind) idle=a9cc/1/0x4000000000000000 softirq=298391/298392 fqs=5249
[  775.573990][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  775.576631][    C0] rcu: 	 number:     6028          0            0
[  775.579298][    C0] rcu: 	cputime:      224          0        52250   ==> 52500(ms)
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  775.582583][    C0] rcu: 	(t=10502 jiffies g=144277 q=1804 ncpus=2)
[  775.585399][    C0] CPU: 0 UID: 0 PID: 2700 Comm: syz.0.8122 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59-dirty #0 PREEMPT(full) 
[  775.585415][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  775.585423][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[  775.585445][    C0] Code: 89 fb e8 23 00 00 00 48 8b 3d 64 49 fe 0b 48 89 de 5b e9 73 98 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 40 a0 92 65 8b 15 88 94
[  775.585455][    C0] RSP: 0018:ffffc900032cf0d8 EFLAGS: 00000293
[  775.585467][    C0] RAX: 1ffff110089f4f55 RBX: 00000000be000000 RCX: ffff888032ba3980
[  775.585476][    C0] RDX: 0000000000000000 RSI: 0000000054000000 RDI: 00000000be000000
[  775.585483][    C0] RBP: ffffc900032cf230 R08: 0000000000000000 R09: ffffffff8a217a40
[  775.585491][    C0] R10: dffffc0000000000 R11: fffff52000659e0c R12: dffffc0000000000
[  775.585499][    C0] R13: ffff888044fa7a80 R14: 0000000054000000 R15: ffffc900032cf6a0
[  775.585506][    C0] FS:  00007f40773426c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  775.585515][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  775.585523][    C0] CR2: 00007f4077321d58 CR3: 00000000359e6000 CR4: 00000000000006f0
[  775.585557][    C0] Call Trace:
[  775.585564][    C0]  <TASK>
[  775.585568][    C0]  xfrm_alloc_spi+0x534/0xf30
[  775.585585][    C0]  ? xfrm_alloc_spi+0x2a0/0xf30
[  775.585609][    C0]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  775.585621][    C0]  ? xfrm_find_acq+0x87/0xa0
[  775.585640][    C0]  xfrm_alloc_userspi+0x70b/0xc90
[  775.585663][    C0]  ? apparmor_capable+0x137/0x1b0
[  775.585678][    C0]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  775.585693][    C0]  ? __nla_parse+0x40/0x60
[  775.585714][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  775.585731][    C0]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  775.585769][    C0]  ? __pfx___mutex_trylock_common+0x10/0x10
[  775.585786][    C0]  ? rcu_is_watching+0x15/0xb0
[  775.585798][    C0]  ? trace_contention_end+0x39/0x120
[  775.585809][    C0]  ? __mutex_lock+0x335/0x1360
[  775.585828][    C0]  netlink_rcv_skb+0x208/0x470
[  775.585843][    C0]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  775.585855][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  775.585877][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  775.585932][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  775.585948][    C0]  xfrm_netlink_rcv+0x79/0x90
[  775.585959][    C0]  netlink_unicast+0x82f/0x9e0
[  775.585977][    C0]  ? __pfx_netlink_unicast+0x10/0x10
[  775.585990][    C0]  ? netlink_sendmsg+0x642/0xb30
[  775.586001][    C0]  ? skb_put+0x11b/0x210
[  775.586014][    C0]  netlink_sendmsg+0x805/0xb30
[  775.586036][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  775.586052][    C0]  ? aa_sock_msg_perm+0xf1/0x1d0
[  775.586067][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  775.586078][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  775.586091][    C0]  __sock_sendmsg+0x21c/0x270
[  775.586106][    C0]  ____sys_sendmsg+0x505/0x830
[  775.586121][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  775.586137][    C0]  ? import_iovec+0x74/0xa0
[  775.586152][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  775.586164][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  775.586197][    C0]  ? __fget_files+0x2a/0x420
[  775.586205][    C0]  ? __fget_files+0x3a0/0x420
[  775.586221][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  775.586234][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  775.586260][    C0]  ? rcu_is_watching+0x15/0xb0
[  775.586274][    C0]  ? do_syscall_64+0xbe/0x3b0
[  775.586292][    C0]  do_syscall_64+0xfa/0x3b0
[  775.586306][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  775.586319][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.586331][    C0]  ? exc_page_fault+0x9f/0xf0
[  775.586346][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.586357][    C0] RIP: 0033:0x7f407658ebe9
[  775.586368][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  775.586378][    C0] RSP: 002b:00007f4077342038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  775.586390][    C0] RAX: ffffffffffffffda RBX: 00007f40767b5fa0 RCX: 00007f407658ebe9
[  775.586398][    C0] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003
[  775.586405][    C0] RBP: 00007f4076611e19 R08: 0000000000000000 R09: 0000000000000000
[  775.586412][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  775.586419][    C0] R13: 00007f40767b6038 R14: 00007f40767b5fa0 R15: 00007ffddbafa208
[  775.586440][    C0]  </TASK>

VM DIAGNOSIS:
22:07:58  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073f0
R8 =ffff8881061d8237 R9 =1ffff11020c3b046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9907 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f40773426c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4077321d58 CR3=00000000359e6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f4076787498 00007f4076787470 XMM03=00007f40767874a8 00007f40767874a0
XMM04=00007f40772ed100 00007f4076787460 XMM05=00007f4076787478 00007f40767874c0
XMM06=00007f40767874b8 00007f40767874b0 XMM07=00007f40767874a8 00007f40767874a0
XMM08=0000000000000000 00007f4076612ee7 XMM09=0000000000000000 00007f4076612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff99afba60 RBX=ffffffff8e139ee0 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff8881077eb980 RBP=ffffffff822a9f69 RSP=ffffc9000318f3d8
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffff9400020dc87
R12=0000000000000002 R13=ffffffff8e139ee0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d5f1b RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcfecce7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fcfec1876c3 00007fcfec1876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=0180042c80032c80 0408a00300000037 XMM07=0890030f00000000 ffff040880030480
XMM08=a080801000028004 0100000800000036 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
