last executing test programs:

973.519422ms ago: executing program 2 (id=2135):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x20000}, 0x8)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x408, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7b0, 0x61}}}}, [@NL80211_ATTR_MESH_SETUP={0x12c, 0x70, [@NL80211_MESH_SETUP_IE={0x101, 0x3, "8dc841f7941efb51c935288ec5362c1fa6e4560076a2aa810829060ffe1cdf5f7b1b056c8d3b3ae91322282f5a5baab41aae3c5e02913c5278843f6203fcc658d5764e3ce1a17b221d8ff170835bc3e8d07cbf14e0a59bc5a12530d8b80f5cf35951e7e33f04cc2b14d20629b73eba4abeddf8f4089891aa2a6217f897c15e571cd74267b85b3f39551dfdd48cb95c43334d8c4f7eda919c5553c9cc5db9a9732cd84b2ffcde278984a908e850ae7e5d41fb4ac60866ea6520890648bb40c1138472e6c8fada5b039d448746942b34256274ddd4f4bf68ee05336d220e16be2df462b67c05772f4c2573634eb94fc0a6cc6a9182a058d28ade596e0f66"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x6}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_MESH_SETUP={0x27c, 0x70, [@NL80211_MESH_SETUP_IE={0xdc, 0x3, "324b82ed8d4f04f1bd94d576db479ed7b112955fe45bfc05a44a9633be3e3788da24b30b27c322469357433b5724e5ff29453f0aa7496a9bf8f53ad5a386c1e8d7a2c12374290747b2a7981e66367876db75279e23fbd1f77a729fe52cdda483018a7e4d03cae5ddeb19f5051fd0ba3c5dd1152eb1ddf61a3adb924e1a0041aa7e77815dde7dc662bd756caf36698bc23ef7a0ca53ad02503b09bd37911da1950b1da5f587d077c89b1385089b106c5f1b4659c4c471416d3db4aa918310ea56f4ba5ab14e6a74392acea6813de4a1a1b4d89b5c1e517eb7"}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0x7f, 0x3, "afc2f20525e585c6c85020c8d2d763e6ce80117d90cc9e3f59661e62fed986065b57e3385d77e57942f8a8e284ccd7dcf8f0ae2f499080b0beec5889cee5412a51b99001bd03b3794254e3c82ae957badd02a5ed292f553d2786a9e5b6fe62c811de6fd40b00d21c7f1fdd21f5ee059aafa389f1fa1ad72b9ae954"}, @NL80211_MESH_SETUP_IE={0x8a, 0x3, "a7ffc113f2fa02a8c6b3b55aab2dd6aabb955b618daacd3d0ed04f6b22bed153e62b567c85a1389c99c88440b66a7448c713b52455f0378cb1041f287e717693d056f7b208f132aee413ab16286203e22cacc2b2e512b77d6de46e4688e4a770ab9a6ffffca3ab5fccc7b5347595aee82849c12bba20579cdf65022ac6e36312118a27201ea3"}, @NL80211_MESH_SETUP_IE={0x85, 0x3, "4aaab83a18b0f739920793dc877e152b8853685dfecd37f0f31a588e190cebcc905b275f2ee2c291cc864c50013c1905086f6d97e437ae1ffbc21111b395f37969950e165d0cac072e666579571f0df57466a4576aba9c6abd941057f33bda0a710d59d72cb7a1208dee606c83119bb6ca65e1e24e7a3b038f7abc8697eef8f004"}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x34, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x1a, 0x3, "62a3e07a2cd8d4d1abc03eef2b4cf413325ea97f91c8"}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async)
r4 = accept4(r0, 0x0, &(0x7f0000000580), 0x80000)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r2)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000a00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x820008}, 0xc, &(0x7f00000009c0)={&(0x7f0000000640)={0x348, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xe1, @local, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_1\x00'}}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ab2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xd1d, @mcast2, 0x81}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x68}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x10001, @mcast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "3b0189b39323e4eb248e5aba1c95dca9c3d6662a19240a45f127"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "05ac419cd70bb7114e10658f551073b554b8899be107cc2d19168da4"}}]}, @TIPC_NLA_MON={0x4}]}, 0x348}, 0x1, 0x0, 0x0, 0x90}, 0x2000c811) (async)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r1) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ac0)={'wpan1\x00', <r7=>0x0}) (rerun: 32)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x7c, r6, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1d7a779f678d3602}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), r2)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r8, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000000)
write$bt_hci(r4, &(0x7f0000000d40)={0x1, @read_local_ext_features={{0x1004, 0x1}, {0x5}}}, 0x5) (async)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000d80)={{{@in6=@initdev, @in6=@remote}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000e80)=0xe8)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r2)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r9, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080805}, 0x4008085) (async)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001000)={0x2c, 0x4, 0x0, 0x81, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, @loopback]}, 0x28) (async)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001080)={0x128, r6, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000001}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0xb0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xac, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000084}, 0x44048005)
syz_genetlink_get_family_id$devlink(&(0x7f0000001240), r4)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000001280)={0x2, 'syzkaller1\x00', {0x1000}, 0x100}) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f00000012c0)={0x0, r2}, 0x8) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async, rerun: 32)
sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000001700)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001440)={0x24c, r5, 0x12, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5d1b1660}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x600000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x188, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4eb03e6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) (async)
sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000001840)={&(0x7f0000001740), 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x50, r9, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xf7}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xcc63}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x2}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x7}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x811}, 0x0)
bind$alg(r4, &(0x7f0000001880)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(xeta-generic)\x00'}, 0x58) (async, rerun: 64)
setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000001900)=0x1, 0x4) (async, rerun: 64)
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x48, r9, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x38}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x371}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x6004844)

895.564973ms ago: executing program 2 (id=2139):
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x7d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x78}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe799}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaa7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r0, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

833.233725ms ago: executing program 2 (id=2142):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c00018006000600894f"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="17090000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x54, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x100}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2a8b}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7ff}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}]}, 0x54}}, 0x4005040)

777.438598ms ago: executing program 2 (id=2143):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
unshare(0x22020400) (async)
unshare(0x22020400)
readv(r0, &(0x7f0000001680)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/193, 0xc1}, {&(0x7f0000001380)=""/206, 0xce}, {&(0x7f0000001480)=""/88, 0x58}, {&(0x7f0000001500)=""/142, 0x8e}, {&(0x7f00000015c0)=""/155, 0x9b}], 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000de0000000000000000000000630123000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000de0000000000000000000000630123000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000100), 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000030000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec11542b6fcd728b981a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x48, 0x0, 0x0, 0x2}, {0x6, 0x1, 0xfb, 0x2}]}) (async)
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x48, 0x0, 0x0, 0x2}, {0x6, 0x1, 0xfb, 0x2}]})
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
listen(0xffffffffffffffff, 0x400)
getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000001700)=0xc)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2, 0xb, 0xf4, 0x0, 0x3, 0x0, 0x70bd2c, 0x25dfdafc, [@sadb_key={0x1, 0x8}]}, 0x18}}, 0x0) (async)
sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2, 0xb, 0xf4, 0x0, 0x3, 0x0, 0x70bd2c, 0x25dfdafc, [@sadb_key={0x1, 0x8}]}, 0x18}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

714.159502ms ago: executing program 2 (id=2146):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a001c00", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x2, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="68ddaa732d69a6f7eb258957fccb89134faf578e9ff0cc38595e4c9c1f2a32ceb6799c682d87e991cd718f04a1487a5d99bef5a95019bdd837d20274d2e98cfbde31b70e45fcc74efe1c42ba121fe280bf8af2c22489537e57dee1cc54c41bd8f9086f9498bc3bcc4f0501f1defec42e4faac1dd0b0b67b797182b6c4ce3ff3da7d4d4a1069cada5b152bbd64335f0254ecbfe43c5d7cd5b8403e53ae4f712b05945b98eb3420bb04c7ecf528693bb9693ada19e3a8f9522ab692a2d78aefa8af8f0e6b3b3af268e535bc4a610f7341e7da01249d929b75acf7c99bd21b2b5e3f210e2798f5636bed013dae7ff0d009ca52fffbd88a3964a60786f8f025e4b8fac68f910cdd4a991a6020fcd5a92bc7747acef6f62d087646d32fc37f6d1cabd609e6f392350ebcc02c341a3ce598522d3963374f5eb522919d029136288fd1c08cadfd7f43a3a6618d6dd5ae6baf5b2f321588e9dfc879e213badc550eb9982777b09d808ca8e5540695200193c820ad6ce1e924cdf342a1ff9feeab68af907798fbc0fa570ef885369090c35b0959baf6e29b86833a14cf3532cd537891f27caa37b10cda2cf6e75ddc11cb13c558cc210be334af3813630bb2c16145cf91ce50099452e0b10e4ce9beb32ab1a8692d2b3cff0e370f87e2219172b7bbcce5d8daca20ce4e047510920000e3a56747839920f72318843b6161fd643c2c56ca396b4c2283f9afef62412c04c934bc1ad4e54eac1acd4447ae3e2f9abf6cb9a5dcbba25aaf4254dc8a081b4eb4b98a11e71ea52be944225f68146444c7780798266feb5927fb3ebd9f7501b07316484f0100b83b7f87a550adddff1c808da6d5d909d9585f844f473c4ab93aa90dafee831ce0aa9c9d402e7b48c06712b4c0a398472364c1a3570029caefd9f3230e792c66e380c296249265a56dedbf5c2ac74cd667c6eb430819f69360d3ff5190adfb2bc669f9a2020264c57aa15e1cc144e9431a457ef86c0d03b32ac0a14d88a48c6a7dda45195c3a7fdfa083715ab572d66a654d68d9116aad0def05a606be11d288cef68e4b13bcc55ef5ae5054c06cebdf221c2b43d388f34e6725cd67e5cff513852fdb8d5bdaa5f4f4038fb8ed5ba9d34079d70d36398d6a88909a32be918fedd03ffd3ac801d45393ed59e007c932f5363e114cb01f50a5b2d445a781d1eb265bc3d3615fd4b5166e01e657cf331580a1b508ba10cfb0dedad4b5ac451b40a7f0df7567fa862a5c1e38a7c5a985e87a1082dfab4a105abf52fd4cab16fded0b7e72b376c5f8ad3c5c15f28304cef5ca6452c4663c961fc38b0c495eb749f9625f51a6b3ccea3db17fb5e2a8e9c815abc956e6a287660909f58c45163d7ea1cb2c3f13724", 0x3d6}], 0x1}}], 0x1, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x3a, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @typed={0xc, 0x9, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0x2}]}, 0xfffffffffffffe2a}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
shutdown(r1, 0x1)

713.528494ms ago: executing program 2 (id=2147):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000))
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x14, r2, 0x405, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0)
unshare(0x68040200)
socket$inet(0x2, 0x3, 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
r7 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

230.188399ms ago: executing program 0 (id=2152):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0x3}, {0xffe0, 0x5}, {0x8, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xb6a}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x14)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
write(r0, 0x0, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0x3}, {0xffe0, 0x5}, {0x8, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xb6a}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x14) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
write(r0, 0x0, 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async)

177.400655ms ago: executing program 0 (id=2153):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'lo\x00'})
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="f41900"/16, @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000000600"/24], 0x18}}, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, '\x00', "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_int(r8, 0x6, 0x19, &(0x7f0000000880)=0x4000004, 0x4)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r10 = accept(r0, 0x0, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x50)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000100001002cbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000080002001400030064756d6d7930000000000000000000000a000100aaaaaaaaaaaa0000440016804000018014000a00ab0000f2"], 0x84}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r10}, 0x47)
close(r10)

177.004036ms ago: executing program 0 (id=2154):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000040))
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x28, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x8, 0x0, [0x6e, 0x7]}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c0002800800074000000000080003400000001608000140000000120800024000000000080004400000000020000180080001006e61740014000280080003400000000008000540000000000900010073797a30"], 0x150}}, 0x0)

117.697794ms ago: executing program 1 (id=2155):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000100)=0x7, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000400000000000008000000180001801400020073797a5f74756e0000000000010000001c0002800400010014000380"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) (async)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) (async)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000)

113.48318ms ago: executing program 1 (id=2156):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0xc4, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x9, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x94, 0x2, {{0x8, 0x9, 0xffff5571, 0xffffcb85, 0x7, 0x24000}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x9, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x4dd, 0x7, 0x9129}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_REORDER={0xc, 0x3, {0x1ff}}, @TCA_NETEM_LOSS={0x2c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x200, 0x4, 0x81, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0xc54, 0x3796, 0x101}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x100000000}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

113.184516ms ago: executing program 0 (id=2157):
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x2}, 0x20)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r3, &(0x7f0000000300)="126053b67dce948cc2920f85b65a1225d737fdd20550b1d3499bd9313c510337c1faad00fd24e3dfa5f9604a1d74f7abf3fdb9b67824a94b4e7a6956c76ae487813012acb9f58898818d95d5fb69f8910c6a232d29d2833bc59305094d1f1ad6bdd6262447902d1a2cc6fd57c389ea41ea19318ff22abba324f58ed7f6cb0aea319bd85d69b64eac800fe961da10901a2f8dc3e9fee1aad7584fda565c794f6e472080d1192f1cd5ce604ab40c74ac80e3ccc425a334455c073b1a598f738aa8c63b0e67321a448c", &(0x7f00000000c0)=""/32, 0x4}, 0x20)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r6, 0x0, 0x0)
r7 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x80000, @loopback, 0x1}, 0x1c)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)
connect$l2tp6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3d5, 0x2}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x5, 0x5}, 0x50)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
close(0xffffffffffffffff)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
close(0x4)

43.620103ms ago: executing program 1 (id=2158):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="deaa00000000000071101900000000009500080000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000011000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040)

43.242158ms ago: executing program 0 (id=2159):
r0 = socket(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
socketpair(0x2d, 0x5, 0x1, &(0x7f00000000c0))
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f00000002c0)="f04ad3c004a8f8e0ea3183b0ffd538ed0986d813acd883ffb667459281145d146f0107b43a62437948a1f523adc40c7ec86595f00da1cef6b6417ae69f5168e459d035d35b445da78fa344ddfbfb731d858e5c283e0099cebbfe338a349a64d1c69ba21757f02a072f9069a2f01812956921b4f6b7e675393fce84b05305f5b4bafd34d1d8cfdc556b17442bc1f1ecc89116d3d61a54cb8f7e5ca22cc76a47b3abcad241b1e1764c27de22f4a6def0e86d8433b8b5d809a53427771b6cacc2ec86e0e4c2f1a33737b2ced53de7dac6546da44204387df7f968e883a248c52a227422ddaf481eff", &(0x7f0000000140)=@buf="41b1ae47dddd1bc69b"}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000068fa5e6bf2bd7000feffffff0a000000000000000c00088008000100080000e0ffff060008000000080005003e6dbd658aaaf49587a3cc8dc477bd1a54992f08e25d773760fd147603d21cc3eaf17b6a813489c041bc984c5d78d4a781537aab3ee0bf5a8d4a8fd4fa086a41", @ANYRES32=r2, @ANYBLOB], 0x34}}, 0x40040d0)

41.966973ms ago: executing program 1 (id=2160):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28)
bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @any, 0x2}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYRES8=r2], 0x1c8}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000000))
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf25060000ee0d0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000060004000200000091d61cb6e3f1777a638ef46cd7a159de21"], 0x44}, 0x1, 0x0, 0x0, 0x24008085}, 0x40008040)

3.491479ms ago: executing program 0 (id=2161):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0xfffffffc) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, <r3=>0xffffffffffffffff}, 0x4) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) (async)
r8 = socket$inet(0x2, 0x3, 0x6)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r8}, 0x20) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8001, 0x7}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e3000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x1a, &(0x7f0000000540)=@raw=[@call={0x85, 0x0, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xc}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @exit], &(0x7f0000000640)='syzkaller\x00', 0x2, 0xf9, &(0x7f0000000680)=""/249, 0x41100, 0x5c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xc, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000940)=[r4, r5, r6, r7, r9, r10, r11], &(0x7f0000000980)=[{0x4, 0x2, 0xe, 0xc}, {0x4, 0x2, 0xc, 0x5}, {0x0, 0x4, 0xd, 0xd}, {0x1, 0x4, 0xb, 0xc}], 0x10, 0x3}, 0x94)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) (async)
r12 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r12, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) (async)
connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4e23, 0xffffffff, @mcast2, 0x7}, 0x1c) (async)
sendmmsg$inet6(r12, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="757cc6e41c6cb41c", 0xdd86}], 0x1}}], 0x1, 0x4001c00)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x1e4, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x78, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x5}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x14, 0x4, @mcast2}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_TUPLE_MASTER={0xb4, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x0, 0x5, 0xffffffff, 0x7b, 0xd5, 0x0]}, @CTA_NAT_SRC={0x80, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00'}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4004040}, 0x40001) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff})
getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23311, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

1.18492ms ago: executing program 1 (id=2162):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x50, 0x24, 0x1, 0x4, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x5, 0x2, 0xffffffff, 0x0, 0xfffffff5, 0x5, 0x4}}, {0xc, 0x2, [0x3d00, 0xa7d, 0xdded, 0xd]}}]}]}, 0x50}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)

