last executing test programs:

2m8.437785153s ago: executing program 1 (id=402):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000640)=ANY=[@ANYBLOB="4001000010000100fcefff0700000000fc0100000000000000000000000000010000000000000000000000000000000000000000200000049bfb000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000002000000000000000000000000000000046c000000fe8000000000001900000000000000bb00000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000050000000000000004000000000000000d000000000000000a00000000000000030000000004000000000000fcffffff000000000a000106aa00000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800160040000000bd0401496bcbd1f906e5017e6a6c7a0595d4dfa7f07ad5387ebe5d8ad3d1f77ae8ca0c62ad6e6ebc50"], 0x140}}, 0x20000804)

2m8.437689102s ago: executing program 1 (id=403):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f983c00fe8000000000000000000000001000aaff02000000000000000000000000000188"], 0xfce)

2m8.319615918s ago: executing program 1 (id=404):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4040085}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x1b, 0x5, 0x3e0, 0x0, 0xa8, 0xffffffff, 0x150, 0x0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @empty, @private=0xa010102, @gre_key=0x2, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @remote, @gre_key=0x3, @gre_key=0x1}}}}, {{@ip={@multicast1, @remote, 0xff, 0x0, 'syzkaller1\x00', 'netdevsim0\x00', {0xff}, {}, 0x29, 0x2, 0x54}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x6}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @rand_addr=0xc6, @rand_addr=0x64010100, @gre_key=0x6, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x1f, "a1ac"}}, @common=@unspec=@cluster={{0x30}, {0x6, 0x8, 0xd}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @local, @multicast2, @icmp_id=0x66, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440)
openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRES16=<r3=>0x0], 0xc)
unshare(0x400)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000340)=ANY=[@ANYRESOCT=r3, @ANYBLOB="a023cfbf8214060eaa4b8c462ae00660280e2bcc17d57cf82fc721cacebf44c8b687349baa312c04d15729e998a1b55ef9c61f2e858f1269716b709dcc54a4e5f755ec2f7d86c8db8647b82012a606ff51b3d20deae322091947c22ea8338393b74c48529943d92edcfb9256050a58af63a2eab235eff33fd2d349720e194645ba6c7d99ef9b93b5dc30f3e764f30ccdb7502f5a0b7a5ff5e00a", @ANYRES64=0x0], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="07000000798c44ee04000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4040085}, 0x10) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x1b, 0x5, 0x3e0, 0x0, 0xa8, 0xffffffff, 0x150, 0x0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @empty, @private=0xa010102, @gre_key=0x2, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @remote, @gre_key=0x3, @gre_key=0x1}}}}, {{@ip={@multicast1, @remote, 0xff, 0x0, 'syzkaller1\x00', 'netdevsim0\x00', {0xff}, {}, 0x29, 0x2, 0x54}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x6}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @rand_addr=0xc6, @rand_addr=0x64010100, @gre_key=0x6, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x1f, "a1ac"}}, @common=@unspec=@cluster={{0x30}, {0x6, 0x8, 0xd}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @local, @multicast2, @icmp_id=0x66, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) (async)
openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) (async)
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRES16=0x0], 0xc) (async)
unshare(0x400) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000340)=ANY=[@ANYRESOCT=r3, @ANYBLOB="a023cfbf8214060eaa4b8c462ae00660280e2bcc17d57cf82fc721cacebf44c8b687349baa312c04d15729e998a1b55ef9c61f2e858f1269716b709dcc54a4e5f755ec2f7d86c8db8647b82012a606ff51b3d20deae322091947c22ea8338393b74c48529943d92edcfb9256050a58af63a2eab235eff33fd2d349720e194645ba6c7d99ef9b93b5dc30f3e764f30ccdb7502f5a0b7a5ff5e00a", @ANYRES64=0x0], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94) (async)
close(r0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="07000000798c44ee04000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) (async)

2m8.319492335s ago: executing program 1 (id=405):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=""/37, 0x54, 0x31, 0x1, 0x6}, 0x28)

2m8.250404276s ago: executing program 1 (id=406):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0xfe}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x10)
r4 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000540)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xff4b)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000003040)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {0xfffa}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x3a}}}], 0x30}, 0xc4)

2m8.248765811s ago: executing program 1 (id=407):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f000000b100)={0x0, 0x0, &(0x7f000000b0c0)={&(0x7f000000af00)={0x58, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x4b}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x64000840}, 0x2000c044)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r8], 0x3c}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg0\x00', <r9=>0x0}) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r11=>0x0})
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r11, {0x2}}}, 0x24}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x190, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) (async)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r15, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r14, 0x100000000) (async)
ioctl$INCFS_IOC_PERMIT_FILL(r14, 0x40046721, &(0x7f00000000c0))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bind$bt_l2cap(r13, &(0x7f0000000000)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe)

1m52.701618546s ago: executing program 32 (id=407):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f000000b100)={0x0, 0x0, &(0x7f000000b0c0)={&(0x7f000000af00)={0x58, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x4b}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x64000840}, 0x2000c044)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r8], 0x3c}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg0\x00', <r9=>0x0}) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r11=>0x0})
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r11, {0x2}}}, 0x24}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x190, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) (async)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r15, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r14, 0x100000000) (async)
ioctl$INCFS_IOC_PERMIT_FILL(r14, 0x40046721, &(0x7f00000000c0))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bind$bt_l2cap(r13, &(0x7f0000000000)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe)

1.990353191s ago: executing program 0 (id=3174):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0000c00f00000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000200189"], 0xfce)

