last executing test programs:

16.605001784s ago: executing program 1 (id=4534):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xfffffffd, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}, 0x1, 0x0, 0x1100000000000000}, 0x800)

16.601464079s ago: executing program 2 (id=4535):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0xc4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x70, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x45, 0x3, "cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537b11b37357f"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x0)

16.577930325s ago: executing program 0 (id=4536):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300020000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0)

16.559530543s ago: executing program 1 (id=4537):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x4e24, @broadcast}})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000180)=""/184, 0xc2}, {&(0x7f00000009c0)=""/242, 0xf2}, {&(0x7f0000000ac0)=""/174, 0xaa}, {&(0x7f0000000900)=""/136, 0x88}, {&(0x7f0000000600)=""/169, 0xa9}, {&(0x7f0000000440)=""/220, 0xda}], 0x8, &(0x7f0000000840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1e}, 0x40)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xffffffff}})

16.501977526s ago: executing program 0 (id=4538):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x11000)
vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="adba69b8faf1fafbc15e7fee388d121381cf70f5f5cea82140b46a3b8d7234cde6eb75f3b89d275bd9ed38ec804a94c3c637ed69c4c04b7ad6ea2908ac095e0f49653c33f31e27e4afe9db1ca25c4f48779593728b46224d0fb46f215ba7153da91ff4b4b5f99c6bcdcc2e2ffc27ad1a86687b0a967a033c5f2d589145bc1d41952e2e6f43d0af7768f714e6ddbddcceaf3f5bd7066b903bd659ba802414ccca078b47decf575ce264f32b07a2c028c4cb37d1e22c2310d843f8a4c950bc910d2bb581b571fd216b802f4249bd083438788fcba4340ce9ec0e50122a02efa8982d34b1d6139596785c3eaa085cb6d81f7bc3ac62fbce404bca13803132898c264b9878a89b8f3c1c0896bff53d31f35b3a84e2fe670bf14b2cf7476a223b28804241c79053f59778b013e3f255d5f7f876b058b92502dae18d2de2b7a71acf2c78a31e114c3eafe527244fa31b2c3614f905f6aaf7250949bc2a9b5a744f30f2e3aa12f1417bb26dd3892cbf728f886c1c13cb2f471ebaf75fa1905cf086089b255421567d730e09b698996c51771e3a99068fd9c16f1f772f3e1f885f846db2829b39b8d2465703ea8db3fda4a01ae1e4a40eeedfa5b3312a4285b5f31ac198a5e3848d4d3db2cb6207e552f544dbfee360f735be849a812043343a834c04a6622ac806224f0ece7336a8c7bb9d6c15ca1d93b0d3d804922e35baad1ddf5b1773f9102c18c398f026865ee64ce85a70ee7c3514e5bd13e935956b76d9db1140e514e5cfe228023008ba9f8a6c7951a03b2001e2b16c5bac060eaf1d1b2b49ddd29a280dd3218c4a0456c3754f944d2d185f861786c29a89615f09d4d4aec0e3ce62bdf09cf121caa73c18d4e78762b2c154a007c0ea9df2223dc4b932a75d6e57910684cd6f7a94e4988d10a6854aced312bde517c8eee5f3e0a14675b08668a0d53982f7e953cf600b5ac2e4afcce547160dc4fff59466b75aae0fa4badec300d858c4e87c1181fd587182dca134470020ee1b08517a11f8ba982a0f1286702d11cf3b056dfc0278342a11f85f1ab3e5be02ce71b28ae4272db7ccdc886774a111fc620730bb68855a3c5d6d45a3274f45db3c4f299bdce8cb50afa3def586266f32a6120629941878df287e0e138acfb1b919dbcc1511811ae5a27a14117fd4ecf6147748e4b7ebb0160cd4f44bc4a17ffc24dc146d575e8488f5ffdbba99c5900722a7c2dea32021544706c70afa67b16024fc8d3d4dc2efa63a0f1008a5f388e4f3fd57624d05052f1a8e2aa0d41fb04a2b87a75008c1c64f352b76b1c271f2240924c7ae15094284bc72abc4806d978030a8013310f9fc65cf1215a1af8f5a074f40b16267f0e319219e2d27fbd6cc08a0e3a37370228db56209e43c5a9b21776b8f175a31aa9227eaa22d4d1f76bceb91aa25e52b4198bd8a9566119c4f1e76d414c9b67572da2a5c6df6694c18af00db08bb61e5aa0b0f2f772fdd480ad4d3297a01f4fde3ce1e45f37eddd8e61da5f02bad8749d84cb3627482b475b497b7db68ea9a894729e2a13fe72adc9c689cc9ed7bda13eda65d34ec300cbfbeb1ab15e7740594ddbc6bd4dd594ca915fba5ece0baab14388b972e221707ef0e4d80424dffbe4508627a13b460b043c5f46b965f5904685cb5224b45d708726e47bd1e4d14f2545f853c9fc979a3ca21f809aacbbf500f751316586b328f93e22b881c22c9cbda4c12d04d5775c763042f62c739dda385a5b49c4bc9fc9b7f8cdd50d50f5e375808b09e5be753b3106c59078e337dfc4d114bd89d9a2995edf5b03fe37bfdf445369c5ba139624c59b25de375caa92f6dcf21e9cf164cba69247174e9571a3c5f3e1c8decd0ac77dd69f8efdb7bf413edb87cf92d587aee0aeab659aa5d27af007e025eacc18e369a34b765298ef3cfc1b7fff5be29a75bcbed99cba4faa8e45f6d2903cb798f575b049aeefb3e8351ee5f2e6b0eb2d3e0721847a1b8f2094fc48d17b4163d35a1d7a1c8665c0e63103f5fee04f528c6df8530bb09e2de4411ef1973c2f63f909ca9f26b6b9a33bb6c50d9e77a3b7b8412695a281ab16daa627030c95a1d1f752cf744435084aa60178ecaf34cdf5e5f1abbece9235f1f9c2ba98ad5cf2b7669d0ba2fd709d87d6066f91e58e5cad29915240290632b56e293068f95084b495fa9038476e1e7e4ae0dee429c6b6db7db12dcb3baac23272d111f51e94287fc3d4791362d12578ccb8a5fedf37e96d00d0613ffe0647ff2d625bd7fdf679b5ba69a65c6d64703cf4253f0993b8cf412d32b85b8aa8c7af24469419be15b63b593f3747bee75d35f5b8e8f6a7c587bfa56d8622fd7c468fd328034bc7e735f8d90acc690be38cc657a53271040792898f2ab566f58a3ce47a9ec5769428f44dc52a27cedcd85f65eb857fe9676a7ae264c505b5a9e80530f384f4a0d45bc5895c72d28640015fa6b19bf9afcc8f87d3427653b44c5869d8368a520f0440601400fa3dfb0577f83b92304875ead2014027edc3e02edf657ed6fb5c67e5bf7af437563371c0c3b2feaa7f20819a6ed737dd8f28c2e0d9304b1b0895a0012e9c3e27f3e160c1682e600cbb2b7d4ee350b8398bdd46e860322b5c323930f8c4f66ea831d736c076f98fcef243709587c01c5f193901605b9c201c4888a8df4ddc6565f2ddee29c20562422b2396284b171af70fd18e5efd7cded9cbbcdabf86829287234415b1fb33f5d112039b1b5acccd97c9a967ce96895f4147bd2296eec3bb7cf8cdf0dd58232c2166aa3575f00b9ec381e9016b8717f9f4318c4279942203d7ea754f54899bfd66026af7879546f2c763a466f06b80804bbdd4cb1b0de35b2d6fe0603aa21950193a8050ef5392ec82094d39ab93a5dc7ca131efa21a460a59f27ceaa6e88291259c08eadf996723356dfbe6037bda8da4c1722d274c30de9aad036cf7f913d64c93e534d4df24722fc3a2aff2f76a2822c743c8ca419ab755452ecab775f80821cbd41ecf4562100ffa82003d032c57a8ff5b3cc11a4c5616ef51806f7ed9e710fb2cb26f96194a1683be1998fbf478336420322a50cadaff6013345f847649878fba8c12a8f39362e853421bf9ea61683cea0181851087274e2606dc4ed37d84705140db662ff0fe355458a995075762b580585b2c2b64cdfac997f8b8cd1db2dd2834180153d7715e1d72cbab197f25795e32decd8e1ffd83ccb04a7d31d8257e3ee8d2ad977285e2d6d5fa779693eedeb12479e3a15816a9d82a020af98161ec9a995a2cfcaacf5fa816d2bc1976261a3cdd46a522c3a607e44be753229c29ae714eacaf1f8344ee614fc551c15a60ae92e97544f3356c5dcea817eb32fc687b3d3e9adb81c29519255daa1ce4cf037e33c9ce4a39a976437c52d3e001d6c6c980f5aba85229e53fa23259afc9f4efa69b2dd10bc4413e07f48f71b76c01236ed17f157b190456ccb70ba481afd28bb0c0a34119179bd54a1f23b90589b953abad8f9951a16f90604f8662787effb61d19208eb7cb95e3cc138e1aaf074982864ba8a3723722649f8928856587a6d96fb7e7baaa93dafac573cf6e0fa0ea812904699dab8b25e996fb9b56c3dc732fd2a0d5c7a669046b53e3b43e2da3c7fa89142714857264e9ffbb33b129f4edc2fe2f143d7c20d49544af0ca06ea97f889101b4628d97ea275a6ee4a777d36e5a0e698c4c900a4cf3355eabf1eea1da94f0ff824d0821753eb9977a4bcdc7afad9a5aef48d0e5ebb51203dc362cbe1a5b1c690363357d6f0772297fcebe7da6a848f6a831ec86fcc6f8acaa2b7d860688c4db700d058df414e0a7e786dbdf8ec877279bb0b0326e4985976e719c99c19e5fdf9ff8a3291796675a5c26e56d22b8bee87ea9d5b7b85ee1f0bf053c5f8feae2cf88b6a7f1e229a1d5bc7a1f173aadb2c866097e5d369277c3d8acfbaf0f3693ebca90ae3e06c35e078fc9586109277b2a95eeae22b2640fadc7da2a4160e381237c3bf7975739bfac8d493575167d7ae17f534fea406fb397a3fc7e37b7caeb2237159153a232a2b77aa7b9ddcee8d6c3e081f09d857df40aa961d95008ec88e74c29e402803fca1b4923987290b956157965ee60481f16d39975455f398c3833b50c358ba54b6d38d6884f92e42497e9afa886091376fbbe10c2e14aa7451987a347517fdbdb2838620bfcc7f6a52bbe50b4f03aea41d398cfd2b9d8380a05a5c2774272d7877ee3318b665b9d3fc219adda225caf5b02ba2e4c28cc33fc39a494270bfface801244a5ecf213f268610a0848ae93fea1e214763e6204aa98f21ede11282b4034973686a4cce3acff7473cd3a84a1340e271c0954311c4a4c4fab3f7801db312b3960030591a078e0cb1a224079d8b135d4dc73c507f079cc92384f18a624eefe8dc1d197425111782d2dcd1b96c5e67a672257a48a45ee7fd30518c0d26772c698f517d4e5c7feb8d5ebee292e86dd4137e4976c7507d19dd8d39fee8434a47da4a84b37a331227bb4c71213d0a20f9fa69d94521cf1b75364c5c2d4070206dd5d06588a65f94a5bea5d433519e631139d43a40add76ce7a4ae0b58e66579a3e94dd49daa5975d264e4fea35d2e37e99b5b196e4980b6a9a8d57ce347916421847288dcc9df747ce2d1d670adf8c69584ab5fc7d4d5ba0401f61da6027efe109205b8234364e8b1d11ae29e2380dc399aa7f504f41e6c8a9f973fe00ccfd07a9b3e98a60275ca738d439489af487ca503629b4c9fd904ea5d85785a25e9b73ce909b7e6539b2cba653f2d034ec0f4b6a3b18918c8835ba5034d638b1fb03fac7f263b8deb51cbda12932f0faecf8a86ca31698bbebf40010f099ab679ea222d80a0c77eebdddde7fb5cd079e928a2fddf7e3702fb220e0d49f2620284ef4cd3b165119322e0b7f24926de4ccac5ee24788f424ed8af3c2d9cfadfc835d1de3d2c82f7d2c33e90b30d2e13e9b92e84808772c319ecd3e5be1619e1343f0279952261d368f12db54e93488e02ec6b185fdf95456a2761249e04962937f089c3feddf6a75c9fcb8ad5c252ab0de0fcc0d1b961e861fb8b7eee57938225110b085b2cdc336b60915e3ea44d61623cbc1ae334c97ac1623661f428116aa0894c207dd95db16a7dcf0f8b0b0e19f33355d3c56e307dae069e34abdc43203f85f2c43e3a1c1bd5e6f34352fc40210bc53301121e3fcb8e9fbff690c4d68abf2d61d23e1cda71b2a5c63d5cc2b13d924404fd7f6b57ed27fde37a971b804e6aec28088bd9fc97bb380c4980d026c41b7ed356e345e6ef6a3781d8a5229aa2db6341f257a3ca0c809b589ac97c4bdd62a0a3b5f1bb75f9bf3330587e30371cfc3d03765edb1c364d4cfefba10a874b2e4e6ffc640efbb6f5281c92eb9aef75ce831cd8fe30352dfbb9cc16e333e8d97ad6539b0dc318475523fcb33f83cdbb81735a90aa2f8dff82cb715de3d35646df5358e493a6363a7cec173af7142120b90390ddaf65bd9634a0d6b354d60e9218994fe1b5292925964037d3117118a41c72317665cb1653b102ff4005c6cee143c0623c6ee62f211fe4537de2ea2c203dcba5ad9c40b6e5cdf45a3383d4696039f79a06e590b827019baab09ad23b0b538bfb31e689233e30b32aaddfc638938d2bd0eebc4d5315503e83b15cde33a1e3dbae7fc6198164cabc035bfb4851aa41aafdc8cc991d55cb3feb5999c306f2574cd2c136a282f4e58d012853db00b0f624e00145dd122f217f4afc45937c89d00d8b33bdc92", 0xfff}, {&(0x7f0000000080)="2304ec37a742653715c93729386c170404352ea4ceb83f122c697462dddc159c78d3f79da3ea856f85ad6fd7fe371c2be25a27d06def0602ddbefa72b933fa83ced8bbe10798a4b22f9075de57138ccf8a75", 0x52}], 0x2, 0xf)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000061, &(0x7f0000001500)={0x77359400})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001200)=ANY=[@ANYBLOB="44000000100003052cbd700000000000000000004db23a24539c1cdb6642be1e332924f5941bf59e20af3fe3ceef8ca6fc60a9add8632aeb9f1fa6b61e86c9a52ab5be0dacd03e8174e8bfaeda59855e0164816bac6f8d4635fb2ad3fac725f77567176af700b159223658115429e56820626bf71bb63ee784fb74e6c71a75a1702c8cbf2ba49cc98d3868a829321719c9c50ea42623a09326637bc8a2aa005edd69375aa5df2d5b1a125e69f4f5c41c07715e3534274d3fcb6eb166668e512ab4985a23c9fe759a397a43fe97", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d000100000005000c0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000680001002bbd7000fedbdf250a0094000000000034000c8008000300070000000600010092650000060001000800000008000200030000000600010003000000060001000400000004000b00080005"], 0x58}}, 0x80)

16.500387657s ago: executing program 2 (id=4539):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4)
listen(r1, 0x0)
close(r1) (async)
close(r1)

