last executing test programs:

592.223153ms ago: executing program 1 (id=1930):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x89)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000580)="580000001400192340834b80040d8c560a06050045ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000140010808004100000007fcff70", 0x58}], 0x1)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000180)=0x27a, 0x4)
sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005100)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x40080)

591.635167ms ago: executing program 0 (id=1931):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000008851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000046608000000000001180000000000001000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000040b50a000000000000850000000600000095"], &(0x7f0000000140)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) (async, rerun: 64)
syz_genetlink_get_family_id$devlink(&(0x7f00000064c0), 0xffffffffffffffff) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a03000000000000000000020000000c00024000000000000000010900010073797a30"], 0x68}}, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r3) (async, rerun: 32)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5)
sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x10) (async, rerun: 64)
sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r6, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4040) (rerun: 64)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000006580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000006500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="250525bd7000fddbdf254b0000000e0001006e657464657673698b0000000f0002006e657464657673696d300000"], 0x34}}, 0x40)

591.353022ms ago: executing program 2 (id=1932):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070002000000fddbdf250500000003ef899b180001801400000000000000000014000380100003800c000180000001007e000000"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) (async)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async)
recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000400)=""/100, 0x64}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5}}], 0x2, 0x40000043, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r3, 0x5bfc4e7c2356e17, 0x70bd25, 0x25dfdbfe}, 0x24}, 0x1, 0x0, 0x0, 0x4000811}, 0x3404a000)

458.720902ms ago: executing program 1 (id=1933):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x1c00000000000000, 0x8001}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={<r0=>0xffffffffffffffff, 0x1c00000000000000, 0x8001})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0xfffffffc, @private2}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x913, @empty, 0xfffffa75}], 0x48)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0)="87", 0xfed9, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
shutdown(0xffffffffffffffff, 0x1)
r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000040)) (async)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000040))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$SIOCSIFHWADDR(r3, 0x8931, &(0x7f0000000000)={'netdevsim0\x00'}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8931, &(0x7f0000000000)={'netdevsim0\x00'})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000050c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005100)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x40080)

458.354755ms ago: executing program 0 (id=1934):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0x300, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040817}, 0x40000)

457.449138ms ago: executing program 0 (id=1935):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c001910", @ANYRES16=r1, @ANYBLOB="ff8826bd7000fddbdf254b00000008000300012000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20048844)
r2 = socket$igmp6(0xa, 0x3, 0x2) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x100, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xea, 0x45, "35f2e70ec3cc2f16c1bd449b71626325510805cbb29f76f0255547d0a066773af16f39d1fe052617a977fae7a07f3169e6f08da026572a9d9ed9c25040c2a7ee498a8ed48427df6bbb54b04ab31259e047f1ee442fbfe73f3e9fa7760dd89bbe3d71288dade9252c5f42de2fb3a59d45d737a326f233f97a1850695ef7d384a0fa10220339e97796dc8e7244d9972797926f14902f8705e0bf68048f3417d1a7c5058a24d7c0a9c8d8e76b2306df4966bd4018117fce1d2d77f4cb6b3a82d59e6f02735a73d6cfbf71e44b5dd9c09c845e62f3c67cd99c5bf036cd12b8c1f870d04b18e31774"}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) (async)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0x4)

457.093173ms ago: executing program 1 (id=1936):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x1, 0x4000) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async)
mkdirat$cgroup(r2, &(0x7f0000000a00)='syz0\x00', 0x1ff) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000340)=0x4) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@loopback}}}, &(0x7f0000000380)=0xe8) (async)
getsockopt$inet6_mreq(r1, 0x29, 0x372d24b76b22dae7, &(0x7f0000000580)={@empty}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="080005000705f7e20800050000fe04801500040002000060920000006c7cf2346f5b8a9a0300000008000e00f0d30874fe5f712a6d32db4a012b1bfcea73109a7a636b15c1fe7b29927000102b993cb1fb51b8e17d6b50f845dad70b6d9934109dd28b90979c23e365da5d9772ee33b064e2155559b72e61f8fda1105c3ff482a6a7167bd695e06c13dee36eb26a2d4dcd2115f095cd3948fba44d05f458e93b1fc5890c3513391d2a871f380f92e3316733e643b4d33e1e427ba2093c7a17d797b0b6e615b823b1310573d0f6db9d05e614fd42e8ea05beed33bdaedbefacfb6f474bd30677fe1f2c300adb7246eded1b8a65abea3670631769fa", @ANYRES32=r7, @ANYBLOB="1500030000000000000100009b209279017df2610200000008000500"], 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004090) (async)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) (async)
write(r4, &(0x7f0000000140)="41000200010001", 0x7) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)

456.717236ms ago: executing program 2 (id=1937):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r2, 0x0, 0x0, 0x0) (async)
openat$cgroup_ro(r2, 0x0, 0x0, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000940)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async)
openat$cgroup_ro(r2, &(0x7f0000000940)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
openat$cgroup_devices(r1, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0)
close(0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x400000000010, 0x3, 0x0)
write(r3, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c040007031a0009", 0x23)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r4, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000084000000000000001fc7"], 0x18, 0x48060}], 0x1, 0x200000d0)
accept4$inet(r4, 0x0, 0x0, 0x80000)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x2, @private0, 0x3}}, [0x10000, 0x400, 0x9, 0xfffffffffffffff8, 0x101, 0x5b4, 0xffff, 0x8af, 0x8, 0x7, 0x7, 0x80, 0xcace, 0x0, 0x7fff]}, &(0x7f00000000c0)=0x100)
syz_genetlink_get_family_id$devlink(&(0x7f0000006280), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000006280), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000006400)={0x0, 0x0, &(0x7f00000063c0)={&(0x7f00000062c0)={0x44, r5, 0x601, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x4000010)

380.138819ms ago: executing program 1 (id=1938):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x54, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xf2, 0x8e, 0x3}, {0xc, 0x8f, 0x19c000000}, {0xc, 0x90, 0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e00440002800600020001000000080001000100000008000300", @ANYRES32], 0x84}}, 0x20008040)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x8, 0xd}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flow={{0x13}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x10000000}]}}]}, 0x3c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r10) (async)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r10)
sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r11, 0x1, 0x70bd2b, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r9, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x5c, r11, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff9}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r9, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x5c, r11, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff9}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r12, r13, 0x5, 0x0, @void}, 0x10) (async)
r14 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r12, r13, 0x5, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r14, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r14, r12, 0x4, r12}, 0x10) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r14, r12, 0x4, r12}, 0x10)
r15 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r15, 0xc004743e, &(0x7f0000000080)=0x40000) (async)
ioctl$PPPIOCNEWUNIT(r15, 0xc004743e, &(0x7f0000000080)=0x40000)
ioctl$PPPIOCSMAXCID(r15, 0x40047451, &(0x7f0000000000)=0x31)

276.101112ms ago: executing program 0 (id=1939):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc)
bind$ax25(r1, &(0x7f0000000540)={{0x3, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f00000012c0))
sendto$ax25(r1, 0x0, 0x900, 0x0, &(0x7f00000006c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x4c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x40}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x40080)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000080)=""/150, &(0x7f0000000000)=0x96)

275.690082ms ago: executing program 1 (id=1940):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000008864"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000100)=0x4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="e7c8543bcf4c64bd5de303d6"], 0xfdef)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000010c0)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34000000d8029e3ab223162c2f0a505e5c12986ac77b2e8ee1221552ebfbc8b72afcba14243edca8e947e0e9b08969606bb43a67f6940d53ae0ec1974ba77c2107b44fbdf387cd7327cfc0dfead92058c4eb480cba5307a03d8afa2a3784d5c1eeec67f57827e9374bbafb1f909a8d61d669ae88c52d0db5c4a40d5446653e4497e0a434a49e98362d397652cd4f291a37a2fc06d998c97e75d4b42fe7984e5d27fdd5ea0274f4aa3a5e98d2ae868541001a87aa8f350026264bd93b", @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf2512000000050013000000000008000300", @ANYRES32=0x0, @ANYBLOB="050013000000000008000300", @ANYRES32=r7, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0xc0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000000365cb107ce4122794d8543ff75c25c9c1ae362b8c6a2999ffc41424f6e67eb813c512dd97a393b34f024444fb360", @ANYRES16=r8, @ANYBLOB="01002bbd7000fbdbdf254c000000"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x40080)

253.940973ms ago: executing program 2 (id=1941):
r0 = socket(0x11, 0x2, 0x0)
ioctl$SIOCPNENABLEPIPE(r0, 0x5411, 0x1000000000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x64, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x2f, 0xa9, @random="a0be56190a1973b9a082fe35468118f44c2f4424cd1191aaec0a3aba93d2d53a5956dd88d34f1c42da00e6"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x40080)

251.755768ms ago: executing program 2 (id=1942):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x34, r1, 0xf1aad47e89fb43b5, 0x0, 0x0, {}, [@handle=@nsim={{0xe, 0x2}, {0x63, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)

251.076546ms ago: executing program 0 (id=1943):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_opts(r8, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'dummy0\x00', <r10=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESOCT=r9, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000)
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xb, &(0x7f0000000880)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000900)='syzkaller\x00', 0x2, 0x26, &(0x7f0000000940)=""/38, 0x41000, 0x48, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0x0, 0x9, 0x6c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x5, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3ff}, @generic={0x8, 0xb, 0x0, 0x75b, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000180)='GPL\x00', 0x8, 0xd4, &(0x7f0000000340)=""/212, 0x41000, 0x4, '\x00', r10, @fallback=0x38, r11, 0x8, &(0x7f0000000440)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r12, 0x9, 0x0, &(0x7f00000005c0)=[{0x3, 0x2, 0xe, 0xa}, {0x2, 0x4, 0x10, 0xb}, {0x4, 0x3, 0xb, 0x8}, {0x1, 0x5, 0x0, 0x8}, {0x0, 0x2, 0xb, 0x9}, {0x1, 0x4, 0xd, 0xa}, {0x4, 0x2, 0x4, 0xa}, {0x1, 0x2, 0x8, 0x6}, {0x2, 0x4, 0x4, 0xb}], 0x10, 0x8}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x5, 0xa8, @random='\x00'}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x2c, r2, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x40800)

158.758064ms ago: executing program 0 (id=1944):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFULA_CFG_MODE={0xa, 0x2, {0x7}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000140))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x2000014)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000280)={@none, 0x401, 0x8, 0x9c, 0x3, 0x2, "02757217a04e65627008659177a9d404ff9b7e4c9367fb4192c6ed42956e662e2f1b133e22a1ce11f1cb8dc16f147c049662f5979203d721583ac38c6d092b1ce066efecbcff2bf061e294a40c12bd3590279d6041ac4eca8a383cba2e72d12322d772251b74683d7eb0a5c5f957a1fa2170dc9bf7f257e60f9dfb00b9c4028d"})
connect(r0, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x2, 0x2, 0x3, {0xa, 0x4e24, 0x6, @local, 0x28878708}}}, 0x80)
shutdown(r3, 0x0)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa4, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x7}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9bededa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db6beed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x20048040)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000580)={0x66}, 0x2)
r5 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)="1b198f5afcd26b027fb05e1a644fa6d93f211a3a7e79c314d5084fcb7126", 0x1e}, {&(0x7f0000000640)="ade82fe06a46a5f5ec", 0x9}, {&(0x7f0000000680)="faea2d7919d7e2c43a12d598bf370fa0a72807b77942fb838b5b70c3d071590474a6768ef7e53cbd5b993325b16c87d5913eae88e59f666ad7c3fe9bc919ec157a297a37d381265b3a49c6d6dc2cef736d4304d9114a5a9d2e776ca7a28e05134e83df9fae544eb1de74f8f3bc57955a52f2fb4ec2a26dd6e8ac5c634a6c46d01720729765d3bb36546e4607bb338a55303b7fd569aea2c481e4701fc3cc1cab8013090e9d6929ed240399553bcbf567ff00ce2f", 0xb4}], 0x4, &(0x7f0000000780)=[{0x28, 0x118, 0xfffffffb, "3c4f3f7da79fc648e436d360ac332fa981548cfe5f"}], 0x28}, 0xc000)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000800)=0xa5809c2c3dd6d17a, 0x4)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000840)={0x8, 0x3, 0x0, 0x80000000, 0x7})
socket$unix(0x1, 0x2, 0x0)
r7 = socket(0x1a, 0x5, 0x6)
socket$alg(0x26, 0x5, 0x0)
setsockopt$packet_int(r7, 0x107, 0x9, &(0x7f0000000880), 0x4)
write$cgroup_int(r6, &(0x7f00000008c0)=0x3, 0x12)
r8 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r8, &(0x7f0000000900)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
accept4$unix(r8, &(0x7f0000000980), &(0x7f0000000a00)=0x6e, 0x800)
recvmsg$can_bcm(r6, &(0x7f0000000c40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000ac0)=""/48, 0x30}], 0x1, &(0x7f0000000b40)=""/200, 0xc8}, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r7, 0x4008af13, &(0x7f0000000c80)={0x3, 0x5})
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000cc0)=@req={0x8000, 0x7, 0x200, 0x2}, 0x10)