1.816480064s ago: executing program 0 (id=3179):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x40000)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x31)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000680)={0x8, &(0x7f0000000580)=[{0xf945, 0xa0, &(0x7f0000000180)="ecbe3b13733707a5ec6fbf15f6450d3be9e7aceab672703e28c6ec921a7326623bd45d51f1bd44fcbcea3ca6e030f1c20392c2d18e7a2e9e984600a6d232d2b6d2ef90bf6f9e5b1fda7a01fb986e8bf0a5d3f31bf24ac7bbf1ae7ef9c3eea57cacc4ae8884036b2687313cc8922d2809913ad9070f553b75b0f82ee2d54285866832c85ccfad3da962e399e405e60bee66a99fdddd4eaa0a5c5b2d81e44ef2ab", 0x0, 0x1}, {0x6, 0xd7, &(0x7f0000000280)="19843bcfe8f5863f4328d147834742b8e7ebf25850bfce0f7c06a2a17594f55424fe261aecf44534c7d329c5745bcdea18b5b9b8b1129337e5877789038a87c4d96efea009abd9cf40f89b6c188bd570f16fa0386e0ff965b0dac570f80e71f8b8292ac47cf524769807405b23fea68c28b9f0914d1f35809c3993b99777a0bf7bccf55fcaec2841cc7c5bd9b8a1482d6fd1679e983c85460459c89cb35d661909ccd2dd7d81a2d3402148104c4fe4fbe91d6b78754dd516943e7b3943857a16ebf1f314253dc6ff40ecb3a635f5a361147b0cec9357b8", 0x1, 0x1}, {0xd79, 0x43, &(0x7f00000000c0)="e91693ac0ba1e912f99158e04ed4f00bb1ecf6e6d97741054bc80d24660f706b51410330b4041599c5bbf5d534d4f17ef7dc813b12f8eb80c50ad2e0fd988fcd19c98f", 0x0, 0x1}, {0x2, 0x2, &(0x7f0000000380)="4dc6", 0x1}, {0x6, 0x61, &(0x7f00000003c0)="2117c4c74152a3287ab799fcc799c747bbd606135918ac4cd69d2af904b13afafc271fd9ea7615e3d06ca6de671e4bb8d9eff768dc0b82ec811276a9991975f99f5d222f6fa8bc67a71de1f7ed94b69885322b57acf49a5e42681ab10606c807e5", 0x2}, {0x4, 0xbd, &(0x7f0000000440)="133e5b2a0e53b7acdd51c04e4506e381c3bc2b285a8765e66564a63ede7b0e865711ad4a39b368505a16e9c8e882436c2368beeb112c1a97928fe5ecad4b2b1590e2ba30e6b9d47ff4edc9fa519228d236f79c8e0a965edc0da7d39ec2042a6f4aa17726bf577e977f54b28e67a28e3b41f1b1b2ad9594c566b8b3c33390c6cbd80338658431140138373cb75a754f66ae4667818545ca32a3ecda6a49169d040b6923eaacc1f952e4b38c1f977aa415905fbb4dc16b927e1d02d854e6"}, {0x1c59, 0x2e, &(0x7f0000000500)="4d64820cef0b993b83081715024b36f16f6744287f32f251e85c34ee07942b900787b90a5751da126a30308d83db", 0x1, 0x1}, {0x7, 0x17, &(0x7f0000000540)="7564685a4dd214c186f37727aa462018322f244e3f1804", 0x187847fc2d296d09}]})
ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa)
listen(r1, 0x0)
r2 = socket$tipc(0x1e, 0x1, 0x0)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
accept4$tipc(r1, 0x0, 0x0, 0x0)
close(0x3)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x44180}, 0x20000040)

1.648344901s ago: executing program 0 (id=3184):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, <r3=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000001e40), 0x4)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40808000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}}, 0x8)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', <r7=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000540)={'syztnl1\x00', r7, 0x7, 0x10, 0x1c, 0x1, {{0x14, 0x4, 0x2, 0x2, 0x50, 0x64, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp={0x44, 0x8, 0xce, 0x0, 0x8, [0x3]}, @timestamp={0x44, 0x18, 0xcd, 0x0, 0x4, [0x10000, 0xffffff00, 0x8, 0x8001, 0x101]}, @ssrr={0x89, 0x17, 0x1e, [@broadcast, @local, @private=0xa010100, @broadcast, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000600), 0x4)
r9 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r9, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010002000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a430100002900f8f7070008002800065a0000140003006261746164765f736c6800"/44], 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x4004004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9)

1.648162155s ago: executing program 2 (id=3185):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xffffffffffffffff, 0xe)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x20008041)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r6, r7, 0x0, 0x7feff000)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r8, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0408000007500500300012800b000100627269646765000020000280050017000100a13710b2eb8000000c00220000000800000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000066ec24684870752a54ce4f471d8474f8bba27c3529f2c1069737031d63de156470a6d21426f9efb884b550a2cf996f1253eb32f1fcd286b6ada573d51c4a6da1c58baa68ce4b09a4dbc5b048e80ed00ca5f20d9eea396ea1621d2c24684155c6b92707cbff728effea188c700bc9688f00baeaa48e44754de0ead99726b2a35fa084f1f4d1946cb8faddc92736e8048c099654a91dd91d13bf51e69ad6e218e199b39074357ec73364506fa9492b64ad507956952cfe77676ea7b07b0947a4e7e36f3d714fdc8e4b5a93961a8c138eba730f164e10a4c7a6795abf359eea4ec3daed54d343c42911cc48a33a7ee2d8e2d9fdf257187aac398699b77f"], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)

727.479051ms ago: executing program 0 (id=3201):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r5 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000001c0)={r1, r4})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x2d, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x3d, 0x701, 0x0, 0x0, {0x3}}, 0x20}}, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYBLOB="fde881ea4cba1c2e85dc389e699b062adca972292499a8d0d192551bf806d14d3b7e19193cf08b068de9c0c81cf5617fa54a0c93f38cfea1415031c47b3570d448bb6a48efd9f32a27f57f1142618d1329879d5af3eaa5c0f5df037afbd44aeac6883418552a07fbed536692c196bc0ab572fdac26417bd0d25e"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x40)

667.656221ms ago: executing program 2 (id=3203):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080), &(0x7f0000000100)=0x4)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f00000006c0)='d', 0xc400}], 0x2}}], 0x1, 0x404c001)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000001028000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

610.312109ms ago: executing program 2 (id=3204):
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000012140104020000000000000008004b001300000008"], 0x38}}, 0x80)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2689064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

605.542243ms ago: executing program 0 (id=3206):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x8004, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@empty, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
close(0x3)
connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x1de, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000030000000000000000aaff02000000000000000000000000000106"], 0xffe)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0xfec725552820ffbc, 0xffffffffffffffff, 0x0)

519.85489ms ago: executing program 2 (id=3208):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000640)=ANY=[@ANYBLOB="4001000010000100fcefff0700000000fc0100000000000000000000000000010000000000000000000000000000000000000000200000049bfb000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x140}}, 0x20000804)