16.499883142s ago: executing program 1 (id=4540):
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000080)={0x6, 'wg1\x00', {0x9}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)={'tunl0\x00', <r1=>0x0, 0x7800, 0x7, 0x2, 0x3, {{0x12, 0x4, 0x0, 0xc, 0x48, 0x66, 0x0, 0x3, 0x2f, 0x0, @multicast1, @loopback, {[@ssrr={0x89, 0xf, 0x4c, [@remote, @broadcast, @broadcast]}, @end, @lsrr={0x83, 0x23, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010102, @loopback, @loopback, @broadcast, @rand_addr=0x64010102, @multicast2, @rand_addr=0x64010101]}, @end]}}}}})
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x25, 0x1, @void}, 0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000001c0)=0x4, 0x4)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x0, '\x00', {}, 0x4})
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'devices'}, {0x3b, 'net_prio'}, {0x0, 'net_cls'}, {0x2d, 'rdma'}, {0x2d, 'rdma'}, {0x2d, 'io'}]}, 0x2c)
pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/88, 0x58, 0xc)
getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0xe)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x1b, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x3, 0x4, 0x9, 0x3, 0xfffffffffffffff0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x6, 0x9, 0x3, 0x2, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @exit, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @generic={0x2, 0x8, 0x6, 0x6, 0x9}]}, &(0x7f00000004c0)='GPL\x00', 0x5, 0xe8, &(0x7f0000000500)=""/232, 0x41100, 0x66, '\x00', r1, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x2, 0xfffffff9, 0x800}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x4, 0x1, 0xd, 0x4}], 0x10, 0x8}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@map, 0x15, 0x1, 0x3, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0], <r6=>0x0}, 0x40)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x1, &(0x7f0000000940)=@raw=[@jmp={0x5, 0x0, 0xa, 0x7, 0x9, 0x20, 0xf160fe14bd852c5e}], &(0x7f0000000980)='GPL\x00', 0x0, 0x12, &(0x7f00000009c0)=""/18, 0x40f00, 0x20, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x0, 0xc, 0x10, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@fallback=r0, r5, 0x23, 0x8, 0x0, @void, @value=r7, @void, @void, r6}, 0x20)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000b80)=<r8=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000c00)={r8, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000bc0)='(%-\x00'}, 0x30)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0)
write$tun(r9, &(0x7f0000000c80)={@void, @val={0x1, 0x80, 0x6, 0x3, 0x3, 0x4}, @eth={@broadcast, @empty, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x2}}, {@llc_tr={0x11, {@snap={0xa8, 0x1, "96", "53e9dd", 0x5b84, "a75bd792da3d0da1aa3996b6d8e389de7aca420966153517f81f3e61062b051e8086dafa1559407ce5bd4fd5534519cceb0cb4fbdf9e443680a4405e4a38e5314d48dbc801851a558fff7adcb897c7714650a10960cf35d47db91a46f65c50ec0cb0c7b714d09e97f7eace852b85c88f6bb81162e94ad3843ddf29c34a06259994b0331c69de593030a245"}}}}}}, 0xb3)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000d40)={0x597, 0x0, 0x5, 0x9, 0xa, 0x0, [{0x1, 0x6, 0x6, '\x00', 0xc}, {0x9, 0x80000001, 0x401, '\x00', 0xa08}, {0xe56, 0x4, 0x9, '\x00', 0x1800}, {0x0, 0x0, 0xfffffffffffffffa, '\x00', 0x1}, {0xb, 0x5, 0x10, '\x00', 0x4}, {0x0, 0x3, 0x3, '\x00', 0x100}, {0x7fff, 0xd, 0x6, '\x00', 0x2006}, {0x5, 0x9, 0x9, '\x00', 0x300}, {0x4, 0x7, 0x5, '\x00', 0x2e83756d45cdced8}, {0x98af, 0x4, 0xc9, '\x00', 0x2400}]})
r10 = socket$inet6_sctp(0xa, 0x0, 0x84)
ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000fc0)={0x0, 0x2, 0xfffffffffffff389, 0xfffffffffffffff8})
setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000001000)=r5, 0x4)
r11 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000001040)={{<r12=>0x0, 0x7ff, 0x3ff, 0x401, 0x0, 0xc7b, 0x4, 0x6ad, 0x80000000, 0x7, 0x1, 0x2, 0x3, 0x7fc000000000000, 0xe32c}})
ioctl$BTRFS_IOC_TREE_SEARCH(r11, 0xd0009411, &(0x7f0000002040)={{r12, 0x7, 0x0, 0xcb5, 0x6, 0x2, 0x2, 0x87, 0x8000, 0x8, 0xfffff151, 0x8, 0x7f, 0x1000}})
ioctl$BTRFS_IOC_SCRUB(r11, 0xc400941b, &(0x7f0000003040)={<r13=>0x0, 0x9, 0x6, 0x1})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r11, 0xc400941d, &(0x7f0000003440)={r13, 0x1, 0x8, 0x1})
getsockopt$inet6_opts(r10, 0x29, 0x39, &(0x7f0000003840)=""/38, &(0x7f0000003880)=0x26)

16.491431553s ago: executing program 2 (id=4541):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10)
close(r6)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000100)={0xa000000d})
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000300)={0x10000000})
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000600))
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0)

16.381973396s ago: executing program 0 (id=4542):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close(r1) (async)
close(r1)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1bc}}, 0x880)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, <r5=>0x0, 0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x8, 0xb}, 0x50) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x8, 0xb}, 0x50)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) (async)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002500)={r6, &(0x7f0000000000), &(0x7f0000000140)=@tcp6}, 0x20)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r5, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r5}, 0x94)

16.380969319s ago: executing program 2 (id=4543):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], &(0x7f0000000200)='GPL\x00'}, 0x94)
socket$isdn(0x22, 0x2, 0x21)
close(0x3)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1)
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x40000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0x9}}}, 0x24}}, 0x14000000)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r4=>0x0})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000023000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000006800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001000000000044010500ac1414aa0000000000000000000000000000000033000000000000000a0101000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac141443000000000000000000000000000000003300000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000003c0000000a000000fc000000000000000000000000000000000000000500"/436], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

16.290596471s ago: executing program 1 (id=4544):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x66}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20014}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0)
close(r5) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080))
setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000040)={0xffffffff}, 0x8)
connect$bt_l2cap(r9, &(0x7f0000000500), 0xe) (async)
shutdown(r9, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xc, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x400, 0x0, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

16.276855264s ago: executing program 0 (id=4545):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300022000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0)

16.211903024s ago: executing program 1 (id=4546):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r3, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}]}}]}, 0x4c}}, 0x20040054)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x30000000, 0x40, 0x7, 0xb, 0x40, 0x100, 0x80, 0x9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x7c}}, 0x4000010)
sendmsg$inet6(r2, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x7f}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000180)="a932efcd1eff14aef98535b5626708f5ffe31da0e9a0df735e719d0b903e412e5a8289ce5f6895edfec9893b2ce51bbc7f2554702156a7fa279cb1cc3cabfd598f42aecb0c66ca29d2a256efd817285e2b146ab4706ea14916c067e81ca7ef6474c5da613a14f70284c91617bbdd132cf028d499a7de70d4094e4a370a225c5b9fe4fae30fde0dd437094186451cb2c814e06fc210ee7b8350bc3b65ee417978b5df1b697ef815e10214da6a445e18923d5a8e", 0xb3}, {&(0x7f0000000240)="24dbc1959876d052ec282715723eecc3a9cbd76d32282c04338c993a6ce0ffecbd0353da1d2ff08dbf7e885a8fb2cce15e28421d7a87544686b2eccb01e09d3d50bc5f619add238ad0e72798eec6422b889efbdd405e886f5785aa59ee396e204168aacb8ef24d1d1fa1165d2d2470", 0x6f}, {&(0x7f0000000300)="f9a598b67a39564257219f78370808b18a69d035ff3e576028833bce49d3bd66cecaddd25e37ddf1b354cf7557e5edf1f773184493caeb31e7bba8630e91492f397a9e76750e176c660a02cc86fb0a0eb5e503032e09e9828ad3978a9416df322846668da04093a963c0233e468c01a4bec27bd01c9c051ad8996a44537535d00adc9a7939c7c3a7283d5dd3896308106f01d3304f89c651a1ce11176faa4d1875e2c599cda446324720e85b37894b6b1d8149b8ed1f3275020f145a8e7fc4b13430ce09fcfdc92fdbc62a321923791276267d468c9797", 0xd7}, {&(0x7f0000000400)="1d129516e792a46c7c871d41cffc6d8f921869eaf63fa092cfce2c0cc68092215648a7db424397e96f393ccecf9d9f40857db4329b19d02c22c68964acf4b90be6ed4fc7450469c4e2be64aa7770490711018cfde835ddb91c29887eea8724a222ee746b94e7772d287aac9cbfea14045c9203ed05a8a1d7862fb4b73d72eef0d861351be908d83f212fe84ac668a8df43b9e03c1007ced912a2399d9a23ec118b30a510b5d3", 0xa6}, {&(0x7f00000004c0)="54e744fb312e434ddab2f4bf4b9071c5b720292c376d039e97e881658dd985188f0e63b6b77a7667b8f6df7e5767c019d0bb2affe5174203f739445d83745e088ed59fe8465571d125490902156e6f95bd4a75757e0ff630a92a2f047c265091c1a5a52ad55a88605081b9f2a9283ce34dda0a69f612dfcd7edc13b6cdacd2bbfbd25f985fbaff02553565de961db51860c7fb4c57f82ff3525e125bdd374bb4770c0f1698c0bbec832aa083a56503a20549", 0xb2}, {&(0x7f0000000580)="0938ce542c149be3121e18a599e00494e012db900eb6d43eb2061f7698cc3dd6484128cdbfa9c4ff4e398d00680bfa94948e69106a3dcd7472a874206e3faaeeebe4ad8d8c9ea2dfd2acac71d9178e4d78bb87e3159301ad465e59451ed276e2ecd7a65c6cfc24f8c62fe83bc53795934270d02493f28f1b73dd884798f7e6418a1200fccfd612a79dce4eb9114fd363a63a8049833ae81b46f02e242adbb9", 0x9f}], 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="000000001400000000000000290000003e0000070100010000000000500000000000000029000000360000000207000000000000c910fc00000000000000000000000000000107200000000306d208008a92000000000000ffffffffffffff7f0f00000000000000050203ff5c5c291454bcf5555bf14ea4921355549a6403b6776fadb60747066d297fda09765508dd6b833f0043c5ba93770f0c8988d3464422b19b03e5c2c0f2ebf0502fddaddadf537a6db7d0eab68b91cb158f7f35"], 0x230}, 0x20000040)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x24}}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r7, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r9=>0x0]}, &(0x7f0000000380)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000001c0)={r9, @in={{0x2, 0x4e21, @multicast2}}}, 0x84)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000006c0)={r9, 0xfffb}, &(0x7f0000000700)=0x8)

16.210922266s ago: executing program 2 (id=4547):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r6=>0x0})
socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) (async)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYRES32=r6], 0x44}}, 0x20008040) (async)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYRES32=r6], 0x44}}, 0x20008040)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r12, r12}, &(0x7f0000000600), &(0x7f0000000640)=r11}, 0x1c) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r12, <r13=>r12}, &(0x7f0000000600), &(0x7f0000000640)=r11}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r13, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r15 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r15}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)

16.206927666s ago: executing program 0 (id=4548):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='scalable\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async)
bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000023000000000002000000181b0000", @ANYRES32=r1, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c020000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc140011800e000100636f6e6e6c696d69740000000800084000000001f4010980080001407f"], 0x274}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async)
r5 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000140), 0x4)

16.091888342s ago: executing program 0 (id=4549):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0xb4013, r0, 0x0) (async)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0xb4013, r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="0400000004000000040000000700040004000000", @ANYRES32, @ANYBLOB="a8003a270000008000000000964aa70d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) (async)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
r4 = socket$packet(0x11, 0x3, 0x300)
splice(r3, 0x0, r4, 0x0, 0x10500, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) (async)
recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000080)={0x4001, 0x1, 0x0, 0x9}, 0x10)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) (async)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)

16.090187988s ago: executing program 1 (id=4550):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000000000000500000008000500ff0000000800020023000000"], 0x24}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, <r6=>0x0, 0x0}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r7, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x11, &(0x7f0000000a40)=@raw=[@generic={0x40, 0x6, 0x4, 0x3000, 0x2}, @generic={0x3, 0x5, 0x4, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x9a, &(0x7f0000000b00)=""/154, 0x41000, 0x41, '\x00', 0x0, @fallback=0x6, r5, 0x8, &(0x7f0000000300)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x3, 0xfffffff9, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
close(0x3)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x4, 0x5, 0x11}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00', 0x3a, 0x2, 0x7f}, 0x2c)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r12 = socket(0x2, 0x80805, 0x0)
r13 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r13, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000200)={<r14=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r13, 0x84, 0x7a, &(0x7f0000000340)={r14, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0)
sendmmsg$inet_sctp(r12, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000001a40)=""/4078, &(0x7f00000000c0)=0xfee)
recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/114, 0x72}, {&(0x7f0000001ec0)=""/4066, 0xfe2}, {&(0x7f00000037c0)=""/4067, 0xfe3}, {&(0x7f0000000700)=""/227, 0xe3}, {&(0x7f0000000380)=""/149, 0x95}], 0x5}, 0x40000100)

109.070294ms ago: executing program 2 (id=4551):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000000180)=0xe8)
ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f00000001c0)={0x3, @default, r3})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'macvlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r11=>0x0})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010004000000fbdbdf253900000008000300", @ANYRES32=r11, @ANYBLOB="24005a802000008004f602000e0000001400030008000700050008000800010008000500"], 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r7, 0x800, 0xfffffffd, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x24}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000000c0))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000130001002dbd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="ecff0041096e000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18)

81.189324ms ago: executing program 32 (id=4549):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0xb4013, r0, 0x0) (async)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0xb4013, r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="0400000004000000040000000700040004000000", @ANYRES32, @ANYBLOB="a8003a270000008000000000964aa70d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) (async)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
r4 = socket$packet(0x11, 0x3, 0x300)
splice(r3, 0x0, r4, 0x0, 0x10500, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) (async)
recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000080)={0x4001, 0x1, 0x0, 0x9}, 0x10)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) (async)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)

42.722193ms ago: executing program 33 (id=4550):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000000000000500000008000500ff0000000800020023000000"], 0x24}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, <r6=>0x0, 0x0}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r7, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x11, &(0x7f0000000a40)=@raw=[@generic={0x40, 0x6, 0x4, 0x3000, 0x2}, @generic={0x3, 0x5, 0x4, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x9a, &(0x7f0000000b00)=""/154, 0x41000, 0x41, '\x00', 0x0, @fallback=0x6, r5, 0x8, &(0x7f0000000300)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x3, 0xfffffff9, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
close(0x3)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x4, 0x5, 0x11}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00', 0x3a, 0x2, 0x7f}, 0x2c)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r12 = socket(0x2, 0x80805, 0x0)
r13 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r13, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000200)={<r14=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r13, 0x84, 0x7a, &(0x7f0000000340)={r14, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0)
sendmmsg$inet_sctp(r12, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000001a40)=""/4078, &(0x7f00000000c0)=0xfee)
recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/114, 0x72}, {&(0x7f0000001ec0)=""/4066, 0xfe2}, {&(0x7f00000037c0)=""/4067, 0xfe3}, {&(0x7f0000000700)=""/227, 0xe3}, {&(0x7f0000000380)=""/149, 0x95}], 0x5}, 0x40000100)