0s ago: executing program 1 (id=2163):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES64=r2, @ANYRESDEC=r2, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20008001)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @loopback, 0xfffffffd}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x10) (async)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x10)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f182ad796a2667cb12ea909873931d287310300", '\x00', "ec3fff9afd16e6c0"}, 0x38)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fdf7df25520000000c060000000000000000006897badaebe9000500"], 0x28}, 0x1, 0x0, 0x0, 0x4801}, 0x4008084)
ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, &(0x7f0000000240))
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc2a80, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000100)={0xfffffff8, 0x7, 0x80, 0x5, 0x0, 0x1}) (async)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000100)={0xfffffff8, 0x7, 0x80, 0x5, 0x0, 0x1})
write$tun(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="034886dd49032800030020000000600000004004730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001d05c777d95a715c1a7f40b2abd33362a2d182a83cc4b6a5d7214f9162fb3cd9cb1c9fa22a7065280f75ade2a5d6771bc8c6aae944bae128e6791457cbc2c3ef6b8159fce92d9165169331c1d6206b31c24ad2aebb00ea0e8c6a17450f4275c326632749bdfef3de7624c36c2df4375e43def6a8b30a526fe8e8938500990981e398b"], 0xfdef)
socket$rds(0x15, 0x5, 0x0) (async)
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)

kernel console output (not intermixed with test programs):