519.547624ms ago: executing program 2 (id=3209):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6866f59e001406fffc010000000000000000000000000001ff05"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x59, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7af}, 0x48)
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000380)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4010050}, 0x48001)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x88a8}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xaf}}]}, 0x44}}, 0x24000000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

440.610361ms ago: executing program 0 (id=3210):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000000000b0103000000000000bd4fa600e34fd511dd7e38f6a08b0300000200000a080002400000000008000340000000000d000100727066696c74657200"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(0x4)
getsockname$inet(r2, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), 0x0, 0x10, 0x5}, 0x94)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r7, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000480)=""/179, 0xb3}, {&(0x7f0000000240)=""/31, 0x1f}], 0x3}, 0x2000000}], 0x2, 0x101, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})

439.840882ms ago: executing program 3 (id=3211):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_DST_IPV6={0x14, 0x1, @local}]}, 0x30}}, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket(0x5, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', <r3=>0x0})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x3, 'bond_slave_1\x00', {0x1}, 0x3})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f00000059c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x7, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)='d', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x4}, 0x8)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x14, 0x30, 0x400, 0x0, 0x3}, 0x14}}, 0x0)
connect$can_bcm(r1, &(0x7f0000000040)={0x1d, r3}, 0x10)

370.793273ms ago: executing program 2 (id=3212):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000480)=<r2=>0x0, &(0x7f00000004c0)=0x4)
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000040)="714ffbaa5e009e525a3d4d05133baaf10d0a6ae2aac10d807f664c6493988f906fe534da76dcd485ef34721aa974f14ee00b767b5e00084787a929f5f404f021f980309c299cb2450661dfa309a955eb671eed6487cf1efa41124799b64cd91543587c4b050b86f01de652", 0x6b}, {&(0x7f00000000c0)="edccd5600c8e305fd9a58c211d0dfdf2a72ac8196f2286b5a65b71fce7883bf66b727a87dc484f452f13ad4e765693a98c5a15344b9c71064f534e2baea2558b9b3433b601de862ab017346b9375010d92", 0x51}, {&(0x7f0000000200)="7333b06ffc3474743e17a3925030603ed572ac1bc6238b6bfd8fe983a6bd2f212cc0035fa7c326d3cbeb9434c971712cd96f91f98f8f0a4b15efddad43d68fc13281999edf38313d7aef7b717be1a0f31d6910276a8da933a188484487818cceed2db4baa6d40d445a32450a74116d79872362cfd96264f49b50b93bf7943c0695580c007b8b807aa229ec77a9027ed8650fce6cd0ac3e88216d31d5f7db58f43ce9", 0xa2}, {&(0x7f0000000140)="b4af65b7a67862c1ddc4b9db11db61e6cf4aea4776b015882d8d2d0b9d5e5e8fe0f079a6eac48b8e45c71264e5bf644c175cace7d1f9788b5be5b478af31b8195263072a8c1382a302edfa6125eecb9d52a8af0b7786c3367c0ae40deea69c37bc1de0c5a4637ced676cf8f0b40706a45256bfe929e4", 0x76}, {&(0x7f0000000300)="1ceccc0ee1190d808d3051499ba378aed96e04d075a4c37c5b0806ebbbac2d3f", 0x20}, {&(0x7f0000000340)="72b773b784a7be4e3fbd513e3f86b4744fbf763177f93554f8283d5577cbe54c54aa671fcc5c29bea1db683c47a1e63cf53659b40e2d01576c5e3d72927b3fa587612f65ca0619db9352df5ea3f11571a8000f81d748fef9b3d85ae21b527a82c30f6cbe2aea8c8d35a8dcc705e6c3d7e6ab072cf61bfcc94a3f08f331c2f99351edb0e7d503bc05f1ea", 0x8a}], 0x6, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x35}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x98}, 0x40001)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000600)={<r3=>0x0, 0x542, 0x30, 0x3, 0x78}, &(0x7f0000000640)=0x18)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000680)={r3, 0x9, 0x93}, 0x8)
getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, &(0x7f00000001c0))

310.016574ms ago: executing program 3 (id=3213):
readv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4)
sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x400, 0x4, 0x75e, 0xc, 0x1, 0x14c, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0xd}, 0x50)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000240)=0x5, 0x4)
recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/214, 0xd6}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x46b7}], 0x2, 0x20, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0)
setsockopt$RDS_GET_MR(r4, 0x114, 0x2, 0x0, 0x20)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100))

309.493936ms ago: executing program 3 (id=3214):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xab}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xf0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265001400028008000700e000000208000600ac14142b08000400"], 0x78}, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0)

309.142082ms ago: executing program 3 (id=3215):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
r1 = socket(0x10, 0x803, 0x0) (rerun: 32)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 64)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 64)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) (async)
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100ff03850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x8000000000000000}, 0x18) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
r10 = socket(0x400000000010, 0x3, 0x0) (async)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff7, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x6, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={<r13=>0x0}, &(0x7f0000000300)=0xc)
sendmsg$nl_netfilter(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x10, 0x8, 0x5, 0x70bd29, 0x25dfdbfd, {0x1, 0x0, 0x9}, [@typed={0x8, 0x118, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x66, 0x0, 0x0, @pid=r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000005}, 0x4010)
r14 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
r16 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r16, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r17=>0x0}) (rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r17, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r15, {0xa, 0x9}, {}, {0xc, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x5}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18934}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2)

169.427223ms ago: executing program 3 (id=3216):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x144, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x104, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0xd8, 0x9, 0x0, 0x1, [@m_bpf={0xd4, 0x1e, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x6, 0x5, 0xb4, 0xa5}, {0xcc, 0xd8, 0x9, 0xe}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffffffa, 0x5, 0xffffffffffffffff, 0x10000, 0x10000}}]}, {0x49, 0x6, "cdc0d4226748cbf59c2823643af4039afbdb9215f0afec585a77a575cf2caee84678ed79c9fa076cbd69d3828a76fc4a3e3196f3a087530b8db00da19f216cbc5314efc0be"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x441d}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) (async)
socket(0x10, 0x803, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
r3 = socket$packet(0x11, 0x3, 0x300) (async)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) (async)
r11 = accept4(r10, 0x0, 0x0, 0x80800)
sendmmsg$alg(r11, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff", 0xffffffd9}, {&(0x7f00000002c0)="ebe3a0e9", 0x4}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x40800)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)