0s ago: executing program 34 (id=4551):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000000180)=0xe8)
ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f00000001c0)={0x3, @default, r3})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'macvlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r11=>0x0})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010004000000fbdbdf253900000008000300", @ANYRES32=r11, @ANYBLOB="24005a802000008004f602000e0000001400030008000700050008000800010008000500"], 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r7, 0x800, 0xfffffffd, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x24}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000000c0))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000130001002dbd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="ecff0041096e000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18)

kernel console output (not intermixed with test programs):

addrconf: prefix option has invalid lifetime
[  169.884643][T12034] netlink: 'syz.2.2125': attribute type 4 has an invalid length.
[  169.949520][T12034] tipc: Resetting bearer <eth:vlan0>
[  170.024390][T12034] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.140112][ T5771] lo speed is unknown, defaulting to 1000
[  170.142559][ T5771] syz1: Port: 1 Link DOWN
[  170.145852][ T5907] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.149245][ T5907] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.152733][ T5907] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.156267][ T5907] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.160219][ T5907] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.163657][ T5907] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.177155][ T5715] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.180148][ T5715] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.222396][T12046] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  170.246517][T12046] netlink: 'syz.1.2132': attribute type 2 has an invalid length.
[  170.337170][T12058] openvswitch: netlink: IPv4 tun info is not correct
[  170.550849][T12072] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  170.793735][T12080] netlink: 'syz.0.2147': attribute type 25 has an invalid length.
[  170.797577][T12080] netlink: 'syz.0.2147': attribute type 7 has an invalid length.
[  170.844526][   T60] block nbd0: Possible stuck request ffff88801af90000: control (read@0,1024B). Runtime 90 seconds
[  170.849265][   T60] block nbd0: Possible stuck request ffff88801af90200: control (read@1024,1024B). Runtime 90 seconds
[  170.853790][   T60] block nbd0: Possible stuck request ffff88801af90400: control (read@2048,1024B). Runtime 90 seconds
[  170.858472][   T60] block nbd0: Possible stuck request ffff88801af90600: control (read@3072,1024B). Runtime 90 seconds
[  171.130897][T12088] netlink: 'syz.0.2150': attribute type 1 has an invalid length.
[  171.142351][T12088] netlink: 'syz.0.2150': attribute type 1 has an invalid length.
[  171.255252][T12094] netlink: 'syz.0.2152': attribute type 2 has an invalid length.
[  171.449271][T12102] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  172.904374][T12190] __nla_validate_parse: 15 callbacks suppressed
[  172.904395][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2183'.
[  172.925310][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2182'.
[  172.930102][T12192] bridge0: port 1(veth0_to_bridge) entered blocking state
[  172.933240][T12192] bridge0: port 1(veth0_to_bridge) entered disabled state
[  172.936703][T12192] veth0_to_bridge: entered allmulticast mode
[  172.940047][T12192] veth0_to_bridge: entered promiscuous mode
[  172.958618][T12196] IPv6: addrconf: prefix option has invalid lifetime
[  173.018913][T12201] netlink: 'syz.0.2186': attribute type 1 has an invalid length.
[  173.039964][T12201] 8021q: adding VLAN 0 to HW filter on device bond4
[  173.190708][T12206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2188'.
[  173.226611][T12206] vxcan1 speed is unknown, defaulting to 1000
[  173.412036][T12206] lo speed is unknown, defaulting to 1000
[  173.509531][T12206] netlink: 'syz.0.2188': attribute type 13 has an invalid length.
[  173.509904][T12213] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2190'.
[  173.512990][T12206] netlink: 'syz.0.2188': attribute type 17 has an invalid length.
[  173.533215][T12206] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  173.597177][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'.
[  173.816696][T12219] netlink: 'syz.2.2191': attribute type 2 has an invalid length.
[  173.819338][T12219] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2191'.
[  173.842000][T12221] IPv6: addrconf: prefix option has invalid lifetime
[  174.023595][T12227] netlink: 'syz.1.2194': attribute type 13 has an invalid length.
[  174.061761][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2195'.
[  174.068733][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2195'.
[  174.074294][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2195'.
[  174.079684][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2195'.
[  174.161428][T12227] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.289595][   T33] audit: type=1800 audit(1755193432.702:5): pid=12242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2200" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3723 res=0 errno=0
[  174.483887][T12252] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  174.612031][T12261] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  174.720261][T12272] netlink: 'syz.2.2212': attribute type 2 has an invalid length.
[  174.832244][T12280] netlink: 'syz.1.2216': attribute type 2 has an invalid length.
[  174.961347][T12293] IPVS: Unknown mcast interface: bridge_slave_0
[  174.982946][T12293] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.990572][T12293] syzkaller0: entered promiscuous mode
[  174.992967][T12293] syzkaller0: entered allmulticast mode
[  175.045245][T12293] tipc: Resetting bearer <eth:syzkaller0>
[  175.051733][T12285] tipc: Resetting bearer <eth:syzkaller0>
[  175.074357][T12285] tipc: Disabling bearer <eth:syzkaller0>
[  175.204612][T12309] tipc: Enabled bearer <udp:syz0>, priority 10
[  175.310691][T12320] netlink: 'syz.1.2232': attribute type 2 has an invalid length.
[  175.496471][T12342] pim6reg: entered allmulticast mode
[  175.500924][T12342] pim6reg: left allmulticast mode
[  175.702145][T12356] netlink: 'syz.0.2245': attribute type 2 has an invalid length.
[  175.878059][T12364] IPv6: addrconf: prefix option has invalid lifetime
[  175.968530][ T1118] block nbd1: Possible stuck request ffff88801ab78000: control (read@0,4096B). Runtime 90 seconds
[  176.068753][T12372] netlink: 'syz.0.2252': attribute type 12 has an invalid length.
[  176.301684][T12381] C: renamed from lo (while UP)
[  176.306796][T12381] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  176.400439][T12394] IPv6: addrconf: prefix option has invalid lifetime
[  176.685379][T12408] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  176.975355][T12422] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.979406][T12422] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.029548][T12422] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  177.033038][T12422] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.082620][T12422] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  177.086864][T12422] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.150778][T12422] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  177.154866][T12422] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.236213][ T5907] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  177.240674][ T5907] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.253262][ T5907] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  177.256443][ T5907] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.269700][ T5907] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  177.272550][ T5907] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.280695][ T5907] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  177.283606][ T5907] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.793481][T12436] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  178.184435][T12444] validate_nla: 5 callbacks suppressed
[  178.184455][T12444] netlink: 'syz.0.2280': attribute type 2 has an invalid length.
[  178.191374][T12444] __nla_validate_parse: 32 callbacks suppressed
[  178.191392][T12444] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2280'.
[  178.360378][T12452] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  178.459980][T12460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2286'.
[  178.487235][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2286'.
[  178.646438][T12462] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.686274][T12462] syzkaller0: entered promiscuous mode
[  178.688115][T12462] syzkaller0: entered allmulticast mode
[  178.690448][T12462] tipc: Resetting bearer <eth:syzkaller0>
[  178.698091][T12461] tipc: Resetting bearer <eth:syzkaller0>
[  180.452726][T12461] tipc: Disabling bearer <eth:syzkaller0>
[  180.740660][T12492] netlink: 'syz.0.2301': attribute type 1 has an invalid length.
[  180.743209][T12492] netlink: 'syz.0.2301': attribute type 2 has an invalid length.
[  180.753088][T12492] netlink: 'syz.0.2301': attribute type 1 has an invalid length.
[  180.757652][T12492] netlink: 'syz.0.2301': attribute type 2 has an invalid length.
[  180.815678][T12501] IPv6: addrconf: prefix option has invalid lifetime
[  180.867744][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'.
[  180.904739][T12505] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  180.909180][T12505] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  180.960386][T12515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.133089][T12530] siw: device registration error -23
[  181.209647][T12534] sctp: [Deprecated]: syz.1.2316 (pid 12534) Use of struct sctp_assoc_value in delayed_ack socket option.
[  181.209647][T12534] Use struct sctp_sack_info instead
[  181.372845][T12546] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  181.862626][T12562] netlink: 'syz.2.2324': attribute type 2 has an invalid length.
[  181.869009][T12562] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2324'.
[  181.923114][T12567] netlink: 'syz.2.2325': attribute type 21 has an invalid length.
[  181.932111][T12567] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2325'.
[  181.937415][T12567] netlink: 'syz.2.2325': attribute type 4 has an invalid length.
[  181.941599][T12567] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2325'.
[  182.017645][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2328'.
[  182.020771][T12574] IPv6: addrconf: prefix option has invalid lifetime
[  182.027421][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2328'.
[  182.031328][T12572] gre0: left promiscuous mode
[  182.033410][T12572] gre0: left allmulticast mode
[  182.042943][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2328'.
[  182.061661][T12572] ip6_vti0: left allmulticast mode
[  182.083686][T12572] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.095358][T12572] 8021q: adding VLAN 0 to HW filter on device team0
[  182.104820][T12572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  182.120155][   T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  182.125392][   T10] lo speed is unknown, defaulting to 1000
[  182.135103][   T12] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  182.140429][   T10] syz1: Port: 1 Link ACTIVE
[  182.144343][   T12] bond0: now running without any active interface!
[  182.153139][ T5972] tipc: Resetting bearer <eth:vlan0>
[  182.242716][T12587] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  182.313465][T12589] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  183.368669][T12644] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  183.440882][T12650] __nla_validate_parse: 17 callbacks suppressed
[  183.440904][T12650] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2353'.
[  183.523404][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2360'.
[  183.649233][T12668] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2364'.
[  183.716080][T12662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2361'.
[  183.720193][T12662] bridge0: port 4(dummy0) entered disabled state
[  183.734196][T12662] gretap0: left allmulticast mode
[  183.736927][T12662] bridge0: port 3(gretap0) entered disabled state
[  183.741966][T12662] bridge_slave_1: left allmulticast mode
[  183.744376][T12662] bridge_slave_1: left promiscuous mode
[  183.747743][T12662] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.754821][T12662] bridge_slave_0: left promiscuous mode
[  183.759539][T12662] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.847413][T12676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2361'.
[  184.026279][T12689] netlink: 'syz.2.2369': attribute type 29 has an invalid length.
[  184.030304][T12689] netlink: 'syz.2.2369': attribute type 29 has an invalid length.
[  184.037465][T12689] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2369'.
[  184.041194][T12689] unsupported nla_type 58
[  184.070669][T12689] xt_limit: Overflow, try lower: 271964/0
[  184.173857][T12703] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2376'.
[  184.242249][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2379'.
[  184.250206][T12708] veth0_to_bridge: left allmulticast mode
[  184.252667][T12708] veth0_to_bridge: left promiscuous mode
[  184.255077][T12708] bridge0: port 1(veth0_to_bridge) entered disabled state
[  184.578114][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2385'.
[  184.622384][T12742] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2389'.
[  184.733751][T12753] IPv6: addrconf: prefix option has invalid lifetime
[  184.964867][T12770] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  185.095867][T12779] netlink: 'syz.2.2401': attribute type 2 has an invalid length.
[  185.423331][T12795] tipc: MTU too low for tipc bearer
[  185.559282][T12799] bond0: (slave bond_slave_0): Releasing backup interface
[  185.562175][T12799] bond_slave_0: left promiscuous mode
[  185.564073][T12799] bond_slave_0: left allmulticast mode
[  185.569538][T12799] bond0: (slave bond_slave_1): Releasing backup interface
[  185.573696][T12799] tipc: Resetting bearer <eth:vlan0>
[  185.581798][T12799] bond_slave_1: left promiscuous mode
[  185.583909][T12799] bond_slave_1: left allmulticast mode
[  185.590008][T12799] team0: Port device team_slave_0 removed
[  185.594082][T12799] team0: Port device team_slave_1 removed
[  185.597873][T12799] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.602194][T12799] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.613414][T12799] bond1: (slave bridge1): Releasing backup interface
[  185.615976][T12799] bridge1: left promiscuous mode
[  185.619093][T12799] tipc: Resetting bearer <eth:vlan0>
[  185.622322][T12799] bond4: (slave bridge8): Releasing active interface
[  185.628118][T12800] team0: Mode changed to "broadcast"
[  185.636603][T12799] tipc: Resetting bearer <eth:vlan0>
[  185.639013][T12799] vlan0: left allmulticast mode
[  185.640848][T12799] bond0: left allmulticast mode
[  185.644947][T12799] tipc: Resetting bearer <eth:vlan0>
[  185.651203][T12799] team0: Port device vlan0 added
[  185.958221][T12830] netlink: 'syz.0.2418': attribute type 2 has an invalid length.
[  186.094368][T12838] netlink: 'syz.0.2421': attribute type 10 has an invalid length.
[  186.100256][T12838] bond0: (slave wlan1): Opening slave failed
[  186.189640][T12845] netlink: 'syz.1.2423': attribute type 15 has an invalid length.
[  186.226247][T12847] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  186.411645][T12863] netlink: 'syz.1.2432': attribute type 2 has an invalid length.
[  186.495269][T12870] IPv6: addrconf: prefix option has invalid lifetime
[  186.712252][T12886] syzkaller0: entered promiscuous mode
[  186.713961][T12886] syzkaller0: entered allmulticast mode
[  186.718769][T12885] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.753610][T12885] tipc: Resetting bearer <eth:syzkaller0>
[  186.772773][T12885] tipc: Disabling bearer <eth:syzkaller0>
[  186.788273][T12894] netlink: 'syz.2.2446': attribute type 2 has an invalid length.
[  186.897996][T12906] IPv6: addrconf: prefix option has invalid lifetime
[  187.159690][T12928] gtp1: entered promiscuous mode
[  187.161864][T12928] gtp1: entered allmulticast mode
[  187.250751][T12934] netlink: 'syz.0.2459': attribute type 2 has an invalid length.
[  187.430681][T12938] IPv6: sit4: Disabled Multicast RS
[  187.764719][T12957] netlink: 'syz.1.2467': attribute type 2 has an invalid length.
[  187.773177][T12957] nbd: couldn't find device at index 16
[  187.853863][T12961] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  187.965924][T12957] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.972405][T12965] pim6reg: entered allmulticast mode
[  187.974904][T12965] pim6reg: left allmulticast mode
[  188.524750][T13023] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  188.607866][T13027] vxcan1 speed is unknown, defaulting to 1000
[  188.712283][T13035] openvswitch: netlink: IP tunnel dst address not specified
[  188.780942][T13035] __nla_validate_parse: 20 callbacks suppressed
[  188.780963][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2494'.
[  188.792282][T13038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2495'.
[  188.820143][T13027] lo speed is unknown, defaulting to 1000
[  188.899713][T13041] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2496'.
[  188.983779][T13048] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2499'.
[  188.993858][T13048] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2499'.
[  189.152648][T13060] validate_nla: 4 callbacks suppressed
[  189.152664][T13060] netlink: 'syz.2.2505': attribute type 1 has an invalid length.
[  189.206549][T13060] 8021q: adding VLAN 0 to HW filter on device bond6
[  189.212132][T13060] bond5: (slave bond6): making interface the new active one
[  189.215288][T13060] bond5: (slave bond6): Enslaving as an active interface with an up link
[  189.228612][T13060] bond5: (slave gretap1): Enslaving as a backup interface with an up link
[  189.233441][T13060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2505'.
[  189.262021][T13060] 8021q: adding VLAN 0 to HW filter on device bond5
[  189.290526][T13068] openvswitch: netlink: Message has 1 unknown bytes.
[  189.293662][T13068] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.353639][T13074] netlink: 'syz.2.2509': attribute type 1 has an invalid length.
[  189.381291][T13070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2508'.
[  189.498720][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2514'.
[  189.541628][T13091] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  189.672300][T13102] netlink: 'syz.1.2519': attribute type 9 has an invalid length.
[  189.674806][T13102] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.2519'.
[  189.919479][T13114] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  189.929622][T13113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2524'.
[  190.004697][T13117] netlink: 'syz.0.2525': attribute type 1 has an invalid length.
[  190.119649][T13125] vlan0: entered allmulticast mode
[  190.121990][T13125] dummy0: entered allmulticast mode
[  190.143896][T13127] IPv6: addrconf: prefix option has invalid lifetime
[  190.181098][T13129] netlink: 'syz.1.2529': attribute type 1 has an invalid length.
[  190.407095][T13153] netlink: 'syz.0.2539': attribute type 1 has an invalid length.
[  190.439061][T13155] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  190.471167][T13157] netlink: 'syz.0.2541': attribute type 1 has an invalid length.
[  191.118391][T13196] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  191.206908][T13205] netlink: 'syz.0.2558': attribute type 2 has an invalid length.
[  191.319567][T13221] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.324819][T13221] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.337332][T13221] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.343703][T13221] batman_adv: batadv0: Interface deactivated: gretap3