e (18446744073709551612)
[   65.955578][ T6948] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[   65.980906][ T6922] netlink: 68 bytes leftover after parsing attributes in process `syz.1.279'.
[   66.082624][ T6965] netlink: 'syz.1.291': attribute type 15 has an invalid length.
[   66.270344][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'.
[   66.566035][ T7006] netlink: 'syz.0.301': attribute type 11 has an invalid length.
[   66.568658][ T7006] netlink: 224 bytes leftover after parsing attributes in process `syz.0.301'.
[   66.579266][ T7008] netlink: 56 bytes leftover after parsing attributes in process `syz.1.300'.
[   66.595783][ T7008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.300'.
[   66.635882][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'.
[   66.638920][ T7012] batman_adv: batadv0: Interface deactivated: dummy0
[   66.643448][ T7012] batman_adv: batadv0: Removing interface: dummy0
[   66.722607][ T7017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.305'.
[   66.797191][ T7025] netlink: 'syz.0.308': attribute type 3 has an invalid length.
[   66.810096][ T7025] netlink: 'syz.0.308': attribute type 3 has an invalid length.
[   66.824948][ T7032] syzkaller0: entered promiscuous mode
[   66.833623][ T7032] syzkaller0: entered allmulticast mode
[   66.914956][ T7041] netlink: 'syz.2.312': attribute type 4 has an invalid length.
[   66.918255][    T9] lo speed is unknown, defaulting to 1000
[   66.920895][ T7041] netlink: 'syz.2.312': attribute type 4 has an invalid length.
[   66.923551][    T9] syz0: Port: 1 Link DOWN
[   66.925072][    T9] lo speed is unknown, defaulting to 1000
[   66.930506][ T7041] netlink: 'syz.2.312': attribute type 1 has an invalid length.
[   66.938241][    T9] lo speed is unknown, defaulting to 1000
[   66.941174][    T9] syz0: Port: 1 Link ACTIVE
[   66.943298][   T10] lo speed is unknown, defaulting to 1000
[   66.988136][ T7047] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.991407][ T7047] syzkaller0: entered promiscuous mode
[   66.993303][ T7047] syzkaller0: entered allmulticast mode
[   66.997968][ T7047] tipc: Resetting bearer <eth:syzkaller0>
[   67.002072][ T7047] geneve2: entered promiscuous mode
[   67.005496][ T7046] tipc: Resetting bearer <eth:syzkaller0>
[   67.008999][ T7046] tipc: Disabling bearer <eth:syzkaller0>
[   67.013868][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[   67.016746][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[   67.019890][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[   67.022876][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[   67.562264][ T7075] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[   67.566885][ T7075] bond4: (slave vxcan3): Error -95 calling set_mac_address
[   67.612653][ T7077] macvlan2: entered promiscuous mode
[   67.614674][ T7077] macvlan2: entered allmulticast mode
[   67.616626][ T7077] bond4: (slave macvlan2): Error -98 calling set_mac_address
[   67.975094][ T7096] macvtap1: entered promiscuous mode
[   67.976916][ T7096] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   68.118756][ T7109] trusted_key: syz.2.336 sent an empty control message without MSG_MORE.
[   68.124512][ T7109] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   68.285740][ T7111] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   68.359777][ T7125] openvswitch: netlink: Actions may not be safe on all matching packets
[   68.526024][ T7127] nbd: illegal input index -2147418140
[   68.590397][ T7136] netlink: 'syz.0.341': attribute type 1 has an invalid length.
[   68.601212][ T7136] 8021q: adding VLAN 0 to HW filter on device bond3
[   68.634009][ T7135] _Z`Ԁ@: entered promiscuous mode
[   68.649436][ T7149] netlink: 'syz.2.345': attribute type 1 has an invalid length.
[   68.692078][ T7157] netlink: 'syz.2.347': attribute type 30 has an invalid length.
[   68.702945][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   68.702995][ T7157] netlink: 'syz.2.347': attribute type 30 has an invalid length.
[   68.710076][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   68.713754][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   68.717494][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   68.748260][ T7162] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.751152][ T7162] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   69.578650][ T7212] lo speed is unknown, defaulting to 1000
[   69.916081][ T7242] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   70.336836][ T7247] lo speed is unknown, defaulting to 1000
[   70.565129][ T7254] __nla_validate_parse: 317 callbacks suppressed
[   70.565140][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.376'.
[   70.611155][ T7257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.613911][ T7257] syzkaller0: entered promiscuous mode
[   70.616178][ T7257] syzkaller0: entered allmulticast mode
[   70.627565][ T7257] tipc: Resetting bearer <eth:syzkaller0>
[   70.631769][ T7256] tipc: Resetting bearer <eth:syzkaller0>
[   70.634712][ T7256] tipc: Disabling bearer <eth:syzkaller0>
[   70.709506][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'.
[   70.744329][ T7263] macvtap2: entered allmulticast mode
[   70.746793][ T7263] veth0_macvtap: entered allmulticast mode
[   70.771988][ T7267] netlink: 96 bytes leftover after parsing attributes in process `syz.2.382'.
[   70.905814][ T7276] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.971068][ T7276] netlink: 60 bytes leftover after parsing attributes in process `syz.0.386'.
[   71.027628][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.163995][ T7291] netlink: 36 bytes leftover after parsing attributes in process `syz.0.390'.
[   71.323208][ T7299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.393'.
[   71.388238][ T7312] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   71.443970][ T7326] netlink: 56 bytes leftover after parsing attributes in process `syz.0.401'.
[   71.449182][ T7326] Set syz0 is full, maxelem 0 reached
[   71.463581][   T10] IPVS: starting estimator thread 0...
[   71.549638][ T7329] IPVS: using max 136 ests per chain, 326400 per kthread
[   71.594191][ T7340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.405'.
[   71.767005][ T7351] netlink: 232 bytes leftover after parsing attributes in process `syz.2.407'.
[   72.554201][ T7373] lo speed is unknown, defaulting to 1000
[   72.664933][ T7378] netlink: 36 bytes leftover after parsing attributes in process `syz.0.414'.
[   72.826315][ T7385] unsupported nlmsg_type 40
[   73.207583][ T7403] lo speed is unknown, defaulting to 1000
[   73.302764][ T7413] lo speed is unknown, defaulting to 1000
[   73.588303][ T7427] lo speed is unknown, defaulting to 1000
[   73.766978][ T7438] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   73.796205][ T7437] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   73.802241][ T7437] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[   73.931434][ T7448] validate_nla: 4 callbacks suppressed
[   73.931446][ T7448] netlink: 'syz.0.429': attribute type 11 has an invalid length.
[   73.965327][ T7448] netlink: 'syz.0.429': attribute type 11 has an invalid length.
[   73.965398][ T5855] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.002585][ T5855] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.020089][ T5855] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.031645][ T5855] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.236197][ T7466] netlink: 'syz.0.434': attribute type 1 has an invalid length.
[   74.236462][ T7468] netlink: 'syz.0.434': attribute type 1 has an invalid length.
[   74.876077][ T7520] tipc: New replicast peer: 255.255.255.255
[   74.878220][ T7520] tipc: Enabled bearer <udp:syz2>, priority 10
[   74.962428][ T7525] netlink: 'syz.2.453': attribute type 16 has an invalid length.
[   74.965085][ T7525] netlink: 'syz.2.453': attribute type 3 has an invalid length.
[   75.426789][ T7537] netlink: 'syz.0.456': attribute type 1 has an invalid length.
[   75.430571][ T7538] netlink: 'syz.0.456': attribute type 1 has an invalid length.
[   75.473037][ T7541] netlink: 'syz.0.457': attribute type 2 has an invalid length.
[   75.476853][ T7541] netlink: 'syz.0.457': attribute type 3 has an invalid length.
[   75.628935][ T7552] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   75.667393][ T7554] vxcan1: entered allmulticast mode
[   75.670822][ T7554] vxcan1: left allmulticast mode
[   75.758277][ T7554] raw_sendmsg: syz.0.460 forgot to set AF_INET. Fix it!
[   75.864845][ T7578] dvmrp0: entered allmulticast mode
[   75.868178][ T7578] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   75.872260][ T7578] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   75.880912][ T7575] __nla_validate_parse: 9 callbacks suppressed
[   75.880920][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'.
[   75.913897][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'.
[   75.927889][ T7581] openvswitch: netlink: Unknown nsh attribute 0
[   75.931000][ T7581] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.940675][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'.
[   75.949627][ T7581] openvswitch: netlink: Flow actions attr not present in new flow.
[   75.983390][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'.
[   75.987210][ T7589] batman_adv: batadv0: Removing interface: dummy0
[   75.990016][ T5907] tipc: Node number set to 3354662497
[   75.995433][ T7589] bridge_slave_0: left promiscuous mode
[   75.997469][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.003282][ T7589] bridge_slave_1: left allmulticast mode
[   76.005359][ T7589] bridge_slave_1: left promiscuous mode
[   76.007313][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.012232][ T7589] bond0: (slave bond_slave_0): Releasing backup interface
[   76.015664][ T7589] bond0: (slave bond_slave_1): Releasing backup interface
[   76.019397][ T7589] team0: Port device team_slave_0 removed
[   76.022801][ T7589] team0: Port device team_slave_1 removed
[   76.024824][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.027728][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.031256][ T7589] batman_adv: batadv0: Removing interface: veth3
[   76.035235][ T7589] bond1: (slave geneve3): Releasing active interface
[   76.039042][ T7589] batman_adv: batadv0: Interface deactivated: ip6gretap2
[   76.042105][ T7589] batman_adv: batadv0: Removing interface: ip6gretap2
[   76.048696][ T7583] bridge1: entered promiscuous mode
[   76.051886][ T7583] bridge1: entered allmulticast mode
[   76.058645][ T7589] team0: Mode changed to "loadbalance"
[   76.086229][ T7595] netlink: 256 bytes leftover after parsing attributes in process `syz.0.473'.
[   76.248487][ T7606] lo speed is unknown, defaulting to 1000
[   76.373838][ T7608] netlink: 224 bytes leftover after parsing attributes in process `syz.0.479'.
[   76.442490][ T7620] delete_channel: no stack
[   76.444716][ T7620] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.482'.
[   76.546708][ T7627] batadv_slave_0: entered promiscuous mode
[   76.549218][ T7627] batadv_slave_0: left promiscuous mode
[   76.646590][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'.
[   76.650218][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'.
[   76.686174][ T7638] syzkaller0: entered promiscuous mode
[   76.688325][ T7638] syzkaller0: entered allmulticast mode
[   76.910752][ T7646] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.923258][ T7646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'.
[   76.934294][ T7646] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   76.938725][ T7646] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   77.314726][ T7679] lo speed is unknown, defaulting to 1000
[   77.840100][ T7697] macsec2: entered promiscuous mode
[   77.842414][ T7697] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   77.845047][ T7697] macsec2: entered allmulticast mode
[   77.847094][ T7697] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   77.931464][ T7707] 8021q: adding VLAN 0 to HW filter on device bond5
[   78.007728][ T7716] tun0: tun_chr_ioctl cmd 1074025672
[   78.009726][ T7716] tun0: ignored: set checksum disabled
[   78.122182][ T7725] IPv6: sit1: Disabled Multicast RS
[   78.124368][ T7725] sit1: entered allmulticast mode
[   78.218082][ T7736] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   78.222553][ T7737] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   78.368215][ T7750] macvtap0: entered promiscuous mode
[   78.497291][ T7760] veth0_vlan: mtu less than device minimum
[   78.595888][ T7771] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.599281][ T7771] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.681197][ T7771] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.687765][ T7771] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.775065][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.779856][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.783436][   T12] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[   78.789420][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.794714][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.798443][   T12] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[   78.806070][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.806130][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.813612][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.817149][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.820977][   T12] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[   78.825227][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.829393][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.833139][   T12] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[   78.842371][ T7782] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.845436][ T7782] syzkaller0: entered promiscuous mode
[   78.848051][ T7782] syzkaller0: entered allmulticast mode
[   78.863824][ T7783] tipc: Resetting bearer <eth:syzkaller0>
[   78.868572][ T7781] tipc: Resetting bearer <eth:syzkaller0>
[   78.873642][ T7781] tipc: Disabling bearer <eth:syzkaller0>
[   79.081976][ T7804] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.110624][ T7804] syzkaller0: mtu greater than device maximum
[   79.116076][ T7806] tipc: Enabled bearer <eth:veth1_to_team>, priority 10
[   79.160997][ T7802] tipc: Disabling bearer <eth:syzkaller0>
[   79.175951][ T7813] validate_nla: 14 callbacks suppressed
[   79.175964][ T7813] netlink: 'syz.2.541': attribute type 1 has an invalid length.
[   79.276126][ T7829] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[   79.284048][ T7829] veth0_macvtap: left allmulticast mode
[   79.287292][    T9] lo speed is unknown, defaulting to 1000
[   79.292528][    T9] syz0: Port: 1 Link DOWN
[   79.294553][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.297962][    T9] lo speed is unknown, defaulting to 1000
[   79.297981][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.303530][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.314917][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.335606][ T7834] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   79.421434][ T7844] tunl0: entered promiscuous mode
[   79.423706][ T7844] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   79.585896][ T7867] tunl0: left promiscuous mode
[   79.589670][ T7867] 8021q: adding VLAN 0 to HW filter on device team0
[   79.622016][ T7873] batadv1: entered promiscuous mode
[   79.624235][ T7873] batadv1: entered allmulticast mode
[   79.819323][ T7888] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[   79.839831][ T7890] bond0: (slave bond1): Error -95 calling ndo_bpf
[   79.874993][ T7890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.879399][ T7890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.884394][ T7890] bond0 (unregistering): (slave bond1): Releasing backup interface
[   79.888892][ T7890] bond0 (unregistering): (slave bond2): Releasing backup interface
[   79.892848][ T7890] bond0 (unregistering): Released all slaves
[   81.098393][ T7944] netlink: 'syz.1.579': attribute type 1 has an invalid length.
[   81.106932][ T7944] bond6: entered promiscuous mode
[   81.108672][ T7944] bond6: entered allmulticast mode
[   81.111635][ T7944] 8021q: adding VLAN 0 to HW filter on device bond6
[   81.115319][ T7944] __nla_validate_parse: 45 callbacks suppressed
[   81.115327][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'.
[   81.121403][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'.
[   81.130227][ T7944] bridge2: entered promiscuous mode
[   81.132378][ T7944] bridge2: entered allmulticast mode
[   81.134394][ T7944] bond6: (slave bridge2): Enslaving as a backup interface with an up link
[   81.198671][ T7953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.579'.
[   81.210255][   T13] net_ratelimit: 1 callbacks suppressed
[   81.210274][   T13] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   81.222879][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'.
[   81.267474][ T7944] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   81.296183][ T7957] macvlan2: entered promiscuous mode
[   81.298445][ T7957] macvlan2: entered allmulticast mode
[   81.301450][ T7957] bond0: (slave macvlan2): Opening slave failed
[   81.311211][ T7961] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.314318][ T7961] syzkaller0: entered promiscuous mode
[   81.316562][ T7961] syzkaller0: entered allmulticast mode
[   81.322148][ T7961] tipc: Resetting bearer <eth:syzkaller0>
[   81.325147][ T7960] tipc: Resetting bearer <eth:syzkaller0>
[   81.328106][ T7960] tipc: Disabling bearer <eth:syzkaller0>
[   81.540928][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'.
[   81.637800][ T7987] netlink: 'syz.2.590': attribute type 1 has an invalid length.
[   81.641323][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'.
[   81.722054][ T8001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.593'.
[   81.728946][ T8001] netlink: 668 bytes leftover after parsing attributes in process `syz.2.593'.
[   82.115642][ T8017] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[   82.146778][ T8019] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[   82.176566][ T8023] macvtap3: entered allmulticast mode
[   82.178906][ T8023] veth0_macvtap: entered allmulticast mode
[   82.214544][ T8028] netlink: 6940 bytes leftover after parsing attributes in process `syz.1.602'.
[   82.251164][ T8032] netlink: 'syz.2.603': attribute type 1 has an invalid length.
[   82.254393][ T8032] netlink: 244 bytes leftover after parsing attributes in process `syz.2.603'.
[   82.485788][ T8050] macvtap4: entered allmulticast mode
[   82.534487][ T8057] netlink: 'syz.2.610': attribute type 30 has an invalid length.
[   82.540944][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.540974][ T8057] netlink: 'syz.2.610': attribute type 30 has an invalid length.
[   82.544347][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   82.544369][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   82.544387][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.071082][ T8073] macvtap1: entered allmulticast mode
[   83.073600][ T8073] veth0_macvtap: entered allmulticast mode
[   83.168720][ T8088] netlink: 'syz.1.619': attribute type 1 has an invalid length.
[   83.173820][ T8089] netlink: 'syz.1.619': attribute type 1 has an invalid length.
[   83.345212][ T8121] syzkaller1: entered promiscuous mode
[   83.348136][ T8121] syzkaller1: entered allmulticast mode
[   83.405209][ T8137] dvmrp8: entered allmulticast mode
[   83.415654][ T8137] dvmrp8: left allmulticast mode
[   83.486593][ T8137] lo speed is unknown, defaulting to 1000
[   83.550514][ T8150] netlink: 'syz.1.624': attribute type 16 has an invalid length.
[   83.557194][ T8150] netlink: 'syz.1.624': attribute type 17 has an invalid length.
[   83.590731][ T8150] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.595086][ T8150] 8021q: adding VLAN 0 to HW filter on device team0
[   83.605493][ T8150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.996902][ T8178] IPVS: length: 209 != 24
[   84.385526][ T8193] lo speed is unknown, defaulting to 1000
[   84.517534][ T7777] hid-generic 0005:0C45:8002.0001: collection stack underflow
[   84.523682][ T7777] hid-generic 0005:0C45:8002.0001: item 0 0 0 12 parsing failed
[   84.527172][ T7777] hid-generic 0005:0C45:8002.0001: probe with driver hid-generic failed with error -22
[   84.893454][ T8223] netlink: 'syz.0.643': attribute type 1 has an invalid length.
[   84.986201][ T8238] bridge_slave_1: left allmulticast mode
[   84.988386][ T8238] bridge_slave_1: left promiscuous mode
[   84.991716][ T8238] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.997704][ T8238] bridge_slave_0: left allmulticast mode
[   85.001245][ T8238] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.019303][ T8235] sctp: [Deprecated]: syz.0.648 (pid 8235) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.019303][ T8235] Use struct sctp_sack_info instead
[   85.107382][ T8244] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.110711][ T8244] syzkaller0: entered promiscuous mode
[   85.112743][ T8244] syzkaller0: entered allmulticast mode
[   85.119344][ T8244] tipc: Resetting bearer <eth:syzkaller0>
[   85.129111][ T8243] tipc: Resetting bearer <eth:syzkaller0>
[   85.132639][ T8243] tipc: Disabling bearer <eth:syzkaller0>
[   85.264555][ T8270] netlink: 'syz.0.654': attribute type 10 has an invalid length.
[   85.268386][ T8270] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.271998][ T8270] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   85.282144][ T8270] netlink: 'syz.0.654': attribute type 10 has an invalid length.
[   85.290242][ T8270] netlink: 'syz.0.654': attribute type 10 has an invalid length.