158.438244ms ago: executing program 2 (id=1945):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x4, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x31}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x5, 0xa8, @random='\x00'}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)

153.942505ms ago: executing program 2 (id=1946):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @typedef={0x5}, @func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x71, 0x2e, 0x5f, 0x30, 0x6f]}}, 0x0, 0x4b, 0x0, 0x1, 0x79a}, 0x28)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, r1, 0x633d41a77d0888ff, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2001}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20048844)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
recvfrom$inet6(r3, &(0x7f0000000100)=""/105, 0x69, 0x0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @private2, 0x7}, 0x1c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000140021010000e0ffffff000023"], 0x2c}}, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(r7, 0x0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={r7, 0x20, &(0x7f0000000180)={&(0x7f0000000940)=""/116, 0x74, <r8=>0x0, &(0x7f0000000cc0)=""/147, 0x93}}, 0x2e)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r8, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000004000000000000000100000018352000040000000000000000000000751b0c00fcfffffe9500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0xde, &(0x7f00000004c0)=""/222, 0x40f00, 0x1, '\x00', r5, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x6, 0x44e7, 0x1}, 0x10, r8, 0xffffffffffffffff, 0x9, &(0x7f0000000400), &(0x7f00000005c0)=[{0x1, 0x3, 0xd, 0x5}, {0x1, 0x3, 0x6, 0x2}, {0x0, 0x2, 0x9, 0x2}, {0x3, 0x4, 0x7, 0xb}, {0x1, 0x3, 0x7, 0x2}, {0x4, 0x4, 0x10}, {0x5, 0x1, 0x7, 0x9}, {0x0, 0x5, 0x9, 0x2}, {0x2, 0x1, 0x6, 0x6}], 0x10, 0x1dec}, 0x94)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r10, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r11, 0x4)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x7, 0x18}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, <r13=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000400)}, 0x20)
r14 = socket(0x1, 0x2, 0x0)
r15 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r16, @ANYRES32=r15, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r16, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r14}, 0x20)
r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r2, 0x0, 0x4, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1d, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='GPL\x00', 0xc2f, 0xd8, &(0x7f0000000240)=""/216, 0x41000, 0x31, '\x00', r5, @fallback=0x12, r2, 0x8, &(0x7f0000000080)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0x1, 0xffffff00, 0xfffffffc}, 0x10, r11, 0xffffffffffffffff, 0x5, &(0x7f0000000540)=[r12, r13, r16, r17, 0xffffffffffffffff], &(0x7f0000000580)=[{0x4, 0x4, 0xd, 0x2}, {0x2, 0x3, 0x3, 0x5}, {0x2, 0x5, 0xa, 0x5}, {0x3, 0x5, 0x4, 0x6}, {0x2, 0x5, 0x8, 0x4}], 0x10, 0xfffffffb}, 0x94)