0s ago: executing program 3 (id=3217):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x8004, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@empty, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
close(0x3)
connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x1de, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000050000000000000000aaff02000000000000000000000000000106"], 0xffe)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0xfec725552820ffbc, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28618' (ED25519) to the list of known hosts.
syzkaller login: [   41.075211][ T5770] cgroup: Unknown subsys name 'net'
[   41.181460][ T5770] cgroup: Unknown subsys name 'cpuset'
[   41.185621][ T5770] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.733634][ T5770] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.492865][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.496061][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.498637][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.501768][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.505052][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.557579][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.562607][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.565761][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.570776][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.575385][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.587474][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.600155][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.610613][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.623004][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.629980][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.662133][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   46.814918][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.817752][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.821606][ T5841] bridge_slave_0: entered allmulticast mode
[   46.824465][ T5841] bridge_slave_0: entered promiscuous mode
[   46.830214][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.832587][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.834981][ T5841] bridge_slave_1: entered allmulticast mode
[   46.837898][ T5841] bridge_slave_1: entered promiscuous mode
[   46.871220][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.884541][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.922598][ T5841] team0: Port device team_slave_0 added
[   46.935160][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   46.940941][ T5841] team0: Port device team_slave_1 added
[   46.989460][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.992404][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.003857][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.010678][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.013574][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.024834][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.060549][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   47.116707][ T5841] hsr_slave_0: entered promiscuous mode
[   47.119515][ T5841] hsr_slave_1: entered promiscuous mode
[   47.156349][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.159193][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.161697][ T5849] bridge_slave_0: entered allmulticast mode
[   47.164475][ T5849] bridge_slave_0: entered promiscuous mode
[   47.167575][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.170317][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.173351][ T5849] bridge_slave_1: entered allmulticast mode
[   47.176054][ T5849] bridge_slave_1: entered promiscuous mode
[   47.225267][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.242947][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.276771][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.279837][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.282771][ T5846] bridge_slave_0: entered allmulticast mode
[   47.285885][ T5846] bridge_slave_0: entered promiscuous mode
[   47.294024][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.296857][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.299928][ T5846] bridge_slave_1: entered allmulticast mode
[   47.302842][ T5846] bridge_slave_1: entered promiscuous mode
[   47.306767][ T5849] team0: Port device team_slave_0 added
[   47.311509][ T5849] team0: Port device team_slave_1 added
[   47.372788][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.375450][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.385145][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.392067][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.398478][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.403067][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.412966][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.419690][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.468334][ T5846] team0: Port device team_slave_0 added
[   47.473205][ T5846] team0: Port device team_slave_1 added
[   47.492494][ T5849] hsr_slave_0: entered promiscuous mode
[   47.495768][ T5849] hsr_slave_1: entered promiscuous mode
[   47.498720][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   47.503127][ T5849] Cannot create hsr debugfs directory
[   47.522537][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.525328][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.535129][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.560020][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.562390][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.571702][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.664838][ T5846] hsr_slave_0: entered promiscuous mode
[   47.667231][ T5846] hsr_slave_1: entered promiscuous mode
[   47.669873][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   47.671906][ T5846] Cannot create hsr debugfs directory
[   47.674062][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.680576][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.697149][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.713541][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.858507][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.865337][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.875886][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.887148][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.949807][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.955295][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.963068][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.968050][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.973675][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.005254][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   48.027224][ T2173] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.030156][ T2173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.054283][ T2173] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.057267][ T2173] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.087710][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.115464][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   48.138654][ T2173] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.141865][ T2173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.152819][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.155264][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.211281][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.236040][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   48.264163][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.266920][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.280815][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.283063][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.329900][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.394060][ T5841] veth0_vlan: entered promiscuous mode
[   48.401825][ T5841] veth1_vlan: entered promiscuous mode
[   48.417624][ T5841] veth0_macvtap: entered promiscuous mode
[   48.433795][ T5841] veth1_macvtap: entered promiscuous mode