[   85.292944][ T8270] netlink: 'syz.0.654': attribute type 10 has an invalid length.
[   85.296683][ T8270] netlink: 'syz.0.654': attribute type 10 has an invalid length.
[   85.298467][ T8276] netlink: 'syz.2.656': attribute type 5 has an invalid length.
[   85.299410][ T8270] netlink: 'syz.0.654': attribute type 10 has an invalid length.
[   85.304806][ T8270] netlink: 'syz.0.654': attribute type 10 has an invalid length.
[   85.308700][ T8270] netlink: 'syz.0.654': attribute type 10 has an invalid length.
[   85.321633][ T8279] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.336814][ T8280] tipc: Disabling bearer <eth:syzkaller0>
[   85.543185][ T8295] wireguard0: entered promiscuous mode
[   85.545135][ T8295] wireguard0: entered allmulticast mode
[   86.213561][ T5843] IPVS: starting estimator thread 0...
[   86.222730][ T8301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.296019][ T8304] __nla_validate_parse: 20 callbacks suppressed
[   86.296028][ T8304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.666'.
[   86.309815][ T8302] IPVS: using max 137 ests per chain, 328800 per kthread
[   86.322942][ T8308] netlink: 56 bytes leftover after parsing attributes in process `syz.2.668'.
[   86.326489][ T8308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.668'.
[   86.333467][ T8311] syzkaller1: entered promiscuous mode
[   86.335626][ T8311] syzkaller1: entered allmulticast mode
[   86.366805][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.371023][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.379495][ T8312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.453095][ T8315] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[   86.458970][ T8315] tipc: Enabling of bearer <dp:s> rejected, media not registered
[   86.752145][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'.
[   86.755257][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'.
[   86.777170][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'.
[   86.781159][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'.
[   86.820812][ T8327] IPVS: Scheduler module ip_vs_sip not found
[   86.824040][ T8327] IPVS: length: 139 != 8
[   86.998507][ T8345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.001919][ T8345] syzkaller0: entered promiscuous mode
[   87.004085][ T8345] syzkaller0: entered allmulticast mode
[   87.009520][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.680'.
[   87.013738][ T8330] netlink: 20 bytes leftover after parsing attributes in process `syz.0.676'.
[   87.020906][ T8344] tipc: Resetting bearer <eth:syzkaller0>
[   87.027026][ T8344] tipc: Disabling bearer <eth:syzkaller0>
[   87.142967][ T8360] gretap0: refused to change device tx_queue_len
[   87.147227][ T8360] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   87.155404][ T5843] lo speed is unknown, defaulting to 1000
[   87.215384][ T5843] syz0: Port: 1 Link ACTIVE
[   87.217633][ T5843] lo speed is unknown, defaulting to 1000
[   87.271417][ T8369] netlink: 168 bytes leftover after parsing attributes in process `syz.2.688'.
[   87.383006][ T8375] lo speed is unknown, defaulting to 1000
[   87.419728][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[   87.501699][ T8390] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.507323][ T8391] syzkaller0: entered promiscuous mode
[   87.509199][ T8391] syzkaller0: entered allmulticast mode
[   87.514815][ T8391] tipc: Resetting bearer <eth:syzkaller0>
[   87.529537][ T8392] tipc: Resetting bearer <eth:syzkaller0>
[   87.535864][ T8392] tipc: Disabling bearer <eth:syzkaller0>
[   88.449736][   T68] wlan0: Trigger new scan to find an IBSS to join
[   88.649412][ T8441] veth8: entered promiscuous mode
[   88.655071][ T8441] veth9: entered promiscuous mode
[   88.710123][ T8457] lo speed is unknown, defaulting to 1000
[   88.883019][ T8483] tipc: Cannot configure node identity twice
[   89.030291][ T8500] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[   89.039490][ T8501] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[   89.140738][ T8508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.226596][ T8520] rdma_rxe: rxe_newlink: failed to add lo
[   89.310015][ T8533] geneve4: entered promiscuous mode
[   89.312311][ T8533] geneve4: entered allmulticast mode
[   89.344166][ T8538] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   89.347971][ T8538] dummy0: entered promiscuous mode
[   89.350426][ T8538] dummy0: entered allmulticast mode
[   89.357064][ T8538] bridge0: port 1(dummy0) entered blocking state
[   89.359387][ T8538] bridge0: port 1(dummy0) entered disabled state
[   89.363379][ T8538] bridge0: port 1(dummy0) entered blocking state
[   89.365973][ T8538] bridge0: port 1(dummy0) entered listening state
[   89.468119][ T8552] batadv_slave_1: entered promiscuous mode
[   89.476796][ T8552] batadv_slave_1: left promiscuous mode
[   89.844562][ T8610] nbd: must specify a device to reconfigure
[   90.545671][ T8638] validate_nla: 71 callbacks suppressed
[   90.545684][ T8638] netlink: 'syz.2.763': attribute type 10 has an invalid length.
[   90.657001][ T8649] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.690830][ T8649] syzkaller0: entered promiscuous mode
[   90.692968][ T8649] syzkaller0: entered allmulticast mode
[   90.698947][ T8649] tipc: Resetting bearer <eth:syzkaller0>
[   90.711664][ T8647] tipc: Resetting bearer <eth:syzkaller0>
[   90.726943][ T8647] tipc: Disabling bearer <eth:syzkaller0>
[   90.863338][ T8669] netlink: 'syz.0.769': attribute type 1 has an invalid length.
[   90.876004][ T8669] 8021q: adding VLAN 0 to HW filter on device bond5
[   90.911607][ T8675] 8021q: adding VLAN 0 to HW filter on device team0
[   90.915613][ T8675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.947691][ T5849] Bluetooth: hci2: link tx timeout
[   90.950445][ T5849] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   91.491298][   T36] wlan0: Trigger new scan to find an IBSS to join
[   91.577738][ T8680] netlink: 'syz.2.772': attribute type 2 has an invalid length.
[   91.579982][ T8679] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   91.587282][ T8681] __nla_validate_parse: 91 callbacks suppressed
[   91.587294][ T8681] netlink: 96 bytes leftover after parsing attributes in process `syz.1.773'.
[   91.600851][ T8681] vlan3: entered allmulticast mode
[   91.603021][ T8681] gretap0: entered allmulticast mode
[   91.608725][ T8683] netlink: 48 bytes leftover after parsing attributes in process `syz.0.774'.
[   91.661902][ T8686] netlink: 260 bytes leftover after parsing attributes in process `syz.1.775'.
[   92.059496][ T8720] netlink: 32 bytes leftover after parsing attributes in process `syz.1.783'.
[   92.063021][ T8720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.783'.
[   92.098978][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'.
[   92.201637][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.786'.
[   92.424511][ T8755] netlink: 'syz.1.793': attribute type 32 has an invalid length.
[   92.427210][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'.
[   92.430980][ T8755] (unnamed net_device) (uninitialized): option coupled_control: invalid value (100)
[   92.436311][ T8758] netlink: 'syz.1.793': attribute type 32 has an invalid length.
[   92.443765][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'.
[   92.453805][ T8758] (unnamed net_device) (uninitialized): option coupled_control: invalid value (100)
[   92.470063][ T8761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.794'.
[   92.743982][ T8786] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   92.772971][ T8783] lo speed is unknown, defaulting to 1000
[   93.009888][ T5849] Bluetooth: hci2: command 0x0419 tx timeout
[   93.544870][ T8829] netlink: 'syz.2.812': attribute type 1 has an invalid length.
[   93.550540][ T8825] delete_channel: no stack
[   93.559666][ T8829] 8021q: adding VLAN 0 to HW filter on device bond4
[   93.586409][ T8829] bond4: (slave veth5): Enslaving as an active interface with a down link
[   93.601905][ T8829] 8021q: adding VLAN 0 to HW filter on device batadv2
[   93.607438][ T8829] bond4: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   93.733533][ T8839] netlink: 'syz.1.814': attribute type 1 has an invalid length.
[   93.807480][ T8844] syzkaller1: entered promiscuous mode
[   93.810332][ T8844] syzkaller1: entered allmulticast mode
[   93.839203][ T8850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.842627][ T8848] syzkaller0: entered promiscuous mode
[   93.844906][ T8848] syzkaller0: entered allmulticast mode
[   93.858050][ T8849] tipc: Resetting bearer <eth:syzkaller0>
[   93.863430][ T8849] tipc: Disabling bearer <eth:syzkaller0>
[   93.938731][ T8854] lo speed is unknown, defaulting to 1000
[   94.170875][ T8861] geneve5: entered promiscuous mode
[   94.228088][ T8865] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[   94.285965][ T8872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.451884][   T74] wlan0: Trigger new scan to find an IBSS to join
[   95.353005][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.399215][ T8992] lo speed is unknown, defaulting to 1000
[   95.876590][ T9005] dummy0 (unregistering): left allmulticast mode
[   95.879309][ T9005] bridge0: port 3(dummy0) entered disabled state
[   95.965767][ T9009] netlink: 'syz.0.839': attribute type 142 has an invalid length.
[   96.896221][ T9032] __nla_validate_parse: 12 callbacks suppressed
[   96.896233][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.845'.
[   97.058810][ T9058] netlink: 'syz.1.855': attribute type 2 has an invalid length.
[   97.064406][ T9058] : entered promiscuous mode
[   97.125246][ T9073] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   97.242324][ T9082] bridge0: port 1(dummy0) entered disabled state
[   97.246846][ T9082] bond6: (slave bridge2): Removing an active aggregator
[   97.252746][ T9082] bond6: (slave bridge2): Releasing backup interface
[   97.256378][ T9082] bridge2: left promiscuous mode
[   97.258647][ T9082] bridge2: left allmulticast mode
[   97.285209][ T9082] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[   98.124505][ T9116] netlink: 'syz.2.872': attribute type 1 has an invalid length.
[   98.136717][ T9116] 8021q: adding VLAN 0 to HW filter on device bond5
[   98.165945][ T9119] netlink: 'syz.2.873': attribute type 1 has an invalid length.
[   98.181554][ T9119] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   98.186493][ T5855] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   98.196406][ T9119] 8021q: adding VLAN 0 to HW filter on device bond6
[   98.206687][ T9119] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator
[   98.212235][ T9119] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface
[   98.216823][ T9119] bond6 (unregistering): Released all slaves
[   98.256874][ T9122] netlink: 'syz.0.875': attribute type 1 has an invalid length.
[   98.259536][ T9122] netlink: 'syz.0.875': attribute type 2 has an invalid length.
[   98.368475][ T9129] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.371758][ T9129] syzkaller0: entered promiscuous mode
[   98.373684][ T9129] syzkaller0: entered allmulticast mode
[   98.377331][ T9129] netlink: 27 bytes leftover after parsing attributes in process `syz.1.874'.
[   98.383497][ T9129] tipc: Resetting bearer <eth:syzkaller0>
[   98.388000][ T9128] tipc: Resetting bearer <eth:syzkaller0>
[   98.392025][ T9128] tipc: Disabling bearer <eth:syzkaller0>
[   98.493874][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.496703][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.517166][ T9146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.521931][ T9149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.884'.
[   98.528122][ T9153] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.533035][ T9153] syzkaller0: entered promiscuous mode
[   98.535145][ T9153] syzkaller0: entered allmulticast mode
[   98.542001][ T9153] tipc: Resetting bearer <eth:syzkaller0>
[   98.545517][ T9152] tipc: Resetting bearer <eth:syzkaller0>
[   98.548648][ T9152] tipc: Disabling bearer <eth:syzkaller0>
[   98.588448][ T9154] netlink: 52 bytes leftover after parsing attributes in process `syz.1.884'.
[   98.719330][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'.
[   98.774146][ T9166] sctp: [Deprecated]: syz.2.888 (pid 9166) Use of int in max_burst socket option.
[   98.774146][ T9166] Use struct sctp_assoc_value instead
[   99.020302][ T9171] nbd0: detected capacity change from 0 to 127
[   99.025177][ T6740] block nbd0: Receive control failed (result -32)
[   99.027996][   T55] block nbd0: Receive control failed (result -32)
[   99.031149][ T9173] block nbd0: Send control failed (result -32)
[   99.033783][ T9173] block nbd0: Request send failed, requeueing
[   99.042105][ T9173] block nbd0: Dead connection, failed to find a fallback
[   99.050186][   T60] block nbd0: Dead connection, failed to find a fallback
[   99.053405][   T60] block nbd0: shutting down sockets
[   99.055649][   T60] blk_print_req_error: 138 callbacks suppressed
[   99.055660][   T60] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.062764][   T60] buffer_io_error: 138 callbacks suppressed
[   99.062773][   T60] Buffer I/O error on dev nbd0, logical block 0, async page read
[   99.068699][ T9173] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.078235][ T9173] Buffer I/O error on dev nbd0, logical block 1, async page read
[   99.081976][ T9173] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.088079][ T9173] Buffer I/O error on dev nbd0, logical block 2, async page read
[   99.092836][ T9173] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.096910][ T9173] Buffer I/O error on dev nbd0, logical block 3, async page read
[   99.100790][ T9173] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.104806][ T9173] Buffer I/O error on dev nbd0, logical block 0, async page read
[   99.108102][ T9173] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.112915][ T9173] Buffer I/O error on dev nbd0, logical block 1, async page read
[   99.116826][ T9173] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.129423][ T9173] Buffer I/O error on dev nbd0, logical block 2, async page read
[   99.133182][ T9173] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.134625][ T9184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.892'.
[   99.136883][ T9173] Buffer I/O error on dev nbd0, logical block 3, async page read
[   99.136989][ T9173] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.147307][ T9173] Buffer I/O error on dev nbd0, logical block 0, async page read
[   99.151017][ T9173] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.154843][ T9173] Buffer I/O error on dev nbd0, logical block 1, async page read
[   99.160551][ T9173] ldm_validate_partition_table(): Disk read failed.
[   99.164184][ T9173] Dev nbd0: unable to read RDB block 0
[   99.167473][ T9173]  nbd0: unable to read partition table
[   99.176517][ T9173] ldm_validate_partition_table(): Disk read failed.
[   99.183319][ T9173] Dev nbd0: unable to read RDB block 0
[   99.187936][ T9173]  nbd0: unable to read partition table
[   99.213845][ T9184] vlan2: entered allmulticast mode
[   99.215875][ T9184] veth0_to_hsr: entered allmulticast mode
[   99.263530][ T9193] bond6: entered promiscuous mode
[   99.265662][ T9193] 8021q: adding VLAN 0 to HW filter on device bond6
[   99.282014][ T9192] bond7: entered promiscuous mode
[   99.284259][ T9192] 8021q: adding VLAN 0 to HW filter on device bond7
[   99.297934][ T9197] netlink: 'syz.0.895': attribute type 1 has an invalid length.
[   99.301311][ T9197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.331623][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'.
[   99.345577][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'.
[   99.360807][ T9199] veth0_macvtap (unregistering): left allmulticast mode
[   99.444729][ T9204] netlink: 'syz.1.898': attribute type 4 has an invalid length.
[   99.451203][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'.
[   99.454419][ T9204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.898'.
[   99.513808][ T9213] ip_vti0: Master is either lo or non-ether device
[   99.551417][ T9217] syzkaller0: entered promiscuous mode
[   99.553769][ T9217] syzkaller0: entered allmulticast mode
[   99.882676][ T9235] vxcan2: entered promiscuous mode
[   99.924774][ T9242] netlink: 'syz.0.912': attribute type 10 has an invalid length.
[  100.027079][ T9241] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.356475][ T9261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.547838][ T9283] 8021q: adding VLAN 0 to HW filter on device bond8
[  100.550796][ T9283] bond0: (slave bond8): Enslaving as an active interface with an up link
[  100.558379][ T9282] 8021q: adding VLAN 0 to HW filter on device bond9
[  100.562074][ T9282] bond0: (slave bond9): Enslaving as an active interface with an up link
[  100.824410][ T9292] openvswitch: netlink: Flow actions attr not present in new flow.
[  100.864868][ T9295] netlink: 'syz.1.924': attribute type 1 has an invalid length.
[  101.032984][ T9309] netlink: 'syz.0.927': attribute type 12 has an invalid length.
[  101.660362][ T9340] netlink: 'syz.0.934': attribute type 1 has an invalid length.
[  101.668807][ T9338] syzkaller1: entered promiscuous mode
[  101.674496][ T9338] syzkaller1: entered allmulticast mode
[  101.682029][ T9342] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  101.735881][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  101.739813][ T9340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  101.814399][ T9365] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20000
[  101.882515][ T9380] bond0: entered promiscuous mode
[  101.885337][ T9380] batadv0: entered promiscuous mode
[  101.888303][ T9380] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  101.894030][ T9380] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  101.898714][ T9380] 8021q: adding VLAN 0 to HW filter on device hsr1
[  101.909465][ T9380] __nla_validate_parse: 18 callbacks suppressed
[  101.909477][ T9380] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.945'.
[  101.945694][ T9388] netlink: 32 bytes leftover after parsing attributes in process `syz.2.948'.
[  101.952078][ T9388] netlink: 34 bytes leftover after parsing attributes in process `syz.2.948'.
[  101.962706][ T9392] netlink: 'syz.1.949': attribute type 21 has an invalid length.
[  101.969519][ T9392] netlink: 128 bytes leftover after parsing attributes in process `syz.1.949'.
[  101.977382][ T9392] netlink: 'syz.1.949': attribute type 5 has an invalid length.
[  101.982169][ T9392] netlink: 'syz.1.949': attribute type 6 has an invalid length.
[  101.989986][ T9392] netlink: 3 bytes leftover after parsing attributes in process `syz.1.949'.
[  102.022025][ T9399] pim6reg1: entered promiscuous mode
[  102.026157][ T9399] pim6reg1: entered allmulticast mode
[  102.055507][ T9402] lo speed is unknown, defaulting to 1000
[  102.455987][ T9421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.568382][ T9441] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  103.618644][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.963'.
[  103.622682][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.963'.
[  103.838830][ T9452] netlink: 'syz.2.965': attribute type 3 has an invalid length.
[  103.881170][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.966'.
[  103.971919][ T9468] netlink: 132 bytes leftover after parsing attributes in process `syz.1.970'.
[  104.243664][ T9489] netlink: 'syz.0.978': attribute type 11 has an invalid length.
[  104.287758][ T9493] netlink: 'syz.0.980': attribute type 6 has an invalid length.
[  104.305296][ T9495] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  104.382793][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'.
[  104.402274][ T9508] netlink: 'syz.0.986': attribute type 13 has an invalid length.
[  104.405394][ T9508] netlink: 'syz.0.986': attribute type 17 has an invalid length.
[  104.434533][ T9508] geneve2: left promiscuous mode
[  104.437791][ T9508] bridge1: left promiscuous mode
[  104.440498][ T9508] bridge1: left allmulticast mode
[  104.504601][ T9511] lo speed is unknown, defaulting to 1000
[  104.808319][ T8705] lo speed is unknown, defaulting to 1000
[  104.808365][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  104.812350][ T8705] syz0: Port: 1 Link DOWN
[  104.819170][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  104.824506][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  104.838838][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  104.853258][ T7776] lo speed is unknown, defaulting to 1000
[  104.976803][ T9563] netlink: zone id is out of range
[  104.978744][ T9563] netlink: zone id is out of range
[  104.980879][ T9563] netlink: get zone limit has 8 unknown bytes
[  105.061535][ T9583] smc: net device bond0 applied user defined pnetid SYZ2
[  105.214508][ T9599] netlink: 'syz.1.1005': attribute type 13 has an invalid length.
[  105.223219][ T9599] dummy0: left promiscuous mode
[  105.225405][ T9599] dummy0: left allmulticast mode
[  105.228098][ T9599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.248231][ T9599] lo speed is unknown, defaulting to 1000
[  105.475692][ T9603] siw: device registration error -23
[  105.697041][ T9615] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.706720][ T9615] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.719759][ T9615] bond0: (slave batadv0): Releasing backup interface
[  105.847984][ T9622] ip6gre1: entered allmulticast mode
[  105.978755][ T9647] lo speed is unknown, defaulting to 1000
[  105.985904][ T9649] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.186287][ T9673] lo speed is unknown, defaulting to 1000
[  106.470538][ T9700] validate_nla: 3 callbacks suppressed