[  191.347431][T13221] batman_adv: batadv0: Removing interface: gretap3
[  191.504475][T13229] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  191.679944][T13246] netlink: 'syz.1.2571': attribute type 2 has an invalid length.
[  191.718379][T13242] Can't find ip_set type bitmap:ip,mac
[  191.757660][T13254] ip6erspan0: entered promiscuous mode
[  191.958453][T13271] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  192.044849][T13287] netlink: 'syz.1.2585': attribute type 2 has an invalid length.
[  192.253801][T13307] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  192.861789][T13352] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  192.991742][T13361] bond8: (slave gretap2): making interface the new active one
[  192.994515][T13361] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  193.229402][T13384] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  193.250968][T13388] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  193.405099][T13402] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  193.418926][T13402] gre3: entered allmulticast mode
[  193.663742][T13425] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  193.842493][T13434] __nla_validate_parse: 100 callbacks suppressed
[  193.842514][T13434] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2643'.
[  193.874835][T13432] vxcan1 speed is unknown, defaulting to 1000
[  194.023113][T13452] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  194.114302][T13432] lo speed is unknown, defaulting to 1000
[  194.315109][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2657'.
[  194.324914][T13470] validate_nla: 2 callbacks suppressed
[  194.324933][T13470] netlink: 'syz.2.2656': attribute type 3 has an invalid length.
[  194.331700][T13470] netlink: 'syz.2.2656': attribute type 1 has an invalid length.
[  194.334445][T13470] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2656'.
[  194.524405][T13484] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  194.668619][T13494] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2666'.
[  194.691852][T13496] Dead loop on virtual device ip6_vti0, fix it urgently!
[  194.695074][T13496] Dead loop on virtual device ip6_vti0, fix it urgently!
[  194.697942][T13496] Dead loop on virtual device ip6_vti0, fix it urgently!
[  194.701142][T13496] Dead loop on virtual device ip6_vti0, fix it urgently!
[  194.704031][T13496] Dead loop on virtual device ip6_vti0, fix it urgently!
[  194.706900][T13496] Dead loop on virtual device ip6_vti0, fix it urgently!
[  194.845427][T13507] netlink: 'syz.0.2672': attribute type 2 has an invalid length.
[  194.849995][T13507] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2672'.
[  194.854930][T13509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2673'.
[  194.900590][T13514] IPv6: addrconf: prefix option has invalid lifetime
[  194.960649][T13519] netem: change failed
[  195.278225][T13537] openvswitch: netlink: IP tunnel dst address not specified
[  195.393392][T13543] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  196.009194][T13559] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2691'.
[  196.083717][T13570] IPv6: addrconf: prefix option has invalid lifetime
[  196.094915][T13565] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2694'.
[  196.201246][T13577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2697'.
[  196.239040][T13581] IPv6: addrconf: prefix option has invalid lifetime
[  196.265371][T13583] batadv_slave_0: entered promiscuous mode
[  196.270579][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2700'.
[  196.273904][T13584] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  197.164045][T13635] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  197.197604][T13637] netlink: 'syz.1.2723': attribute type 2 has an invalid length.
[  197.282720][T13648] netlink: 'syz.1.2726': attribute type 12 has an invalid length.
[  197.285247][T13648] netlink: 'syz.1.2726': attribute type 11 has an invalid length.
[  197.307920][T13646] netlink: 'syz.1.2726': attribute type 12 has an invalid length.
[  197.316783][T13646] netlink: 'syz.1.2726': attribute type 11 has an invalid length.
[  197.372714][T13654] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.392412][T13654] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.453050][T13654] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.461582][T13654] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.480899][T13662] netlink: 'syz.1.2730': attribute type 1 has an invalid length.
[  197.485258][T13663] netlink: 'syz.1.2730': attribute type 1 has an invalid length.
[  197.532617][T13654] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.541564][T13654] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.613579][T13654] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.618593][T13654] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.692358][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  197.702824][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.722370][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  197.728529][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.740240][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  197.743437][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.760406][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  197.763185][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.911931][T13757] __nla_validate_parse: 21 callbacks suppressed
[  198.911962][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2764'.
[  198.933390][T13754] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2766'.
[  198.966333][T13750] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2764'.
[  199.137620][T13773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2771'.
[  199.163304][T13774] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  199.176971][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'.
[  199.177963][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'.
[  199.184804][T13777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2773'.
[  199.202487][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2774'.
[  200.133844][T13822] net_ratelimit: 5 callbacks suppressed
[  200.133861][T13822] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[  200.237628][T13830] validate_nla: 2 callbacks suppressed
[  200.237643][T13830] netlink: 'syz.1.2792': attribute type 2 has an invalid length.
[  200.243170][T13830] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2792'.
[  200.926288][   T60] block nbd0: Possible stuck request ffff88801af90000: control (read@0,1024B). Runtime 120 seconds
[  200.930801][   T60] block nbd0: Possible stuck request ffff88801af90200: control (read@1024,1024B). Runtime 120 seconds
[  200.935208][   T60] block nbd0: Possible stuck request ffff88801af90400: control (read@2048,1024B). Runtime 120 seconds
[  200.940309][   T60] block nbd0: Possible stuck request ffff88801af90600: control (read@3072,1024B). Runtime 120 seconds
[  201.151853][T13844] vxcan1 speed is unknown, defaulting to 1000
[  201.218930][T13847] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  201.340613][T13844] lo speed is unknown, defaulting to 1000
[  201.342779][T13850] netlink: 448 bytes leftover after parsing attributes in process `syz.1.2798'.
[  202.456919][T13894] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  202.501714][T13897] netlink: 'syz.1.2812': attribute type 32 has an invalid length.
[  202.564197][T13901] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  202.729519][T13905] netlink: 'syz.2.2816': attribute type 1 has an invalid length.
[  202.813788][T13909] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  202.820712][T13909] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.882748][T13909] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  202.887126][T13909] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.951542][T13909] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  202.956195][T13909] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.993052][T13909] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  202.997587][T13909] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.060905][ T5907] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  203.064498][ T5907] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.080097][ T5907] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  203.083548][ T5907] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.099426][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  203.102926][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.114438][ T5907] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  203.118124][ T5907] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.325143][T13921] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  203.334763][T13923] netlink: 'syz.0.2824': attribute type 9 has an invalid length.
[  203.584663][T13937] netlink: 'syz.0.2831': attribute type 2 has an invalid length.
[  203.814936][T13963] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  203.894242][T13976] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  203.950862][T13980] __nla_validate_parse: 10 callbacks suppressed
[  203.950877][T13980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2848'.
[  204.090765][T13989] bridge: RTM_NEWNEIGH with invalid state 0x8
[  204.532570][T14000] netlink: 'syz.0.2855': attribute type 4 has an invalid length.
[  204.537446][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2855'.
[  204.598570][T14002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2856'.
[  204.602269][T14002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2856'.
[  204.667988][T14004] syzkaller0: entered promiscuous mode
[  204.670263][T14004] syzkaller0: entered allmulticast mode
[  204.934707][T14007] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  205.031236][T14014] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  205.132971][T14021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2861'.
[  205.137222][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2861'.
[  205.246806][T14031] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  205.251251][T14031] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  205.353552][T14043] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  205.361549][T14044] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2868'.
[  205.524462][T14052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2873'.
[  206.037201][ T1118] block nbd1: Possible stuck request ffff88801ab78000: control (read@0,4096B). Runtime 120 seconds
[  206.555766][T14094] netlink: 'syz.1.2888': attribute type 64 has an invalid length.
[  207.029849][T14104] wireguard0: entered promiscuous mode
[  207.032452][T14104] wireguard0: entered allmulticast mode
[  207.187869][T14119] syzkaller1: entered promiscuous mode
[  207.190118][T14119] syzkaller1: entered allmulticast mode
[  207.538432][T14138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2907'.
[  207.723286][T14161] IPv6: addrconf: prefix option has invalid lifetime
[  207.756773][T14158] ip6tnl4: entered promiscuous mode
[  207.758893][T14158] ip6tnl4: entered allmulticast mode
[  207.776902][T14158] team0: Device ip6tnl4 is of different type
[  207.816583][T14159] ip6tnl4: entered promiscuous mode
[  207.818666][T14159] ip6tnl4: entered allmulticast mode
[  207.821756][T14159] team0: Device ip6tnl4 is of different type
[  207.973246][T14183] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  208.020185][T14186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2925'.
[  208.128690][T14196] netlink: 'syz.1.2926': attribute type 1 has an invalid length.
[  208.320200][T14201] vxcan1 speed is unknown, defaulting to 1000
[  208.471374][T14201] lo speed is unknown, defaulting to 1000
[  209.120244][T14211] vxcan1 speed is unknown, defaulting to 1000
[  209.144787][T14223] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  209.248114][T14228] IPv6: addrconf: prefix option has invalid lifetime
[  209.408213][T14237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2940'.
[  209.516488][T14225] netlink: 'syz.2.2937': attribute type 1 has an invalid length.
[  209.520224][T14225] nbd: error processing sock list
[  209.523103][T14225] block nbd2: shutting down sockets
[  209.573074][T14211] lo speed is unknown, defaulting to 1000
[  209.923951][T14274] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.929132][T14274] syzkaller0: entered promiscuous mode
[  209.931498][T14274] syzkaller0: entered allmulticast mode
[  209.949946][T14274] tipc: Resetting bearer <eth:syzkaller0>
[  209.962817][T14273] tipc: Resetting bearer <eth:syzkaller0>
[  209.975988][T14273] tipc: Disabling bearer <eth:syzkaller0>
[  210.459988][T14302] erspan0: mtu less than device minimum
[  210.638375][T14307] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2961'.
[  211.396773][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2971'.
[  211.459824][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2971'.
[  211.598888][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2977'.
[  211.724156][T14371] pim6reg: entered allmulticast mode
[  211.741596][T14369] pim6reg: left allmulticast mode
[  211.779880][T14380] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2983'.
[  211.853194][T14382] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  211.868394][T14382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2984'.
[  211.872471][T14382] netlink: 'syz.0.2984': attribute type 4 has an invalid length.
[  212.006225][T14399] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2988'.
[  212.203162][T14416] netlink: 'syz.2.2995': attribute type 2 has an invalid length.
[  212.223354][T14416] : entered promiscuous mode
[  212.331301][T14429] netlink: 512 bytes leftover after parsing attributes in process `syz.0.2999'.
[  212.565059][ T6012] IPVS: starting estimator thread 0...
[  212.642682][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3008'.
[  212.660265][T14452] IPVS: using max 61 ests per chain, 146400 per kthread
[  212.675061][T14451] netlink: 'syz.2.3004': attribute type 6 has an invalid length.
[  212.752629][T14465] veth1_to_bond: entered allmulticast mode
[  212.815976][T14465] veth1_to_bond (unregistering): left allmulticast mode
[  212.932947][T14488] IPv6: addrconf: prefix option has invalid lifetime
[  213.365271][T14516] IPv6: addrconf: prefix option has invalid lifetime
[  213.753818][T14530] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  214.068316][T14534] bond0: (slave team0): Releasing backup interface
[  214.076630][T14534] team0 (unregistering): left allmulticast mode
[  214.083500][T14534] team_slave_0: left allmulticast mode
[  214.086396][T14534] team_slave_1: left allmulticast mode
[  214.088578][T14534] batadv1: left allmulticast mode
[  214.091493][T14534] team0 (unregistering): left promiscuous mode
[  214.093418][T14534] team_slave_0: left promiscuous mode
[  214.095421][T14534] team_slave_1: left promiscuous mode
[  214.100672][T14534] batadv1: left promiscuous mode
[  214.109416][T14534] team0 (unregistering): Port device team_slave_0 removed
[  214.117404][T14534] team0 (unregistering): Port device team_slave_1 removed
[  214.125395][T14534] team0 (unregistering): Port device batadv1 removed
[  214.161329][T14540] sch_tbf: burst 88 is lower than device veth11 mtu (1514) !
[  214.343011][T14559] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  214.452268][T14568] IPv6: addrconf: prefix option has invalid lifetime
[  214.513736][T14570] __nla_validate_parse: 10 callbacks suppressed
[  214.513755][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3047'.
[  214.699758][T14588] IPv6: addrconf: prefix option has invalid lifetime
[  214.749396][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3056'.
[  214.749839][T14591] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  214.752802][T14593] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  214.762247][T14593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.148444][T14602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3058'.
[  215.151383][T14597] vxcan1 speed is unknown, defaulting to 1000
[  215.202646][T14604] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3059'.
[  215.243325][T14607] IPv6: addrconf: prefix option has invalid lifetime
[  215.311441][T14597] lo speed is unknown, defaulting to 1000
[  215.643031][T14625] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3065'.
[  215.783974][T14628] vxcan1 speed is unknown, defaulting to 1000
[  215.903221][T14628] lo speed is unknown, defaulting to 1000
[  216.360357][T14634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3067'.
[  216.381884][T14634] netlink: 'syz.1.3067': attribute type 142 has an invalid length.
[  216.668405][T14655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3077'.
[  216.919670][T14661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3076'.
[  217.601002][T14693] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.601668][T14695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3089'.
[  217.605331][T14693] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  217.611625][T14693] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  217.639874][T14694] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.644058][T14694] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.691747][T14694] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.703696][T14694] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.769538][T14694] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.773871][T14694] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.842927][T14694] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.846500][T14694] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.920961][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  217.926186][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.956200][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  217.958998][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.971999][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  217.975486][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.989611][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  217.992891][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.174063][T14735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3103'.
[  218.181138][T14731] vxcan1 speed is unknown, defaulting to 1000
[  218.435410][T14731] lo speed is unknown, defaulting to 1000
[  219.357938][T14800] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.362638][T14800] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.768621][T14827] xt_limit: Overflow, try lower: 271964/0
[  219.856901][T14831] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  220.194657][T14848] __nla_validate_parse: 6 callbacks suppressed
[  220.194668][T14848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3141'.
[  220.202637][T14848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3141'.
[  220.684740][T14878] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  220.795374][   T13] nci: nci_rx_work: unknown MT 0x1
[  221.619694][T14895] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3158'.
[  222.038664][T14922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3171'.
[  222.095271][T14928] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3173'.
[  222.397789][T14948] netlink: 'syz.2.3180': attribute type 8 has an invalid length.
[  222.680057][T14952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3182'.
[  222.829557][T14961] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  222.833569][T14961] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.881933][T14961] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  222.886287][T14961] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.940317][T14961] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  222.943860][T14961] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.002461][T14961] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  223.009187][T14961] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.092456][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  223.096481][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.121497][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  223.124688][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.129724][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  223.134773][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.149693][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  223.152817][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.267462][T14971] bond0: (slave bond_slave_0): Releasing backup interface