0s ago: executing program 1 (id=1947):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r1, 0x3, {0x0, 0x0, 0x2}}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba6", 0x3}], 0x1}}], 0x1, 0x20000010)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000007d80)='filter\x00', 0x7)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
r5 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
sendfile(r6, r5, 0x0, 0xf2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:62181' (ED25519) to the list of known hosts.
syzkaller login: [   56.308882][ T5831] cgroup: Unknown subsys name 'net'
[   56.404713][ T5831] cgroup: Unknown subsys name 'cpuset'
[   56.410729][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.423358][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.823038][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.827858][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.830333][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.833369][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.836315][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.839327][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.842185][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.844970][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.865416][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.868675][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.898616][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.901682][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.907344][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.911493][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.914657][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.118742][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   64.141508][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   64.278797][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.282296][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.285026][ T5846] bridge_slave_0: entered allmulticast mode
[   64.288652][ T5846] bridge_slave_0: entered promiscuous mode
[   64.293044][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.295345][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.298488][ T5846] bridge_slave_1: entered allmulticast mode
[   64.301511][ T5846] bridge_slave_1: entered promiscuous mode
[   64.358767][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.361542][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.363822][ T5850] bridge_slave_0: entered allmulticast mode
[   64.367377][ T5850] bridge_slave_0: entered promiscuous mode
[   64.371416][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.373652][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.375873][ T5850] bridge_slave_1: entered allmulticast mode
[   64.380387][ T5850] bridge_slave_1: entered promiscuous mode
[   64.386146][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.397842][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.410192][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   64.451802][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.465415][ T5846] team0: Port device team_slave_0 added
[   64.470549][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.475759][ T5846] team0: Port device team_slave_1 added
[   64.562029][ T5850] team0: Port device team_slave_0 added
[   64.564989][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.568192][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.577446][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.582943][ T5850] team0: Port device team_slave_1 added
[   64.585037][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.589459][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.592600][ T5855] bridge_slave_0: entered allmulticast mode
[   64.595608][ T5855] bridge_slave_0: entered promiscuous mode
[   64.600553][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.603243][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.613343][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.649461][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.652279][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.655071][ T5855] bridge_slave_1: entered allmulticast mode
[   64.659046][ T5855] bridge_slave_1: entered promiscuous mode
[   64.678280][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.681056][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.691326][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.724687][ T5846] hsr_slave_0: entered promiscuous mode
[   64.728046][ T5846] hsr_slave_1: entered promiscuous mode
[   64.731405][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.733920][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.743426][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.768227][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.772942][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.845501][ T5850] hsr_slave_0: entered promiscuous mode
[   64.850118][ T5850] hsr_slave_1: entered promiscuous mode
[   64.852787][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   64.855037][ T5850] Cannot create hsr debugfs directory
[   64.859316][ T5855] team0: Port device team_slave_0 added
[   64.876029][ T5855] team0: Port device team_slave_1 added
[   64.929928][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.932597][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.944386][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.961925][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.964629][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.974992][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.109507][ T5855] hsr_slave_0: entered promiscuous mode
[   65.112430][ T5855] hsr_slave_1: entered promiscuous mode
[   65.115087][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   65.117434][ T5855] Cannot create hsr debugfs directory
[   65.245103][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.261998][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.287544][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.309275][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.382477][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.394414][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.410363][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.420347][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.508349][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.515825][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.525585][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.532794][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.627398][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.641169][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.674931][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   65.682578][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.693349][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   65.702014][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.704772][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.720481][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.723038][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.733415][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.736081][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.751152][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   65.756444][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.759179][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.790256][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.793242][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.812551][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.815244][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.869081][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.918212][   T54] Bluetooth: hci1: command tx timeout
[   65.920657][   T54] Bluetooth: hci0: command tx timeout
[   65.999411][ T5852] Bluetooth: hci2: command tx timeout
[   66.048638][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.095948][ T5846] veth0_vlan: entered promiscuous mode
[   66.108192][ T5846] veth1_vlan: entered promiscuous mode
[   66.155709][ T5846] veth0_macvtap: entered promiscuous mode
[   66.164140][ T5846] veth1_macvtap: entered promiscuous mode
[   66.188377][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.200208][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.210205][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.220111][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.235445][ T5875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.242387][ T5875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.246167][ T5875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.263457][ T5875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.348145][ T5850] veth0_vlan: entered promiscuous mode
[   66.360968][ T5855] veth0_vlan: entered promiscuous mode
[   66.361833][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.374373][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.383451][ T5855] veth1_vlan: entered promiscuous mode
[   66.392156][ T5850] veth1_vlan: entered promiscuous mode
[   66.425159][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.429688][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.444732][ T5855] veth0_macvtap: entered promiscuous mode
[   66.452757][ T5855] veth1_macvtap: entered promiscuous mode
[   66.466188][ T5850] veth0_macvtap: entered promiscuous mode
[   66.480691][ T5850] veth1_macvtap: entered promiscuous mode
[   66.511775][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.521105][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.531634][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.541004][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.545467][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.587949][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.591122][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.593958][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.609054][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.612546][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.615914][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.639728][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.669848][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.726122][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.731020][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.760479][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4'.
[   66.769944][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.774048][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.804982][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.813511][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.873136][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.877294][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.003790][ T5926] tipc: Started in network mode
[   67.006753][ T5926] tipc: Node identity 46a091942946, cluster identity 4711
[   67.021513][ T5926] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.070778][ T5926] syzkaller0: entered promiscuous mode
[   67.076970][ T5926] syzkaller0: entered allmulticast mode
[   67.083401][ T5926] tipc: Resetting bearer <eth:syzkaller0>
[   67.141284][ T5932] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   67.145075][ T5925] tipc: Resetting bearer <eth:syzkaller0>
[   67.178265][ T5932] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   67.198205][ T5933] netlink: 'syz.1.8': attribute type 178 has an invalid length.
[   67.963360][ T5925] tipc: Disabling bearer <eth:syzkaller0>
[   68.007534][ T5852] Bluetooth: hci0: command tx timeout
[   68.017699][ T5852] Bluetooth: hci1: command tx timeout
[   68.078850][   T54] Bluetooth: hci2: command tx timeout
[   68.129442][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'.
[   68.291673][ T5953] sctp: [Deprecated]: syz.0.17 (pid 5953) Use of int in maxseg socket option.
[   68.291673][ T5953] Use struct sctp_assoc_value instead
[   68.470860][ T5970] syz.1.21 uses obsolete (PF_INET,SOCK_PACKET)
[   68.485329][ T5970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21'.
[   68.542846][ T5978] openvswitch: netlink: IP tunnel dst address not specified
[   68.686264][ T5989] netlink: 'syz.2.27': attribute type 1 has an invalid length.
[   68.694252][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'.
[   68.706981][ T5989] netlink: 36 bytes leftover after parsing attributes in process `syz.2.27'.
[   68.754904][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'.
[   68.858977][ T6006] warning: `syz.1.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.899803][ T6001] netlink: 'syz.2.31': attribute type 3 has an invalid length.
[   68.903527][ T6000] netlink: 'syz.2.31': attribute type 3 has an invalid length.
[   68.905747][ T6009] netlink: 'syz.1.33': attribute type 178 has an invalid length.
[   68.911991][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'.
[   68.975590][ T6013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.33'.
[   69.035881][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'.
[   69.046239][ T6020] netlink: 'syz.2.36': attribute type 178 has an invalid length.
[   69.085793][ T6019] netlink: 'syz.2.36': attribute type 1 has an invalid length.
[   69.089139][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'.
[   69.267800][ T6028] netlink: 'syz.2.39': attribute type 178 has an invalid length.
[   69.602227][ T6050] nftables ruleset with unbound chain
[   69.704500][ T6045] Set syz1 is full, maxelem 6117 reached
[   69.840340][ T6066] netlink: 'syz.0.54': attribute type 4 has an invalid length.
[   69.985541][ T6073] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   69.989483][ T6073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.077272][   T54] Bluetooth: hci1: command tx timeout
[   70.079503][ T5852] Bluetooth: hci0: command tx timeout
[   70.099200][    T9] hid-generic 0005:0007:5505.0001: unknown main item tag 0x0
[   70.109084][    T9] hid-generic 0005:0007:5505.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[   70.157388][   T54] Bluetooth: hci2: command tx timeout
[   70.430455][ T6124] Zero length message leads to an empty skb
[   70.460896][ T6127] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.461257][ T6123] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.480479][ T6123] syzkaller0: entered promiscuous mode
[   70.482882][ T6123] syzkaller0: entered allmulticast mode
[   70.503195][ T6123] tipc: Resetting bearer <eth:syzkaller0>
[   70.505184][ T2303] IPVS: starting estimator thread 0...
[   70.517973][ T6122] tipc: Resetting bearer <eth:syzkaller0>
[   70.545612][ T6122] tipc: Disabling bearer <eth:syzkaller0>
[   70.607128][ T6129] IPVS: using max 64 ests per chain, 153600 per kthread
[   70.827628][ T6148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.041082][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.043187][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.806333][ T6202] __nla_validate_parse: 16 callbacks suppressed
[   71.806347][ T6202] netlink: 44 bytes leftover after parsing attributes in process `syz.2.92'.
[   71.818712][   T12] tipc: Subscription rejected, illegal request
[   71.846228][ T6209] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20000
[   71.955039][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'.
[   71.977526][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'.
[   72.168518][   T54] Bluetooth: hci1: command tx timeout
[   72.170722][   T54] Bluetooth: hci0: command tx timeout
[   72.213185][ T6239] tipc: Started in network mode
[   72.215109][ T6239] tipc: Node identity fe1501aaa1c, cluster identity 4711