[  106.470550][ T9700] netlink: 'syz.1.1033': attribute type 15 has an invalid length.
[  106.707816][ T9713] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.712085][ T9713] tipc: Resetting bearer <eth:syzkaller0>
[  106.715845][ T9709] tipc: Disabling bearer <eth:syzkaller0>
[  106.861147][ T5849] Bluetooth: hci2: command 0x0419 tx timeout
[  107.036960][ T9742] __nla_validate_parse: 25 callbacks suppressed
[  107.036978][ T9742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1046'.
[  107.038626][ T9744] openvswitch: netlink: Key type 64 is out of range max 32
[  107.040898][ T9742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1046'.
[  107.050413][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'.
[  107.100832][ T9535] tipc: Node number set to 2820166812
[  107.293462][ T9771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1052'.
[  107.306369][ T9771] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1052'.
[  107.405912][ T9781] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  107.409278][ T9781] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  107.414724][ T9781] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  107.437995][ T9781] lo speed is unknown, defaulting to 1000
[  107.651574][ T9800] veth1_to_bond: entered allmulticast mode
[  107.668496][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1055'.
[  107.719450][ T9802] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1055'.
[  107.750161][ T9804] veth1_to_bond: left allmulticast mode
[  107.782794][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'.
[  107.792521][ T9813] netlink: 'syz.1.1057': attribute type 1 has an invalid length.
[  107.808745][ T9813] bond7: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  107.814893][ T9813] bond7 (unregistering): (slave ip6gretap3): Releasing backup interface
[  107.819063][ T9817] netlink: 'syz.2.1061': attribute type 21 has an invalid length.
[  107.823170][ T9813] bond7 (unregistering): Released all slaves
[  107.829727][ T9817] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1061'.
[  107.831614][ T9823] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1063'.
[  107.857858][ T9825] netlink: 'syz.0.1064': attribute type 1 has an invalid length.
[  107.930416][ T9837] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  107.934122][ T9839] openvswitch: netlink: IPv6 tunnel dst address is zero
[  108.000746][ T9846] veth0_to_bridge: entered promiscuous mode
[  108.007977][ T9845] veth0_to_bridge: left promiscuous mode
[  108.047313][ T9855] lo speed is unknown, defaulting to 1000
[  108.101997][ T8704] IPVS: starting estimator thread 0...
[  108.188077][ T9875] lo speed is unknown, defaulting to 1000
[  108.191715][ T9863] IPVS: using max 138 ests per chain, 331200 per kthread
[  108.230196][ T9880] IPv6: Can't replace route, no match found
[  108.254324][ T9882] 8021q: adding VLAN 0 to HW filter on device bond8
[  108.258825][ T9882] bond7: (slave bond8): Enslaving as an active interface with an up link
[  108.283828][ T9882] 8021q: adding VLAN 0 to HW filter on device bond7
[  108.308168][ T9874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.316078][ T9890] netlink: 'syz.0.1081': attribute type 2 has an invalid length.
[  108.341936][   T13] IPVS: stop unused estimator thread 0...
[  108.935069][ T9898] netlink: 'syz.1.1082': attribute type 1 has an invalid length.
[  108.963396][ T9898] bond7: (slave bridge7): making interface the new active one
[  108.966235][ T9898] bond7: (slave bridge7): Enslaving as an active interface with an up link
[  109.151630][ T9912] batadv2: entered promiscuous mode
[  109.153819][ T9912] batadv2: entered allmulticast mode
[  110.281737][ T9967] netlink: 'syz.0.1102': attribute type 4 has an invalid length.
[  110.285850][ T9967] netlink: 'syz.0.1102': attribute type 4 has an invalid length.
[  110.418661][ T9535] IPVS: starting estimator thread 0...
[  110.510153][ T9979] IPVS: using max 135 ests per chain, 324000 per kthread
[  110.555387][ T9988] lo speed is unknown, defaulting to 1000
[  110.692827][T10002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.762415][T10008] nbd: nbd63 already in use
[  110.851177][T10016] lo speed is unknown, defaulting to 1000
[  110.880496][T10022] openvswitch: netlink: Missing valid actions attribute.
[  110.883747][T10022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.975855][T10030] netlink: 'syz.1.1117': attribute type 1 has an invalid length.
[  110.995233][T10030] netlink: 'syz.1.1117': attribute type 2 has an invalid length.
[  111.042577][T10036] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.071157][T10036] tipc: Resetting bearer <eth:syzkaller0>
[  111.141584][T10055] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  111.144508][T10055] openvswitch: netlink: Duplicate key (type 0).
[  111.164204][T10050] lo speed is unknown, defaulting to 1000
[  111.387675][T10093] 8021q: adding VLAN 0 to HW filter on device bond10
[  111.413372][T10093] 8021q: adding VLAN 0 to HW filter on device bond10
[  111.415989][T10093] bond10: (slave vcan1): The slave device specified does not support setting the MAC address
[  111.420494][T10093] bond10: (slave vcan1): Error -95 calling set_mac_address
[  111.441632][T10094] bond10: (slave vcan1): The slave device specified does not support setting the MAC address
[  111.445495][T10094] bond10: (slave vcan1): Error -95 calling set_mac_address
[  111.576320][T10114] Bluetooth: MGMT ver 1.23
[  111.716941][T10148] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.719768][T10148] syzkaller0: entered promiscuous mode
[  111.722776][T10148] syzkaller0: entered allmulticast mode
[  111.753505][T10148] tipc: Resetting bearer <eth:syzkaller0>
[  111.763702][T10148] tipc: Disabling bearer <eth:syzkaller0>
[  112.477225][T10167] __nla_validate_parse: 31 callbacks suppressed
[  112.477239][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1155'.
[  112.484310][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1155'.
[  112.527778][T10178] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1157'.
[  112.919481][T10199] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1161'.
[  112.925455][T10199] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  113.002750][T10201] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1162'.
[  113.008420][T10201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1162'.
[  113.093172][T10204] validate_nla: 2 callbacks suppressed
[  113.093188][T10204] netlink: 'syz.1.1163': attribute type 21 has an invalid length.
[  113.093665][T10205] netlink: 'syz.1.1163': attribute type 21 has an invalid length.
[  113.095517][T10204] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1163'.
[  113.098437][T10205] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1163'.
[  113.102188][T10204] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1163'.
[  113.112075][T10205] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1163'.
[  113.446043][T10210] netlink: 'syz.2.1166': attribute type 1 has an invalid length.
[  113.549488][T10220] vxcan1: entered allmulticast mode
[  113.551775][T10220] vxcan1: left allmulticast mode
[  113.608195][T10227] bridge9: entered allmulticast mode
[  113.707550][T10243] bridge_slave_1: left allmulticast mode
[  113.709691][T10243] bridge_slave_1: left promiscuous mode
[  113.711957][T10243] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.715680][T10243] bridge_slave_0: left allmulticast mode
[  113.717585][T10243] bridge_slave_0: left promiscuous mode
[  113.720303][T10243] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.929724][T10265] tipc: Resetting bearer <eth:syzkaller0>
[  113.934688][T10265] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  113.937155][T10265] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  113.943359][T10265] ip6gre1: left allmulticast mode
[  114.103265][T10286] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  114.106487][T10286] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  114.111494][T10286] tipc: Resetting bearer <eth:syzkaller0>
[  114.207454][T10295] vxcan1: entered allmulticast mode
[  114.210426][T10295] vxcan1: left allmulticast mode
[  114.307852][T10300] netlink: 'syz.0.1191': attribute type 1 has an invalid length.
[  114.316320][T10300] 8021q: adding VLAN 0 to HW filter on device bond9
[  114.324842][T10300] bond9: (slave geneve0): making interface the new active one
[  114.328542][T10300] bond9: (slave geneve0): Enslaving as an active interface with an up link
[  114.335687][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.338839][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.344364][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.348039][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.360039][T10303] tipc: Enabling of bearer <eth:batadv0> rejected, failed to enable media
[  114.459434][T10317] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  114.754073][T10346] netlink: 'syz.1.1204': attribute type 1 has an invalid length.
[  114.804905][T10356] netlink: 'syz.0.1208': attribute type 21 has an invalid length.
[  114.824756][T10360] netlink: 'syz.1.1210': attribute type 1 has an invalid length.
[  114.846689][T10360] 8021q: adding VLAN 0 to HW filter on device bond8
[  114.867794][T10360] bond8: (slave veth11): Enslaving as an active interface with a down link
[  114.883817][T10360] 8021q: adding VLAN 0 to HW filter on device batadv1
[  114.886904][T10360] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  115.030772][T10373] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.033873][T10373] syzkaller0: entered promiscuous mode
[  115.035811][T10373] syzkaller0: entered allmulticast mode
[  115.043853][T10373] tipc: Resetting bearer <eth:syzkaller0>
[  115.047965][T10372] tipc: Resetting bearer <eth:syzkaller0>
[  115.052958][T10372] tipc: Disabling bearer <eth:syzkaller0>
[  115.321118][T10380] syzkaller1: entered promiscuous mode
[  115.323508][T10380] syzkaller1: entered allmulticast mode
[  115.697735][T10405] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.703082][T10405] syzkaller0: entered promiscuous mode
[  115.705174][T10405] syzkaller0: entered allmulticast mode
[  115.714196][T10405] tipc: Resetting bearer <eth:syzkaller0>
[  115.717459][T10403] tipc: Resetting bearer <eth:syzkaller0>
[  115.722252][T10403] tipc: Disabling bearer <eth:syzkaller0>
[  115.921860][T10410] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  115.942189][T10414] netlink: 'syz.2.1227': attribute type 2 has an invalid length.
[  115.946703][T10414] k*]: entered promiscuous mode
[  115.956744][T10414] 8021q: adding VLAN 0 to HW filter on device team0
[  115.961142][T10414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.966310][ T5843] lo speed is unknown, defaulting to 1000
[  115.970016][ T5843] syz0: Port: 1 Link ACTIVE
[  115.971577][ T5843] lo speed is unknown, defaulting to 1000
[  115.987569][T10416] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  116.008079][T10421] IPVS: length: 106 != 8
[  116.433327][T10447] lo speed is unknown, defaulting to 1000
[  116.663872][T10476] sch_tbf: burst 19872 is lower than device lo mtu (65499) !
[  117.295698][T10490] netlink: 'syz.0.1247': attribute type 2 has an invalid length.
[  117.300213][T10490] k*]: entered promiscuous mode
[  117.331576][T10490] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.350709][T10490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.512847][T10510] __nla_validate_parse: 48 callbacks suppressed
[  117.512864][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1252'.
[  117.520593][T10505] nbd1: detected capacity change from 0 to 63
[  117.525461][T10507] block nbd1: NBD_DISCONNECT
[  117.527664][T10510] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1252'.
[  117.527665][T10507] block nbd1: Disconnected due to user request.
[  117.527699][T10507] block nbd1: shutting down sockets
[  117.535790][    C0] blk_print_req_error: 138 callbacks suppressed
[  117.535801][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.537281][T10505] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1251'.
[  117.537892][    C0] buffer_io_error: 138 callbacks suppressed
[  117.537898][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  117.537935][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.542464][T10505] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  117.544372][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[  117.561811][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.564799][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  117.567510][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.571416][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[  117.575104][ T9632] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.578439][ T9632] Buffer I/O error on dev nbd1, logical block 0, async page read
[  117.583973][ T9632] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.587708][T10501] netlink: 'syz.0.1250': attribute type 11 has an invalid length.
[  117.588242][ T9632] Buffer I/O error on dev nbd1, logical block 1, async page read
[  117.594413][ T9632] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.597601][ T9632] Buffer I/O error on dev nbd1, logical block 2, async page read
[  117.600776][ T9632] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.604918][ T9632] Buffer I/O error on dev nbd1, logical block 3, async page read
[  117.610155][ T9632] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.613338][ T9632] Buffer I/O error on dev nbd1, logical block 0, async page read
[  117.616175][ T9632] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.619201][ T9632] Buffer I/O error on dev nbd1, logical block 1, async page read
[  117.627487][ T9632] ldm_validate_partition_table(): Disk read failed.
[  117.637233][ T9632] Dev nbd1: unable to read RDB block 0
[  117.642155][ T9632]  nbd1: unable to read partition table
[  117.648215][ T9632] ldm_validate_partition_table(): Disk read failed.
[  117.653759][ T9632] Dev nbd1: unable to read RDB block 0
[  117.657057][ T9632]  nbd1: unable to read partition table
[  117.701819][T10521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1254'.
[  117.705222][T10514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1254'.
[  117.748659][T10519] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  117.795187][T10529] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  117.818242][T10527] sctp: [Deprecated]: syz.2.1257 (pid 10527) Use of int in maxseg socket option.
[  117.818242][T10527] Use struct sctp_assoc_value instead
[  117.850586][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'.
[  117.854157][T10536] netlink: 34 bytes leftover after parsing attributes in process `syz.2.1259'.
[  117.891221][T10543] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1261'.
[  118.049175][T10560] lo speed is unknown, defaulting to 1000
[  118.148283][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1267'.
[  118.260238][T10577] netlink: 'syz.2.1270': attribute type 4 has an invalid length.
[  118.261833][ T7776] lo speed is unknown, defaulting to 1000
[  118.266195][ T5843] lo speed is unknown, defaulting to 1000
[  118.271020][ T7776] lo speed is unknown, defaulting to 1000
[  118.489006][T10601] macsec0: entered promiscuous mode
[  118.491507][T10601] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  118.494751][T10601] macsec0: entered allmulticast mode
[  118.496966][T10601] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  118.541638][T10605] netlink: 'syz.1.1276': attribute type 1 has an invalid length.
[  118.552078][T10608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1277'.
[  118.884153][T10650] netlink: 'syz.1.1287': attribute type 6 has an invalid length.
[  118.955434][T10650] netlink: 'syz.1.1287': attribute type 4 has an invalid length.
[  119.635415][T10669] tipc: Resetting bearer <eth:syzkaller0>
[  119.658844][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.662000][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.664836][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.674872][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.116808][T10704] vti1: entered promiscuous mode
[  120.211768][T10719] netlink: 'syz.1.1302': attribute type 10 has an invalid length.
[  120.214453][T10719] dummy0: entered promiscuous mode
[  120.216225][T10719] dummy0: entered allmulticast mode
[  120.218129][T10719] bridge0: port 1(dummy0) entered blocking state
[  120.221880][T10719] bridge0: port 1(dummy0) entered disabled state
[  120.612199][T10731] netlink: 'syz.0.1306': attribute type 10 has an invalid length.
[  120.681679][T10740] syzkaller1: entered allmulticast mode
[  120.708897][T10747] netlink: 'syz.0.1310': attribute type 11 has an invalid length.
[  120.809248][T10762] bond0: (slave bond_slave_0): Releasing backup interface
[  120.831178][T10762] bond0: (slave bond_slave_1): Releasing backup interface
[  120.835206][T10762] bond0: (slave wlan1): Releasing backup interface
[  120.838302][T10762] bond2: (slave gretap1): Releasing active interface
[  120.840951][T10762] bond2: (slave gretap1): the permanent HWaddr of slave - 9a:37:b1:ce:9f:c8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  120.846547][T10762] bond2: (slave gretap2): making interface the new active one
[  120.850763][T10762] bond2: (slave gretap2): Releasing active interface
[  120.854077][T10762] bond6: (slave ip6gretap1): Releasing backup interface
[  120.858351][T10762] bond7: (slave bond8): Releasing backup interface
[  120.863045][T10762] bond9: (slave geneve0): Releasing active interface
[  120.914498][T10762] netlink: 'syz.0.1312': attribute type 10 has an invalid length.
[  120.920471][T10762] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  120.927693][T10762] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  120.933722][T10762] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  120.957093][T10776] pim6reg1: entered promiscuous mode
[  120.959110][T10776] pim6reg1: entered allmulticast mode
[  120.962199][T10776] bridge4: port 1(veth0_to_bond) entered blocking state
[  120.964539][T10776] bridge4: port 1(veth0_to_bond) entered disabled state
[  120.966903][T10776] veth0_to_bond: entered allmulticast mode
[  120.969373][T10776] veth0_to_bond: entered promiscuous mode
[  121.123271][T10789] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  121.156345][T10793] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.159224][T10793] syzkaller0: entered promiscuous mode
[  121.161225][T10793] syzkaller0: entered allmulticast mode
[  121.166788][T10793] tipc: Resetting bearer <eth:syzkaller0>
[  121.170203][T10792] tipc: Resetting bearer <eth:syzkaller0>
[  121.173686][T10792] tipc: Disabling bearer <eth:syzkaller0>
[  121.347080][T10801] lo speed is unknown, defaulting to 1000
[  122.475227][T10848] nbd: must specify a size in bytes for the device
[  122.527530][T10858] __nla_validate_parse: 15 callbacks suppressed
[  122.527542][T10858] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1343'.
[  122.679089][T10872] netlink: 'syz.1.1344': attribute type 10 has an invalid length.
[  122.693754][T10875] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1347'.
[  122.693793][T10872] dummy0: left allmulticast mode
[  122.701097][T10872] dummy0: left promiscuous mode
[  122.703437][T10872] bridge0: port 1(dummy0) entered disabled state
[  122.712225][T10872] team0: Port device dummy0 added
[  122.717818][T10872] netlink: 'syz.1.1344': attribute type 10 has an invalid length.
[  122.736614][T10872] team0: Port device dummy0 removed
[  122.743303][T10872] dummy0: entered promiscuous mode
[  122.746106][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1348'.
[  123.065216][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.068967][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.074797][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  123.078329][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  123.139101][T10905] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1356'.
[  123.144958][T10905] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1356'.
[  123.153958][T10905] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1356'.
[  123.520526][T10924] bond10: (slave ip6gretap4): making interface the new active one
[  123.523680][T10924] bond10: (slave ip6gretap4): Enslaving as an active interface with an up link
[  123.549164][T10930] veth13: entered promiscuous mode
[  123.567495][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'.
[  123.624403][T10934] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  123.628503][T10934] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1365'.
[  123.643692][T10934] bond0 (unregistering): left promiscuous mode
[  123.652267][T10934] bond0 (unregistering): Released all slaves
[  123.679288][T10944] netlink: 'syz.1.1365': attribute type 1 has an invalid length.
[  123.700575][T10934] bond0: (slave gretap2): making interface the new active one
[  123.703802][T10934] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  123.708400][ T9535] hid-generic 0005:10CF:8002.0002: collection stack underflow
[  123.720814][ T9535] hid-generic 0005:10CF:8002.0002: item 0 0 0 12 parsing failed
[  123.724318][ T9535] hid-generic 0005:10CF:8002.0002: probe with driver hid-generic failed with error -22
[  123.734507][T10954] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1370'.
[  123.736069][T10955] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1370'.
[  123.745223][T10947] macsec1: entered promiscuous mode
[  123.747490][T10947] macsec1: entered allmulticast mode
[  123.781052][T10954] dvmrp1: entered allmulticast mode
[  123.893471][T10976] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  124.016009][T10981] netlink: 'syz.1.1379': attribute type 10 has an invalid length.
[  124.019225][T10981] veth0_vlan: left promiscuous mode