[  223.271536][T14971] bond_slave_0: left promiscuous mode
[  223.273600][T14971] bond_slave_0: left allmulticast mode
[  223.412296][T14971] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  223.517286][T14998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3197'.
[  223.908136][T15033] IPv6: addrconf: prefix option has invalid lifetime
[  224.034196][T15039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3211'.
[  224.075401][T15045] IPv6: addrconf: prefix option has invalid lifetime
[  224.333464][T15056] netlink: 'syz.2.3218': attribute type 16 has an invalid length.
[  224.337342][T15056] netlink: 'syz.2.3218': attribute type 3 has an invalid length.
[  224.340108][T15056] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.3218'.
[  225.203828][T15093] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3228'.
[  225.484355][T15112] IPv6: addrconf: prefix option has invalid lifetime
[  225.875541][T15133] IPv6: addrconf: prefix option has invalid lifetime
[  225.882274][T15131] pim6reg1: entered promiscuous mode
[  225.886862][T15131] pim6reg1: entered allmulticast mode
[  225.948664][T15137] netlink: 'syz.0.3243': attribute type 1 has an invalid length.
[  226.009139][T15141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3244'.
[  226.027562][T15143] netlink: 'syz.0.3245': attribute type 29 has an invalid length.
[  226.032589][T15143] netlink: 'syz.0.3245': attribute type 29 has an invalid length.
[  226.039829][T15143] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3245'.
[  226.050717][T15143] nbd: nbd0 already in use
[  226.059445][T15143] xt_limit: Overflow, try lower: 271964/0
[  226.147734][T15149] 8021q: adding VLAN 0 to HW filter on device bond6
[  226.160248][T15152] veth1: entered allmulticast mode
[  226.166411][T15152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3249'.
[  226.219079][T15156] IPv6: addrconf: prefix option has invalid lifetime
[  226.369267][T15171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3255'.
[  226.453968][T15182] netlink: 'syz.2.3261': attribute type 9 has an invalid length.
[  226.532351][T15188] netlink: 'syz.0.3263': attribute type 10 has an invalid length.
[  226.535278][T15188] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3263'.
[  226.547126][T15188] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  227.342459][T15207] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  227.559544][T15211] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3271'.
[  227.619211][T15215] raw_sendmsg: syz.2.3271 forgot to set AF_INET. Fix it!
[  227.621779][T15215] netlink: 'syz.2.3271': attribute type 10 has an invalid length.
[  227.808358][T15218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3273'.
[  227.911945][T15211] vxcan1 speed is unknown, defaulting to 1000
[  228.079714][T15211] lo speed is unknown, defaulting to 1000
[  228.257093][T15224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3275'.
[  228.677152][T15234] netlink: 'syz.1.3277': attribute type 7 has an invalid length.
[  228.788264][T15240] syzkaller1: entered promiscuous mode
[  228.790755][T15240] syzkaller1: entered allmulticast mode
[  228.978968][    C1] vcan0: j1939_tp_rxtimer: 0xffff888112771000: rx timeout, send abort
[  228.983877][    C1] vcan0: j1939_tp_rxtimer: 0xffff888112772000: rx timeout, send abort
[  228.987073][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888112771000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  228.992792][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888112772000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  229.615141][T15257] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3284'.
[  230.441507][T15287] netlink: 'syz.0.3296': attribute type 1 has an invalid length.
[  230.447710][T15287] netlink: 'syz.0.3296': attribute type 11 has an invalid length.
[  230.462094][T15287] __nla_validate_parse: 1 callbacks suppressed
[  230.462110][T15287] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3296'.
[  230.468156][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3296'.
[  230.582489][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3299'.
[  230.585704][T15296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3299'.
[  230.589376][T15296] tipc: Invalid UDP bearer configuration
[  230.589442][T15296] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  230.761220][T15315] siw: device registration error -23
[  230.922006][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3306'.
[  231.017995][   T60] block nbd0: Possible stuck request ffff88801af90000: control (read@0,1024B). Runtime 150 seconds
[  231.022395][   T60] block nbd0: Possible stuck request ffff88801af90200: control (read@1024,1024B). Runtime 150 seconds
[  231.028194][   T60] block nbd0: Possible stuck request ffff88801af90400: control (read@2048,1024B). Runtime 150 seconds
[  231.032419][   T60] block nbd0: Possible stuck request ffff88801af90600: control (read@3072,1024B). Runtime 150 seconds
[  231.270135][T15338] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3314'.
[  231.291616][T15340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3315'.
[  231.489554][T15353] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3320'.
[  231.741349][T15373] : renamed from bond_slave_0
[  231.868979][T15379] !: renamed from dummy0
[  231.968426][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3332'.
[  231.972162][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3332'.
[  232.216200][T15403] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  232.220566][T15403] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  232.360820][T15413] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  232.551103][T15429] IPv6: addrconf: prefix option has invalid lifetime
[  232.672418][T15438] netlink: 'syz.0.3345': attribute type 83 has an invalid length.
[  232.762137][T15445] !: renamed from dummy0 (while UP)
[  232.853700][T15452] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  232.949024][T15456] vxcan1 speed is unknown, defaulting to 1000
[  233.070752][T15464] IPv6: addrconf: prefix option has invalid lifetime
[  233.137928][T15456] lo speed is unknown, defaulting to 1000
[  233.346068][T15479] openvswitch: netlink: IPv6 tunnel dst address is zero
[  233.369746][T15481] delete_channel: no stack
[  233.372825][T15481] delete_channel: no stack
[  233.464225][T15488] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  233.758863][T15506] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  233.774018][T15507] netlink: 'syz.0.3366': attribute type 74 has an invalid length.
[  234.052540][T15521] bond10: entered promiscuous mode
[  234.983192][T15571] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  235.380241][T15593] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  235.494355][T15598] __nla_validate_parse: 5 callbacks suppressed
[  235.494370][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'.
[  235.538873][T15600] sctp: [Deprecated]: syz.1.3394 (pid 15600) Use of int in max_burst socket option.
[  235.538873][T15600] Use struct sctp_assoc_value instead
[  235.763848][T15611] vxcan1 speed is unknown, defaulting to 1000
[  235.935227][T15611] lo speed is unknown, defaulting to 1000
[  236.086418][T15625] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3401'.
[  236.138785][ T1118] block nbd1: Possible stuck request ffff88801ab78000: control (read@0,4096B). Runtime 150 seconds
[  236.529610][T15645] netlink: 'syz.1.3410': attribute type 4 has an invalid length.
[  236.533970][T15646] netlink: 'syz.1.3410': attribute type 4 has an invalid length.
[  236.642318][T15649] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  237.118167][T15680] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  237.185052][T15684] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.192366][T15684] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.242461][T15684] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.247352][T15684] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.282489][T15684] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.286947][T15684] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.332007][T15684] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.336204][T15684] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.432417][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  237.436574][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.456916][ T5715] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  237.460289][ T5715] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.473046][ T5715] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  237.483818][ T5715] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.500937][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  237.504391][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.623607][T15694] netlink: 'syz.1.3426': attribute type 1 has an invalid length.
[  237.624040][T15697] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3427'.
[  237.661724][T15700] openvswitch: netlink: Message has 4 unknown bytes.
[  237.676070][T15700] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.693721][T15700] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3428'.
[  237.701075][T15700] netlink: 'syz.0.3428': attribute type 10 has an invalid length.
[  237.705035][T15700] syz_tun: entered promiscuous mode
[  237.722536][T15700] syz_tun: entered allmulticast mode
[  237.729951][T15700] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  237.810118][T15708] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.814161][T15708] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.878448][T15708] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.882608][T15708] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.937393][T15708] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.941650][T15708] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.008861][T15708] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.012893][T15708] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.544844][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'.
[  238.597800][T15740] openvswitch: netlink: Message has 4 unknown bytes.
[  238.600417][T15740] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.605507][T15740] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3443'.
[  238.612082][T15740] netlink: 'syz.2.3443': attribute type 10 has an invalid length.
[  238.857147][T15758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3449'.
[  238.877816][T15761] netlink: 'syz.1.3450': attribute type 11 has an invalid length.
[  238.938271][T15764] openvswitch: netlink: Message has 4 unknown bytes.
[  238.941006][T15764] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.947075][T15764] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3451'.
[  238.953178][T15764] netlink: 'syz.1.3451': attribute type 10 has an invalid length.
[  238.958609][T15764] syz_tun: entered promiscuous mode
[  239.804521][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3461'.
[  239.950494][T15835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3465'.
[  239.957883][T15835] syzkaller0: entered promiscuous mode
[  239.960452][T15835] syzkaller0: entered allmulticast mode
[  239.964536][   T12] syzkaller0: tun_net_xmit 70
[  239.969364][T15835] syzkaller0: tun_chr_ioctl cmd 1074025677
[  239.971887][T15835] syzkaller0: Linktype set failed because interface is up
[  241.170167][T15884] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  241.248922][T15886] netlink: 'syz.2.3483': attribute type 10 has an invalid length.
[  241.252294][T15886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3483'.
[  241.259521][T15886] team0: Port device geneve0 added
[  241.267204][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.270162][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.283703][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.291495][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.322684][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  241.328088][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.343588][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  241.347712][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.350827][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  241.353810][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.362431][T15892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3486'.
[  241.368710][ T5874] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  241.372332][ T5874] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.376021][T15892] bond0: invalid ARP target 0.0.0.0 specified for addition
[  241.378840][T15892] bond0: option arp_ip_target: invalid value (0)
[  241.536832][T15905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3492'.
[  241.552777][T15907] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3493'.
[  241.610579][T15910] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.614801][T15910] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.620194][T15911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3495'.
[  241.628284][T15911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3495'.
[  241.662652][T15910] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.667059][T15910] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.714998][T15910] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.720834][T15910] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.765063][T15910] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.770161][T15910] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.138944][T15890] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  242.314054][T15921] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3498'.
[  242.348882][T15921] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3498'.
[  242.566779][T15930] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  242.566787][T15931] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  242.627888][T15933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3502'.
[  242.672417][T15935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3503'.
[  242.687838][T15935] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  242.719379][T15935] tipc: Resetting bearer <eth:syzkaller0>
[  242.732248][T15934] tipc: Resetting bearer <eth:syzkaller0>
[  244.069271][T15934] tipc: Disabling bearer <eth:syzkaller0>
[  244.393614][T15966] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  244.398895][T15966] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  244.401937][T15966] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  244.909080][T15996] svc: failed to register nfsdv3 RPC service (errno 111).
[  244.914847][T15996] svc: failed to register nfsaclv3 RPC service (errno 111).
[  244.999999][   T33] audit: type=1800 audit(1755193503.412:6): pid=16004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3528" name=CB dev="tmpfs" ino=6051 res=0 errno=0
[  245.036139][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  245.042825][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.055501][ T5715] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  245.062475][ T5715] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.111305][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  245.114999][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.126086][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  245.129859][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.306704][T16018] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  245.310736][T16018] openvswitch: netlink: Message has 8454 unknown bytes.
[  245.822327][T16070] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  246.377668][T16092] __nla_validate_parse: 7 callbacks suppressed
[  246.377685][T16092] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3553'.
[  246.413218][T16092] sctp: [Deprecated]: syz.1.3553 (pid 16092) Use of struct sctp_assoc_value in delayed_ack socket option.
[  246.413218][T16092] Use struct sctp_sack_info instead
[  246.445476][T16096] syzkaller1: entered promiscuous mode
[  246.457629][T16096] syzkaller1: entered allmulticast mode
[  246.748654][T16117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3562'.
[  246.751787][T16117] openvswitch: netlink: EtherType 0 is less than min 600
[  246.757290][T16117] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3562'.
[  246.817942][T16121] netlink: 'syz.1.3564': attribute type 1 has an invalid length.
[  247.224152][T16144] vxcan1 speed is unknown, defaulting to 1000
[  247.240022][T16148] bridge_slave_0: invalid flags given to default FDB implementation
[  247.354348][T16151] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3575'.
[  247.413987][T16144] lo speed is unknown, defaulting to 1000
[  247.818750][T16182] syz_tun: left promiscuous mode
[  247.825398][T16182] 8021q: adding VLAN 0 to HW filter on device team0
[  247.831698][T16182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  247.879149][ T7054] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  247.986512][ T5874] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  248.231322][T16189] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.293193][T16189] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.347277][T16189] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.411155][T16198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3592'.
[  248.432479][T16189] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.509396][ T5715] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.518440][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  248.521968][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.534414][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.549011][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.929588][T16210] netlink: 'syz.0.3596': attribute type 10 has an invalid length.
[  248.932467][T16210] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3596'.
[  248.937215][T16210] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  248.997358][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  249.002519][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  249.119886][T16224] netlink: 'syz.0.3602': attribute type 25 has an invalid length.
[  249.239816][T16231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3605'.
[  249.257300][T16231] netlink: 'syz.0.3605': attribute type 1 has an invalid length.
[  249.647900][T16260] IPVS: sh: FWM 3 0x00000003 - no destination available
[  249.652133][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  249.712419][T16260] vxcan1 speed is unknown, defaulting to 1000
[  249.798209][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  249.838339][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3618'.
[  249.888571][T16273] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  250.103635][T16260] lo speed is unknown, defaulting to 1000
[  250.140139][T16285] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3623'.
[  250.526076][T16293] ip6gre2: entered allmulticast mode
[  251.015127][T16307] sctp: [Deprecated]: syz.1.3631 (pid 16307) Use of int in max_burst socket option.
[  251.015127][T16307] Use struct sctp_assoc_value instead
[  251.514904][T16341] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  251.516161][T16342] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3643'.
[  251.518276][T16341] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.521456][T16342] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3643'.
[  251.561553][T16341] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  251.565465][T16341] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.600181][T16351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3647'.