[   72.221620][ T6239] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.224596][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'.
[   72.235493][ T6237] tipc: Disabling bearer <eth:syzkaller0>
[   72.248452][ T5852] Bluetooth: hci2: command tx timeout
[   72.475765][ T6266] tipc: Started in network mode
[   72.480303][ T6266] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   72.484196][ T6266] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   72.493250][ T6266] tipc: Enabled bearer <udp:syz0>, priority 10
[   72.496238][ T6267] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[   72.501481][ T6269] netlink: 20 bytes leftover after parsing attributes in process `syz.2.117'.
[   72.504335][ T6269] netlink: 20 bytes leftover after parsing attributes in process `syz.2.117'.
[   72.535834][ T6271] netlink: 40 bytes leftover after parsing attributes in process `syz.2.119'.
[   72.539259][ T6272] netlink: 40 bytes leftover after parsing attributes in process `syz.2.119'.
[   72.611255][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'.
[   72.614894][ T6281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   72.783055][ T6291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.125'.
[   73.213754][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.222777][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.244639][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.259306][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.607755][    T9] tipc: Node number set to 1
[   73.831582][ T6398] netlink: 'syz.0.156': attribute type 178 has an invalid length.
[   73.869260][ T6402] netlink: 'syz.1.159': attribute type 1 has an invalid length.
[   73.873108][ T6402] netlink: 'syz.1.159': attribute type 4 has an invalid length.
[   74.077455][ T6427] netlink: 'syz.2.167': attribute type 178 has an invalid length.
[   74.112460][ T6432] netlink: 'syz.0.169': attribute type 1 has an invalid length.
[   74.115114][ T6432] netlink: 'syz.0.169': attribute type 2 has an invalid length.
[   74.120743][ T6432] netlink: 'syz.0.169': attribute type 178 has an invalid length.
[   74.288222][ T6445] netlink: 'syz.0.174': attribute type 178 has an invalid length.
[   74.403897][ T6449] netlink: 'syz.0.176': attribute type 29 has an invalid length.
[   74.442850][ T6449] Driver unsupported XDP return value 0 on prog  (id 41) dev N/A, expect packet loss!
[   74.573389][ T6456] netlink: 'syz.0.178': attribute type 16 has an invalid length.
[   74.608641][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.612790][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.679163][ T6458] IPv6: NLM_F_REPLACE set, but no existing node found!
[   74.707927][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.715262][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.791480][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   74.794540][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.798379][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   74.801213][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.804202][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   74.808102][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.811187][   T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   74.814029][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.180581][ T6489] netlink: 'syz.1.188': attribute type 11 has an invalid length.
[   75.414763][ T6503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.146403][ T6517] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20002
[   76.332925][ T6529] netlink: 'syz.0.199': attribute type 11 has an invalid length.
[   76.440473][ T6536] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   76.981660][ T6544] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   76.985666][ T6544] macsec1: entered promiscuous mode
[   76.991809][ T6544] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[   77.327568][ T6557] __nla_validate_parse: 14 callbacks suppressed
[   77.327579][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.207'.
[   77.443420][ T6567] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   77.446433][ T6567] tipc: Enabled bearer <udp:syz0>, priority 10
[   77.481814][ T6570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.212'.
[   77.493102][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'.
[   77.609015][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'.
[   77.875757][ T6592] netlink: 48 bytes leftover after parsing attributes in process `syz.0.221'.
[   77.945794][ T6595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.221'.
[   78.053910][ T5915] IPVS: starting estimator thread 0...
[   78.148331][ T6603] IPVS: using max 34 ests per chain, 81600 per kthread
[   78.170341][ T6614] netlink: 666 bytes leftover after parsing attributes in process `syz.1.228'.
[   78.182262][ T6614] netlink: 16 bytes leftover after parsing attributes in process `syz.1.228'.
[   78.198213][ T6616] ip6gre0: entered allmulticast mode
[   78.253288][ T6621] ieee802154 phy0 wpan0: encryption failed: -90
[   78.392927][ T6632] syz.0.232 (6632) used obsolete PPPIOCDETACH ioctl
[   78.558888][    T9] tipc: Node number set to 1877381524
[   78.649433][ T6651] netlink: 576 bytes leftover after parsing attributes in process `syz.0.240'.
[   79.038987][ T6678] validate_nla: 3 callbacks suppressed
[   79.039009][ T6678] netlink: 'syz.0.249': attribute type 12 has an invalid length.
[   79.219024][ T6695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.252'.
[   79.403197][ T6708] netlink: 'syz.2.256': attribute type 178 has an invalid length.
[   79.862120][ T6720] geneve0: entered promiscuous mode
[   80.045168][ T6728] netlink: 'syz.1.266': attribute type 178 has an invalid length.
[   80.099771][ T6731] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590)
[   80.103856][ T6731] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[   80.390598][ T6745] netlink: 'syz.1.273': attribute type 178 has an invalid length.
[   80.661338][ T6761] Bluetooth: MGMT ver 1.23
[   80.803965][ T6768] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   80.908994][ T6768] netlink: 'syz.0.283': attribute type 178 has an invalid length.
[   81.143863][ T6783] tipc: MTU too low for tipc bearer
[   81.219064][ T6787] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   81.237858][ T6787] gretap1: entered promiscuous mode
[   81.240103][ T6787] gretap1: entered allmulticast mode
[   81.515874][ T6818] geneve2: entered promiscuous mode
[   81.520697][ T6818] geneve2: entered allmulticast mode
[   81.524194][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.528127][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.532168][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.541519][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.665824][ T6834] netlink: 'syz.1.306': attribute type 4 has an invalid length.
[   81.718695][ T6838] netlink: 'syz.2.308': attribute type 1 has an invalid length.
[   81.959426][ T6861] netlink: 'syz.1.316': attribute type 178 has an invalid length.
[   82.785251][ T6933] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   83.005687][ T6948] netlink: 'syz.2.339': attribute type 178 has an invalid length.
[   83.042680][ T6950] __nla_validate_parse: 18 callbacks suppressed
[   83.042697][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'.
[   83.175765][ T6957] netlink: 'syz.2.342': attribute type 178 has an invalid length.
[   83.282892][ T6962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.344'.
[   83.334663][ T6963] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.338804][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'.
[   83.664622][ T6989] netlink: 72 bytes leftover after parsing attributes in process `syz.2.349'.
[   83.669229][ T6994] netlink: 72 bytes leftover after parsing attributes in process `syz.2.349'.
[   83.682848][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.350'.
[   83.775644][ T7001] netlink: 40 bytes leftover after parsing attributes in process `syz.0.352'.
[   83.793842][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.354'.
[   83.799741][ T7003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.354'.
[   83.803826][ T7001] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20004
[   83.808408][ T7004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.354'.
[   84.010770][ T7024] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   84.244887][ T7056] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   84.420805][ T7074] validate_nla: 2 callbacks suppressed
[   84.420816][ T7074] netlink: 'syz.1.376': attribute type 178 has an invalid length.
[   84.510866][ T7085] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   84.669420][    T9] IPVS: starting estimator thread 0...
[   84.767866][ T7107] IPVS: using max 42 ests per chain, 100800 per kthread
[   84.829604][ T7115] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   84.870975][ T7125] veth0_to_bridge: entered promiscuous mode
[   84.873583][ T7125] veth0_to_bridge: left promiscuous mode
[   85.167400][ T7139] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   85.291357][ T7147] netlink: 'syz.2.400': attribute type 178 has an invalid length.
[   85.385579][ T7149] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.391679][ T7149] bond0: option use_carrier: invalid value (6)
[   86.400906][  T796] cfg80211: failed to load regulatory.db
[   86.414983][ T7195] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[   86.420343][ T7195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.501089][ T7205] netlink: 'syz.0.418': attribute type 178 has an invalid length.
[   86.588685][ T7216] netlink: 'syz.0.422': attribute type 4 has an invalid length.
[   86.764727][ T7232] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   87.586190][ T7278] netlink: 'syz.0.429': attribute type 9 has an invalid length.
[   87.592454][ T7278] netlink: 'syz.0.429': attribute type 7 has an invalid length.
[   87.595388][ T7278] netlink: 'syz.0.429': attribute type 8 has an invalid length.
[   87.941011][ T7319] netlink: 'syz.2.434': attribute type 2 has an invalid length.
[   88.186919][ T7343] __nla_validate_parse: 12 callbacks suppressed
[   88.186936][ T7343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.441'.
[   88.242351][ T7345] sctp: [Deprecated]: syz.2.442 (pid 7345) Use of int in maxseg socket option.
[   88.242351][ T7345] Use struct sctp_assoc_value instead
[   88.250106][ T7345] netlink: 'syz.2.442': attribute type 178 has an invalid length.
[   88.684452][ T7377] netlink: 'syz.0.453': attribute type 5 has an invalid length.
[   88.688322][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'.
[   88.884446][ T7394] netlink: 144 bytes leftover after parsing attributes in process `syz.1.457'.
[   88.889215][ T7394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.457'.
[   88.975760][ T7399] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.981200][ T7399] syzkaller0: entered promiscuous mode
[   88.989772][ T7399] syzkaller0: entered allmulticast mode
[   89.014741][ T7399] tipc: Resetting bearer <eth:syzkaller0>
[   89.022854][ T7403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.461'.
[   89.033599][ T7397] tipc: Resetting bearer <eth:syzkaller0>
[   89.045399][ T7397] tipc: Disabling bearer <eth:syzkaller0>
[   89.635545][ T7447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.472'.
[   89.785740][ T7455] validate_nla: 6 callbacks suppressed
[   89.785752][ T7455] netlink: 'syz.2.476': attribute type 178 has an invalid length.
[   90.326829][ T7490] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   90.469170][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'.
[   90.524281][ T7497] bridge_slave_1: left allmulticast mode
[   90.528541][ T7497] bridge_slave_1: left promiscuous mode
[   90.531210][ T7497] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.540860][ T7497] bridge_slave_0: left allmulticast mode
[   90.543213][ T7497] bridge_slave_0: left promiscuous mode
[   90.546183][ T7497] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.743981][ T7505] netlink: 'syz.2.492': attribute type 178 has an invalid length.
[   90.827269][ T7513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.496'.
[   90.923602][ T7526] netlink: 'syz.1.500': attribute type 178 has an invalid length.
[   90.990236][ T7529] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.993200][ T7529] syzkaller0: entered promiscuous mode
[   90.995034][ T7529] syzkaller0: entered allmulticast mode
[   91.002621][ T7529] syzkaller0: mtu greater than device maximum
[   91.008378][ T7527] tipc: Resetting bearer <eth:syzkaller0>
[   91.022169][ T7527] tipc: Disabling bearer <eth:syzkaller0>
[   91.143843][ T7539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.505'.
[   91.211220][ T7545] netlink: 'syz.1.509': attribute type 178 has an invalid length.
[   91.274540][ T7555] netlink: 'syz.1.512': attribute type 1 has an invalid length.
[   91.278601][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'.
[   91.333715][ T7560] netlink: 'syz.2.515': attribute type 178 has an invalid length.
[   91.492453][ T7573] netem: change failed
[   91.543013][ T7579] netlink: 'syz.2.522': attribute type 178 has an invalid length.
[   91.681710][ T7600] netlink: 'syz.0.529': attribute type 5 has an invalid length.
[   92.045044][   T13] nci: nci_rsp_packet: unsupported rsp opcode 0xf02
[   93.000313][ T7709] netlink: 'syz.1.547': attribute type 1 has an invalid length.
[   93.004296][ T7709] pim6reg1: entered promiscuous mode
[   93.011697][ T7709] pim6reg1: entered allmulticast mode
[   93.518827][   T33] audit: type=1800 audit(1758198614.795:2): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.561" name="blkio.bfq.time_recursive" dev="tmpfs" ino=955 res=0 errno=0
[   93.529180][ T7749] netlink: 'syz.0.561': attribute type 9 has an invalid length.
[   93.542566][ T7749] __nla_validate_parse: 9 callbacks suppressed
[   93.542580][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'.
[   93.705707][ T7757] netlink: 172 bytes leftover after parsing attributes in process `syz.0.565'.
[   94.100328][ T7806] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   94.187960][ T7812] netlink: 224 bytes leftover after parsing attributes in process `syz.0.584'.
[   94.238378][ T7824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.587'.
[   94.282474][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.589'.
[   94.410805][ T7840] IPv6: addrconf: prefix option has invalid lifetime
[   94.667011][ T7859] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.670485][ T7859] syzkaller0: entered promiscuous mode
[   94.672684][ T7859] syzkaller0: entered allmulticast mode
[   94.697079][ T7859] tipc: Resetting bearer <eth:syzkaller0>
[   94.762881][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.601'.
[   94.766043][ T7868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.601'.
[   94.905458][ T7879] netlink: 112 bytes leftover after parsing attributes in process `syz.1.605'.
[   94.913076][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.605'.
[   94.917587][ T7879] validate_nla: 13 callbacks suppressed
[   94.917597][ T7879] netlink: 'syz.1.605': attribute type 178 has an invalid length.
[   94.987057][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'.
[   95.334535][ T7927] netlink: 'syz.2.617': attribute type 178 has an invalid length.
[   95.494257][ T7858] tipc: Resetting bearer <eth:syzkaller0>
[   95.505700][ T7858] tipc: Disabling bearer <eth:syzkaller0>
[   95.680899][ T7955] netlink: 'syz.2.626': attribute type 178 has an invalid length.