[   48.447820][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.459513][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.463269][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.476455][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.486080][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.492708][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.503186][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.518033][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.566759][ T5846] veth0_vlan: entered promiscuous mode
[   48.569945][ T5852] Bluetooth: hci0: command tx timeout
[   48.585525][ T5849] veth0_vlan: entered promiscuous mode
[   48.593243][ T5846] veth1_vlan: entered promiscuous mode
[   48.617727][ T5849] veth1_vlan: entered promiscuous mode
[   48.626277][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.636659][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.649460][ T5842] Bluetooth: hci1: command tx timeout
[   48.650790][ T5846] veth0_macvtap: entered promiscuous mode
[   48.651484][ T5852] Bluetooth: hci2: command tx timeout
[   48.655994][ T5846] veth1_macvtap: entered promiscuous mode
[   48.671952][ T5849] veth0_macvtap: entered promiscuous mode
[   48.676881][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.678401][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.682053][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.688137][ T5849] veth1_macvtap: entered promiscuous mode
[   48.693930][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.702451][ T5858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.706508][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.711222][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.718068][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.735933][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.753045][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.764391][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.800789][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.803768][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.806944][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.830876][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.864082][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.867148][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.914303][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4'.
[   48.927243][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.931954][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.951967][ T2173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.955234][ T2173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.998769][ T2173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.003238][ T2173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.013690][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5'.
[   49.143481][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'.
[   49.178304][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.184581][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.207375][ T5932] Illegal XDP return value 4294967289 on prog  (id 2) dev N/A, expect packet loss!
[   49.221543][ T5930] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET)
[   49.493037][ T5952] netlink: 232 bytes leftover after parsing attributes in process `syz.1.17'.
[   49.521164][ T5958] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18'.
[   49.525220][ T5958] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   49.555081][ T5961] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   49.590589][ T5964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20'.
[   49.597326][ T5964] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.673607][ T5964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   49.690693][ T5964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   49.696178][ T5964] bond0 (unregistering): Released all slaves
[   49.896401][ T5983] netlink: 248 bytes leftover after parsing attributes in process `syz.1.24'.
[   49.931311][ T5987] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[   50.105414][ T5998] netlink: 'syz.1.26': attribute type 3 has an invalid length.
[   50.161496][ T6003] netlink: 48 bytes leftover after parsing attributes in process `syz.1.26'.
[   50.487116][ T6029] warning: `syz.0.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   50.597432][ T6038] bond0: Error: Cannot enslave bond to itself.
[   50.600452][ T6038] netlink: 87 bytes leftover after parsing attributes in process `syz.1.33'.
[   50.649466][ T5852] Bluetooth: hci0: command tx timeout
[   50.716666][ T6048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.37'.
[   50.729628][ T5852] Bluetooth: hci2: command tx timeout
[   50.733348][ T5842] Bluetooth: hci1: command tx timeout
[   50.830899][ T6059] tipc: Started in network mode
[   50.832726][ T6059] tipc: Node identity 86effeb8b2c9, cluster identity 4711
[   50.837166][ T6059] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   50.845412][ T6059] syzkaller0: entered promiscuous mode
[   50.852599][ T6059] syzkaller0: entered allmulticast mode
[   50.858599][ T6065] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   50.927273][ T6059] tipc: Resetting bearer <eth:syzkaller0>
[   50.941251][ T6058] tipc: Resetting bearer <eth:syzkaller0>
[   50.953879][ T6058] tipc: Disabling bearer <eth:syzkaller0>
[   50.965674][ T6077] Zero length message leads to an empty skb
[   51.099081][ T6082] nbd0: detected capacity change from 0 to 549764202496
[   51.104887][   T57] block nbd0: Receive control failed (result -104)
[   51.974599][ T6126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   52.454644][ T6182] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   52.461295][ T6182] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   52.569956][   T27] wlan1: Trigger new scan to find an IBSS to join
[   52.730430][ T5852] Bluetooth: hci0: command tx timeout
[   52.748454][ T6212] netlink: 'syz.2.85': attribute type 10 has an invalid length.
[   52.768601][ T6212] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.773879][ T6212] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   52.809842][ T5852] Bluetooth: hci2: command tx timeout
[   52.812039][ T5852] Bluetooth: hci1: command tx timeout
[   52.839394][ T6224] netlink: 'syz.1.89': attribute type 1 has an invalid length.
[   52.844535][ T6224] netlink: 'syz.1.89': attribute type 2 has an invalid length.
[   52.847569][ T6224] netlink: 'syz.1.89': attribute type 8 has an invalid length.
[   52.860598][ T6226] netlink: 'syz.1.89': attribute type 1 has an invalid length.
[   52.866318][ T6226] netlink: 'syz.1.89': attribute type 2 has an invalid length.
[   52.872719][ T6226] netlink: 'syz.1.89': attribute type 8 has an invalid length.
[   52.952192][ T6238] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   53.076772][ T6252] netlink: 'syz.1.99': attribute type 4 has an invalid length.
[   53.310711][ T6272] tun0: tun_chr_ioctl cmd 1074025675
[   53.312956][ T6272] tun0: persist enabled
[   53.315015][ T6272] tun0: tun_chr_ioctl cmd 1074025675
[   53.317262][ T6272] tun0: persist enabled
[   53.461798][ T6282] netlink: 'syz.2.109': attribute type 29 has an invalid length.
[   53.636736][ T6294] tap0: tun_chr_ioctl cmd 1074025676
[   53.638800][ T6294] tap0: owner set to 0
[   53.784186][ T6302] syz_tun: entered allmulticast mode
[   53.864528][ T6302] syz_tun: left allmulticast mode
[   54.242825][ T6336] tipc: Started in network mode
[   54.244531][ T6336] tipc: Node identity 3ab5e04cecfd, cluster identity 4711
[   54.247253][ T6336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.250040][ T6336] syzkaller0: entered promiscuous mode
[   54.251797][ T6336] syzkaller0: entered allmulticast mode
[   54.271752][ T6336] tipc: Resetting bearer <eth:syzkaller0>
[   54.280027][ T6334] tipc: Resetting bearer <eth:syzkaller0>
[   54.300949][ T6334] tipc: Disabling bearer <eth:syzkaller0>
[   54.398503][ T6349] __nla_validate_parse: 25 callbacks suppressed
[   54.398512][ T6349] netlink: 120 bytes leftover after parsing attributes in process `syz.2.134'.
[   54.444489][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'.
[   54.495717][ T6358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.137'.