[  124.021429][T10981] veth0_vlan: entered promiscuous mode
[  124.023579][T10981] veth0_vlan: entered allmulticast mode
[  124.026772][T10981] bridge0: port 1(veth0_vlan) entered blocking state
[  124.029114][T10981] bridge0: port 1(veth0_vlan) entered disabled state
[  124.032657][T10981] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  124.157190][T10994] netlink: 'syz.1.1383': attribute type 12 has an invalid length.
[  124.179216][T10996] siw: device registration error -23
[  124.222734][T11001] lo speed is unknown, defaulting to 1000
[  124.510870][T11014] nbd: socks must be embedded in a SOCK_ITEM attr
[  124.513944][T11014] block nbd1: shutting down sockets
[  124.835658][T11067] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.882468][T11073] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.891462][T11073] syzkaller0: entered promiscuous mode
[  124.894842][T11073] syzkaller0: entered allmulticast mode
[  124.903810][T11073] tipc: Resetting bearer <eth:syzkaller0>
[  124.910077][T11071] tipc: Resetting bearer <eth:syzkaller0>
[  124.917326][T11071] tipc: Disabling bearer <eth:syzkaller0>
[  125.125502][T11114] netlink: 'syz.0.1410': attribute type 2 has an invalid length.
[  125.138350][T11114] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.143266][T11114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.271813][T11130] bond11: entered promiscuous mode
[  125.277127][T11130] 8021q: adding VLAN 0 to HW filter on device bond11
[  125.287734][T11130] bond11 (unregistering): Released all slaves
[  125.437366][T11163] netlink: 'syz.0.1420': attribute type 8 has an invalid length.
[  125.541047][T11185] netlink: 'syz.1.1424': attribute type 1 has an invalid length.
[  125.563071][T11185] 8021q: adding VLAN 0 to HW filter on device bond11
[  125.574704][T11185] bond11 (unregistering): Released all slaves
[  125.698088][T11208] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  125.699326][T11209] netlink: 'syz.2.1429': attribute type 11 has an invalid length.
[  125.776922][T11221] netlink: 'syz.0.1433': attribute type 1 has an invalid length.
[  125.793654][T11218] batadv2: entered promiscuous mode
[  125.796112][T11218] batadv2: entered allmulticast mode
[  125.897302][T11238] netlink: 'syz.1.1434': attribute type 5 has an invalid length.
[  126.004928][T11253] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  126.283170][T11299] netlink: 'syz.2.1444': attribute type 12 has an invalid length.
[  126.319121][T11309] pim6reg1: entered promiscuous mode
[  126.322900][T11309] pim6reg1: entered allmulticast mode
[  126.325674][T11309] openvswitch: netlink: Missing valid actions attribute.
[  126.328578][T11309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.367378][T11312] syzkaller1: entered promiscuous mode
[  126.370690][T11312] syzkaller1: entered allmulticast mode
[  126.374695][T11312] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  126.397763][T11319] netlink: 'syz.1.1451': attribute type 21 has an invalid length.
[  126.416260][T11305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.539385][T11346] syzkaller1: entered promiscuous mode
[  126.542894][T11346] syzkaller1: entered allmulticast mode
[  126.565188][T11348] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  126.662929][T11357] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  126.774935][T11369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.855012][T11386] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  127.438160][T11409] bond0: (slave wlan1): Releasing backup interface
[  127.450057][T11409] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  127.458583][T11409] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  127.463958][T11409] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  127.696557][T11421] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.700377][T11421] syzkaller0: entered promiscuous mode
[  127.702836][T11421] syzkaller0: entered allmulticast mode
[  127.706801][T11421] __nla_validate_parse: 67 callbacks suppressed
[  127.706813][T11421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1479'.
[  127.713507][T11421] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1479'.
[  127.721418][T11421] tipc: Resetting bearer <eth:syzkaller0>
[  127.725185][T11420] tipc: Resetting bearer <eth:syzkaller0>
[  127.732414][T11420] tipc: Disabling bearer <eth:syzkaller0>
[  127.804098][T11425] tipc: Enabling <ib:lo> not permitted
[  127.806460][T11425] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  127.823073][T11425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1481'.
[  127.851414][T11427] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1482'.
[  127.898764][T11431] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  127.904552][T11431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1484'.
[  127.908479][T11431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1484'.
[  128.165695][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1488'.
[  128.173085][T11442] macsec2: entered promiscuous mode
[  128.175433][T11442] bond0: entered promiscuous mode
[  128.177774][T11442] bond8: entered promiscuous mode
[  128.180379][T11442] bond9: entered promiscuous mode
[  128.183875][T11442] bond0: left promiscuous mode
[  128.185927][T11442] bond8: left promiscuous mode
[  128.188066][T11442] bond9: left promiscuous mode
[  128.235072][T11445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  128.241815][T11445] team0: Device ipvlan1 failed to register rx_handler
[  128.249009][T11447] team0: Device ipvlan1 failed to register rx_handler
[  128.266829][T11451] sctp: [Deprecated]: syz.1.1492 (pid 11451) Use of struct sctp_assoc_value in delayed_ack socket option.
[  128.266829][T11451] Use struct sctp_sack_info instead
[  128.305619][T11452] lo speed is unknown, defaulting to 1000
[  128.491930][T11478] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1499'.
[  128.532376][T11480] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1500'.
[  128.601400][T11485] dvmrp1: entered allmulticast mode
[  128.610886][T11484] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.614234][T11484] syzkaller0: entered promiscuous mode
[  128.616540][T11484] syzkaller0: entered allmulticast mode
[  128.637176][T11484] tipc: Resetting bearer <eth:syzkaller0>
[  128.649891][T11483] tipc: Resetting bearer <eth:syzkaller0>
[  128.654963][T11483] tipc: Disabling bearer <eth:syzkaller0>
[  128.659098][T11489] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1504'.
[  128.681586][T11489] lo speed is unknown, defaulting to 1000
[  128.856901][T11506] veth0: entered promiscuous mode
[  128.881653][T11505] veth0: left promiscuous mode
[  129.046600][T11535] validate_nla: 4 callbacks suppressed
[  129.046614][T11535] netlink: 'syz.0.1514': attribute type 21 has an invalid length.
[  129.076034][T11544] netlink: 'syz.1.1516': attribute type 14 has an invalid length.
[  129.489707][   T36] wlan0: Trigger new scan to find an IBSS to join
[  129.851366][T11567] pim6reg1: entered promiscuous mode
[  129.854052][T11567] pim6reg1: entered allmulticast mode
[  129.924903][T11572] gretap0: entered promiscuous mode
[  129.927197][T11572] gretap0: entered allmulticast mode
[  129.950253][T11577] netlink: 'syz.2.1525': attribute type 1 has an invalid length.
[  129.976526][T11579] netlink: 'syz.2.1526': attribute type 15 has an invalid length.
[  129.981629][T11579] netlink: 'syz.2.1526': attribute type 15 has an invalid length.
[  130.020936][T11581] pim6reg1: entered allmulticast mode
[  130.274446][T11608] IPVS: set_ctl: invalid protocol: 8 172.20.20.42:20003
[  130.408342][T11610] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  130.551478][T11623] netlink: 'syz.1.1535': attribute type 1 has an invalid length.
[  130.554191][T11623] nbd: error processing sock list
[  130.557263][T11623] block nbd1: shutting down sockets
[  130.712497][T11660] netlink: 'syz.0.1549': attribute type 4 has an invalid length.
[  130.722138][T11660] netlink: 'syz.0.1549': attribute type 4 has an invalid length.
[  130.742235][   T33] audit: type=1800 audit(1756166139.573:2): pid=11662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1550" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2570 res=0 errno=0
[  130.750549][   T33] audit: type=1800 audit(1756166139.583:3): pid=11662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1550" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2570 res=0 errno=0
[  131.038226][T11678] netlink: 'syz.2.1555': attribute type 1 has an invalid length.
[  131.054116][T11678] bond11: (slave geneve2): making interface the new active one
[  131.057195][T11678] bond11: (slave geneve2): Enslaving as an active interface with an up link
[  131.063234][ T5906] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  131.066608][ T5906] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  131.069952][ T5906] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  131.073047][ T5906] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  131.077371][T11678] 8021q: adding VLAN 0 to HW filter on device bond11
[  131.674502][T11691] : entered promiscuous mode
[  131.755379][T11697] net_ratelimit: 1 callbacks suppressed
[  131.755399][T11697] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.807543][T11705] netlink: 'syz.0.1564': attribute type 5 has an invalid length.
[  131.939471][T11708] tipc: Resetting bearer <eth:syzkaller0>
[  132.034769][T11716] syzkaller1: entered promiscuous mode
[  132.036975][T11716] syzkaller1: entered allmulticast mode
[  132.450313][   T74] wlan0: Trigger new scan to find an IBSS to join
[  132.452357][ T1361] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  132.533379][T11731] bridge11: entered allmulticast mode
[  132.766973][T11753] __nla_validate_parse: 31 callbacks suppressed
[  132.766984][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1576'.
[  132.855685][T11753] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1576'.
[  132.906426][T11765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1579'.
[  132.911014][T11765] netlink: 2044 bytes leftover after parsing attributes in process `syz.1.1579'.
[  132.915237][T11765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1579'.
[  133.106669][T11773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.110513][T11773] syzkaller0: entered promiscuous mode
[  133.112907][T11773] syzkaller0: entered allmulticast mode
[  133.120919][T11773] team_slave_1: mtu greater than device maximum
[  133.124201][T11772] tipc: Resetting bearer <eth:syzkaller0>
[  133.131119][T11772] tipc: Disabling bearer <eth:syzkaller0>
[  133.231410][T11780] bond12: entered promiscuous mode
[  133.233300][T11780] bond12: entered allmulticast mode
[  133.235253][T11780] 8021q: adding VLAN 0 to HW filter on device bond12
[  133.239282][T11780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1585'.
[  133.243525][T11780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1585'.
[  133.287186][T11780] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  133.290851][T11780] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  133.305587][ T7776] lo speed is unknown, defaulting to 1000
[  133.307600][ T7776] syz0: Port: 1 Link DOWN
[  133.309085][ T7776] lo speed is unknown, defaulting to 1000
[  133.311170][ T5906] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  133.314296][ T5906] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  133.318341][ T5906] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  133.321669][ T5906] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  133.414170][T11795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1590'.
[  133.419121][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'.
[  133.636709][T11801] syz.0.1591: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  133.644855][T11801] CPU: 0 UID: 0 PID: 11801 Comm: syz.0.1591 Not tainted syzkaller #0 PREEMPT(full) 
[  133.644878][T11801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.644886][T11801] Call Trace:
[  133.644892][T11801]  <TASK>
[  133.644898][T11801]  dump_stack_lvl+0x189/0x250
[  133.644921][T11801]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.644935][T11801]  ? __pfx__printk+0x10/0x10
[  133.644950][T11801]  ? lock_release+0x4b/0x3e0
[  133.644968][T11801]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  133.644982][T11801]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  133.644995][T11801]  warn_alloc+0x214/0x310
[  133.645014][T11801]  ? __pfx_warn_alloc+0x10/0x10
[  133.645032][T11801]  ? __get_vm_area_node+0x28f/0x300
[  133.645047][T11801]  ? packet_set_ring+0x6f4/0x2350
[  133.645063][T11801]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  133.645088][T11801]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  133.645104][T11801]  ? alloc_pages_mpol+0x3cd/0x4a0
[  133.645121][T11801]  ? packet_set_ring+0x6f4/0x2350
[  133.645134][T11801]  vzalloc_noprof+0xb2/0xf0
[  133.645148][T11801]  ? packet_set_ring+0x6f4/0x2350
[  133.645162][T11801]  packet_set_ring+0x6f4/0x2350
[  133.645181][T11801]  ? __pfx_packet_set_ring+0x10/0x10
[  133.645193][T11801]  ? lock_acquire+0x5f/0x360
[  133.645211][T11801]  ? rcu_is_watching+0x15/0xb0
[  133.645223][T11801]  ? lock_release+0x4b/0x3e0
[  133.645237][T11801]  ? __might_fault+0xb0/0x130
[  133.645252][T11801]  ? __might_fault+0xcc/0x130
[  133.645267][T11801]  ? _copy_from_user+0x94/0xb0
[  133.645281][T11801]  packet_setsockopt+0xc5a/0x12c0
[  133.645295][T11801]  ? __pfx_packet_setsockopt+0x10/0x10
[  133.645309][T11801]  ? map_create+0x1ec/0x14d0
[  133.645326][T11801]  ? aa_sk_perm+0x81e/0x950
[  133.645343][T11801]  ? rcu_is_watching+0x15/0xb0
[  133.645374][T11801]  ? __pfx_aa_sk_perm+0x10/0x10
[  133.645391][T11801]  ? lock_release+0x4b/0x3e0
[  133.645407][T11801]  ? __se_sys_futex+0x36f/0x400
[  133.645420][T11801]  ? aa_sock_opt_perm+0xff/0x1b0
[  133.645432][T11801]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  133.645444][T11801]  ? __pfx_packet_setsockopt+0x10/0x10
[  133.645457][T11801]  do_sock_setsockopt+0x17c/0x1b0
[  133.645471][T11801]  __x64_sys_setsockopt+0x13f/0x1b0
[  133.645484][T11801]  do_syscall_64+0xfa/0x3b0
[  133.645495][T11801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.645506][T11801]  ? exc_page_fault+0x9f/0xf0
[  133.645521][T11801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.645533][T11801] RIP: 0033:0x7f913bb8ebe9
[  133.645545][T11801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.645555][T11801] RSP: 002b:00007f913ca45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  133.645569][T11801] RAX: ffffffffffffffda RBX: 00007f913bdb6090 RCX: 00007f913bb8ebe9
[  133.645578][T11801] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000006
[  133.645585][T11801] RBP: 00007f913bc11e19 R08: 000000000000001c R09: 0000000000000000
[  133.645592][T11801] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  133.645599][T11801] R13: 00007f913bdb6128 R14: 00007f913bdb6090 R15: 00007fff9d8cc2a8
[  133.645612][T11801]  </TASK>
[  133.645704][T11801] Mem-Info:
[  133.767068][T11801] active_anon:10011 inactive_anon:0 isolated_anon:0
[  133.767068][T11801]  active_file:1308 inactive_file:38244 isolated_file:0
[  133.767068][T11801]  unevictable:1768 dirty:67 writeback:0
[  133.767068][T11801]  slab_reclaimable:10711 slab_unreclaimable:76880
[  133.767068][T11801]  mapped:19269 shmem:2566 pagetables:1281
[  133.767068][T11801]  sec_pagetables:0 bounce:0
[  133.767068][T11801]  kernel_misc_reclaimable:0
[  133.767068][T11801]  free:256335 free_pcp:25995 free_cma:0
[  133.781660][T11801] Node 0 active_anon:16108kB inactive_anon:0kB active_file:4076kB inactive_file:19828kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40524kB dirty:240kB writeback:0kB shmem:5184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6768kB pagetables:2928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  133.792036][T11801] Node 1 active_anon:24004kB inactive_anon:0kB active_file:1156kB inactive_file:133148kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36552kB dirty:28kB writeback:0kB shmem:5080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6580kB pagetables:2196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  133.802228][T11801] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  133.811701][T11801] lowmem_reserve[]: 0 811 811 811 811
[  133.813551][T11801] Node 0 DMA32 free:344520kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16108kB inactive_anon:0kB active_file:4076kB inactive_file:19828kB unevictable:3536kB writepending:240kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:37460kB local_pcp:17052kB free_cma:0kB
[  133.824175][T11801] lowmem_reserve[]: 0 0 0 0 0
[  133.825815][T11801] Node 1 DMA32 free:437556kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:17308kB local_pcp:7308kB free_cma:0kB
[  133.835552][T11801] lowmem_reserve[]: 0 0 854 854 854
[  133.837267][T11801] Node 1 Normal free:227904kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24004kB inactive_anon:0kB active_file:1156kB inactive_file:133136kB unevictable:3536kB writepending:28kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:49292kB local_pcp:16568kB free_cma:0kB
[  133.847459][T11801] lowmem_reserve[]: 0 0 0 0 0
[  133.849032][T11801] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  133.853400][T11801] Node 0 DMA32: 1774*4kB (UME) 1096*8kB (U) 467*16kB (UE) 457*32kB (UME) 384*64kB (UME) 253*128kB (UM) 153*256kB (UME) 97*512kB (UM) 13*1024kB (UM) 4*2048kB (UM) 34*4096kB (UM) = 344520kB
[  133.859978][T11801] Node 1 DMA32: 122*4kB (UM) 116*8kB (UM) 110*16kB (UME) 169*32kB (UME) 129*64kB (UME) 97*128kB (UM) 85*256kB (UME) 81*512kB (UME) 69*1024kB (UME) 4*2048kB (ME) 65*4096kB (UM) = 437576kB
[  133.866823][T11801] Node 1 Normal: 732*4kB (UME) 460*8kB (UM) 611*16kB (UME) 338*32kB (UME) 130*64kB (UME) 163*128kB (UE) 132*256kB (UME) 75*512kB (UE) 59*1024kB (UME) 5*2048kB (UM) 7*4096kB (UM) = 227904kB
[  133.873061][T11801] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  133.876078][T11801] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  133.879391][T11801] 42123 total pagecache pages
[  133.881219][T11801] 5 pages in swap cache
[  133.882735][T11801] Free swap  = 124976kB
[  133.884239][T11801] Total swap = 124996kB
[  133.885639][T11801] 786301 pages RAM
[  133.886958][T11801] 0 pages HighMem/MovableOnly
[  133.888754][T11801] 241337 pages reserved
[  133.890261][T11801] 0 pages cma reserved
[  134.048111][T11816] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.052300][T11814] tipc: Resetting bearer <eth:syzkaller0>
[  134.097053][T11814] tipc: Disabling bearer <eth:syzkaller0>
[  134.146413][T11820] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  134.171952][T11822] validate_nla: 3 callbacks suppressed
[  134.171971][T11822] netlink: 'syz.1.1598': attribute type 41 has an invalid length.
[  134.244197][T11832] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1600'.
[  134.427180][T11850] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  134.492442][T11865] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  134.572205][T11865] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  134.622356][T11865] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  134.649050][T11888] lo speed is unknown, defaulting to 1000
[  134.652619][T11865] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  134.720347][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  134.732906][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  134.741251][ T5906] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  134.745222][ T5906] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  134.870657][T11922] lo speed is unknown, defaulting to 1000
[  134.897812][T11920] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  134.902353][T11920] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  135.034858][T11933] netlink: 'syz.0.1624': attribute type 4 has an invalid length.
[  135.037893][T11932] netlink: 'syz.0.1624': attribute type 4 has an invalid length.
[  135.049320][T11932] netlink: 'syz.0.1624': attribute type 4 has an invalid length.
[  135.076473][T11937] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  135.389485][T11983] netlink: 'syz.2.1639': attribute type 17 has an invalid length.
[  135.400911][T11983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  135.406187][ T7776] lo speed is unknown, defaulting to 1000
[  135.408251][ T7776] syz0: Port: 1 Link ACTIVE
[  135.410843][ T7776] lo speed is unknown, defaulting to 1000
[  135.509189][T12002] netlink: 'syz.2.1644': attribute type 1 has an invalid length.
[  135.577717][T12007] sctp: [Deprecated]: syz.2.1647 (pid 12007) Use of struct sctp_assoc_value in delayed_ack socket option.
[  135.577717][T12007] Use struct sctp_sack_info instead
[  135.662327][T12015] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  135.667547][T12015] netlink: 'syz.2.1648': attribute type 4 has an invalid length.
[  135.752666][T12025] netlink: 'syz.2.1650': attribute type 9 has an invalid length.
[  135.757132][T12026] netlink: 'syz.2.1650': attribute type 9 has an invalid length.
[  135.911329][T12041] sch_fq: defrate 0 ignored.
[  136.305984][T12061] netlink: 'syz.2.1661': attribute type 1 has an invalid length.
[  136.317237][T12064] bond14 (unregistering): Released all slaves
[  136.381685][ T9534] lo speed is unknown, defaulting to 1000
[  136.384624][ T9534] syz0: Port: 1 Link DOWN
[  136.386463][ T9534] lo speed is unknown, defaulting to 1000
[  136.407713][T12076] lo speed is unknown, defaulting to 1000
[  136.420745][T12081] tun0: tun_chr_ioctl cmd 1074025675
[  136.423211][T12081] tun0: persist enabled
[  136.425205][T12081] tun0: tun_chr_ioctl cmd 1074025675
[  136.427288][T12081] tun0: persist enabled