[   95.734342][ T7961] netlink: 'syz.0.628': attribute type 1 has an invalid length.
[   95.823817][ T7971] netlink: 'syz.2.631': attribute type 1 has an invalid length.
[   95.826322][ T7971] netlink: 'syz.2.631': attribute type 1 has an invalid length.
[   95.829344][ T7971] netlink: 'syz.2.631': attribute type 2 has an invalid length.
[   95.832914][ T7974] netlink: 'syz.2.631': attribute type 178 has an invalid length.
[   96.116895][ T7999] netlink: 'syz.2.638': attribute type 1 has an invalid length.
[   96.120194][ T7999] netlink: 'syz.2.638': attribute type 3 has an invalid length.
[   96.122964][ T7999] NCSI netlink: No device for ifindex 246
[   96.261687][ T8018] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.309250][ T8023] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   96.369678][ T8027] syzkaller1: entered promiscuous mode
[   96.371449][ T8027] syzkaller1: entered allmulticast mode
[   96.383607][    C0] vcan0: j1939_tp_rxtimer: 0xffff888112465000: rx timeout, send abort
[   96.387606][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888112465000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   96.392234][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802348b800: rx timeout, send abort
[   96.394794][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802348b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   97.250647][ T8093] team_slave_0: entered allmulticast mode
[   98.030758][ T8155] netlink: 'syz.1.689': attribute type 11 has an invalid length.
[   98.408715][ T8180] sctp: [Deprecated]: syz.1.696 (pid 8180) Use of int in max_burst socket option.
[   98.408715][ T8180] Use struct sctp_assoc_value instead
[   98.740692][ T8194] __nla_validate_parse: 18 callbacks suppressed
[   98.740707][ T8194] netlink: 44 bytes leftover after parsing attributes in process `syz.1.700'.
[   98.747514][ T8194] netlink: 44 bytes leftover after parsing attributes in process `syz.1.700'.
[   98.840678][ T8198] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   98.934756][ T8205] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.704'.
[   99.149247][ T8220] netlink: 32 bytes leftover after parsing attributes in process `syz.0.708'.
[   99.259197][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.712'.
[   99.283005][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.712'.
[   99.308784][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.712'.
[   99.371436][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'.
[   99.423974][ T8246] netlink: 'syz.1.717': attribute type 11 has an invalid length.
[   99.429774][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'.
[   99.528528][ T8252] netlink: 36 bytes leftover after parsing attributes in process `syz.0.721'.
[   99.533641][ T8258] syzkaller0: entered promiscuous mode
[   99.535768][ T8258] syzkaller0: entered allmulticast mode
[   99.577307][ T8252] block nbd0: server does not support multiple connections per device.
[   99.582373][ T8252] block nbd0: shutting down sockets
[  100.377782][ T8326] validate_nla: 7 callbacks suppressed
[  100.377798][ T8326] netlink: 'syz.0.746': attribute type 178 has an invalid length.
[  100.461349][ T8331] netlink: 'syz.0.748': attribute type 178 has an invalid length.
[  100.463465][ T8332] netlink: 'syz.0.748': attribute type 178 has an invalid length.
[  100.513688][ T8334] netlink: 'syz.0.749': attribute type 178 has an invalid length.
[  100.883422][ T8371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.888684][ T8371] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  100.893457][ T8371] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  100.899809][ T8371] tipc: Resetting bearer <eth:syzkaller0>
[  100.902032][ T8373] netlink: 'syz.1.763': attribute type 178 has an invalid length.
[  100.942992][ T8371] tipc: Resetting bearer <eth:syzkaller0>
[  101.159412][ T8401] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.163762][ T8403] netlink: 'syz.1.772': attribute type 1 has an invalid length.
[  101.169804][ T8403] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  101.281183][ T8419] netlink: 'syz.0.776': attribute type 178 has an invalid length.
[  101.327456][   T29] tipc: Resetting bearer <eth:syzkaller0>
[  101.888370][  T796] tipc: Node number set to 1607795114
[  102.024227][ T8445] netlink: 'syz.2.783': attribute type 1 has an invalid length.
[  102.212022][ T8457] netlink: 'syz.2.787': attribute type 178 has an invalid length.
[  102.263292][ T8465] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.271339][ T8465] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  102.284423][ T8462] bond0: Error: Cannot enslave bond to itself.
[  102.310276][ T8465] netlink: 'syz.2.790': attribute type 1 has an invalid length.
[  103.682635][ T8540] IPVS: set_ctl: invalid protocol: 94 100.1.1.2:20004
[  103.759004][ T8544] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  104.185550][ T8568] __nla_validate_parse: 11 callbacks suppressed
[  104.185561][ T8568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.814'.
[  104.223616][ T8570] block nbd0: not configured, cannot reconfigure
[  104.460125][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.822'.
[  104.565451][ T8602] delete_channel: no stack
[  104.579854][ T8597] netlink: 32 bytes leftover after parsing attributes in process `syz.2.824'.
[  104.831997][ T8625] openvswitch: netlink: Flow actions attr not present in new flow.
[  105.099876][ T8669] macvlan1: entered promiscuous mode
[  105.103125][ T8668] macvlan1: left promiscuous mode
[  105.221606][ T8677] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  105.232286][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.844'.
[  105.235693][ T8677] bridge_slave_1: left allmulticast mode
[  105.238862][ T8677] bridge_slave_1: left promiscuous mode
[  105.241663][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.272319][ T8677] bridge_slave_0: left allmulticast mode
[  105.274473][ T8677] bridge_slave_0: left promiscuous mode
[  105.281493][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.420263][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'.
[  105.424329][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'.
[  105.443317][ T8681] netlink: 52 bytes leftover after parsing attributes in process `syz.0.844'.
[  105.894671][ T8707] syz.1.853 (8707) used greatest stack depth: 19576 bytes left
[  105.956205][ T8714] netlink: 44 bytes leftover after parsing attributes in process `syz.2.857'.
[  105.998424][ T8716] validate_nla: 5 callbacks suppressed
[  105.998435][ T8716] netlink: 'syz.2.858': attribute type 178 has an invalid length.
[  106.016470][ T8712] syzkaller0: entered promiscuous mode
[  106.019426][ T8712] syzkaller0: entered allmulticast mode
[  107.061701][ T8740] netlink: 'syz.0.866': attribute type 178 has an invalid length.
[  107.082548][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'.
[  107.087210][ T8742] netlink: 60 bytes leftover after parsing attributes in process `syz.2.867'.
[  107.094771][ T8742] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  107.099483][ T8742] gretap1: entered promiscuous mode
[  107.101077][ T8742] gretap1: entered allmulticast mode
[  107.121024][ T8746] sch_fq: defrate 2 ignored.
[  107.129503][ T5852] Bluetooth: hci2: command tx timeout
[  107.136402][ T8746] netlink: del zone limit has 8 unknown bytes
[  107.175683][ T8751] netlink: 'syz.1.871': attribute type 178 has an invalid length.
[  107.498071][ T8777] netlink: 'syz.0.881': attribute type 1 has an invalid length.
[  107.568475][ T8782] netlink: 'syz.0.881': attribute type 178 has an invalid length.
[  108.153804][ T8794] veth0_to_team: mtu less than device minimum
[  108.165589][ T8794] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.172128][ T8794] syzkaller0: entered promiscuous mode
[  108.174459][ T8794] syzkaller0: entered allmulticast mode
[  108.192479][ T8794] tipc: Resetting bearer <eth:syzkaller0>
[  108.200822][ T8793] tipc: Resetting bearer <eth:syzkaller0>
[  108.210562][ T8793] tipc: Disabling bearer <eth:syzkaller0>
[  108.340025][ T8800] netlink: 'syz.2.886': attribute type 178 has an invalid length.
[  108.363707][ T8802] netlink: 'syz.0.887': attribute type 178 has an invalid length.
[  108.410019][ T8808] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  108.417204][ T8810] netlink: 'syz.2.890': attribute type 10 has an invalid length.
[  108.438110][ T8810] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  108.964841][ T8850] netlink: 'syz.0.903': attribute type 1 has an invalid length.
[  109.449825][ T8867] syzkaller1: entered promiscuous mode
[  109.451657][ T8867] syzkaller1: entered allmulticast mode
[  109.456298][ T8867] __nla_validate_parse: 5 callbacks suppressed
[  109.456307][ T8867] netlink: 52 bytes leftover after parsing attributes in process `syz.0.908'.
[  109.653333][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.911'.
[  109.670359][ T8875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.024972][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'.
[  110.171686][ T8907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.924'.
[  110.234907][ T8916] netlink: 27 bytes leftover after parsing attributes in process `syz.0.927'.
[  110.291805][ T8920] netlink: 'syz.0.928': attribute type 178 has an invalid length.
[  110.338642][ T8924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.931'.
[  110.412625][ T8927] netlink: 'syz.0.932': attribute type 11 has an invalid length.
[  110.415197][ T8927] netlink: 244 bytes leftover after parsing attributes in process `syz.0.932'.
[  110.421846][ T8930] netlink: 'syz.0.932': attribute type 11 has an invalid length.
[  110.424798][ T8930] netlink: 244 bytes leftover after parsing attributes in process `syz.0.932'.
[  110.542464][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'.
[  110.568243][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'.
[  110.923967][ T8963] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.030076][ T8963] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.099240][ T8963] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.192101][ T8963] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.358843][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.362657][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.366357][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.399342][ T8987] syzkaller0: entered promiscuous mode
[  111.401040][ T8987] syzkaller0: entered allmulticast mode
[  111.405148][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.760303][ T9016] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  112.851607][ T9022] batadv_slave_1: entered promiscuous mode
[  112.872563][ T9021] batadv_slave_1: left promiscuous mode
[  113.210234][ T9050] syz.2.967: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  113.218529][ T9050] CPU: 0 UID: 0 PID: 9050 Comm: syz.2.967 Not tainted syzkaller #0 PREEMPT(full) 
[  113.218550][ T9050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  113.218559][ T9050] Call Trace:
[  113.218564][ T9050]  <TASK>
[  113.218571][ T9050]  dump_stack_lvl+0x189/0x250
[  113.218595][ T9050]  ? __pfx_dump_stack_lvl+0x10/0x10
[  113.218611][ T9050]  ? __pfx__printk+0x10/0x10
[  113.218630][ T9050]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  113.218644][ T9050]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  113.218659][ T9050]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  113.218676][ T9050]  warn_alloc+0x214/0x310
[  113.218701][ T9050]  ? __pfx_warn_alloc+0x10/0x10
[  113.218725][ T9050]  ? __get_vm_area_node+0x28f/0x300
[  113.218742][ T9050]  ? xskq_create+0xbf/0x170
[  113.218764][ T9050]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  113.218805][ T9050]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  113.218828][ T9050]  ? __kasan_kmalloc+0x93/0xb0
[  113.218849][ T9050]  vmalloc_user_noprof+0xad/0xf0
[  113.218866][ T9050]  ? xskq_create+0xbf/0x170
[  113.218884][ T9050]  xskq_create+0xbf/0x170
[  113.218904][ T9050]  xsk_init_queue+0xb0/0x110
[  113.218923][ T9050]  xsk_setsockopt+0x57b/0x8d0
[  113.218942][ T9050]  ? __pfx_xsk_setsockopt+0x10/0x10
[  113.218993][ T9050]  ? __pfx_aa_sk_perm+0x10/0x10
[  113.219012][ T9050]  ? __fget_files+0x2a/0x420
[  113.219022][ T9050]  ? aa_sock_opt_perm+0xff/0x1b0
[  113.219037][ T9050]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  113.219051][ T9050]  ? __pfx_xsk_setsockopt+0x10/0x10
[  113.219069][ T9050]  do_sock_setsockopt+0x17c/0x1b0
[  113.219087][ T9050]  __x64_sys_setsockopt+0x13f/0x1b0
[  113.219105][ T9050]  do_syscall_64+0xfa/0x3b0
[  113.219117][ T9050]  ? lockdep_hardirqs_on+0x9c/0x150
[  113.219134][ T9050]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.219147][ T9050]  ? exc_page_fault+0x9f/0xf0
[  113.219167][ T9050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.219179][ T9050] RIP: 0033:0x7fa253d8eba9
[  113.219193][ T9050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.219203][ T9050] RSP: 002b:00007fa254c2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  113.219218][ T9050] RAX: ffffffffffffffda RBX: 00007fa253fd6090 RCX: 00007fa253d8eba9
[  113.219227][ T9050] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[  113.219234][ T9050] RBP: 00007fa253e11e19 R08: 0000000000000004 R09: 0000000000000000
[  113.219241][ T9050] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  113.219248][ T9050] R13: 00007fa253fd6128 R14: 00007fa253fd6090 R15: 00007fffec607de8
[  113.219277][ T9050]  </TASK>
[  113.219283][ T9050] Mem-Info:
[  113.321557][ T9050] active_anon:13527 inactive_anon:0 isolated_anon:0
[  113.321557][ T9050]  active_file:1380 inactive_file:38257 isolated_file:0
[  113.321557][ T9050]  unevictable:1768 dirty:84 writeback:0
[  113.321557][ T9050]  slab_reclaimable:9942 slab_unreclaimable:53341
[  113.321557][ T9050]  mapped:18257 shmem:2443 pagetables:950
[  113.321557][ T9050]  sec_pagetables:0 bounce:0
[  113.321557][ T9050]  kernel_misc_reclaimable:0
[  113.321557][ T9050]  free:291917 free_pcp:17001 free_cma:0
[  113.340386][ T9050] Node 0 active_anon:34320kB inactive_anon:0kB active_file:4668kB inactive_file:103744kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28276kB dirty:320kB writeback:0kB shmem:4968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5956kB pagetables:2040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  113.353081][ T9050] Node 1 active_anon:19788kB inactive_anon:0kB active_file:852kB inactive_file:49284kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44752kB dirty:16kB writeback:0kB shmem:4804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5748kB pagetables:1760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  113.365458][ T9050] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  113.377044][ T9050] lowmem_reserve[]: 0 811 811 811 811
[  113.379405][ T9050] Node 0 DMA32 free:316160kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34320kB inactive_anon:0kB active_file:4668kB inactive_file:103744kB unevictable:3536kB writepending:320kB present:1556484kB managed:830904kB mlocked:0kB bounce:0kB free_pcp:31544kB local_pcp:15156kB free_cma:0kB
[  113.392419][ T9050] lowmem_reserve[]: 0 0 0 0 0
[  113.394326][ T9050] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  113.405765][ T9050] lowmem_reserve[]: 0 0 854 854 854
[  113.407961][ T9050] Node 1 Normal free:377596kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19736kB inactive_anon:0kB active_file:852kB inactive_file:49284kB unevictable:3536kB writepending:16kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:36564kB local_pcp:20440kB free_cma:0kB
[  113.420399][ T9050] lowmem_reserve[]: 0 0 0 0 0