[  251.610995][T16341] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  251.614434][T16341] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.647430][T16353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  251.660822][T16341] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  251.663930][T16341] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.666509][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  251.732961][ T5874] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  251.737214][ T5874] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.744087][T16358] netlink: 'syz.1.3650': attribute type 1 has an invalid length.
[  251.750460][ T5874] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  251.755210][ T5874] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.792057][ T5874] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  251.800648][ T5874] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.810969][ T5874] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  251.813595][ T5874] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.037445][T16381] netlink: 'syz.0.3658': attribute type 1 has an invalid length.
[  252.040366][T16381] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3658'.
[  252.046802][T16381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3658'.
[  252.047056][T16382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3658'.
[  252.111296][T16381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3658'.
[  252.428376][T16407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3665'.
[  252.432146][T16407] openvswitch: netlink: Flow actions attr not present in new flow.
[  252.676404][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  253.069320][T16420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3670'.
[  253.088100][T16420] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3670'.
[  253.315906][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  253.450207][T16448] gretap0: left promiscuous mode
[  253.458021][T16448] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  253.536703][T16455] netlink: 'syz.0.3685': attribute type 21 has an invalid length.
[  253.539803][T16455] netlink: 'syz.0.3685': attribute type 4 has an invalid length.
[  253.673676][T16463] netlink: 'syz.2.3690': attribute type 1 has an invalid length.
[  253.773385][T16469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  253.807524][ T5894] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  253.900850][T16477] vxcan1 speed is unknown, defaulting to 1000
[  254.065085][T16490] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  254.235129][T16477] lo speed is unknown, defaulting to 1000
[  254.289539][T16501] syzkaller1: entered promiscuous mode
[  254.291469][T16501] syzkaller1: entered allmulticast mode
[  254.664975][T16529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  254.696005][ T5894] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  254.719283][T16531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  254.745939][ T5894] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  255.561380][ T5894] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  255.686940][T16585] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  256.593251][T16612] __nla_validate_parse: 16 callbacks suppressed
[  256.593262][T16612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3750'.
[  257.048159][T16644] netlink: 'syz.1.3763': attribute type 22 has an invalid length.
[  257.127649][T16648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3765'.
[  257.134137][T16648] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3765'.
[  257.371894][T16662] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  257.461605][T16675] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  257.483563][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3774'.
[  257.572531][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3777'.
[  257.577607][T16683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.659510][T16690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3781'.
[  257.866730][T16721] syz_tun: entered allmulticast mode
[  257.908695][T16721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3792'.
[  257.926729][T16715] nbd3: detected capacity change from 0 to 875674160
[  257.995801][T16716] nbd4: detected capacity change from 0 to 875674160
[  257.999047][   T55] block nbd3: Receive control failed (result -104)
[  257.999401][   T56] block nbd4: Receive control failed (result -32)
[  258.008254][T12958] block nbd4: Dead connection, failed to find a fallback
[  258.013875][T12958] block nbd4: shutting down sockets
[  258.020549][T12958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  258.024477][T12958] Buffer I/O error on dev nbd4, logical block 0, async page read
[  258.028787][T12958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  258.032635][T12958] Buffer I/O error on dev nbd4, logical block 0, async page read
[  258.038304][T12958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  258.042077][T12958] Buffer I/O error on dev nbd4, logical block 0, async page read
[  258.045512][T12958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  258.049919][T12958] Buffer I/O error on dev nbd4, logical block 0, async page read
[  258.053260][T12958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  258.068012][T12958] Buffer I/O error on dev nbd4, logical block 0, async page read
[  258.071368][T12958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  258.075058][T12958] Buffer I/O error on dev nbd4, logical block 0, async page read
[  258.080151][T12958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  258.083850][T12958] Buffer I/O error on dev nbd4, logical block 0, async page read
[  258.094613][T12958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  258.106291][T12958] Buffer I/O error on dev nbd4, logical block 0, async page read
[  258.113352][T12958] ldm_validate_partition_table(): Disk read failed.
[  258.126847][T12958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  258.134516][T12958] Buffer I/O error on dev nbd4, logical block 0, async page read
[  258.140787][T12958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  258.145540][T12958] Buffer I/O error on dev nbd4, logical block 0, async page read
[  258.149896][T12958] Dev nbd4: unable to read RDB block 0
[  258.154248][T12958]  nbd4: unable to read partition table
[  258.160752][T16735] netlink: 'syz.1.3796': attribute type 1 has an invalid length.
[  258.164739][T16735] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3796'.
[  258.165124][T12958] ldm_validate_partition_table(): Disk read failed.
[  258.171995][T12958] Dev nbd4: unable to read RDB block 0
[  258.174672][T12958]  nbd4: unable to read partition table
[  258.416700][T16747] tipc: Trying to set illegal importance in message
[  259.027073][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3809'.
[  259.143681][T16781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  259.166328][ T7054] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  259.534144][T16784] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3811'.
[  259.538000][T16784] openvswitch: netlink: Flow actions attr not present in new flow.
[  259.788877][T16804] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  260.036308][ T7054] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  260.073352][T16831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  260.097677][ T7054] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  260.276647][ T7054] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  260.755170][T16859] netlink: 'syz.0.3839': attribute type 11 has an invalid length.
[  260.757811][T16858] netlink: 'syz.0.3839': attribute type 1 has an invalid length.
[  260.761488][T16858] netlink: 'syz.0.3839': attribute type 4 has an invalid length.
[  260.843323][T16862] bridge0: port 1(gretap0) entered blocking state
[  260.848449][T16862] bridge0: port 1(gretap0) entered disabled state
[  260.851851][T16862] gretap0: entered allmulticast mode
[  260.855210][T16862] gretap0: entered promiscuous mode
[  260.951084][T16864] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.048047][T16870] tipc: Resetting bearer <eth:syzkaller0>
[  261.076583][   T60] block nbd0: Possible stuck request ffff88801af90000: control (read@0,1024B). Runtime 180 seconds
[  261.079994][   T60] block nbd0: Possible stuck request ffff88801af90200: control (read@1024,1024B). Runtime 180 seconds
[  261.083577][   T60] block nbd0: Possible stuck request ffff88801af90400: control (read@2048,1024B). Runtime 180 seconds
[  261.087862][   T60] block nbd0: Possible stuck request ffff88801af90600: control (read@3072,1024B). Runtime 180 seconds
[  261.100361][T16863] tipc: Disabling bearer <eth:syzkaller0>
[  261.175839][T16880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  261.199144][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  261.314117][T16896] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.336639][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  261.401409][T16907] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.404683][T16907] syzkaller0: entered promiscuous mode
[  261.407632][T16907] syzkaller0: entered allmulticast mode
[  261.410844][T16909] netlink: 'syz.1.3855': attribute type 1 has an invalid length.
[  261.419182][T16907] tipc: Resetting bearer <eth:syzkaller0>
[  261.618722][T16906] tipc: Resetting bearer <eth:syzkaller0>
[  261.633467][T16906] tipc: Disabling bearer <eth:syzkaller0>
[  261.643581][T16924] __nla_validate_parse: 6 callbacks suppressed
[  261.643597][T16924] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3859'.
[  261.660882][T16924] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3859'.
[  261.681139][T16925] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3859'.
[  261.708730][T16929] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3860'.
[  261.925300][T16946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3869'.
[  261.930254][T16946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3869'.
[  261.999453][T16954] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3871'.
[  262.003222][T16954] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3871'.
[  262.205138][T16972] netlink: 'syz.2.3878': attribute type 30 has an invalid length.
[  262.356262][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  262.365338][T16981] syzkaller0: entered promiscuous mode
[  262.371500][T16981] syzkaller0: entered allmulticast mode
[  262.380641][T16981] bridge0: mtu less than device minimum
[  262.492419][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3884'.
[  262.560346][T16990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3884'.
[  262.745057][T17010] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  262.858766][T17017] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  262.879783][T17018] netlink: 'syz.0.3892': attribute type 1 has an invalid length.
[  262.882928][T17018] netlink: 'syz.0.3892': attribute type 1 has an invalid length.
[  263.034274][T17024] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  263.293010][T17042] macsec0: entered promiscuous mode
[  263.295175][T17042] macsec0: entered allmulticast mode
[  263.872788][T17078] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  264.346297][T17110] netlink: 'syz.2.3925': attribute type 39 has an invalid length.
[  264.677139][ T5296] udevd[5296]: worker [6427] /devices/virtual/block/nbd0 timeout; kill it
[  264.682499][ T5296] udevd[5296]: seq 11197 '/devices/virtual/block/nbd0' killed
[  264.760573][T17131] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  264.985034][T17147] netlink: 'syz.0.3941': attribute type 1 has an invalid length.
[  265.014643][T17147] 8021q: adding VLAN 0 to HW filter on device bond7
[  265.026777][T17147] vlan0: entered allmulticast mode
[  265.028844][T17147] macvtap0: entered allmulticast mode
[  265.031129][T17147] veth0_macvtap: entered allmulticast mode
[  265.038973][T17147] netlink: 'syz.0.3941': attribute type 1 has an invalid length.
[  265.047369][T17147] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  265.536623][T17183] openvswitch: netlink: IPv4 tun info is not correct
[  265.679747][T17196] netlink: 'syz.2.3956': attribute type 1 has an invalid length.
[  265.731429][T17196] 8021q: adding VLAN 0 to HW filter on device bond13
[  265.735914][T17196] bond12: (slave bond13): making interface the new active one
[  265.738913][T17196] bond12: (slave bond13): Enslaving as an active interface with an up link
[  265.867434][T17209] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  265.902160][T17211] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.200125][ T1118] block nbd1: Possible stuck request ffff88801ab78000: control (read@0,4096B). Runtime 180 seconds
[  266.313316][T17227] netlink: 'syz.2.3967': attribute type 21 has an invalid length.
[  266.975017][T17256] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  267.037162][T17258] __nla_validate_parse: 13 callbacks suppressed
[  267.037182][T17258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3978'.
[  267.255136][T17260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3979'.
[  267.597011][T17271] batadv_slave_1: entered promiscuous mode
[  267.687896][T17280] netlink: 'syz.0.3986': attribute type 4 has an invalid length.
[  267.880302][T17294] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  267.997908][T17302] macsec0: entered promiscuous mode
[  268.000374][T17302] hsr0: entered promiscuous mode
[  268.002907][T17302] macsec0: entered allmulticast mode
[  268.005394][T17302] hsr0: entered allmulticast mode
[  268.008026][T17302] hsr_slave_0: entered allmulticast mode
[  268.010731][T17302] hsr_slave_1: entered allmulticast mode
[  268.016892][T17302] hsr0: left allmulticast mode
[  268.019204][T17302] hsr_slave_0: left allmulticast mode
[  268.021688][T17302] hsr_slave_1: left allmulticast mode
[  268.024026][T17302] hsr0: left promiscuous mode
[  268.108195][T17306] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  268.194074][T17314] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  268.197765][T17312] netlink: 'syz.1.3998': attribute type 4 has an invalid length.
[  268.201006][T17312] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3998'.
[  268.261764][T17263] batadv_slave_1: left promiscuous mode
[  269.173812][T17324] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  269.220695][T17328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4002'.
[  269.243920][T17330] lo: entered allmulticast mode
[  269.271013][T17330] dvmrp8: entered allmulticast mode
[  269.278367][T17329] lo: left allmulticast mode
[  269.280328][T17329] dvmrp8: left allmulticast mode
[  269.399662][T17345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4007'.
[  269.533279][T17356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4014'.
[  269.586816][T17356] vlan1: entered allmulticast mode
[  269.589087][T17356] bridge0: entered allmulticast mode
[  269.592030][T17356] bridge8: port 1(vlan1) entered blocking state
[  269.594708][T17356] bridge8: port 1(vlan1) entered disabled state
[  269.608156][T17356] vlan1: entered promiscuous mode
[  269.610060][T17356] bridge0: entered promiscuous mode
[  269.620197][T17356] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  269.622692][T17356] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  269.686165][T17365] batadv_slave_1: entered promiscuous mode
[  269.803697][T17370] netlink: 'syz.2.4019': attribute type 1 has an invalid length.
[  269.825034][T17370] bond14: (slave vti0): The slave device specified does not support setting the MAC address
[  269.831040][T17370] bond14: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  269.844358][T17370] bond14: (slave vti0): making interface the new active one
[  269.848175][T17370] bond14: (slave vti0): Enslaving as an active interface with an up link
[  270.054236][T17383] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  270.100520][T17385] netlink: 'syz.0.4023': attribute type 27 has an invalid length.
[  270.113352][T17385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4023'.
[  270.315838][T17349] batadv_slave_1: left promiscuous mode
[  270.522514][T17402] netlink: 'syz.0.4030': attribute type 6 has an invalid length.
[  270.684203][T17407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4032'.
[  270.687442][T17407] netlink: 'syz.0.4032': attribute type 29 has an invalid length.
[  270.690323][T17407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4032'.
[  271.012024][T17436] tipc: Resetting bearer <eth:vlan0>
[  271.029755][T17436] batadv_slave_0: left promiscuous mode
[  271.037837][T17436] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  271.040217][T17436] bond1: left promiscuous mode
[  271.041948][T17436] veth1: left allmulticast mode
[  271.043937][T17436] vlan0: left promiscuous mode
[  271.045353][T17436] bond0: left promiscuous mode
[  271.082257][T17436] bond10: left promiscuous mode
[  271.084773][T17436] macsec0: left promiscuous mode
[  271.087614][T17436] macsec0: left allmulticast mode
[  271.092165][ T7054] lo speed is unknown, defaulting to 1000
[  271.094520][ T7054] syz1: Port: 1 Link DOWN
[  271.121026][ T5874] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.125082][ T5874] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.129709][ T5874] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.133173][ T5874] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.286447][T17454] netlink: 'syz.2.4050': attribute type 1 has an invalid length.
[  271.289830][T17454] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4050'.
[  271.294124][T17454] netlink: 'syz.2.4050': attribute type 1 has an invalid length.
[  271.387990][T17461] netlink: 'syz.2.4052': attribute type 5 has an invalid length.
[  271.418581][T17461] geneve2: entered promiscuous mode
[  271.421111][T17461] geneve2: entered allmulticast mode
[  271.431306][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  271.434893][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  271.445003][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  271.452028][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  271.719309][T17486] syzkaller1: entered promiscuous mode
[  271.724664][T17486] syzkaller1: entered allmulticast mode
[  271.743479][T17490] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.749742][T17490] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  272.085231][T17520] rdma_rxe: rxe_newlink: failed to add bond0
[  272.185051][T17529] __nla_validate_parse: 11 callbacks suppressed
[  272.185066][T17529] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4077'.
[  272.193591][T17529] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4077'.
[  272.565492][T17546] syzkaller1: entered allmulticast mode
[  272.867126][T17557] bridge0: port 1(vxlan0) entered blocking state
[  272.870325][T17557] bridge0: port 1(vxlan0) entered disabled state
[  272.873133][T17557] vxlan0: entered allmulticast mode
[  272.883584][T17557] vxlan0: entered promiscuous mode
[  273.154755][T17571] netlink: 'syz.2.4092': attribute type 8 has an invalid length.
[  273.158660][T17571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4092'.
[  273.171770][T17571] bond0: entered promiscuous mode
[  273.173159][T17572] nbd: nbd1 already in use
[  273.175280][T17571] bond0: left promiscuous mode
[  273.176642][T17572] block nbd0: NBD_DISCONNECT
[  273.179934][T17572] block nbd0: Send disconnect failed -32
[  273.184918][T17572] block nbd0: shutting down sockets
[  273.190516][    C0] blk_print_req_error: 24 callbacks suppressed
[  273.190536][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.196653][    C0] buffer_io_error: 23 callbacks suppressed
[  273.196669][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  273.201664][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.205186][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  273.208435][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.212010][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  273.214841][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.218623][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  273.222080][ T6427] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.229075][ T6427] Buffer I/O error on dev nbd0, logical block 0, async page read
[  273.232248][ T6427] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.236118][ T6427] Buffer I/O error on dev nbd0, logical block 1, async page read