[   54.662563][ T6368] netlink: 40 bytes leftover after parsing attributes in process `syz.1.140'.
[   54.665773][ T6368] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   54.810265][ T5842] Bluetooth: hci0: command tx timeout
[   54.889200][ T5842] Bluetooth: hci1: command tx timeout
[   54.891586][ T5842] Bluetooth: hci2: command tx timeout
[   55.067272][ T6403] netlink: 128 bytes leftover after parsing attributes in process `syz.2.147'.
[   55.073120][ T6403] netlink: 3 bytes leftover after parsing attributes in process `syz.2.147'.
[   55.078748][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'.
[   55.085642][ T6405] veth1: entered promiscuous mode
[   55.091579][ T6405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.146'.
[   55.095134][ T6405] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[   55.590488][ T6444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   55.599902][ T6444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   55.605161][    C0] vcan0: j1939_tp_rxtimer: 0xffff888039809800: rx timeout, send abort
[   55.609036][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888039809800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   55.609269][ T2173] wlan1: Trigger new scan to find an IBSS to join
[   55.616850][ T6444] bond0 (unregistering): Released all slaves
[   55.654595][ T6451] sctp: [Deprecated]: syz.2.159 (pid 6451) Use of struct sctp_assoc_value in delayed_ack socket option.
[   55.654595][ T6451] Use struct sctp_sack_info instead
[   55.663024][ T6451] validate_nla: 6 callbacks suppressed
[   55.663032][ T6451] netlink: 'syz.2.159': attribute type 3 has an invalid length.
[   55.734273][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'.
[   55.740395][ T6460] netlink: 'syz.1.162': attribute type 29 has an invalid length.
[   55.743827][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.162'.
[   55.853484][ T6479] IPVS: Error joining to the multicast group
[   55.955504][ T6492] IPVS: Error joining to the multicast group
[   56.041504][ T6499] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.355809][ T6523] ip6erspan0: entered promiscuous mode
[   56.630818][ T6541] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   56.748493][ T6549] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   57.682144][ T6616] ip6gre1: entered allmulticast mode
[   58.253180][ T6651] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[   58.256221][ T6651] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[   58.381664][ T6657] bridge_slave_0: left allmulticast mode
[   58.383605][ T6657] bridge_slave_0: left promiscuous mode
[   58.385556][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.390460][ T6657] bridge_slave_1: left allmulticast mode
[   58.392401][ T6657] bridge_slave_1: left promiscuous mode
[   58.394404][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.418137][ T6657] team0: Port device team_slave_0 removed
[   58.425032][ T6657] team0: Port device team_slave_1 removed
[   58.427892][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.432347][ T6657] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.437928][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.442403][ T6657] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.484470][ T6657] team0: Mode changed to "activebackup"
[   58.652396][   T53] wlan1: Trigger new scan to find an IBSS to join
[   59.048310][ T6703] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   59.051649][ T6703] macvtap1: entered allmulticast mode
[   59.053444][ T6703] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   59.057965][ T6703] batman_adv: batadv0: Adding interface: macvtap1
[   59.061219][ T6703] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.069784][ T6703] batman_adv: batadv0: Interface activated: macvtap1
[   59.245211][   T33] audit: type=1804 audit(1755427615.443:2): pid=6709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.259" name="/newroot/104/memory.events" dev="tmpfs" ino=541 res=1 errno=0
[   59.254999][   T33] audit: type=1800 audit(1755427615.443:3): pid=6709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.259" name="memory.events" dev="tmpfs" ino=541 res=0 errno=0
[   59.561366][   T36] wlan1: Creating new IBSS network, BSSID f2:da:eb:e9:c0:1f
[   59.566148][   T10] cfg80211: failed to load regulatory.db
[   59.792473][ T6740] __nla_validate_parse: 19 callbacks suppressed
[   59.792483][ T6740] netlink: 292 bytes leftover after parsing attributes in process `syz.2.270'.
[   59.893476][ T6748] pim6reg1: entered promiscuous mode
[   59.895715][ T6748] pim6reg1: entered allmulticast mode
[   59.956511][ T6754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.273'.
[   60.017355][ T6758] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.046752][ T6758] tipc: Disabling bearer <eth:syzkaller0>
[   60.206462][ T6786] netlink: 'syz.0.281': attribute type 15 has an invalid length.
[   60.209025][ T6786] netlink: 666 bytes leftover after parsing attributes in process `syz.0.281'.
[   60.250728][ T6794] netlink: 'syz.0.282': attribute type 9 has an invalid length.
[   60.254907][ T6794] netlink: 'syz.0.282': attribute type 7 has an invalid length.
[   60.257898][ T6794] netlink: 'syz.0.282': attribute type 8 has an invalid length.
[   60.562214][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'.
[   60.568556][ T6818] netlink: 32 bytes leftover after parsing attributes in process `syz.2.292'.
[   60.677228][ T6820] netlink: 'syz.2.293': attribute type 7 has an invalid length.
[   60.685883][ T6820] : entered promiscuous mode
[   61.127500][ T6850] netlink: 'syz.1.306': attribute type 1 has an invalid length.
[   61.166503][ T6850] 8021q: adding VLAN 0 to HW filter on device bond3
[   61.170277][ T6850] bond2: (slave bond3): making interface the new active one
[   61.172914][ T6850] bond2: (slave bond3): Enslaving as an active interface with an up link
[   61.284092][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'.
[   61.301300][ T6873] vlan0: entered promiscuous mode
[   61.311559][ T6873] team0: Port device vlan0 added
[   61.418335][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'.
[   61.574783][ T6896] Bluetooth: MGMT ver 1.23
[   61.750363][ T6911] netlink: 52 bytes leftover after parsing attributes in process `syz.1.327'.
[   61.753921][ T6911] netlink: 52 bytes leftover after parsing attributes in process `syz.1.327'.
[   61.756890][ T6911] netlink: 52 bytes leftover after parsing attributes in process `syz.1.327'.
[   62.154010][ T6935] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   62.206049][ T6940] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   62.451419][ T6966] openvswitch: netlink: Tunnel attr 1 has unexpected len 3 expected 4
[   62.542519][ T6970] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[   62.765396][ T6990] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   62.915086][ T5893] IPVS: starting estimator thread 0...
[   63.019336][ T7003] IPVS: using max 82 ests per chain, 196800 per kthread
[   63.886079][ T7040] netlink: 'syz.1.377': attribute type 7 has an invalid length.
[   63.888842][ T7040] netlink: 'syz.1.377': attribute type 8 has an invalid length.
[   63.895997][ T7040] erspan0: entered promiscuous mode
[   63.898577][ T7040] batadv_slave_1: entered promiscuous mode
[   63.908485][ T7040] bridge_slave_0: left allmulticast mode
[   63.911021][ T7040] bridge_slave_0: left promiscuous mode
[   63.913260][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.923697][ T7040] bridge_slave_1: left allmulticast mode
[   63.925513][ T7040] bridge_slave_1: left promiscuous mode
[   63.927459][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.942710][ T7040] team0: Port device team_slave_0 removed
[   63.959969][ T7040] team0: Port device team_slave_1 removed
[   63.968198][ T7040] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.971528][ T7040] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.974969][ T7040] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.977331][ T7040] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.991977][ T7040] bond2: (slave bond3): Releasing backup interface
[   65.038420][ T7147] __nla_validate_parse: 21 callbacks suppressed