[  113.422384][ T9050] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  113.427633][ T9050] Node 0 DMA32: 1002*4kB (UME) 815*8kB (UME) 480*16kB (UME) 349*32kB (UE) 78*64kB (UE) 41*128kB (UME) 6*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 4*2048kB (UME) 63*4096kB (M) = 316096kB
[  113.434953][ T9050] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  113.441614][ T9050] Node 1 Normal: 35*4kB (ME) 36*8kB (UME) 18*16kB (UME) 295*32kB (UM) 191*64kB (UM) 95*128kB (UME) 52*256kB (UME) 26*512kB (UM) 11*1024kB (UME) 3*2048kB (UME) 73*4096kB (M) = 377580kB
[  113.449171][ T9050] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  113.452691][ T9050] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  113.456362][ T9050] 42081 total pagecache pages
[  113.458440][ T9050] 0 pages in swap cache
[  113.460214][ T9050] Free swap  = 124996kB
[  113.461897][ T9050] Total swap = 124996kB
[  113.463563][ T9050] 786301 pages RAM
[  113.465066][ T9050] 0 pages HighMem/MovableOnly
[  113.467140][ T9050] 241343 pages reserved
[  113.468907][ T9050] 0 pages cma reserved
[  113.568162][ T9063] validate_nla: 7 callbacks suppressed
[  113.568177][ T9063] netlink: 'syz.2.970': attribute type 1 has an invalid length.
[  113.573439][ T9063] netlink: 'syz.2.970': attribute type 2 has an invalid length.
[  113.755778][ T9080] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  114.001683][ T9088] netlink: 'syz.1.980': attribute type 3 has an invalid length.
[  114.493359][ T9128] __nla_validate_parse: 9 callbacks suppressed
[  114.493370][ T9128] netlink: 56 bytes leftover after parsing attributes in process `syz.2.997'.
[  114.598720][ T9145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1000'.
[  114.601425][ T9145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1000'.
[  114.631084][ T9140] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1000'.
[  114.750306][ T9154] netlink: 'syz.2.1006': attribute type 178 has an invalid length.
[  114.894238][ T9164] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  114.991728][ T9174] netlink: 'syz.1.1013': attribute type 2 has an invalid length.
[  114.998774][ T9174] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1013'.
[  115.046481][ T9179] netlink: 'syz.0.1015': attribute type 3 has an invalid length.
[  115.064715][ T9176] netlink: 'syz.1.1014': attribute type 178 has an invalid length.
[  115.105277][ T9183] netlink: 'syz.0.1016': attribute type 178 has an invalid length.
[  115.162656][ T9193] netlink: 'syz.1.1019': attribute type 178 has an invalid length.
[  115.212085][ T9199] nbd: couldn't find device at index 536870912
[  115.240497][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'.
[  115.281411][ T9213] netlink: 'syz.1.1024': attribute type 4 has an invalid length.
[  115.283954][ T9213] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1024'.
[  115.301477][ T9217] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  115.438799][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'.
[  115.679104][ T9247] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  115.683429][ T9243] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1032'.
[  115.874026][ T9275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1044'.
[  115.895236][ T9276] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  115.971302][ T9282] sctp: [Deprecated]: syz.2.1047 (pid 9282) Use of struct sctp_assoc_value in delayed_ack socket option.
[  115.971302][ T9282] Use struct sctp_sack_info instead
[  116.869350][ T9334] ip6gre0: left allmulticast mode
[  116.904346][ T9334] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  116.945524][ T9341] netem: change failed
[  117.087941][ T9361] unsupported nla_type 52263
[  118.322004][ T5876] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  119.141142][ T9445] validate_nla: 9 callbacks suppressed
[  119.141160][ T9445] netlink: 'syz.1.1094': attribute type 178 has an invalid length.
[  119.404850][ T9472] netlink: 'syz.2.1103': attribute type 15 has an invalid length.
[  119.550722][ T9484] __nla_validate_parse: 10 callbacks suppressed
[  119.550735][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1107'.
[  119.605090][ T9493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1111'.
[  119.769249][ T9512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1116'.
[  119.778206][ T9512] tap0: tun_chr_ioctl cmd 1074025680
[  119.788630][ T9512] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.792535][ T9512] mac80211_hwsim hwsim4 D: renamed from syzkaller0 (while UP)
[  119.800679][ T9512] tipc: Disabling bearer <eth:syzkaller0>
[  119.921284][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'.
[  120.035557][ T9547] : entered promiscuous mode
[  120.040048][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'.
[  120.043364][ T9547] openvswitch: netlink: Flow actions attr not present in new flow.
[  120.068126][ T9543] team_slave_0: entered allmulticast mode
[  120.121358][ T9556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1132'.
[  120.163024][ T9558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1133'.
[  120.377769][ T9569] tipc: Enabled bearer <eth:gre0>, priority 10
[  120.440264][ T9576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1140'.
[  120.491963][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1142'.
[  120.849579][ T9623] netlink: 'syz.2.1151': attribute type 10 has an invalid length.
[  120.857795][ T9623] bond0: (slave netdevsim0): Releasing backup interface
[  120.862171][ T9623] batman_adv: batadv0: Adding interface: netdevsim0
[  120.865892][ T9623] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.878723][ T9623] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  120.901091][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1151'.
[  121.120000][ T9645] netlink: 'syz.0.1159': attribute type 178 has an invalid length.
[  121.459117][ T9663] netlink: 'syz.2.1165': attribute type 1 has an invalid length.
[  121.492517][ T9664] bond2: entered promiscuous mode
[  121.495756][ T9664] bond2: entered allmulticast mode
[  121.503016][ T9664] 8021q: adding VLAN 0 to HW filter on device bond2
[  121.507806][ T9668] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.512150][ T9668] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  121.526468][ T9668] tipc: Resetting bearer <eth:syzkaller0>
[  121.546070][ T9665] tipc: Disabling bearer <eth:syzkaller0>
[  121.612956][ T9673] can: request_module (can-proto-0) failed.
[  121.811330][ T9704] Bluetooth: MGMT ver 1.23
[  121.890353][ T9711] netlink: 'syz.1.1180': attribute type 178 has an invalid length.
[  121.970204][ T9719] macsec1: entered allmulticast mode
[  121.972415][ T9719] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  122.101462][ T9733] netlink: 'syz.0.1188': attribute type 1 has an invalid length.
[  122.108786][ T9733] netlink: 'syz.0.1188': attribute type 178 has an invalid length.
[  122.610696][ T9775] gre1: entered allmulticast mode
[  123.221832][ T9795] netlink: 'syz.0.1207': attribute type 178 has an invalid length.
[  123.268950][ T9797] netlink: 'syz.0.1208': attribute type 1 has an invalid length.
[  123.521485][   T56] block nbd0: Receive control failed (result -107)
[  123.556959][ T9811] nbd0: detected capacity change from 0 to 32
[  123.562616][ T7994] block nbd0: Dead connection, failed to find a fallback
[  123.566314][ T7994] block nbd0: shutting down sockets
[  123.570829][ T7994] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  123.577016][ T7994] Buffer I/O error on dev nbd0, logical block 0, async page read
[  123.580626][ T7994] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  123.584219][ T7994] Buffer I/O error on dev nbd0, logical block 0, async page read
[  123.591500][ T7994] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  123.595012][ T7994] Buffer I/O error on dev nbd0, logical block 0, async page read
[  123.599811][ T7994] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  123.607087][ T7994] Buffer I/O error on dev nbd0, logical block 0, async page read
[  123.610705][ T7994] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  123.614252][ T7994] Buffer I/O error on dev nbd0, logical block 0, async page read
[  123.619980][ T7994] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  123.625133][ T7994] Buffer I/O error on dev nbd0, logical block 0, async page read
[  123.629226][ T7994] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  123.632923][ T7994] Buffer I/O error on dev nbd0, logical block 0, async page read
[  123.637275][ T7994] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  123.640885][ T7994] Buffer I/O error on dev nbd0, logical block 0, async page read
[  123.644704][ T7994] ldm_validate_partition_table(): Disk read failed.
[  123.650217][ T7994] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  123.653953][ T7994] Buffer I/O error on dev nbd0, logical block 0, async page read
[  123.658213][ T7994] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  123.661870][ T7994] Buffer I/O error on dev nbd0, logical block 0, async page read
[  123.665963][ T7994] Dev nbd0: unable to read RDB block 0
[  123.672301][ T7994]  nbd0: unable to read partition table
[  123.684846][ T7994] ldm_validate_partition_table(): Disk read failed.
[  123.696069][ T7994] Dev nbd0: unable to read RDB block 0
[  123.701664][ T7994]  nbd0: unable to read partition table
[  123.902955][ T9822] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  123.909379][ T9822] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  125.382417][ T9831] team_slave_0: left allmulticast mode
[  125.400096][ T9831] geneve0: left promiscuous mode
[  125.404823][ T9831] gretap1: left promiscuous mode
[  125.417504][ T9831] gretap1: left allmulticast mode
[  125.435480][ T9831] geneve2: left promiscuous mode
[  125.441470][ T9831] geneve2: left allmulticast mode
[  125.473125][ T9831] mac80211_hwsim hwsim4 D: left promiscuous mode
[  125.475858][ T9831] mac80211_hwsim hwsim4 D: left allmulticast mode
[  125.480414][ T9831] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  125.483035][ T9831] macsec1: left allmulticast mode
[  125.488990][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.494292][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.501714][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.508485][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.765644][ T9845] netlink: 'syz.2.1223': attribute type 178 has an invalid length.
[  125.808170][ T9846] __nla_validate_parse: 13 callbacks suppressed
[  125.808187][ T9846] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1224'.
[  125.813150][ T9848] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1225'.
[  125.863842][ T9852] netlink: 'syz.1.1227': attribute type 178 has an invalid length.
[  125.885735][ T9856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1228'.
[  125.905437][ T9859] openvswitch: netlink: Missing valid actions attribute.
[  125.907818][ T9859] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.991002][ T9856] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1228'.
[  126.165551][ T5876] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  126.170613][ T5876] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  126.187071][ T5915] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  126.249082][ T9884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1240'.
[  126.253153][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1240'.
[  126.413644][ T9903] netlink: 'syz.0.1247': attribute type 178 has an invalid length.
[  126.640536][ T9923] netlink: 'syz.2.1252': attribute type 178 has an invalid length.
[  126.649383][ T2303] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  126.674059][ T9925] netlink: 'syz.2.1253': attribute type 33 has an invalid length.
[  126.676857][ T9925] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1253'.
[  126.688196][ T9925] netlink: 'syz.2.1253': attribute type 178 has an invalid length.
[  126.862676][ T9938] netlink: 'syz.2.1259': attribute type 12 has an invalid length.
[  126.865083][ T9938] netlink: 'syz.2.1259': attribute type 29 has an invalid length.
[  126.869279][ T9938] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1259'.
[  126.895509][ T9940] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1260'.
[  127.033431][ T9962] sctp: [Deprecated]: syz.0.1268 (pid 9962) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.033431][ T9962] Use struct sctp_sack_info instead
[  127.170927][ T9977] xt_time: invalid argument - start or stop time greater than 23:59:59
[  127.199125][ T5769] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  127.428285][T10001] vlan2: entered allmulticast mode
[  127.429925][T10001] veth1: entered allmulticast mode
[  127.601253][T10010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1279'.
[  127.662716][T10015] netlink: 'syz.2.1281': attribute type 178 has an invalid length.
[  128.086269][T10060] netlink: 'syz.2.1298': attribute type 3 has an invalid length.
[  128.455104][T10089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.687724][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22
[  129.838941][T10220] team0: No ports can be present during mode change
[  129.986905][T10240] syzkaller0: entered promiscuous mode
[  129.989433][T10240] syzkaller0: entered allmulticast mode
[  130.411053][T10278] syzkaller0: entered promiscuous mode
[  130.413267][T10278] syzkaller0: entered allmulticast mode
[  130.477320][T10282] syz_tun: refused to change device tx_queue_len
[  130.479350][T10282] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  130.557116][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  130.735980][T10292] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  130.832923][T10300] validate_nla: 13 callbacks suppressed
[  130.832935][T10300] netlink: 'syz.2.1370': attribute type 10 has an invalid length.
[  131.042763][T10323] __nla_validate_parse: 21 callbacks suppressed
[  131.042778][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1375'.
[  131.077943][ T5769] hid-generic 0005:15C2:5505.0002: unknown main item tag 0x0
[  131.080363][ T5769] hid-generic 0005:15C2:5505.0002: unknown main item tag 0x0
[  131.096947][ T5769] hid-generic 0005:15C2:5505.0002: reserved main item tag 0xe
[  131.103041][ T5769] hid-generic 0005:15C2:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  131.180796][T10336] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1373'.
[  131.184483][T10336] openvswitch: netlink: EtherType 0 is less than min 600
[  131.222185][T10337] netlink: 'syz.1.1378': attribute type 178 has an invalid length.
[  131.571103][T10361] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1390'.
[  131.622373][T10365] netlink: 'syz.0.1391': attribute type 62 has an invalid length.
[  132.494981][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.547478][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'.
[  132.552667][T10394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1397'.
[  132.580419][T10396] tipc: Enabled bearer <udp:syz1>, priority 10
[  132.610832][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'.
[  132.624141][T10401] netlink: 'syz.0.1399': attribute type 1 has an invalid length.
[  132.660083][T10401] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  132.667501][T10401] bond1 (unregistering): (slave ip6gretap2): Releasing backup interface
[  132.687534][T10401] bond1 (unregistering): Released all slaves
[  132.711007][T10411] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1401'.
[  132.730530][T10413] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1402'.
[  132.803989][T10419] syz_tun: refused to change device tx_queue_len