[  273.251558][ T6427] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.255349][ T6427] Buffer I/O error on dev nbd0, logical block 2, async page read
[  273.261485][ T6427] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.265334][ T6427] Buffer I/O error on dev nbd0, logical block 3, async page read
[  273.269063][ T6427] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.279166][ T6427] Buffer I/O error on dev nbd0, logical block 0, async page read
[  273.282447][ T6427] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.286836][ T6427] Buffer I/O error on dev nbd0, logical block 1, async page read
[  273.311009][ T6427] ldm_validate_partition_table(): Disk read failed.
[  273.316653][ T6427] Dev nbd0: unable to read RDB block 0
[  273.321564][ T6427]  nbd0: unable to read partition table
[  273.365438][T17577] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.372430][T17577] 8021q: adding VLAN 0 to HW filter on device team0
[  273.386387][T17577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  273.387053][ T5296] udevd[5296]: worker [6427] terminated by signal 9 (Killed)
[  273.394323][ T5296] udevd[5296]: worker [6427] failed while handling '/devices/virtual/block/nbd0'
[  273.398111][    T9] lo speed is unknown, defaulting to 1000
[  273.400003][    T9] syz1: Port: 1 Link ACTIVE
[  273.570707][T17589] can: request_module (can-proto-5) failed.
[  273.622923][T17589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4097'.
[  273.686450][T17602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4101'.
[  273.985099][T17628] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  273.992968][T17628] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  273.996869][T17628] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  274.042787][T17628] vlan1: entered promiscuous mode
[  274.044709][T17628] bridge0: entered promiscuous mode
[  274.054100][T17632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4112'.
[  274.068295][T17632] netlink: 'syz.2.4112': attribute type 1 has an invalid length.
[  275.024144][T17658] !: left promiscuous mode
[  275.026743][T17658] !: left allmulticast mode
[  275.053209][T17658] veth0_to_team: left promiscuous mode
[  275.079570][T17658] batadv_slave_0: left promiscuous mode
[  275.090283][T17658] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  275.194958][T17669] netlink: 'syz.2.4120': attribute type 1 has an invalid length.
[  275.204117][T17669] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4120'.
[  275.231608][T17675] netlink: 'syz.0.4122': attribute type 1 has an invalid length.
[  275.234843][T17675] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4122'.
[  275.249208][T17675] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4122'.
[  275.256422][T17675] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4122'.
[  275.331503][T17680] netlink: 'syz.0.4124': attribute type 4 has an invalid length.
[  275.402340][T17685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.650433][T17708] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  275.659715][T17710] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  275.768845][T17718] nbd: must specify an index to disconnect
[  276.624198][ T5296] udevd[5296]: worker [6398] /devices/virtual/block/nbd1 timeout; kill it
[  276.637313][ T5296] udevd[5296]: seq 11330 '/devices/virtual/block/nbd1' killed
[  276.673827][T17728] netlink: 'syz.1.4139': attribute type 1 has an invalid length.
[  276.729645][T17728] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[  276.735370][T17728] bond9: (slave vxcan3): Error -95 calling set_mac_address
[  277.334892][T17771] IPv6: addrconf: prefix option has invalid lifetime
[  277.433116][T17781] __nla_validate_parse: 10 callbacks suppressed
[  277.433139][T17781] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4153'.
[  277.439789][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4153'.
[  277.445218][T17781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4153'.
[  277.670093][T17800] netlink: 'syz.0.4160': attribute type 10 has an invalid length.
[  277.678743][T17800] bond0: (slave wlan1): Opening slave failed
[  277.889193][T17819] netlink: 51 bytes leftover after parsing attributes in process `syz.2.4164'.
[  277.999688][T17825] netlink: 'syz.2.4165': attribute type 13 has an invalid length.
[  278.010010][T17825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4165'.
[  278.173358][T17849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4168'.
[  278.212455][T17850] team0: Port device geneve0 removed
[  278.235437][T17850] tipc: Resetting bearer <eth:vlan0>
[  278.258124][T17850] tipc: Resetting bearer <eth:vlan0>
[  278.260213][T17850] team0: Port device vlan0 removed
[  278.262710][T17850] vxlan0: left allmulticast mode
[  278.264924][T17850] vxlan0: left promiscuous mode
[  278.267422][T17850] bridge0: port 1(vxlan0) entered disabled state
[  278.273327][T17850] bond5: (slave bond6): Releasing backup interface
[  278.276354][T17850] bond5: (slave bond6): the permanent HWaddr of slave - 52:3d:59:cd:67:22 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  278.281794][T17850] bond5: (slave gretap1): making interface the new active one
[  278.286385][T17850] bond5: (slave gretap1): Releasing backup interface
[  278.291432][T17850] bond8: (slave gretap2): Releasing active interface
[  278.297007][T17850] bond12: (slave bond13): Releasing backup interface
[  278.301379][T17850] bond14: (slave vti0): Releasing backup interface
[  278.305151][T17851] tipc: Enabled bearer <eth:team0>, priority 0
[  278.381231][T17858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4170'.
[  278.418165][T17862] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4171'.
[  278.556248][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4172'.
[  278.629635][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4175'.
[  278.689920][T17882] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  278.715177][T17887] sctp: [Deprecated]: syz.2.4177 (pid 17887) Use of int in maxseg socket option.
[  278.715177][T17887] Use struct sctp_assoc_value instead
[  278.791364][T17891] netlink: 'syz.2.4179': attribute type 11 has an invalid length.
[  278.799397][T17891] netlink: 'syz.2.4179': attribute type 11 has an invalid length.
[  278.840750][T17894] tipc: Resetting bearer <eth:team0>
[  278.844178][T17894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  278.960876][T17900] IPv6: addrconf: prefix option has invalid lifetime
[  279.041765][T17905] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  279.211097][T17921] netlink: 'syz.2.4191': attribute type 10 has an invalid length.
[  279.234919][T17921] team0: Port device geneve0 added
[  279.241987][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  279.248283][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  279.252442][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  279.263398][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  279.294544][T17921] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  279.383468][T17931] pim6reg: entered allmulticast mode
[  279.399059][T17931] pim6reg: left allmulticast mode
[  279.516731][T17949] hsr0: entered promiscuous mode
[  279.523674][T17950] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  279.536435][T17949] hsr_slave_0: left promiscuous mode
[  279.543312][T17949] hsr_slave_1: left promiscuous mode
[  279.562487][T17949] hsr0 (unregistering): left promiscuous mode
[  279.589147][T17955] netlink: 'syz.2.4197': attribute type 6 has an invalid length.
[  279.603190][T17957] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  280.301001][T18014] netlink: 'syz.2.4221': attribute type 11 has an invalid length.
[  280.683108][T18045] lo speed is unknown, defaulting to 1000
[  280.688193][T18045] lo speed is unknown, defaulting to 1000
[  280.693050][T18045] lo speed is unknown, defaulting to 1000
[  280.704871][T18045] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  280.725377][T18045] lo speed is unknown, defaulting to 1000
[  280.730844][T18045] lo speed is unknown, defaulting to 1000
[  280.734415][T18045] lo speed is unknown, defaulting to 1000
[  280.890346][T18063] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  280.893982][T18063] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  280.915941][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  280.932572][T18065] team0: entered promiscuous mode
[  280.934790][T18065] team0: entered allmulticast mode
[  281.823088][T18102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  282.160538][T18132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  282.216321][T18138] pim6reg: entered allmulticast mode
[  282.381971][T18138] pim6reg: left allmulticast mode
[  282.461640][T18154] vxcan1 speed is unknown, defaulting to 1000
[  282.631908][T18170] __nla_validate_parse: 60 callbacks suppressed
[  282.631931][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4274'.
[  282.727991][T18154] lo speed is unknown, defaulting to 1000
[  282.730060][T18174] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  282.733407][T18174] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  282.741084][T18174] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  282.749822][T18154] lo speed is unknown, defaulting to 1000
[  282.900473][T18184] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4281'.
[  283.112019][T18202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4285'.
[  283.603434][   T10] lo speed is unknown, defaulting to 1000
[  283.610657][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  283.644056][T18239] netlink: 'syz.2.4297': attribute type 11 has an invalid length.
[  283.646927][T18239] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4297'.
[  283.807071][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  283.898512][T18261] vxcan1 speed is unknown, defaulting to 1000
[  283.913390][T18262] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4300'.
[  284.148358][T18261] lo speed is unknown, defaulting to 1000
[  284.160698][T18261] lo speed is unknown, defaulting to 1000
[  284.966061][T18287] net_ratelimit: 1 callbacks suppressed
[  284.966068][T18287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  285.273977][T18302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4319'.
[  285.359891][T18302] batadv_slave_0: left promiscuous mode
[  285.363604][T18302] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  285.368478][T18302] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  285.370909][T18302] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  285.378575][T18302] vlan0: left allmulticast mode
[  285.380304][T18302] !: left allmulticast mode
[  285.384868][T18302] ip6erspan0: left promiscuous mode
[  285.401778][T18302] wireguard0: left promiscuous mode
[  285.403693][T18302] wireguard0: left allmulticast mode
[  285.453647][ T5894] lo speed is unknown, defaulting to 1000
[  285.457914][ T5894] syz2: Port: 1 Link DOWN
[  285.493441][T18309] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4321'.
[  285.499355][T18309] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  285.585765][T18316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4324'.
[  285.816272][T18328] syzkaller1: entered promiscuous mode
[  285.841887][T18328] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  286.157405][T18346] ip6tnl5: entered promiscuous mode
[  286.249861][T18356] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  286.306097][T18363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4340'.
[  286.448351][   T55] block nbd5: Wrong magic (0x8826459d)
[  286.507850][T18382] : entered promiscuous mode
[  286.734455][T18405] pim6reg: entered allmulticast mode
[  286.747037][T18405] pim6reg: left allmulticast mode
[  286.807826][T18413] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4355'.
[  287.199854][T18446] netlink: 'syz.1.4367': attribute type 83 has an invalid length.
[  287.213246][T18448] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  287.259228][T18452] netlink: 'syz.1.4368': attribute type 1 has an invalid length.
[  287.495345][T18478] openvswitch: netlink: Key 22 has unexpected len 2 expected 4
[  287.587814][T18481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  287.652386][T18487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  287.711603][T18492] netlink: 'syz.2.4379': attribute type 7 has an invalid length.
[  287.723045][T18488] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  287.947130][T18501] trusted_key: syz.2.4382 sent an empty control message without MSG_MORE.
[  287.961270][ T1118] block nbd3: Possible stuck request ffff88801abc0000: control (read@0,4096B). Runtime 30 seconds
[  287.992959][T18504] netlink: 'syz.2.4383': attribute type 4 has an invalid length.
[  287.996289][T18504] __nla_validate_parse: 4 callbacks suppressed
[  287.996303][T18504] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4383'.
[  288.074655][T18511] vxcan1 speed is unknown, defaulting to 1000
[  288.274232][T18511] lo speed is unknown, defaulting to 1000
[  288.280483][T18511] lo speed is unknown, defaulting to 1000
[  288.290324][T18516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4387'.
[  288.304793][T18516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4387'.
[  288.422888][T18525] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4390'.
[  288.475552][T18528] IPv6: addrconf: prefix option has invalid lifetime
[  288.662574][T18539] 8021q: adding VLAN 0 to HW filter on device team0
[  288.684821][    T9] lo speed is unknown, defaulting to 1000
[  288.689148][    T9] syz2: Port: 1 Link ACTIVE
[  288.739724][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  288.784869][T18550] netlink: 'syz.1.4400': attribute type 2 has an invalid length.
[  288.788944][T18550] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4400'.
[  288.843850][T18553] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4401'.
[  288.884266][T18557] netlink: 'syz.1.4402': attribute type 11 has an invalid length.
[  288.989199][T18569] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  289.119554][T18582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4409'.
[  289.123962][T18582] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4409'.
[  289.129572][T18582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4409'.
[  289.172334][T18586] batadv_slave_1: entered promiscuous mode
[  289.187411][T18588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4412'.
[  289.237630][T18584] batadv_slave_1: left promiscuous mode
[  289.372668][T18610] netlink: 'syz.2.4419': attribute type 18 has an invalid length.
[  289.379020][T18610] netlink: 'syz.2.4419': attribute type 18 has an invalid length.
[  289.626116][T18635] vlan4: entered promiscuous mode
[  289.638347][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  289.716167][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  289.934195][T18658] sctp: [Deprecated]: syz.1.4435 (pid 18658) Use of int in maxseg socket option.
[  289.934195][T18658] Use struct sctp_assoc_value instead
[  289.942307][T18658] chnl_net:caif_netlink_parms(): no params data found
[  290.378416][T18696] netlink: 'syz.0.4444': attribute type 1 has an invalid length.
[  290.514536][T18702] vlan4: entered promiscuous mode
[  290.661299][T18713] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  290.757347][ T5715] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  290.765509][ T5715] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  290.897649][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  291.095741][T18750] net_ratelimit: 2 callbacks suppressed
[  291.095750][T18750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  291.444793][T18770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  295.155960][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  296.279895][ T1118] block nbd1: Possible stuck request ffff88801ab78000: control (read@0,4096B). Runtime 210 seconds
[  303.965944][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  318.037318][ T1118] block nbd3: Possible stuck request ffff88801abc0000: control (read@0,4096B). Runtime 60 seconds
[  318.729943][ T5296] udevd[5296]: worker [7911] /devices/virtual/block/nbd3 is taking a long time
[  322.516105][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  323.050044][T18783] IPv6: addrconf: prefix option has invalid lifetime
[  323.102180][T18785] sctp: [Deprecated]: syz.2.4470 (pid 18785) Use of struct sctp_assoc_value in delayed_ack socket option.
[  323.102180][T18785] Use struct sctp_sack_info instead
[  323.144443][T18790] netlink: 'syz.1.4472': attribute type 4 has an invalid length.
[  323.157367][    T9] lo speed is unknown, defaulting to 1000
[  323.159672][    T9] syz2: Port: 1 Link DOWN
[  323.222204][T18794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  323.343140][T18805] IPv6: addrconf: prefix option has invalid lifetime
[  324.766289][T18834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  324.772190][    T9] lo speed is unknown, defaulting to 1000
[  324.774381][    T9] syz2: Port: 1 Link ACTIVE
[  324.797032][T18836] netlink: 'syz.2.4491': attribute type 1 has an invalid length.
[  324.801572][T18836] __nla_validate_parse: 49 callbacks suppressed
[  324.801588][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4491'.
[  324.821877][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  324.885269][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4493'.
[  324.900840][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4494'.
[  324.978147][T18851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4497'.
[  325.076586][T18854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4498'.
[  325.082264][T18860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4498'.
[  325.136605][T18863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4501'.
[  325.733151][T18914] sctp: [Deprecated]: syz.2.4519 (pid 18914) Use of struct sctp_assoc_value in delayed_ack socket option.
[  325.733151][T18914] Use struct sctp_sack_info instead
[  325.781659][T18916] pim6reg1: entered promiscuous mode
[  325.783684][T18916] pim6reg1: entered allmulticast mode
[  325.806539][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  325.923827][T18921] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  326.227557][T18935] netlink: 356 bytes leftover after parsing attributes in process `syz.2.4526'.
[  326.371376][ T1118] block nbd1: Possible stuck request ffff88801ab78000: control (read@0,4096B). Runtime 240 seconds
[  326.760700][T18946] netlink: 'syz.2.4530': attribute type 4 has an invalid length.
[  326.763596][T18946] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4530'.
[  326.782140][T18946] vlan0: MTU too low for tipc bearer
[  326.784126][T18946] tipc: Disabling bearer <eth:vlan0>
[  326.799829][T18946] : renamed from bond0 (while UP)
[  326.827540][T18955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4533'.
[  326.891535][T18961] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  326.984249][T18974] netlink: 'syz.2.4541': attribute type 29 has an invalid length.
[  327.016665][T18974] netlink: 'syz.2.4541': attribute type 29 has an invalid length.
[  327.112918][T18982] delete_channel: no stack
[  327.145864][T18985] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  327.149785][T18986] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  327.152532][T18986] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  327.253673][T18997] sch_tbf: burst 19872 is lower than device lo mtu (39799) !
[  327.271908][T18996] sch_tbf: burst 19872 is lower than device lo mtu (39799) !
[  327.340758][T19004] netlink: 'syz.1.4550': attribute type 2 has an invalid length.
[  343.757040][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  343.765951][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  343.770455][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  343.774057][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  343.786427][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  343.825108][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  343.870642][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  343.874523][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  343.891465][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  343.904854][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  343.948116][ T5853] syz_tun (unregistering): left allmulticast mode