[   65.038430][ T7147] netlink: 36 bytes leftover after parsing attributes in process `syz.1.407'.
[   65.045817][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'.
[   65.053114][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'.
[   65.475656][ T7171] netlink: 'syz.0.415': attribute type 11 has an invalid length.
[   65.888239][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'.
[   65.913668][ T7222] netlink: 60 bytes leftover after parsing attributes in process `syz.2.431'.
[   66.089861][ T7237] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   66.157443][ T7244] Bluetooth: MGMT ver 1.23
[   66.196929][ T7246] netlink: 36 bytes leftover after parsing attributes in process `syz.0.441'.
[   66.199865][ T7246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.441'.
[   66.203015][ T7246] netlink: 36 bytes leftover after parsing attributes in process `syz.0.441'.
[   66.205792][ T7246] netlink: 36 bytes leftover after parsing attributes in process `syz.0.441'.
[   66.291760][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'.
[   66.546582][ T7276] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   66.549953][ T7276] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.124120][ T7341] raw_sendmsg: syz.0.477 forgot to set AF_INET. Fix it!
[   68.403768][ T7352] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   68.408816][ T7352] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   68.424665][ T7352] tipc: Started in network mode
[   68.426280][ T7352] tipc: Node identity , cluster identity 4711
[   68.430410][ T7352] tipc: Failed to obtain node identity
[   68.432228][ T7352] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   69.067916][ T7375] netlink: 'syz.0.497': attribute type 1 has an invalid length.
[   69.072963][ T7376] netlink: 'syz.0.497': attribute type 1 has an invalid length.
[   69.104386][ T7326] Set syz1 is full, maxelem 65536 reached
[   69.116847][ T7375] bond1: (slave veth5): Enslaving as an active interface with a down link
[   69.125886][ T7375] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.583773][ T7379] __nla_validate_parse: 15 callbacks suppressed
[   70.583788][ T7379] netlink: 232 bytes leftover after parsing attributes in process `syz.2.492'.
[   70.631481][ T7388] netlink: 20 bytes leftover after parsing attributes in process `syz.2.494'.
[   70.689763][ T7396] netlink: 232 bytes leftover after parsing attributes in process `syz.2.496'.
[   71.135101][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.613130][ T7416] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.616583][ T7416] syzkaller0: entered promiscuous mode
[   71.622019][ T7416] syzkaller0: entered allmulticast mode
[   71.628725][ T7416] netlink: 56 bytes leftover after parsing attributes in process `syz.2.503'.
[   71.640639][ T7416] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   71.676181][ T7415] tipc: Resetting bearer <eth:syzkaller0>
[   71.696383][ T7415] tipc: Disabling bearer <eth:syzkaller0>
[   72.836635][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'.
[   72.911131][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.914374][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.130544][ T7417] Set syz1 is full, maxelem 65536 reached
[   73.223988][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.513'.
[   73.282514][ T7458] netlink: 36 bytes leftover after parsing attributes in process `syz.2.515'.
[   73.285593][ T7458] 8021q: VLANs not supported on ipvlan1
[   73.451797][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.519'.
[   73.464300][ T7466] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.477708][ T7466] bond1: (slave veth3): Enslaving as an active interface with an up link
[   73.499666][ T7466] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.552429][ T7466] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.599911][ T7466] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.652053][ T7466] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.727728][ T5879] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.737391][ T5879] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.744729][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.753074][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.566809][ T7484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.525'.
[   74.687452][ T7489] netlink: 'syz.0.527': attribute type 1 has an invalid length.
[   74.693953][ T7489] netlink: 244 bytes leftover after parsing attributes in process `syz.0.527'.
[   75.010054][ T7513] team_slave_0: entered promiscuous mode
[   75.012059][ T7513] team_slave_1: entered promiscuous mode
[   75.014362][ T7513] macsec1: entered promiscuous mode
[   75.016210][ T7513] team0: entered promiscuous mode
[   75.046227][ T7515] netlink: 'syz.2.535': attribute type 2 has an invalid length.
[   75.730162][ T7521] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   76.071882][ T7536] __nla_validate_parse: 1 callbacks suppressed
[   76.071891][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'.
[   76.100172][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'.
[   78.195447][ T7547] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   78.289460][ T7551] tap0: tun_chr_ioctl cmd 35111
[   78.316106][ T7553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.547'.
[   78.329096][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.547'.
[   78.392998][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'.
[   78.396008][ T7557] netlink: 34 bytes leftover after parsing attributes in process `syz.0.550'.
[   78.401722][ T7557] netlink: 3 bytes leftover after parsing attributes in process `syz.0.550'.
[   78.409683][ T7557] batadv1: entered promiscuous mode
[   78.411695][ T7557] batadv1: entered allmulticast mode
[   78.471951][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'.
[   78.474893][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'.
[   78.477830][ T7560] netlink: 'syz.2.551': attribute type 6 has an invalid length.
[   80.782340][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   80.786985][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   80.790637][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   80.794064][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   80.806328][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   80.858421][ T7576] netlink: 'syz.0.556': attribute type 1 has an invalid length.
[   80.864504][ T7576] netlink: 184 bytes leftover after parsing attributes in process `syz.0.556'.
[   81.000203][ T7571] chnl_net:caif_netlink_parms(): no params data found
[   81.122194][ T7571] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.125092][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.127463][ T7571] bridge_slave_0: entered allmulticast mode
[   81.131893][ T7571] bridge_slave_0: entered promiscuous mode
[   81.137899][ T7571] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.153604][ T7571] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.162593][ T7571] bridge_slave_1: entered allmulticast mode
[   81.166420][ T7571] bridge_slave_1: entered promiscuous mode
[   81.204777][ T7571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.211262][ T7571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.248430][ T7571] team0: Port device team_slave_0 added
[   81.253595][ T7606] __nla_validate_parse: 1 callbacks suppressed
[   81.253607][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'.
[   81.253970][ T7571] team0: Port device team_slave_1 added
[   81.310103][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.312986][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.323767][ T7571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.335572][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.338591][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.351203][ T7571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.389830][   T61] block nbd0: Possible stuck request ffff888022b10000: control (read@0,4096B). Runtime 30 seconds
[   81.452889][ T7571] hsr_slave_0: entered promiscuous mode
[   81.456092][ T7571] hsr_slave_1: entered promiscuous mode
[   81.470103][ T7571] debugfs: 'hsr0' already exists in 'hsr'
[   81.475631][ T7571] Cannot create hsr debugfs directory