[  132.808921][T10419] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  133.066017][T10450] bond1: entered promiscuous mode
[  133.069638][T10450] 8021q: adding VLAN 0 to HW filter on device bond1
[  133.732265][T10462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1413'.
[  133.754558][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1413'.
[  133.862573][ T5876] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  133.879934][ T5876] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  133.893717][ T5876] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  133.910166][ T5876] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  133.983389][T10483] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  134.039859][T10490] syzkaller1: entered promiscuous mode
[  134.041809][T10490] syzkaller1: entered allmulticast mode
[  134.253305][T10511] netlink: 'syz.2.1429': attribute type 178 has an invalid length.
[  134.665951][T10561] syz.0.1446 uses old SIOCAX25GETINFO
[  135.110850][T10613] sctp: [Deprecated]: syz.2.1462 (pid 10613) Use of int in max_burst socket option.
[  135.110850][T10613] Use struct sctp_assoc_value instead
[  135.122739][T10615] netlink: 'syz.1.1463': attribute type 178 has an invalid length.
[  135.335795][T10635] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  135.461449][T10643] netlink: 'syz.1.1472': attribute type 1 has an invalid length.
[  135.579942][T10657] sit3: entered promiscuous mode
[  135.591831][T10657] netlink: 'syz.2.1476': attribute type 3 has an invalid length.
[  136.479225][T10703] __nla_validate_parse: 14 callbacks suppressed
[  136.479240][T10703] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1492'.
[  136.485663][T10703] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1492'.
[  136.513435][T10704] bond0: option xmit_hash_policy: invalid value (255)
[  136.517569][T10703] bond0: option xmit_hash_policy: invalid value (255)
[  136.669708][T10722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1499'.
[  136.754490][T10729] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1502'.
[  136.774975][T10731] netlink: 'syz.1.1503': attribute type 178 has an invalid length.
[  136.857755][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1506'.
[  136.908378][T10745] nbd: must specify an index to disconnect
[  137.067497][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'.
[  137.162654][T10771] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1513'.
[  137.285913][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'.
[  138.153227][T10799] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1520'.
[  138.166087][T10799] netlink: 'syz.2.1520': attribute type 178 has an invalid length.
[  138.173457][T10801] sctp: [Deprecated]: syz.0.1522 (pid 10801) Use of int in max_burst socket option deprecated.
[  138.173457][T10801] Use struct sctp_assoc_value instead
[  138.268256][T10812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1522'.
[  138.633330][T10846] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  138.705611][T10862] netlink: 'syz.1.1537': attribute type 178 has an invalid length.
[  138.792331][T10864] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000
[  138.796373][T10864] netlink: 'syz.1.1539': attribute type 178 has an invalid length.
[  138.915741][T10868] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.941082][T10868] bond0: (slave rose0): Enslaving as an active interface with an up link
[  139.516702][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  140.567415][  T796] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  140.591002][T10937] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.600627][T10937] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  140.606267][T10937] tipc: Resetting bearer <eth:syzkaller0>
[  140.656889][   T52] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  140.848446][ T2303] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  140.983003][   T33] audit: type=1107 audit(1758198662.255:3): pid=10950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='_s2l U'
[  141.024176][T10967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.258031][T10988] tipc: New replicast peer: 255.255.255.255
[  141.261269][T10988] tipc: Enabled bearer <udp:syz2>, priority 10
[  141.440001][T10996] netlink: 'syz.0.1574': attribute type 178 has an invalid length.
[  141.616279][T11014] __nla_validate_parse: 15 callbacks suppressed
[  141.616296][T11014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1581'.
[  141.625665][T11014] netlink: 'syz.2.1581': attribute type 178 has an invalid length.
[  141.663520][T11016] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1582'.
[  141.669821][T11016] tipc: Disabling bearer <udp:syz0>
[  142.039431][T11025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.042767][T11025] syzkaller0: entered promiscuous mode
[  142.044918][T11025] syzkaller0: entered allmulticast mode
[  142.067305][T11025] tipc: Resetting bearer <eth:syzkaller0>
[  142.606096][T11038] xfrm1: entered allmulticast mode
[  142.612541][T11038] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1589'.
[  142.693065][T11043] netlink: 'syz.0.1591': attribute type 1 has an invalid length.
[  142.738146][T11043] bond1: entered promiscuous mode
[  142.740230][T11043] bond1: entered allmulticast mode
[  142.754314][T11043] 8021q: adding VLAN 0 to HW filter on device bond1
[  142.848445][T11050] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1593'.
[  142.870349][T11024] tipc: Resetting bearer <eth:syzkaller0>
[  142.889365][T11024] tipc: Disabling bearer <eth:syzkaller0>
[  142.903223][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'.
[  142.906352][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'.
[  142.911481][T11052] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  142.951686][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1596'.
[  142.991724][T11058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1597'.
[  143.007126][T11059] netlink: 91 bytes leftover after parsing attributes in process `syz.0.1595'.
[  143.275654][T11085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1606'.
[  143.286172][T11085] netlink: 'syz.1.1606': attribute type 11 has an invalid length.
[  143.790741][T11151] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  144.684210][T11176] netlink: 'syz.1.1638': attribute type 178 has an invalid length.
[  144.684243][T11177] netlink: 'syz.1.1638': attribute type 178 has an invalid length.
[  144.714883][T11180] netlink: 'syz.1.1639': attribute type 178 has an invalid length.
[  145.130319][T11207] tipc: Can't bind to reserved service type 1
[  145.138312][T11207] syzkaller1: entered promiscuous mode
[  145.140549][T11207] syzkaller1: entered allmulticast mode
[  145.150298][T11210] netlink: 'syz.0.1649': attribute type 178 has an invalid length.
[  145.637456][T11237] netlink: 'syz.1.1658': attribute type 178 has an invalid length.
[  145.705339][T11245] netlink: 'syz.1.1660': attribute type 178 has an invalid length.
[  145.852790][T11256] netlink: 'syz.1.1661': attribute type 29 has an invalid length.
[  145.858183][T11256] netlink: 'syz.1.1661': attribute type 29 has an invalid length.
[  146.121117][T11283] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  146.125582][T11283] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  146.129089][T11283] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  146.581330][T11334] bridge0: port 3(erspan0) entered blocking state
[  146.583563][T11334] bridge0: port 3(erspan0) entered disabled state
[  146.585686][T11334] erspan0: entered allmulticast mode
[  146.598383][T11334] erspan0: entered promiscuous mode
[  146.601378][T11334] bridge0: port 3(erspan0) entered blocking state
[  146.604022][T11334] bridge0: port 3(erspan0) entered forwarding state
[  146.644890][T11339] __nla_validate_parse: 13 callbacks suppressed
[  146.644901][T11339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1688'.
[  146.650301][T11334] netem: incorrect ge model size
[  146.652195][T11334] netem: change failed
[  146.703939][T11341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1689'.
[  146.962862][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1696'.
[  147.160148][T11372] 8021q: adding VLAN 0 to HW filter on device bond3
[  147.252273][T11372] bond3 (unregistering): Released all slaves
[  147.267271][T11381] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  147.269831][T11381] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  147.272217][T11381] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  147.404440][T11390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1705'.
[  147.498813][T11400] erspan0: entered promiscuous mode
[  147.541475][T11404] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.590078][T11404] syzkaller0: entered promiscuous mode
[  147.592454][T11404] syzkaller0: entered allmulticast mode
[  147.597807][T11404] tipc: Resetting bearer <eth:syzkaller0>
[  147.632943][T11403] tipc: Resetting bearer <eth:syzkaller0>
[  148.035793][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1712'.
[  149.649684][T11403] tipc: Disabling bearer <eth:syzkaller0>
[  149.792087][T11419] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1715'.
[  149.795418][T11402] Set syz1 is full, maxelem 65536 reached
[  149.796039][T11425] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1715'.
[  149.884836][T11429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1717'.
[  149.923530][T11441] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1721'.
[  149.956084][T11445] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1722'.
[  150.052402][T11459] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  150.071630][T11461] validate_nla: 2 callbacks suppressed
[  150.071645][T11461] netlink: 'syz.1.1726': attribute type 6 has an invalid length.
[  150.086267][T11461] netlink: 'syz.1.1726': attribute type 4 has an invalid length.
[  150.099963][T11465] netlink: 'syz.0.1727': attribute type 178 has an invalid length.
[  150.367097][ T5915] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  150.824378][T11529] netlink: zone id is out of range
[  150.826208][T11529] netlink: get zone limit has 8 unknown bytes
[  150.870549][T11532] ip6gre0: entered allmulticast mode
[  151.142470][T11553] 8021q: VLANs not supported on ip6_vti0
[  151.280633][   T52] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  151.519365][T11587] netlink: 'syz.0.1762': attribute type 178 has an invalid length.
[  151.677610][T11606] __nla_validate_parse: 70 callbacks suppressed
[  151.677620][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'.
[  151.684667][T11606] netlink: 'syz.0.1770': attribute type 178 has an invalid length.
[  151.743830][T11611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1772'.
[  151.857777][T11621] netlink: 'syz.0.1774': attribute type 178 has an invalid length.
[  151.903359][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1775'.
[  151.921388][T11629] netlink: 'syz.0.1776': attribute type 178 has an invalid length.
[  151.990500][T11632] IPVS: length: 253 != 8
[  152.080449][T11639] sock: sock_set_timeout: `syz.0.1780' (pid 11639) tries to set negative timeout
[  152.081180][T11637] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1779'.
[  152.230564][T11658] tipc: Invalid UDP bearer configuration
[  152.230609][T11658] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  152.307086][T11667] dvmrp8: entered allmulticast mode
[  152.315603][T11667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1788'.
[  152.329533][T11666] dvmrp8: left allmulticast mode
[  152.338631][T11664] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1785'.
[  152.342314][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1785'.
[  152.452414][T11676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1791'.
[  152.481478][T11676] 8021q: adding VLAN 0 to HW filter on device bond3
[  152.510998][T11676] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  152.550633][T11681] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  153.146405][T11729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1811'.
[  153.151079][T11731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1811'.
[  153.273969][T11740] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  153.279251][T11740] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  153.447146][T11754] macvlan0: entered promiscuous mode
[  153.449811][T11754] batadv0: entered promiscuous mode
[  153.452542][T11754] hsr1: entered allmulticast mode
[  153.454373][T11754] macvlan0: entered allmulticast mode
[  153.456096][T11754] erspan0: entered allmulticast mode
[  153.461338][T11754] batadv0: entered allmulticast mode
[  153.475879][T11754] macvlan0: left promiscuous mode
[  153.479308][T11754] batadv0: left promiscuous mode
[  153.555866][T11764] netlink: 'syz.1.1822': attribute type 16 has an invalid length.
[  153.558940][T11764] netlink: 'syz.1.1822': attribute type 17 has an invalid length.
[  153.561925][T11765] netlink: 'syz.2.1821': attribute type 4 has an invalid length.
[  153.659349][T11770] IPv6: NLM_F_REPLACE set, but no existing node found!
[  153.752257][T11764] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.763267][T11764] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.882605][T11764] erspan0: left allmulticast mode
[  153.920597][T11772] pim6reg: entered allmulticast mode
[  153.928236][ T5876] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.932205][ T5876] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.935021][ T5876] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.940524][ T5876] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.970521][T11781] netlink: 'syz.1.1823': attribute type 11 has an invalid length.
[  154.968512][ T5876] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  154.977877][ T5876] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  154.988387][ T5876] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  154.994561][ T5876] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  155.319751][T11858] validate_nla: 2 callbacks suppressed
[  155.319766][T11858] netlink: 'syz.0.1846': attribute type 178 has an invalid length.
[  155.409335][T11860] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  155.605334][T11877] bond2: entered promiscuous mode
[  155.607649][T11877] bond2: entered allmulticast mode
[  155.610164][T11877] 8021q: adding VLAN 0 to HW filter on device bond2
[  156.655675][T11904] veth0_vlan: entered allmulticast mode
[  156.711649][T11913] netlink: 'syz.1.1863': attribute type 178 has an invalid length.
[  156.988104][T11927] __nla_validate_parse: 19 callbacks suppressed
[  156.988120][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1868'.
[  157.240989][T11936] raw_sendmsg: syz.2.1871 forgot to set AF_INET. Fix it!
[  157.446879][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  157.671399][T11953] debugfs: 'netdev:nicvf0' already exists in 'phy3'
[  157.722733][T11963] netlink: 'syz.1.1879': attribute type 178 has an invalid length.
[  157.752797][T11965] netlink: 21376 bytes leftover after parsing attributes in process `syz.0.1880'.
[  157.761655][T11965] syzkaller1: entered promiscuous mode
[  157.763779][T11965] syzkaller1: entered allmulticast mode
[  157.920580][T11972] lo: entered allmulticast mode
[  157.922883][T11972] lo: left allmulticast mode
[  157.930179][T11973] netlink: 'syz.1.1882': attribute type 16 has an invalid length.
[  157.932646][T11973] netlink: 'syz.1.1882': attribute type 17 has an invalid length.
[  157.946184][T11973] erspan0: left promiscuous mode
[  157.986290][T11973] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.990127][T11975] netlink: 'syz.1.1882': attribute type 178 has an invalid length.