[  136.781585][T12107] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  137.250499][T12136] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  137.256010][T12136] bond0 (unregistering): Released all slaves
[  138.267976][T12195] __nla_validate_parse: 27 callbacks suppressed
[  138.267987][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'.
[  138.274739][T12195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1698'.
[  138.278644][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'.
[  138.282238][T12195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1698'.
[  138.444882][T12233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1706'.
[  138.446647][T12226] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  138.473186][T12238] bridge0: port 1(erspan0) entered blocking state
[  138.478833][T12238] bridge0: port 1(erspan0) entered disabled state
[  138.482434][T12238] erspan0: entered allmulticast mode
[  138.485132][T12238] erspan0: left allmulticast mode
[  138.513239][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'.
[  138.517468][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1710'.
[  138.588456][T12256] sctp: [Deprecated]: syz.0.1714 (pid 12256) Use of struct sctp_assoc_value in delayed_ack socket option.
[  138.588456][T12256] Use struct sctp_sack_info instead
[  138.594132][T12255] sctp: [Deprecated]: syz.0.1714 (pid 12255) Use of struct sctp_assoc_value in delayed_ack socket option.
[  138.594132][T12255] Use struct sctp_sack_info instead
[  138.598825][T12258] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1715'.
[  138.605516][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'.
[  138.608487][T12255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1714'.
[  138.732738][T12287] syzkaller1: entered promiscuous mode
[  138.734578][T12287] syzkaller1: entered allmulticast mode
[  138.919342][T12316] team0: Device hsr_slave_0 failed to register rx_handler
[  138.961100][T12324] Bluetooth: MGMT ver 1.23
[  138.996629][T12324] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  139.081537][T12336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  139.084486][T12336] IPv6: NLM_F_CREATE should be set when creating new route
[  139.087525][T12336] IPv6: NLM_F_CREATE should be set when creating new route
[  139.092683][T12336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  139.142660][T12349] lo speed is unknown, defaulting to 1000
[  139.227407][T12359] openvswitch: netlink: nsh attr 2 has unexpected len 2 expected 16
[  139.230392][T12359] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.235252][T12359] openvswitch: netlink: nsh attr 2 has unexpected len 2 expected 16
[  139.238656][T12359] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.343553][T12367] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  139.908825][T12379] validate_nla: 6 callbacks suppressed
[  139.908839][T12379] netlink: 'syz.1.1753': attribute type 2 has an invalid length.
[  140.146759][T12384] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.195346][T12384] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.244088][T12384] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.286383][T12384] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.323590][T12402] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  140.334672][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.342894][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.350536][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.363772][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.403436][T12407] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  140.405925][T12407] IPv6: NLM_F_CREATE should be set when creating new route
[  140.602559][T12418] netlink: 'syz.1.1763': attribute type 10 has an invalid length.
[  140.648703][T12430] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  140.776260][T12446] team0: Device gtp2 is up. Set it down before adding it as a team port
[  141.024939][T12476] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  141.151815][T12484] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  141.187570][T12498] lo speed is unknown, defaulting to 1000
[  141.194810][T12503] bridge14: entered allmulticast mode
[  141.677822][T12533] Set syz0 is full, maxelem 0 reached
[  141.803949][T12538] lo speed is unknown, defaulting to 1000
[  141.894600][T12545] syzkaller0: create flow: hash 743701657 index 1
[  141.914547][T12543] syzkaller0: delete flow: hash 743701657 index 1
[  142.258148][T12580] openvswitch: netlink: Missing key (keys=40, expected=80)
[  142.418843][T12600] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.587482][T12632] !: renamed from dummy0
[  142.615661][T12636] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  142.619956][T12636] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  142.910565][T12650] netlink: 'syz.2.1826': attribute type 2 has an invalid length.
[  142.917516][T12650] gretap0: left promiscuous mode
[  142.921158][T12650] gretap0: left allmulticast mode
[  142.930301][T12650] 8021q: adding VLAN 0 to HW filter on device team0
[  142.933659][ T7776] lo speed is unknown, defaulting to 1000
[  142.937122][ T7776] syz0: Port: 1 Link ACTIVE
[  142.940747][ T8705] lo speed is unknown, defaulting to 1000
[  143.374603][T12655] sctp: [Deprecated]: syz.0.1828 (pid 12655) Use of struct sctp_assoc_value in delayed_ack socket option.
[  143.374603][T12655] Use struct sctp_sack_info instead
[  143.767742][T12741] __nla_validate_parse: 41 callbacks suppressed
[  143.767756][T12741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1836'.
[  143.774517][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'.
[  143.786558][T12741] lo speed is unknown, defaulting to 1000
[  143.818598][T12746] netlink: 'syz.2.1837': attribute type 10 has an invalid length.
[  143.824308][T12746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1837'.
[  143.833205][T12746] batman_adv: batadv0: Adding interface: virt_wifi0
[  143.837082][T12746] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.851774][T12746] batman_adv: batadv0: Interface activated: virt_wifi0
[  143.863230][T12742] lo speed is unknown, defaulting to 1000
[  143.969915][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[  144.132551][T12757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1839'.
[  144.139311][T12756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1839'.
[  144.177088][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'.
[  144.275876][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1843'.
[  144.316803][T12777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1845'.
[  144.417678][T12786] sctp: [Deprecated]: syz.1.1847 (pid 12786) Use of struct sctp_assoc_value in delayed_ack socket option.
[  144.417678][T12786] Use struct sctp_sack_info instead
[  144.426217][T12786] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  144.477049][T12795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1849'.
[  144.478526][T12791] pimreg: entered allmulticast mode
[  145.191540][T12808] netlink: 'syz.2.1853': attribute type 10 has an invalid length.
[  145.221966][T12810] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1854'.
[  145.352666][T12827] netlink: 'syz.2.1859': attribute type 6 has an invalid length.
[  145.383402][T12833] ip6erspan0: entered allmulticast mode
[  145.621057][T12879] net_ratelimit: 4 callbacks suppressed
[  145.621077][T12879] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  145.667444][T12879] tipc: Resetting bearer <eth:syzkaller0>
[  145.683597][ T5855] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.687208][ T5855] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.697297][ T5855] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.706037][ T5855] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.815378][T12908] IPVS: stopping backup sync thread 10789 ...
[  146.380881][T12914] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.386075][T12914] syzkaller0: entered promiscuous mode
[  146.388498][T12914] syzkaller0: entered allmulticast mode
[  146.393878][T12914] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  146.398130][T12914] tipc: Resetting bearer <eth:syzkaller0>
[  146.402596][T12913] tipc: Resetting bearer <eth:syzkaller0>
[  146.407059][T12913] tipc: Disabling bearer <eth:syzkaller0>
[  146.483149][T12918] netlink: 'syz.1.1884': attribute type 30 has an invalid length.
[  146.491856][T12918] netlink: 'syz.1.1884': attribute type 30 has an invalid length.
[  146.492288][ T5855] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  146.498920][ T5855] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  146.506876][ T5855] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  146.511017][ T5855] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  146.669080][T12924] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  146.673729][T12924] CPU: 1 UID: 0 PID: 12924 Comm: syz.0.1886 Not tainted syzkaller #0 PREEMPT(full) 
[  146.673743][T12924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.673749][T12924] Call Trace:
[  146.673752][T12924]  <TASK>
[  146.673757][T12924]  dump_stack_lvl+0x189/0x250
[  146.673772][T12924]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.673782][T12924]  ? __pfx__printk+0x10/0x10
[  146.673792][T12924]  ? kernfs_root+0x1c/0x230
[  146.673803][T12924]  ? kernfs_path_from_node+0x2f/0x290
[  146.673811][T12924]  ? kernfs_path_from_node+0x250/0x290
[  146.673819][T12924]  ? kernfs_path_from_node+0x2f/0x290
[  146.673828][T12924]  sysfs_warn_dup+0x8e/0xa0
[  146.673837][T12924]  sysfs_do_create_link_sd+0xc0/0x110
[  146.673847][T12924]  device_add_class_symlinks+0x1cf/0x240
[  146.673859][T12924]  device_add+0x475/0xb50
[  146.673867][T12924]  wiphy_register+0x1ba6/0x28d0
[  146.673881][T12924]  ? __pfx_wiphy_register+0x10/0x10
[  146.673892][T12924]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  146.673901][T12924]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  146.673912][T12924]  ieee80211_register_hw+0x3425/0x4080
[  146.673924][T12924]  ? ieee80211_register_hw+0x1401/0x4080
[  146.673936][T12924]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  146.673945][T12924]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  146.673959][T12924]  ? __hrtimer_setup+0x187/0x210
[  146.673966][T12924]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  146.673978][T12924]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  146.673992][T12924]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  146.674001][T12924]  ? trace_kmalloc+0x1f/0xd0
[  146.674012][T12924]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  146.674023][T12924]  ? kstrndup+0xbf/0x160
[  146.674034][T12924]  hwsim_new_radio_nl+0xea4/0x1b10
[  146.674044][T12924]  ? __pfx___nla_validate_parse+0x10/0x10
[  146.674058][T12924]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  146.674070][T12924]  ? __nla_parse+0x40/0x60
[  146.674080][T12924]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  146.674091][T12924]  genl_family_rcv_msg_doit+0x215/0x300
[  146.674101][T12924]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  146.674112][T12924]  ? bpf_lsm_capable+0x9/0x20
[  146.674121][T12924]  ? security_capable+0x7e/0x2e0
[  146.674133][T12924]  genl_rcv_msg+0x60e/0x790
[  146.674142][T12924]  ? __pfx_genl_rcv_msg+0x10/0x10
[  146.674150][T12924]  ? __kasan_slab_alloc+0x6c/0x80
[  146.674160][T12924]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  146.674170][T12924]  ? __netlink_lookup+0xbd/0x810
[  146.674177][T12924]  ? rcu_is_watching+0x15/0xb0
[  146.674187][T12924]  netlink_rcv_skb+0x208/0x470
[  146.674198][T12924]  ? __pfx_genl_rcv_msg+0x10/0x10
[  146.674206][T12924]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  146.674219][T12924]  ? lock_release+0x4b/0x3e0
[  146.674230][T12924]  ? down_read+0x1ad/0x2e0
[  146.674237][T12924]  genl_rcv+0x28/0x40
[  146.674245][T12924]  netlink_unicast+0x82f/0x9e0
[  146.674256][T12924]  ? __pfx_netlink_unicast+0x10/0x10
[  146.674266][T12924]  ? netlink_sendmsg+0x642/0xb30
[  146.674276][T12924]  ? skb_put+0x11b/0x210
[  146.674284][T12924]  netlink_sendmsg+0x805/0xb30
[  146.674296][T12924]  ? __pfx_netlink_sendmsg+0x10/0x10
[  146.674308][T12924]  ? futex_unqueue+0x22/0x240
[  146.674316][T12924]  ? aa_sock_msg_perm+0xf1/0x1d0
[  146.674323][T12924]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  146.674331][T12924]  ? __pfx_netlink_sendmsg+0x10/0x10
[  146.674341][T12924]  __sock_sendmsg+0x21c/0x270
[  146.674351][T12924]  ____sys_sendmsg+0x505/0x830
[  146.674360][T12924]  ? __pfx_____sys_sendmsg+0x10/0x10
[  146.674369][T12924]  ? import_iovec+0x74/0xa0
[  146.674378][T12924]  ___sys_sendmsg+0x21f/0x2a0
[  146.674386][T12924]  ? __pfx____sys_sendmsg+0x10/0x10
[  146.674395][T12924]  ? futex_wait+0x285/0x360
[  146.674409][T12924]  ? __fget_files+0x2a/0x420
[  146.674416][T12924]  ? __fget_files+0x3a0/0x420
[  146.674424][T12924]  __x64_sys_sendmsg+0x19b/0x260
[  146.674432][T12924]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  146.674443][T12924]  ? rcu_is_watching+0x15/0xb0
[  146.674451][T12924]  do_syscall_64+0xfa/0x3b0
[  146.674458][T12924]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.674465][T12924]  ? exc_page_fault+0x9f/0xf0
[  146.674483][T12924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.674491][T12924] RIP: 0033:0x7f913bb8ebe9
[  146.674500][T12924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.674507][T12924] RSP: 002b:00007f913ca66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  146.674516][T12924] RAX: ffffffffffffffda RBX: 00007f913bdb5fa0 RCX: 00007f913bb8ebe9
[  146.674523][T12924] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  146.674528][T12924] RBP: 00007f913bc11e19 R08: 0000000000000000 R09: 0000000000000000
[  146.674534][T12924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.674539][T12924] R13: 00007f913bdb6038 R14: 00007f913bdb5fa0 R15: 00007fff9d8cc2a8
[  146.674549][T12924]  </TASK>
[  146.957402][T12941] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.958036][T12937] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  146.993247][T12944] openvswitch: netlink: Message has 8 unknown bytes.
[  147.240933][T12979] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  147.245176][T12981] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  147.439221][T13003] netlink: 'syz.0.1909': attribute type 20 has an invalid length.
[  147.443013][T13003] netlink: 'syz.0.1909': attribute type 20 has an invalid length.
[  147.566797][T13037] netlink: 'syz.0.1921': attribute type 1 has an invalid length.
[  147.570151][T13037] netlink: 'syz.0.1921': attribute type 1 has an invalid length.
[  147.712284][T13052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.906329][T13060] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.953521][T13060] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.961263][T13061] netlink: 'syz.1.1929': attribute type 5 has an invalid length.
[  147.969190][T13061] geneve5: entered promiscuous mode
[  147.972364][T13061] geneve5: entered allmulticast mode
[  147.975480][ T5855] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  147.979890][ T5855] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  148.003396][T13060] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.007624][T13060] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  148.043455][T13060] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.047777][T13060] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  148.091725][ T5855] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  148.095283][ T5855] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  148.103833][ T5855] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  148.107343][ T5855] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  148.115600][ T5855] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  148.119115][ T5855] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  148.128821][ T5855] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  148.132346][ T5855] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  148.391575][T13072] netlink: 'syz.0.1933': attribute type 4 has an invalid length.
[  148.404788][T13072] lo speed is unknown, defaulting to 1000
[  148.915200][T13080] __nla_validate_parse: 33 callbacks suppressed
[  148.915214][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'.
[  148.924473][T13080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1935'.
[  149.000239][T13086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1938'.
[  149.003957][T13086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1938'.
[  149.007999][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1938'.
[  149.012982][T13086] netlink: 6608 bytes leftover after parsing attributes in process `syz.2.1938'.
[  149.209797][T13094] block nbd1: server does not support multiple connections per device.
[  149.213703][T13094] block nbd1: shutting down sockets
[  149.323990][T13102] pim6reg1: entered promiscuous mode
[  149.325883][T13102] pim6reg1: entered allmulticast mode
[  149.342564][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1945'.
[  149.346442][T13104] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1945'.
[  149.371785][T13106] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  149.377692][T13106] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1946'.
[  149.409160][T13118] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  149.474618][T13129] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  149.498290][T13132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1952'.
[  149.611474][T13134] lo speed is unknown, defaulting to 1000
[  149.739010][T13152] syzkaller1: entered promiscuous mode
[  149.745051][T13152] syzkaller1: entered allmulticast mode
[  149.840807][T13154] C: renamed from lo (while UP)
[  149.869278][T13154] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  150.175107][T13191] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  150.180125][T13191] gretap3: entered promiscuous mode
[  150.182399][T13191] gretap3: entered allmulticast mode
[  150.314491][T13203] syzkaller0: entered promiscuous mode
[  150.317070][T13203] syzkaller0: entered allmulticast mode
[  150.323594][T13203] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  150.472961][T13208] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  150.550398][T13213] validate_nla: 9 callbacks suppressed
[  150.550421][T13213] netlink: 'syz.1.1975': attribute type 9 has an invalid length.
[  150.556225][T13213] netlink: 'syz.1.1975': attribute type 6 has an invalid length.
[  150.630504][T13220] C speed is unknown, defaulting to 1000
[  150.662374][T13222] geneve3: entered promiscuous mode
[  150.664709][T13222] geneve3: entered allmulticast mode
[  150.888519][T13226] netlink: 'syz.0.1978': attribute type 3 has an invalid length.
[  150.891985][T13227] netlink: 'syz.0.1978': attribute type 3 has an invalid length.
[  150.927548][T13232] IPv6: NLM_F_CREATE should be specified when creating new route
[  151.304009][T13258] netlink: 'syz.1.1987': attribute type 10 has an invalid length.
[  151.354870][T13264] netlink: 'syz.1.1989': attribute type 10 has an invalid length.
[  151.567220][T13268] netlink: 'syz.1.1991': attribute type 4 has an invalid length.
[  151.607016][T13280] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.613448][T13280] syzkaller0: entered promiscuous mode
[  151.615973][T13280] syzkaller0: entered allmulticast mode
[  151.624401][T13279] tipc: Resetting bearer <eth:syzkaller0>
[  151.638307][T13279] tipc: Disabling bearer <eth:syzkaller0>
[  151.775314][T13291] syzkaller1: entered promiscuous mode
[  151.777255][T13291] syzkaller1: entered allmulticast mode
[  151.780042][T13291] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  151.862888][T13293] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.869753][T13293] batadv_slave_1: entered promiscuous mode
[  151.871743][T13293] batadv_slave_1: entered allmulticast mode
[  151.880068][T13293] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.886371][T13292] tipc: Disabling bearer <eth:syzkaller0>
[  151.980822][T13299] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.989343][T13299] batadv_slave_1: left allmulticast mode
[  152.126358][T13312] geneve3: entered promiscuous mode
[  152.130075][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.133857][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.138832][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.142969][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.458062][T13333] C speed is unknown, defaulting to 1000
[  152.642177][T13346] netlink: 'syz.2.2012': attribute type 1 has an invalid length.
[  152.653641][T13346] sock: sock_timestamping_bind_phc: sock not bind to device
[  152.664075][T13346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  152.813509][T13378] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  152.818958][T13380] netlink: 'syz.1.2020': attribute type 1 has an invalid length.
[  152.827824][T13380] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  152.883803][T13390] batadv_slave_0: entered promiscuous mode
[  152.903914][T13387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.024642][T13404] C speed is unknown, defaulting to 1000
[  153.128834][T13422] C speed is unknown, defaulting to 1000
[  153.457250][T13444] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.481941][T13444] tipc: Resetting bearer <eth:syzkaller0>
[  153.488989][T13443] tipc: Disabling bearer <eth:syzkaller0>
[  153.579211][T13449] bridge0: port 1(erspan0) entered blocking state
[  153.582639][T13449] bridge0: port 1(erspan0) entered disabled state
[  153.585256][T13449] erspan0: entered allmulticast mode
[  153.587953][T13449] erspan0: left allmulticast mode
[  153.885985][T13474] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  154.233187][T13496] C speed is unknown, defaulting to 1000