[  343.964883][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  343.972392][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  343.976492][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  343.978494][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  343.982867][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  343.983722][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  343.987188][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  343.992451][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  343.999164][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  344.002792][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  344.030762][ T5845] bond0: (slave syz_tun): Releasing backup interface
[  344.036930][ T5845] syz_tun (unregistering): left promiscuous mode
[  344.039512][ T5845] syz_tun (unregistering): left allmulticast mode
[  344.069254][T19015] vxcan1 speed is unknown, defaulting to 1000
[  344.102836][ T5907] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.106997][ T5907] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.170962][ T5907] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.174082][ T5907] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.180998][T19018] vxcan1 speed is unknown, defaulting to 1000
[  344.185725][T19015] lo speed is unknown, defaulting to 1000
[  344.188492][T19015] lo speed is unknown, defaulting to 1000
[  344.242075][ T5907] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.255664][ T5907] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.304401][ T5907] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.315691][ T5907] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.337728][T19015] chnl_net:caif_netlink_parms(): no params data found
[  344.376400][T19018] lo speed is unknown, defaulting to 1000
[  344.394706][T19019] vxcan1 speed is unknown, defaulting to 1000
[  344.402388][T19018] lo speed is unknown, defaulting to 1000
[  344.412227][T19015] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.414532][T19015] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.417465][T19015] bridge_slave_0: entered allmulticast mode
[  344.420558][T19015] bridge_slave_0: entered promiscuous mode
[  344.431683][T19015] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.437168][T19015] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.439678][T19015] bridge_slave_1: entered allmulticast mode
[  344.442662][T19015] bridge_slave_1: entered promiscuous mode
[  344.511667][T19015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  344.556622][T19015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  344.667259][T19015] team0: Port device team_slave_0 added
[  344.690522][T19019] lo speed is unknown, defaulting to 1000
[  344.711781][T19015] team0: Port device team_slave_1 added
[  344.726361][T19019] lo speed is unknown, defaulting to 1000
[  344.748771][ T5907] gretap0: left allmulticast mode
[  344.751037][ T5907] gretap0: left promiscuous mode
[  344.754137][ T5907] bridge0: port 1(gretap0) entered disabled state
[  344.764123][ T5907] vlan1: left promiscuous mode
[  344.773775][ T5907] bridge8: port 1(vlan1) entered disabled state
[  345.749024][ T5907] bond0 (unregistering): Released all slaves
[  345.835813][ T5907] bond1 (unregistering): Released all slaves
[  345.849274][ T5907] bond2 (unregistering): Released all slaves
[  345.952595][ T5907] bond3 (unregistering): Released all slaves
[  345.955974][ T5850] Bluetooth: hci3: command tx timeout
[  346.040303][ T5850] Bluetooth: hci1: command tx timeout
[  346.043746][ T5907] bond4 (unregistering): Released all slaves
[  346.046298][ T5850] Bluetooth: hci0: command tx timeout
[  346.053986][ T5907] bond5 (unregistering): Released all slaves
[  346.063306][ T5907] bond6 (unregistering): Released all slaves
[  346.185029][ T5907] bond7 (unregistering): Released all slaves
[  346.196932][ T5907] bond8 (unregistering): Released all slaves
[  346.209925][ T5907] bond9 (unregistering): Released all slaves
[  346.229763][T19015] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.232589][T19015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.242927][T19015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.251175][T19015] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.253845][T19015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.264123][T19015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.272025][T19018] chnl_net:caif_netlink_parms(): no params data found
[  346.396198][ T5907] tipc: Disabling bearer <udp:syz0>
[  346.400534][ T5907] tipc: Left network mode
[  346.501562][T19015] hsr_slave_0: entered promiscuous mode
[  346.504703][T19015] hsr_slave_1: entered promiscuous mode
[  346.530606][ T5907] IPVS: stopping backup sync thread 8279 ...
[  346.685892][T19018] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.688911][T19018] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.691378][T19018] bridge_slave_0: entered allmulticast mode
[  346.694194][T19018] bridge_slave_0: entered promiscuous mode
[  346.701338][T19018] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.710892][T19018] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.713728][T19018] bridge_slave_1: entered allmulticast mode
[  346.717997][T19018] bridge_slave_1: entered promiscuous mode
[  346.917019][T19018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  346.924784][T19018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.014886][T19018] team0: Port device team_slave_0 added
[  347.032007][T19018] team0: Port device team_slave_1 added
[  347.081597][T19018] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.084223][T19018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.094502][T19018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  347.201085][T19018] batman_adv: batadv0: Adding interface: batadv_slave_1
[  347.203929][T19018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.237567][T19018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.242637][T19019] chnl_net:caif_netlink_parms(): no params data found
[  347.313655][ T5907] hsr_slave_0: left promiscuous mode
[  347.337995][ T5907] veth1_macvtap: left promiscuous mode
[  347.339905][ T5907] veth0_macvtap: left allmulticast mode
[  347.341679][ T5907] veth0_macvtap: left promiscuous mode
[  347.988030][T19018] hsr_slave_0: entered promiscuous mode
[  347.991161][T19018] hsr_slave_1: entered promiscuous mode
[  347.994060][T19018] debugfs: 'hsr0' already exists in 'hsr'
[  348.006879][T19018] Cannot create hsr debugfs directory
[  348.036339][ T5850] Bluetooth: hci3: command tx timeout
[  348.063621][T19015] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  348.085289][T19015] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  348.092780][T19019] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.095511][T19019] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.098121][T19019] bridge_slave_0: entered allmulticast mode
[  348.107367][T19019] bridge_slave_0: entered promiscuous mode
[  348.116223][ T5850] Bluetooth: hci0: command tx timeout
[  348.118268][ T5850] Bluetooth: hci1: command tx timeout
[  348.121168][ T1118] block nbd3: Possible stuck request ffff88801abc0000: control (read@0,4096B). Runtime 90 seconds
[  348.135113][T19015] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  348.142507][T19015] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  348.148572][T19019] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.151503][T19019] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.154491][T19019] bridge_slave_1: entered allmulticast mode
[  348.159948][T19019] bridge_slave_1: entered promiscuous mode
[  348.217985][T19019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  348.235019][T19019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.260166][ T5907] ==================================================================
[  348.263390][ T5907] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0
[  348.266618][ T5907] Write of size 8 at addr ffff88803c170028 by task kworker/u8:4/5907
[  348.270565][ T5907] 
[  348.271708][ T5907] CPU: 0 UID: 0 PID: 5907 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  348.271720][ T5907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  348.271727][ T5907] Workqueue: netns cleanup_net
[  348.271766][ T5907] Call Trace:
[  348.271771][ T5907]  <TASK>
[  348.271777][ T5907]  dump_stack_lvl+0x189/0x250
[  348.271790][ T5907]  ? __virt_addr_valid+0x1c8/0x5c0
[  348.271801][ T5907]  ? rcu_is_watching+0x15/0xb0
[  348.271810][ T5907]  ? __kasan_check_byte+0x12/0x40
[  348.271822][ T5907]  ? __pfx_dump_stack_lvl+0x10/0x10
[  348.271831][ T5907]  ? rcu_is_watching+0x15/0xb0
[  348.271839][ T5907]  ? lock_release+0x4b/0x3e0
[  348.271851][ T5907]  ? __virt_addr_valid+0x1c8/0x5c0
[  348.271860][ T5907]  ? __virt_addr_valid+0x4a5/0x5c0
[  348.271870][ T5907]  print_report+0xca/0x240
[  348.271879][ T5907]  ? __xfrm_state_delete+0x666/0xca0
[  348.271890][ T5907]  kasan_report+0x118/0x150
[  348.271901][ T5907]  ? __xfrm_state_delete+0x666/0xca0
[  348.271913][ T5907]  __xfrm_state_delete+0x666/0xca0
[  348.271928][ T5907]  xfrm_state_flush+0x45f/0x770
[  348.271940][ T5907]  xfrm6_tunnel_net_exit+0x3f/0x100
[  348.271953][ T5907]  ops_undo_list+0x49a/0x990
[  348.271964][ T5907]  ? __pfx_ops_undo_list+0x10/0x10
[  348.271975][ T5907]  ? do_raw_spin_unlock+0x4d/0x240
[  348.271985][ T5907]  cleanup_net+0x4c5/0x800
[  348.271995][ T5907]  ? __pfx_cleanup_net+0x10/0x10
[  348.272006][ T5907]  ? _raw_spin_unlock_irq+0x23/0x50
[  348.272015][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  348.272023][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  348.272031][ T5907]  process_scheduled_works+0xae1/0x17b0
[  348.272044][ T5907]  ? __pfx_process_scheduled_works+0x10/0x10
[  348.272055][ T5907]  worker_thread+0x8a0/0xda0
[  348.272064][ T5907]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  348.272075][ T5907]  ? __kthread_parkme+0x7b/0x200
[  348.272086][ T5907]  kthread+0x711/0x8a0
[  348.272095][ T5907]  ? __pfx_worker_thread+0x10/0x10
[  348.272103][ T5907]  ? __pfx_kthread+0x10/0x10
[  348.272112][ T5907]  ? _raw_spin_unlock_irq+0x23/0x50
[  348.272120][ T5907]  ? lockdep_hardirqs_on+0x9c/0x150
[  348.272131][ T5907]  ? __pfx_kthread+0x10/0x10
[  348.272140][ T5907]  ret_from_fork+0x3fc/0x770
[  348.272150][ T5907]  ? __pfx_ret_from_fork+0x10/0x10
[  348.272159][ T5907]  ? __switch_to_asm+0x39/0x70
[  348.272174][ T5907]  ? __switch_to_asm+0x33/0x70
[  348.272184][ T5907]  ? __pfx_kthread+0x10/0x10
[  348.272193][ T5907]  ret_from_fork_asm+0x1a/0x30
[  348.272207][ T5907]  </TASK>
[  348.272212][ T5907] 
[  348.360683][ T5907] Allocated by task 17675:
[  348.362483][ T5907]  kasan_save_track+0x3e/0x80
[  348.364376][ T5907]  __kasan_slab_alloc+0x6c/0x80
[  348.366349][ T5907]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  348.368393][ T5907]  xfrm_state_alloc+0x24/0x2f0
[  348.370258][ T5907]  __find_acq_core+0x8a7/0x1c00
[  348.372144][ T5907]  xfrm_find_acq+0x78/0xa0
[  348.373874][ T5907]  xfrm_alloc_userspi+0x6b3/0xc90
[  348.375807][ T5907]  xfrm_user_rcv_msg+0x7a3/0xab0
[  348.377692][ T5907]  netlink_rcv_skb+0x208/0x470
[  348.379525][ T5907]  xfrm_netlink_rcv+0x79/0x90
[  348.381329][ T5907]  netlink_unicast+0x82f/0x9e0
[  348.383140][ T5907]  netlink_sendmsg+0x805/0xb30
[  348.384906][ T5907]  __sock_sendmsg+0x21c/0x270
[  348.386666][ T5907]  ____sys_sendmsg+0x505/0x830
[  348.388507][ T5907]  ___sys_sendmsg+0x21f/0x2a0
[  348.390324][ T5907]  __x64_sys_sendmsg+0x19b/0x260
[  348.392240][ T5907]  do_syscall_64+0xfa/0x3b0
[  348.393998][ T5907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.396262][ T5907] 
[  348.397208][ T5907] Freed by task 6012:
[  348.398764][ T5907]  kasan_save_track+0x3e/0x80
[  348.400586][ T5907]  kasan_save_free_info+0x46/0x50
[  348.402307][ T5907]  __kasan_slab_free+0x5b/0x80
[  348.404014][ T5907]  kmem_cache_free+0x18f/0x400
[  348.405906][ T5907]  xfrm_state_gc_task+0x52d/0x6b0
[  348.407952][ T5907]  process_scheduled_works+0xae1/0x17b0
[  348.410171][ T5907]  worker_thread+0x8a0/0xda0
[  348.412039][ T5907]  kthread+0x711/0x8a0
[  348.413675][ T5907]  ret_from_fork+0x3fc/0x770
[  348.415559][ T5907]  ret_from_fork_asm+0x1a/0x30
[  348.417489][ T5907] 
[  348.418468][ T5907] The buggy address belongs to the object at ffff88803c170000
[  348.418468][ T5907]  which belongs to the cache xfrm_state of size 928
[  348.423900][ T5907] The buggy address is located 40 bytes inside of
[  348.423900][ T5907]  freed 928-byte region [ffff88803c170000, ffff88803c1703a0)
[  348.429372][ T5907] 
[  348.430354][ T5907] The buggy address belongs to the physical page:
[  348.432756][ T5907] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803c170000 pfn:0x3c170
[  348.436697][ T5907] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  348.440091][ T5907] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  348.443069][ T5907] page_type: f5(slab)
[  348.444681][ T5907] raw: 00fff00000000040 ffff888105264b40 ffffea0000f05a00 0000000000000004
[  348.448122][ T5907] raw: ffff88803c170000 00000000800e0008 00000000f5000000 0000000000000000
[  348.451511][ T5907] head: 00fff00000000040 ffff888105264b40 ffffea0000f05a00 0000000000000004
[  348.454994][ T5907] head: ffff88803c170000 00000000800e0008 00000000f5000000 0000000000000000
[  348.458416][ T5907] head: 00fff00000000002 ffffea0000f05c01 00000000ffffffff 00000000ffffffff
[  348.461073][ T5907] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  348.464161][ T5907] page dumped because: kasan: bad access detected
[  348.466243][ T5907] page_owner tracks the page as allocated
[  348.468179][ T5907] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9563, tgid 9554 (syz.2.1268), ts 128210922814, free_ts 120227326088
[  348.475071][ T5907]  post_alloc_hook+0x240/0x2a0
[  348.476569][ T5907]  get_page_from_freelist+0x21e4/0x22c0
[  348.478546][ T5907]  __alloc_frozen_pages_noprof+0x181/0x370
[  348.480354][ T5907]  alloc_pages_mpol+0x232/0x4a0
[  348.481873][ T5907]  allocate_slab+0x8a/0x370
[  348.483293][ T5907]  ___slab_alloc+0xbeb/0x1410
[  348.484773][ T5907]  kmem_cache_alloc_noprof+0x283/0x3c0
[  348.486470][ T5907]  xfrm_state_alloc+0x24/0x2f0
[  348.488277][ T5907]  xfrm_state_find+0x37d4/0x5400
[  348.490264][ T5907]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  348.492698][ T5907]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  348.494596][ T5907]  xfrm_lookup_route+0x3c/0x1c0
[  348.496133][ T5907]  udp_sendmsg+0x142e/0x2170
[  348.497617][ T5907]  __sock_sendmsg+0x19c/0x270
[  348.499117][ T5907]  ____sys_sendmsg+0x52d/0x830
[  348.500813][ T5907]  ___sys_sendmsg+0x21f/0x2a0
[  348.502705][ T5907] page last free pid 9221 tgid 9221 stack trace:
[  348.504738][ T5907]  __free_frozen_pages+0xbc4/0xd30
[  348.506331][ T5907]  vfree+0x25a/0x400
[  348.507593][ T5907]  xskq_destroy+0x40/0x60
[  348.508966][ T5907]  xsk_release+0x671/0x890
[  348.510369][ T5907]  sock_close+0xc3/0x240
[  348.511954][ T5907]  __fput+0x44c/0xa70
[  348.513563][ T5907]  task_work_run+0x1d4/0x260
[  348.515427][ T5907]  exit_to_user_mode_loop+0xec/0x110
[  348.517504][ T5907]  do_syscall_64+0x2bd/0x3b0
[  348.519001][ T5907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.520858][ T5907] 
[  348.521615][ T5907] Memory state around the buggy address:
[  348.523603][ T5907]  ffff88803c16ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  348.526107][ T5907]  ffff88803c16ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  348.528741][ T5907] >ffff88803c170000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  348.531388][ T5907]                                   ^
[  348.533179][ T5907]  ffff88803c170080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  348.535893][ T5907]  ffff88803c170100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  348.538690][ T5907] ==================================================================
[  348.542102][ T5907] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  348.544641][ T5907] CPU: 0 UID: 0 PID: 5907 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  348.548446][ T5907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  348.551432][ T5907] Workqueue: netns cleanup_net
[  348.552916][ T5907] Call Trace:
[  348.554165][ T5907]  <TASK>
[  348.555388][ T5907]  dump_stack_lvl+0x99/0x250
[  348.557266][ T5907]  ? __asan_memcpy+0x40/0x70
[  348.559154][ T5907]  ? __pfx_dump_stack_lvl+0x10/0x10
[  348.561254][ T5907]  ? __pfx__printk+0x10/0x10
[  348.563130][ T5907]  vpanic+0x281/0x750
[  348.564749][ T5907]  ? __pfx_print_hex_dump+0x10/0x10
[  348.566786][ T5907]  ? __pfx_vpanic+0x10/0x10
[  348.568432][ T5907]  ? irqentry_exit+0x74/0x90
[  348.570106][ T5907]  ? lockdep_hardirqs_on+0x9c/0x150
[  348.572222][ T5907]  panic+0xb9/0xc0
[  348.573397][ T5907]  ? __pfx_panic+0x10/0x10
[  348.574777][ T5907]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  348.576613][ T5907]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  348.578574][ T5907]  ? __xfrm_state_delete+0x666/0xca0
[  348.580239][ T5907]  check_panic_on_warn+0x89/0xb0
[  348.581787][ T5907]  ? __xfrm_state_delete+0x666/0xca0
[  348.583411][ T5907]  end_report+0x78/0x160
[  348.584745][ T5907]  kasan_report+0x129/0x150
[  348.586171][ T5907]  ? __xfrm_state_delete+0x666/0xca0
[  348.587824][ T5907]  __xfrm_state_delete+0x666/0xca0
[  348.589403][ T5907]  xfrm_state_flush+0x45f/0x770
[  348.590925][ T5907]  xfrm6_tunnel_net_exit+0x3f/0x100
[  348.592536][ T5907]  ops_undo_list+0x49a/0x990
[  348.594002][ T5907]  ? __pfx_ops_undo_list+0x10/0x10
[  348.595559][ T5907]  ? do_raw_spin_unlock+0x4d/0x240
[  348.597104][ T5907]  cleanup_net+0x4c5/0x800
[  348.598531][ T5907]  ? __pfx_cleanup_net+0x10/0x10
[  348.600512][ T5907]  ? _raw_spin_unlock_irq+0x23/0x50
[  348.602282][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  348.604306][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  348.606445][ T5907]  process_scheduled_works+0xae1/0x17b0
[  348.608442][ T5907]  ? __pfx_process_scheduled_works+0x10/0x10
[  348.610626][ T5907]  worker_thread+0x8a0/0xda0
[  348.612320][ T5907]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  348.614518][ T5907]  ? __kthread_parkme+0x7b/0x200
[  348.616378][ T5907]  kthread+0x711/0x8a0
[  348.618041][ T5907]  ? __pfx_worker_thread+0x10/0x10
[  348.619690][ T5907]  ? __pfx_kthread+0x10/0x10
[  348.621323][ T5907]  ? _raw_spin_unlock_irq+0x23/0x50
[  348.623150][ T5907]  ? lockdep_hardirqs_on+0x9c/0x150
[  348.624974][ T5907]  ? __pfx_kthread+0x10/0x10
[  348.626660][ T5907]  ret_from_fork+0x3fc/0x770
[  348.628227][ T5907]  ? __pfx_ret_from_fork+0x10/0x10
[  348.630287][ T5907]  ? __switch_to_asm+0x39/0x70
[  348.631908][ T5907]  ? __switch_to_asm+0x33/0x70
[  348.633453][ T5907]  ? __pfx_kthread+0x10/0x10
[  348.634932][ T5907]  ret_from_fork_asm+0x1a/0x30
[  348.636588][ T5907]  </TASK>
[  348.638330][ T5907] Kernel Offset: disabled
[  348.639792][ T5907] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:46:46  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003e5f090
R8 =ffff888021538237 R9 =1ffff110042a7046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af4913 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc2200e35c0 CR3=0000000023a6a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 ff00000000ff0000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000ff0000 0000000000000000 XMM05=0000000000000000 00007f3c02c12e53
XMM06=0000000000000000 00007f3c02c12e4d XMM07=0000000000000000 00007f3c02c12e61
XMM08=0000000000000000 00007f3c02c12ee7 XMM09=0000000000000000 00007f3c02c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=f81748cf293ba400 RBX=ffffffff81968308 RCX=f81748cf293ba400 RDX=0000000000000001
RSI=ffffffff8d9b494b RDI=ffffffff8be32680 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34730 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005562da3c6118 CR3=00000000276ce000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffffff0000000000 XMM05=0000000000000041 000000342f616973
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffff0000000000 XMM09=2f74656e2f31326d 697377682f6d6973
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