[  157.994224][T11973] 8021q: adding VLAN 0 to HW filter on device team0
[  158.011458][T11973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.024984][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1884'.
[  158.031241][ T5875] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  158.037439][ T5875] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  158.042721][ T5875] bond0: now running without any active interface!
[  158.123517][T11983] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  158.325100][T11998] delete_channel: no stack
[  159.145481][T12003] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1894'.
[  159.198861][T12008] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:5
[  159.208806][T12009] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20001
[  159.265353][T12017] netlink: 'syz.1.1900': attribute type 1 has an invalid length.
[  159.299097][T12019] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1901'.
[  159.545851][T12039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1899'.
[  159.618813][T12043] bridge_slave_0: default FDB implementation only supports local addresses
[  159.625124][T12043] netlink: 'syz.2.1909': attribute type 21 has an invalid length.
[  159.630046][T12043] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1909'.
[  159.633098][T12043] netlink: 'syz.2.1909': attribute type 5 has an invalid length.
[  159.635954][T12043] netlink: 'syz.2.1909': attribute type 6 has an invalid length.
[  159.638571][T12043] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1909'.
[  159.681306][T12051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1911'.
[  159.819139][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'.
[  160.127925][T12080] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  160.778123][T12160] netlink: 'syz.0.1943': attribute type 11 has an invalid length.
[  160.973457][T12172] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  161.702701][T12177] ==================================================================
[  161.705440][T12177] BUG: KASAN: use-after-free in xfrm_alloc_spi+0x570/0xf30
[  161.707942][T12177] Read of size 4 at addr ffff8880231300c4 by task syz.0.1949/12177
[  161.712095][T12177] 
[  161.713081][T12177] CPU: 0 UID: 0 PID: 12177 Comm: syz.0.1949 Not tainted syzkaller #0 PREEMPT(full) 
[  161.713100][T12177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.713109][T12177] Call Trace:
[  161.713116][T12177]  <TASK>
[  161.713124][T12177]  dump_stack_lvl+0x189/0x250
[  161.713145][T12177]  ? __kasan_check_byte+0x12/0x40
[  161.713168][T12177]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.713211][T12177]  ? lock_release+0x4b/0x3e0
[  161.713233][T12177]  ? __virt_addr_valid+0x4a5/0x5c0
[  161.713250][T12177]  print_report+0xca/0x240
[  161.713265][T12177]  ? xfrm_alloc_spi+0x570/0xf30
[  161.713279][T12177]  kasan_report+0x118/0x150
[  161.713295][T12177]  ? xfrm_alloc_spi+0x570/0xf30
[  161.713308][T12177]  xfrm_alloc_spi+0x570/0xf30
[  161.713320][T12177]  ? xfrm_alloc_spi+0x2a0/0xf30
[  161.713339][T12177]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  161.713354][T12177]  ? xfrm_find_acq+0x87/0xa0
[  161.713371][T12177]  xfrm_alloc_userspi+0x70b/0xc90
[  161.713393][T12177]  ? apparmor_capable+0x137/0x1b0
[  161.713410][T12177]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  161.713428][T12177]  ? __nla_parse+0x40/0x60
[  161.713446][T12177]  xfrm_user_rcv_msg+0x7a3/0xab0
[  161.713462][T12177]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  161.713484][T12177]  ? __pfx___mutex_trylock_common+0x10/0x10
[  161.713509][T12177]  ? rcu_is_watching+0x15/0xb0
[  161.713524][T12177]  ? trace_contention_end+0x39/0x120
[  161.713538][T12177]  ? __mutex_lock+0x335/0x1350
[  161.713554][T12177]  netlink_rcv_skb+0x208/0x470
[  161.713575][T12177]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  161.713587][T12177]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  161.713604][T12177]  ? netlink_deliver_tap+0x2e/0x1b0
[  161.713618][T12177]  ? netlink_deliver_tap+0x2e/0x1b0
[  161.713632][T12177]  xfrm_netlink_rcv+0x79/0x90
[  161.713643][T12177]  netlink_unicast+0x82f/0x9e0
[  161.713659][T12177]  ? __pfx_netlink_unicast+0x10/0x10
[  161.713676][T12177]  ? netlink_sendmsg+0x642/0xb30
[  161.713688][T12177]  ? skb_put+0x11b/0x210
[  161.713702][T12177]  netlink_sendmsg+0x805/0xb30
[  161.713716][T12177]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.713730][T12177]  ? aa_sock_msg_perm+0xf1/0x1d0
[  161.713743][T12177]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  161.713760][T12177]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.713771][T12177]  __sock_sendmsg+0x21c/0x270
[  161.713789][T12177]  ____sys_sendmsg+0x505/0x830
[  161.713808][T12177]  ? __pfx_____sys_sendmsg+0x10/0x10
[  161.713825][T12177]  ? import_iovec+0x74/0xa0
[  161.713844][T12177]  ___sys_sendmsg+0x21f/0x2a0
[  161.713860][T12177]  ? __pfx____sys_sendmsg+0x10/0x10
[  161.713885][T12177]  ? __fget_files+0x2a/0x420
[  161.713897][T12177]  ? __fget_files+0x3a0/0x420
[  161.713911][T12177]  __x64_sys_sendmsg+0x19b/0x260
[  161.713928][T12177]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  161.713946][T12177]  ? rcu_is_watching+0x15/0xb0
[  161.713962][T12177]  ? do_syscall_64+0xbe/0x3b0
[  161.713976][T12177]  do_syscall_64+0xfa/0x3b0
[  161.713987][T12177]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.714005][T12177]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.714019][T12177]  ? exc_page_fault+0x9f/0xf0
[  161.714037][T12177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.714051][T12177] RIP: 0033:0x7fa5c678eba9
[  161.714065][T12177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.714079][T12177] RSP: 002b:00007fa5c75fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  161.714095][T12177] RAX: ffffffffffffffda RBX: 00007fa5c69d5fa0 RCX: 00007fa5c678eba9
[  161.714105][T12177] RDX: 0000000004000080 RSI: 0000200000000540 RDI: 0000000000000004
[  161.714115][T12177] RBP: 00007fa5c6811e19 R08: 0000000000000000 R09: 0000000000000000
[  161.714124][T12177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.714133][T12177] R13: 00007fa5c69d6038 R14: 00007fa5c69d5fa0 R15: 00007fff95518528
[  161.714146][T12177]  </TASK>
[  161.714151][T12177] 
[  161.846994][T12177] The buggy address belongs to the physical page:
[  161.849058][T12177] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888023131e00 pfn:0x23130
[  161.852280][T12177] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  161.854671][T12177] raw: 00fff00000000000 ffffea0000d85a08 ffffea0000e1ca08 0000000000000000
[  161.857988][T12177] raw: ffff888023131e00 0000000000150000 00000000ffffffff 0000000000000000
[  161.861320][T12177] page dumped because: kasan: bad access detected
[  161.863823][T12177] page_owner tracks the page as freed
[  161.865899][T12177] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9827, tgid 9826 (syz.2.1217), ts 125307033332, free_ts 127567474562
[  161.873055][T12177]  post_alloc_hook+0x240/0x2a0
[  161.874961][T12177]  get_page_from_freelist+0x21e4/0x22c0
[  161.877146][T12177]  __alloc_frozen_pages_noprof+0x181/0x370
[  161.879462][T12177]  alloc_pages_mpol+0x232/0x4a0
[  161.881401][T12177]  allocate_slab+0x8a/0x370
[  161.883201][T12177]  ___slab_alloc+0xbeb/0x1420
[  161.885088][T12177]  kmem_cache_alloc_noprof+0x283/0x3c0
[  161.887263][T12177]  skb_clone+0x212/0x3a0
[  161.888932][T12177]  bpf_clone_redirect+0xad/0x3d0
[  161.890884][T12177]  0xffffffffa00023a7
[  161.892428][T12177]  bpf_test_run+0x318/0x7b0
[  161.894222][T12177]  bpf_prog_test_run_skb+0xb30/0x1560
[  161.896352][T12177]  bpf_prog_test_run+0x2c7/0x340
[  161.898311][T12177]  __sys_bpf+0x581/0x870
[  161.899995][T12177]  __x64_sys_bpf+0x7c/0x90
[  161.901781][T12177]  do_syscall_64+0xfa/0x3b0
[  161.903545][T12177] page last free pid 5829 tgid 5829 stack trace:
[  161.905979][T12177]  __free_frozen_pages+0xbc4/0xd30
[  161.907961][T12177]  __put_partials+0x156/0x1a0
[  161.909725][T12177]  put_cpu_partial+0x17c/0x250
[  161.911560][T12177]  __slab_free+0x2d5/0x3c0
[  161.913329][T12177]  qlist_free_all+0x97/0x140
[  161.915157][T12177]  kasan_quarantine_reduce+0x148/0x160
[  161.917305][T12177]  __kasan_slab_alloc+0x22/0x80
[  161.919109][T12177]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  161.921347][T12177]  __alloc_skb+0x112/0x2d0
[  161.923001][T12177]  tcp_stream_alloc_skb+0x3d/0x340
[  161.924920][T12177]  tcp_sendmsg_locked+0xf38/0x5620
[  161.926902][T12177]  tcp_sendmsg+0x2f/0x50
[  161.928515][T12177]  __sock_sendmsg+0x19c/0x270
[  161.930338][T12177]  sock_write_iter+0x258/0x330
[  161.932143][T12177]  vfs_write+0x5c9/0xb30
[  161.933827][T12177]  ksys_write+0x145/0x250
[  161.935454][T12177] 
[  161.936396][T12177] Memory state around the buggy address:
[  161.938535][T12177]  ffff88802312ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  161.941593][T12177]  ffff888023130000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  161.944609][T12177] >ffff888023130080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  161.947580][T12177]                                            ^
[  161.949947][T12177]  ffff888023130100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  161.952988][T12177]  ffff888023130180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  161.956062][T12177] ==================================================================
[  161.959343][T12177] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  161.962041][T12177] CPU: 0 UID: 0 PID: 12177 Comm: syz.0.1949 Not tainted syzkaller #0 PREEMPT(full) 
[  161.965595][T12177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.969402][T12177] Call Trace:
[  161.970659][T12177]  <TASK>
[  161.971686][T12177]  dump_stack_lvl+0x99/0x250
[  161.973422][T12177]  ? __asan_memcpy+0x40/0x70
[  161.975190][T12177]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.977224][T12177]  ? __pfx__printk+0x10/0x10
[  161.979064][T12177]  vpanic+0x281/0x750
[  161.980645][T12177]  ? __pfx_vpanic+0x10/0x10
[  161.982438][T12177]  ? irqentry_exit+0x74/0x90
[  161.984262][T12177]  panic+0xb9/0xc0
[  161.985754][T12177]  ? __pfx_panic+0x10/0x10
[  161.987492][T12177]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  161.989794][T12177]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  161.992084][T12177]  ? xfrm_alloc_spi+0x570/0xf30
[  161.993963][T12177]  check_panic_on_warn+0x89/0xb0
[  161.995874][T12177]  ? xfrm_alloc_spi+0x570/0xf30
[  161.997743][T12177]  end_report+0x78/0x160
[  161.999391][T12177]  kasan_report+0x129/0x150
[  162.001184][T12177]  ? xfrm_alloc_spi+0x570/0xf30
[  162.003054][T12177]  xfrm_alloc_spi+0x570/0xf30
[  162.004932][T12177]  ? xfrm_alloc_spi+0x2a0/0xf30
[  162.006827][T12177]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  162.008865][T12177]  ? xfrm_find_acq+0x87/0xa0
[  162.010628][T12177]  xfrm_alloc_userspi+0x70b/0xc90
[  162.012594][T12177]  ? apparmor_capable+0x137/0x1b0
[  162.014554][T12177]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  162.016677][T12177]  ? __nla_parse+0x40/0x60
[  162.018402][T12177]  xfrm_user_rcv_msg+0x7a3/0xab0
[  162.020333][T12177]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  162.022454][T12177]  ? __pfx___mutex_trylock_common+0x10/0x10
[  162.024769][T12177]  ? rcu_is_watching+0x15/0xb0
[  162.026681][T12177]  ? trace_contention_end+0x39/0x120
[  162.028718][T12177]  ? __mutex_lock+0x335/0x1350
[  162.030556][T12177]  netlink_rcv_skb+0x208/0x470
[  162.032391][T12177]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  162.034494][T12177]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  162.036500][T12177]  ? netlink_deliver_tap+0x2e/0x1b0
[  162.038495][T12177]  ? netlink_deliver_tap+0x2e/0x1b0
[  162.040539][T12177]  xfrm_netlink_rcv+0x79/0x90
[  162.042428][T12177]  netlink_unicast+0x82f/0x9e0
[  162.044304][T12177]  ? __pfx_netlink_unicast+0x10/0x10
[  162.046325][T12177]  ? netlink_sendmsg+0x642/0xb30
[  162.048208][T12177]  ? skb_put+0x11b/0x210
[  162.049840][T12177]  netlink_sendmsg+0x805/0xb30
[  162.051703][T12177]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.053744][T12177]  ? aa_sock_msg_perm+0xf1/0x1d0
[  162.055619][T12177]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  162.057657][T12177]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.059736][T12177]  __sock_sendmsg+0x21c/0x270
[  162.061595][T12177]  ____sys_sendmsg+0x505/0x830
[  162.063470][T12177]  ? __pfx_____sys_sendmsg+0x10/0x10
[  162.065512][T12177]  ? import_iovec+0x74/0xa0
[  162.067260][T12177]  ___sys_sendmsg+0x21f/0x2a0
[  162.069034][T12177]  ? __pfx____sys_sendmsg+0x10/0x10
[  162.071029][T12177]  ? __fget_files+0x2a/0x420
[  162.072827][T12177]  ? __fget_files+0x3a0/0x420
[  162.074614][T12177]  __x64_sys_sendmsg+0x19b/0x260
[  162.076542][T12177]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  162.078623][T12177]  ? rcu_is_watching+0x15/0xb0
[  162.080441][T12177]  ? do_syscall_64+0xbe/0x3b0
[  162.082301][T12177]  do_syscall_64+0xfa/0x3b0
[  162.084236][T12177]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.086286][T12177]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.088575][T12177]  ? exc_page_fault+0x9f/0xf0
[  162.090360][T12177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.092606][T12177] RIP: 0033:0x7fa5c678eba9
[  162.094277][T12177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.101608][T12177] RSP: 002b:00007fa5c75fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  162.104880][T12177] RAX: ffffffffffffffda RBX: 00007fa5c69d5fa0 RCX: 00007fa5c678eba9
[  162.107997][T12177] RDX: 0000000004000080 RSI: 0000200000000540 RDI: 0000000000000004
[  162.111060][T12177] RBP: 00007fa5c6811e19 R08: 0000000000000000 R09: 0000000000000000
[  162.114108][T12177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.117109][T12177] R13: 00007fa5c69d6038 R14: 00007fa5c69d5fa0 R15: 00007fff95518528
[  162.120135][T12177]  </TASK>
[  162.122136][T12177] Kernel Offset: disabled
[  162.123848][T12177] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:31:23  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000010f3 RDI=00000000000010f4 RBP=00000000000003f8 RSP=ffffc900064b69f0
R8 =ffff88801f5e0237 R9 =1ffff11003ebc046 R10=dffffc0000000000 R11=ffffffff854f4700
R12=dffffc0000000000 R13=ffffffff99afd8fb R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f477c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa5c75fe6c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2b9801 CR3=00000001214d8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fa5c750d100 00007fa5c69a7460 XMM05=00007fa5c69a7478 00007fa5c69a74c0
XMM06=00007fa5c69a74b8 00007fa5c69a74b0 XMM07=00007fa5c69a74a8 00007fa5c69a74a0
XMM08=0000000000000000 00007fa5c6812ee7 XMM09=0000000000000000 00007fa5c6812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000009d035d65 RBX=0000000000000001 RCX=000000008b8524cb RDX=00000000e22eda27
RSI=000000001291ceef RDI=ffff88810a490000 RBP=0000000000000000 RSP=ffffc90003127588
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc900031277d8 R11=ffffffff81ac3ae0
R12=00000000689c3d0a R13=ffff88810a490af0 R14=ffff88810a490b18 R15=00000000265c5c29
RIP=ffffffff819d6980 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555574002500 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555a1d3327e8 CR3=000000011242c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fa253e12e53
XMM06=0000000000000000 00007fa253e12e4d XMM07=0000000000000000 00007fa253e12e61
XMM08=0000000000000000 00007fa253e12ee7 XMM09=0000000000000000 00007fa253e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