[  154.241849][T13502] __nla_validate_parse: 65 callbacks suppressed
[  154.241859][T13502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2055'.
[  154.248163][T13502] xt_socket: unknown flags 0x50
[  154.381285][T13496] netlink: 'syz.1.2053': attribute type 13 has an invalid length.
[  154.392942][T13496] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  154.402338][T13512] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  154.454758][T13512] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  154.457252][T13512] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  154.465800][T13512] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  154.468108][T13512] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  154.565196][T13529] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2060'.
[  154.567114][T13531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2061'.
[  154.614332][T13529] dvmrp1: entered allmulticast mode
[  154.627079][   T33] audit: type=1804 audit(1756166163.453:4): pid=13531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2061" name="/newroot/692/cgroup.controllers" dev="tmpfs" ino=3541 res=1 errno=0
[  154.636703][   T33] audit: type=1800 audit(1756166163.463:5): pid=13531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2061" name="cgroup.controllers" dev="tmpfs" ino=3541 res=0 errno=0
[  154.685539][T13534] macvtap0: left promiscuous mode
[  154.688322][T13534] veth3: left promiscuous mode
[  154.693032][T13534] macsec2: left promiscuous mode
[  154.695560][T13534] bond6: left promiscuous mode
[  154.699005][T13534] veth8: left promiscuous mode
[  154.702189][T13534] veth9: left promiscuous mode
[  154.707190][T13534] geneve4: left promiscuous mode
[  154.714148][T13534] vti1: left promiscuous mode
[  154.717100][T13534] veth13: left promiscuous mode
[  154.723831][T13534] geneve5: left promiscuous mode
[  154.726587][T13534] gretap3: left promiscuous mode
[  154.821687][T13546] sit0: entered promiscuous mode
[  154.828154][T13546] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2066'.
[  154.859033][T13553] netlink: 308 bytes leftover after parsing attributes in process `syz.0.2068'.
[  154.868021][T13553] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  155.051973][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2074'.
[  155.068976][T13569] C speed is unknown, defaulting to 1000
[  155.181053][T13569] geneve0: entered allmulticast mode
[  155.201580][T13584] openvswitch: netlink: Key type 8720 is out of range max 32
[  155.791445][T13599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2081'.
[  155.795154][T13599] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2081'.
[  156.008864][T13610] validate_nla: 3 callbacks suppressed
[  156.008875][T13610] netlink: 'syz.1.2084': attribute type 21 has an invalid length.
[  156.019746][T13610] IPv6: NLM_F_CREATE should be specified when creating new route
[  156.025761][T13606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2083'.
[  156.027621][T13610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  156.032547][T13610] IPv6: NLM_F_CREATE should be set when creating new route
[  156.035520][T13610] IPv6: NLM_F_CREATE should be set when creating new route
[  156.038574][T13610] IPv6: NLM_F_CREATE should be set when creating new route
[  156.103006][T13613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2085'.
[  156.433503][T13674] netlink: 'syz.0.2101': attribute type 4 has an invalid length.
[  156.457673][T13674] C speed is unknown, defaulting to 1000
[  156.592222][T13684] netlink: 'syz.1.2103': attribute type 1 has an invalid length.
[  156.614637][T13684] bond11: entered promiscuous mode
[  156.617194][T13684] bond11: entered allmulticast mode
[  156.624148][T13684] 8021q: adding VLAN 0 to HW filter on device bond11
[  156.647128][T13692] netlink: 'syz.0.2106': attribute type 1 has an invalid length.
[  156.650647][T13692] netlink: 'syz.0.2106': attribute type 2 has an invalid length.
[  156.678889][T13694] netlink: 'syz.0.2107': attribute type 29 has an invalid length.
[  156.909708][T13706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.324394][T13712] vlan2: entered promiscuous mode
[  157.326973][T13712] vlan2: entered allmulticast mode
[  157.329243][T13712] hsr_slave_1: entered allmulticast mode
[  157.426535][T13724] C speed is unknown, defaulting to 1000
[  157.488229][T13729] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20002
[  158.321157][T13761] netlink: 'syz.1.2125': attribute type 1 has an invalid length.
[  158.329156][T13761] vlan0: entered allmulticast mode
[  158.331194][T13761] veth1: entered allmulticast mode
[  158.390008][T13763] tap0: tun_chr_ioctl cmd 1074025677
[  158.392482][T13763] tap0: linktype set to 804
[  158.504517][T13775] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  158.523596][T13773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.529355][T13777] netlink: 'syz.0.2132': attribute type 29 has an invalid length.
[  158.533484][T13778] netlink: 'syz.0.2132': attribute type 29 has an invalid length.
[  158.536654][T13773] syzkaller0: entered promiscuous mode
[  158.539384][T13773] syzkaller0: entered allmulticast mode
[  158.543876][T13778] netlink: 'syz.0.2132': attribute type 29 has an invalid length.
[  158.593418][T13773] tipc: Resetting bearer <eth:syzkaller0>
[  158.798488][T13814] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  158.930987][T13831] C speed is unknown, defaulting to 1000
[  158.975896][T13836] geneve3: entered promiscuous mode
[  158.977826][T13836] geneve3: entered allmulticast mode
[  159.109349][T13843] vlan2: entered allmulticast mode
[  159.112150][T13843] bond13: entered allmulticast mode
[  159.263126][T13849] __nla_validate_parse: 56 callbacks suppressed
[  159.263139][T13849] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2150'.
[  159.416108][T13861] nbd: nbd0 already in use
[  159.512215][T13871] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  159.517274][T13871] netem: change failed
[  159.525812][T13873] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  159.666827][T13891] ==================================================================
[  159.669798][T13891] BUG: KFENCE: use-after-free read in xfrm_alloc_spi+0x3b9/0xf30
[  159.669798][T13891] 
[  159.673256][T13891] Use-after-free read at 0xffff88813658c0c4 (in kfence-#197):
[  159.676772][T13891]  xfrm_alloc_spi+0x3b9/0xf30
[  159.678592][T13891]  xfrm_alloc_userspi+0x70b/0xc90
[  159.680307][T13891]  xfrm_user_rcv_msg+0x7a3/0xab0
[  159.682009][T13891]  netlink_rcv_skb+0x208/0x470
[  159.683649][T13891]  xfrm_netlink_rcv+0x79/0x90
[  159.685266][T13891]  netlink_unicast+0x82f/0x9e0
[  159.686893][T13891]  netlink_sendmsg+0x805/0xb30
[  159.688662][T13891]  __sock_sendmsg+0x21c/0x270
[  159.690296][T13891]  ____sys_sendmsg+0x505/0x830
[  159.691926][T13891]  ___sys_sendmsg+0x21f/0x2a0
[  159.693566][T13891]  __x64_sys_sendmsg+0x19b/0x260
[  159.695231][T13891]  do_syscall_64+0xfa/0x3b0
[  159.696988][T13891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.699371][T13891] 
[  159.700380][T13891] kfence-#197: 0xffff88813658cf00-0xffff88813658cfef, size=240, cache=skbuff_head_cache
[  159.700380][T13891] 
[  159.705201][T13891] allocated by task 5806 on cpu 1 at 149.920780s (9.784420s ago):
[  159.708476][T13891]  __alloc_skb+0x112/0x2d0
[  159.710674][T13891]  __tcp_send_ack+0xaf/0x620
[  159.712655][T13891]  tcp_recvmsg_locked+0x2d7f/0x3660
[  159.714836][T13891]  tcp_recvmsg+0x216/0x810
[  159.716745][T13891]  inet_recvmsg+0x147/0x250
[  159.718629][T13891]  sock_recvmsg+0x1a8/0x270
[  159.720595][T13891]  sock_read_iter+0x231/0x2f0
[  159.722623][T13891]  vfs_read+0x55a/0xa30
[  159.724406][T13891]  ksys_read+0x145/0x250
[  159.726221][T13891]  do_syscall_64+0xfa/0x3b0
[  159.728183][T13891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.730695][T13891] 
[  159.731727][T13891] freed by task 5806 on cpu 1 at 149.948210s (9.783515s ago):
[  159.734642][T13891]  tcp_rcv_established+0xe9e/0x1eb0
[  159.736353][T13891]  tcp_v4_do_rcv+0xa23/0xce0
[  159.738112][T13891]  __release_sock+0x21c/0x350
[  159.739766][T13891]  release_sock+0x5f/0x1f0
[  159.741351][T13891]  tcp_sendmsg+0x39/0x50
[  159.742825][T13891]  __sock_sendmsg+0x19c/0x270
[  159.744729][T13891]  sock_write_iter+0x258/0x330
[  159.747331][T13891]  vfs_write+0x5c9/0xb30
[  159.748890][T13891]  ksys_write+0x145/0x250
[  159.750570][T13891]  do_syscall_64+0xfa/0x3b0
[  159.752189][T13891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.754376][T13891] 
[  159.755272][T13891] CPU: 0 UID: 0 PID: 13891 Comm: syz.0.2164 Not tainted syzkaller #0 PREEMPT(full) 
[  159.758600][T13891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.762029][T13891] RIP: 0010:xfrm_alloc_spi+0x3b9/0xf30
[  159.763791][T13891] Code: c1 08 c1 74 0a e8 a7 d1 9d f7 e9 14 02 00 00 49 8d 9d c4 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 9f 01 00 00 <8b> 1b 89 df 44 89 f6 e8 3b d3 9d f7 44 39 f3 0f 85 df 00 00 00 49
[  159.770017][T13891] RSP: 0018:ffffc900079770e0 EFLAGS: 00010246
[  159.772036][T13891] RAX: 0000000000000000 RBX: ffff88813658c0c4 RCX: 0000000000080000
[  159.774841][T13891] RDX: ffffc9000401a000 RSI: 000000000000017b RDI: 000000000000017c
[  159.777568][T13891] RBP: ffffc90007977230 R08: 0000000000000000 R09: 0000000000000000
[  159.780486][T13891] R10: dffffc0000000000 R11: fffff52000f2ee0c R12: dffffc0000000000
[  159.783167][T13891] R13: ffff88813658c000 R14: 0000000005000000 R15: ffffc900079776a0
[  159.785862][T13891] FS:  00007f913ca666c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  159.788990][T13891] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  159.791253][T13891] CR2: ffff88813658c0c4 CR3: 0000000029816000 CR4: 00000000000006f0
[  159.793983][T13891] Call Trace:
[  159.795145][T13891]  <TASK>
[  159.796164][T13891]  ? xfrm_alloc_spi+0x2a0/0xf30
[  159.798036][T13891]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  159.799934][T13891]  ? xfrm_find_acq+0x87/0xa0
[  159.801535][T13891]  xfrm_alloc_userspi+0x70b/0xc90
[  159.803282][T13891]  ? apparmor_capable+0x137/0x1b0
[  159.805047][T13891]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  159.806974][T13891]  ? __nla_parse+0x40/0x60
[  159.808535][T13891]  xfrm_user_rcv_msg+0x7a3/0xab0
[  159.810380][T13891]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  159.812516][T13891]  ? __pfx___mutex_trylock_common+0x10/0x10
[  159.815068][T13891]  ? kasan_save_track+0x4f/0x80
[  159.817163][T13891]  ? rcu_is_watching+0x15/0xb0
[  159.819179][T13891]  ? trace_contention_end+0x39/0x120
[  159.821443][T13891]  ? __mutex_lock+0x335/0x1350
[  159.823274][T13891]  netlink_rcv_skb+0x208/0x470
[  159.824985][T13891]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  159.827057][T13891]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  159.829360][T13891]  ? lock_release+0x4b/0x3e0
[  159.831401][T13891]  ? net_generic+0x1e/0x240
[  159.833498][T13891]  ? net_generic+0x1e/0x240
[  159.835480][T13891]  ? netlink_deliver_tap+0x2e/0x1b0
[  159.837747][T13891]  xfrm_netlink_rcv+0x79/0x90
[  159.839816][T13891]  netlink_unicast+0x82f/0x9e0
[  159.841864][T13891]  ? __pfx_netlink_unicast+0x10/0x10
[  159.844187][T13891]  ? netlink_sendmsg+0x642/0xb30
[  159.846367][T13891]  ? skb_put+0x11b/0x210
[  159.848214][T13891]  netlink_sendmsg+0x805/0xb30
[  159.850323][T13891]  ? __pfx_netlink_sendmsg+0x10/0x10
[  159.852627][T13891]  ? futex_unqueue+0x22/0x240
[  159.854657][T13891]  ? aa_sock_msg_perm+0xf1/0x1d0
[  159.856763][T13891]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  159.859019][T13891]  ? __pfx_netlink_sendmsg+0x10/0x10
[  159.861349][T13891]  __sock_sendmsg+0x21c/0x270
[  159.863371][T13891]  ____sys_sendmsg+0x505/0x830
[  159.865479][T13891]  ? __pfx_____sys_sendmsg+0x10/0x10
[  159.867793][T13891]  ? import_iovec+0x74/0xa0
[  159.869788][T13891]  ___sys_sendmsg+0x21f/0x2a0
[  159.871827][T13891]  ? __pfx____sys_sendmsg+0x10/0x10
[  159.874077][T13891]  ? futex_wait+0x285/0x360
[  159.876062][T13891]  ? __fget_files+0x2a/0x420
[  159.878035][T13891]  ? __fget_files+0x3a0/0x420
[  159.880096][T13891]  __x64_sys_sendmsg+0x19b/0x260
[  159.882239][T13891]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  159.884613][T13891]  ? rcu_is_watching+0x15/0xb0
[  159.886714][T13891]  ? rcu_is_watching+0x15/0xb0
[  159.888758][T13891]  do_syscall_64+0xfa/0x3b0
[  159.890749][T13891]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.893348][T13891]  ? exc_page_fault+0x9f/0xf0
[  159.895329][T13891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.897811][T13891] RIP: 0033:0x7f913bb8ebe9
[  159.899732][T13891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.907879][T13891] RSP: 002b:00007f913ca66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  159.911422][T13891] RAX: ffffffffffffffda RBX: 00007f913bdb5fa0 RCX: 00007f913bb8ebe9
[  159.914834][T13891] RDX: 0000000004000080 RSI: 0000200000000540 RDI: 0000000000000003
[  159.918173][T13891] RBP: 00007f913bc11e19 R08: 0000000000000000 R09: 0000000000000000
[  159.921574][T13891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  159.924967][T13891] R13: 00007f913bdb6038 R14: 00007f913bdb5fa0 R15: 00007fff9d8cc2a8
[  159.928376][T13891]  </TASK>
[  159.929762][T13891] ==================================================================
[  159.933215][T13891] Kernel panic - not syncing: KFENCE: panic_on_warn set ...
[  159.936346][T13891] CPU: 0 UID: 0 PID: 13891 Comm: syz.0.2164 Not tainted syzkaller #0 PREEMPT(full) 
[  159.940265][T13891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.944415][T13891] Call Trace:
[  159.945878][T13891]  <TASK>
[  159.947163][T13891]  dump_stack_lvl+0x99/0x250
[  159.949113][T13891]  ? __asan_memcpy+0x40/0x70
[  159.951100][T13891]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.953342][T13891]  ? __pfx__printk+0x10/0x10
[  159.955357][T13891]  vpanic+0x281/0x750
[  159.957086][T13891]  ? __pfx_vpanic+0x10/0x10
[  159.959044][T13891]  ? is_bpf_text_address+0x292/0x2b0
[  159.961348][T13891]  panic+0xb9/0xc0
[  159.962975][T13891]  ? __pfx_panic+0x10/0x10
[  159.964895][T13891]  ? __pfx__printk+0x10/0x10
[  159.966878][T13891]  check_panic_on_warn+0x89/0xb0
[  159.968975][T13891]  kfence_report_error+0x748/0xa40
[  159.971134][T13891]  ? __pfx_kfence_report_error+0x10/0x10
[  159.973480][T13891]  ? xfrm_alloc_spi+0x3b9/0xf30
[  159.975585][T13891]  ? xfrm_alloc_userspi+0x70b/0xc90
[  159.977796][T13891]  ? xfrm_user_rcv_msg+0x7a3/0xab0
[  159.979974][T13891]  ? netlink_rcv_skb+0x208/0x470
[  159.982101][T13891]  ? xfrm_netlink_rcv+0x79/0x90
[  159.984206][T13891]  ? netlink_unicast+0x82f/0x9e0
[  159.986340][T13891]  ? netlink_sendmsg+0x805/0xb30
[  159.988396][T13891]  ? __sock_sendmsg+0x21c/0x270
[  159.990460][T13891]  ? ____sys_sendmsg+0x505/0x830
[  159.992606][T13891]  ? ___sys_sendmsg+0x21f/0x2a0
[  159.994715][T13891]  ? __x64_sys_sendmsg+0x19b/0x260
[  159.996919][T13891]  ? do_syscall_64+0xfa/0x3b0
[  159.998896][T13891]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.001441][T13891]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  160.003665][T13891]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  160.006104][T13891]  kfence_handle_page_fault+0x358/0x4d0
[  160.008453][T13891]  page_fault_oops+0x19f/0xa10
[  160.010580][T13891]  ? stack_depot_save_flags+0x40/0x860
[  160.012950][T13891]  ? __pfx_fixup_exception+0x10/0x10
[  160.015239][T13891]  ? __pfx_page_fault_oops+0x10/0x10
[  160.017522][T13891]  ? is_prefetch+0x403/0x640
[  160.019453][T13891]  ? do_raw_spin_lock+0x121/0x290
[  160.021514][T13891]  ? __pfx_is_prefetch+0x10/0x10
[  160.023587][T13891]  ? do_raw_spin_unlock+0x4d/0x240
[  160.025726][T13891]  __bad_area_nosemaphore+0x11a/0x780
[  160.027991][T13891]  ? __pfx___bad_area_nosemaphore+0x10/0x10
[  160.030472][T13891]  ? spurious_kernel_fault+0x1c7/0x6b0
[  160.032777][T13891]  ? do_kern_addr_fault+0x30/0x80
[  160.034909][T13891]  exc_page_fault+0xc3/0xf0
[  160.036813][T13891]  asm_exc_page_fault+0x26/0x30
[  160.038837][T13891] RIP: 0010:xfrm_alloc_spi+0x3b9/0xf30
[  160.041138][T13891] Code: c1 08 c1 74 0a e8 a7 d1 9d f7 e9 14 02 00 00 49 8d 9d c4 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 9f 01 00 00 <8b> 1b 89 df 44 89 f6 e8 3b d3 9d f7 44 39 f3 0f 85 df 00 00 00 49
[  160.049264][T13891] RSP: 0018:ffffc900079770e0 EFLAGS: 00010246
[  160.051821][T13891] RAX: 0000000000000000 RBX: ffff88813658c0c4 RCX: 0000000000080000
[  160.055140][T13891] RDX: ffffc9000401a000 RSI: 000000000000017b RDI: 000000000000017c
[  160.058489][T13891] RBP: ffffc90007977230 R08: 0000000000000000 R09: 0000000000000000
[  160.061792][T13891] R10: dffffc0000000000 R11: fffff52000f2ee0c R12: dffffc0000000000
[  160.065122][T13891] R13: ffff88813658c000 R14: 0000000005000000 R15: ffffc900079776a0
[  160.068454][T13891]  ? xfrm_alloc_spi+0x2a0/0xf30
[  160.070526][T13891]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  160.072713][T13891]  ? xfrm_find_acq+0x87/0xa0
[  160.074627][T13891]  xfrm_alloc_userspi+0x70b/0xc90
[  160.076734][T13891]  ? apparmor_capable+0x137/0x1b0
[  160.078849][T13891]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  160.081180][T13891]  ? __nla_parse+0x40/0x60
[  160.083074][T13891]  xfrm_user_rcv_msg+0x7a3/0xab0
[  160.085153][T13891]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  160.087484][T13891]  ? __pfx___mutex_trylock_common+0x10/0x10
[  160.089930][T13891]  ? kasan_save_track+0x4f/0x80
[  160.091984][T13891]  ? rcu_is_watching+0x15/0xb0
[  160.094010][T13891]  ? trace_contention_end+0x39/0x120
[  160.096276][T13891]  ? __mutex_lock+0x335/0x1350
[  160.098300][T13891]  netlink_rcv_skb+0x208/0x470
[  160.100327][T13891]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  160.102629][T13891]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  160.104733][T13891]  ? lock_release+0x4b/0x3e0
[  160.106282][T13891]  ? net_generic+0x1e/0x240
[  160.108178][T13891]  ? net_generic+0x1e/0x240
[  160.110064][T13891]  ? netlink_deliver_tap+0x2e/0x1b0
[  160.111966][T13891]  xfrm_netlink_rcv+0x79/0x90
[  160.113566][T13891]  netlink_unicast+0x82f/0x9e0
[  160.115390][T13891]  ? __pfx_netlink_unicast+0x10/0x10
[  160.117604][T13891]  ? netlink_sendmsg+0x642/0xb30
[  160.119721][T13891]  ? skb_put+0x11b/0x210
[  160.121531][T13891]  netlink_sendmsg+0x805/0xb30
[  160.123607][T13891]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.125806][T13891]  ? futex_unqueue+0x22/0x240
[  160.127832][T13891]  ? aa_sock_msg_perm+0xf1/0x1d0
[  160.129893][T13891]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  160.132120][T13891]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.134355][T13891]  __sock_sendmsg+0x21c/0x270
[  160.136389][T13891]  ____sys_sendmsg+0x505/0x830
[  160.138470][T13891]  ? __pfx_____sys_sendmsg+0x10/0x10
[  160.140763][T13891]  ? import_iovec+0x74/0xa0
[  160.142721][T13891]  ___sys_sendmsg+0x21f/0x2a0
[  160.144730][T13891]  ? __pfx____sys_sendmsg+0x10/0x10
[  160.146971][T13891]  ? futex_wait+0x285/0x360
[  160.148942][T13891]  ? __fget_files+0x2a/0x420
[  160.150915][T13891]  ? __fget_files+0x3a0/0x420
[  160.152891][T13891]  __x64_sys_sendmsg+0x19b/0x260
[  160.155034][T13891]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  160.157285][T13891]  ? rcu_is_watching+0x15/0xb0
[  160.159371][T13891]  ? rcu_is_watching+0x15/0xb0
[  160.161451][T13891]  do_syscall_64+0xfa/0x3b0
[  160.163384][T13891]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.165955][T13891]  ? exc_page_fault+0x9f/0xf0
[  160.168044][T13891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.170622][T13891] RIP: 0033:0x7f913bb8ebe9
[  160.172511][T13891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.180530][T13891] RSP: 002b:00007f913ca66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  160.184094][T13891] RAX: ffffffffffffffda RBX: 00007f913bdb5fa0 RCX: 00007f913bb8ebe9
[  160.187522][T13891] RDX: 0000000004000080 RSI: 0000200000000540 RDI: 0000000000000003
[  160.190891][T13891] RBP: 00007f913bc11e19 R08: 0000000000000000 R09: 0000000000000000
[  160.194285][T13891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.197165][T13891] R13: 00007f913bdb6038 R14: 00007f913bdb5fa0 R15: 00007fff9d8cc2a8
[  160.200444][T13891]  </TASK>
[  160.202591][T13891] Kernel Offset: disabled
[  160.204421][T13891] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:56:08  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000063 RBX=0000000000000063 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000010db RDI=00000000000010dc RBP=00000000000003f8 RSP=ffffc900079763b0
R8 =ffff888020520237 R9 =1ffff110040a4046 R10=dffffc0000000000 R11=ffffffff854f2040
R12=dffffc0000000000 R13=ffffffff99afd8fd R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f20bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f913ca666c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffff88813658c0c4 CR3=0000000029816000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f913bd87498 00007f913bd87470 XMM03=00007f913bd874a8 00007f913bd874a0
XMM04=00007f913c8ed100 00007f913bd87460 XMM05=00007f913bd87478 00007f913bd874c0
XMM06=00007f913bd874b8 00007f913bd874b0 XMM07=00007f913bd874a8 00007f913bd874a0
XMM08=0000000000000000 00007f913bc12ee7 XMM09=0000000000000000 00007f913bc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=67cdcc530dbb3900 RBX=ffffffff819683b8 RCX=67cdcc530dbb3900 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38530 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=0000000112626000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f2846012e53
XMM06=0000000000000000 00007f2846012e4d XMM07=0000000000000000 00007f2846012e61
XMM08=0000000000000000 00007f2846012ee7 XMM09=0000000000000000 00007f2846012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