[   81.535978][ T7621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.573'.
[   81.601525][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'.
[   81.682892][ T7571] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   81.701835][ T7571] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   81.703780][ T7636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.578'.
[   81.708277][ T7636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.578'.
[   81.718714][ T7571] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   81.732181][ T7571] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   81.761916][ T7571] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.764426][ T7571] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.766824][ T7571] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.769248][ T7571] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.798086][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'.
[   81.802452][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.580'.
[   81.805601][ T7648] netlink: 'syz.0.580': attribute type 6 has an invalid length.
[   81.857402][ T7571] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.878115][   T89] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.885116][   T89] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.900632][ T7571] 8021q: adding VLAN 0 to HW filter on device team0
[   81.911832][   T89] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.914132][   T89] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.923857][   T89] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.926926][   T89] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.074645][ T7571] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.113179][ T7571] veth0_vlan: entered promiscuous mode
[   82.127629][ T7571] veth1_vlan: entered promiscuous mode
[   82.144671][ T7571] veth0_macvtap: entered promiscuous mode
[   82.148799][ T7571] veth1_macvtap: entered promiscuous mode
[   82.158966][ T7571] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.168185][ T7571] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.174664][ T5858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.186609][ T5858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.197659][ T5858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.204108][ T5858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.250958][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.255467][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.279751][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.282634][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.391085][ T7683] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   82.558176][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'.
[   82.835718][ T7711] delete_channel: no stack
[   82.889461][ T5842] Bluetooth: hci3: command tx timeout
[   82.906979][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'.
[   82.946548][ T7720] netlink: 356 bytes leftover after parsing attributes in process `syz.0.601'.
[   83.165180][ T7731] netlink: 'syz.3.603': attribute type 1 has an invalid length.
[   83.168767][ T7731] netlink: 'syz.3.603': attribute type 1 has an invalid length.
[   83.252992][ T7733] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode
[   83.263064][ T7733] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   84.521874][ T7802] netlink: 'syz.0.628': attribute type 1 has an invalid length.
[   84.525306][ T7802] netlink: 'syz.0.628': attribute type 1 has an invalid length.
[   84.528239][ T7802] netlink: 'syz.0.628': attribute type 1 has an invalid length.
[   84.531946][ T7802] netlink: 'syz.0.628': attribute type 1 has an invalid length.
[   84.535342][ T7802] netlink: 'syz.0.628': attribute type 1 has an invalid length.
[   84.538160][ T7802] netlink: 'syz.0.628': attribute type 1 has an invalid length.
[   84.969163][ T5842] Bluetooth: hci3: command tx timeout
[   85.518628][ T7869] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   86.690212][ T7905] __nla_validate_parse: 14 callbacks suppressed
[   86.690225][ T7905] netlink: 312 bytes leftover after parsing attributes in process `syz.0.666'.
[   86.896107][ T7914] macsec1: entered promiscuous mode
[   86.898512][ T7914] team0: entered promiscuous mode
[   86.937080][ T7916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.670'.
[   86.941282][ T7916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.670'.
[   87.004098][ T7918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.671'.
[   87.059367][ T5842] Bluetooth: hci3: command tx timeout
[   87.247181][ T7925] netlink: 80 bytes leftover after parsing attributes in process `syz.0.674'.
[   87.261798][ T7925] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   87.548401][ T7951] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.683'.
[   87.636249][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'.
[   87.642549][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'.
[   87.675805][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'.
[   87.873298][ T7987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.697'.
[   88.766456][ T8049] can: request_module (can-proto-5) failed.
[   89.141227][ T5842] Bluetooth: hci3: command tx timeout
[   89.165163][ T8101] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.167951][ T8101] syzkaller0: entered promiscuous mode
[   89.170715][ T8101] syzkaller0: entered allmulticast mode
[   89.176078][ T8101] tipc: Resetting bearer <eth:syzkaller0>
[   89.181957][ T8101] syzkaller1: entered promiscuous mode
[   89.184073][ T8101] syzkaller1: entered allmulticast mode
[   89.194283][ T8101] tipc: Resetting bearer <eth:syzkaller0>
[   89.209298][ T8101] tipc: Disabling bearer <eth:syzkaller0>
[   89.767470][ T8147] tipc: Started in network mode
[   89.769440][ T8147] tipc: Node identity 5e5ccd3504e9, cluster identity 4711
[   89.771819][ T8147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.774529][ T8147] syzkaller0: entered promiscuous mode
[   89.776409][ T8147] syzkaller0: entered allmulticast mode
[   89.781744][ T8147] tipc: Resetting bearer <eth:syzkaller0>
[   89.946906][ T8161] validate_nla: 61 callbacks suppressed
[   89.947055][ T8161] netlink: 'syz.2.753': attribute type 4 has an invalid length.
[   89.977943][ T8164] netlink: 'syz.0.754': attribute type 1 has an invalid length.
[   90.015633][ T8164] 8021q: adding VLAN 0 to HW filter on device bond3
[   90.020480][ T8164] bond2: (slave bond3): making interface the new active one
[   90.023735][ T8164] bond2: (slave bond3): Enslaving as an active interface with an up link
[   90.033607][ T8164] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[   90.039166][ T8164] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.097837][ T8177] netlink: 'syz.2.759': attribute type 29 has an invalid length.
[   90.105440][ T8177] netlink: 'syz.2.759': attribute type 7 has an invalid length.
[   90.108557][ T8177] netlink: 'syz.2.759': attribute type 8 has an invalid length.
[   90.528761][ T8140] tipc: Resetting bearer <eth:syzkaller0>
[   90.540634][ T8140] tipc: Disabling bearer <eth:syzkaller0>
[   90.857466][ T8228] netlink: 'syz.3.779': attribute type 1 has an invalid length.
[   90.882636][ T8228] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.898375][ T8228] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.902000][ T8228] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   90.906067][ T8228] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   90.947848][ T8234] bond1: (slave bridge1): Enslaving as an active interface with a down link
[   91.049628][ T8179] Bluetooth: hci2: Opcode 0x0401 failed: -4
[   91.274132][ T8265] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   91.497881][ T8304] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.505825][ T8304] syzkaller0: entered promiscuous mode
[   91.507702][ T8304] syzkaller0: entered allmulticast mode
[   91.518034][ T8303] tipc: Resetting bearer <eth:syzkaller0>
[   91.528513][ T8303] tipc: Disabling bearer <eth:syzkaller0>
[   91.609952][ T1089] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[   91.870474][ T8312] bond2 (unregistering): Released all slaves
[   92.169100][ T5842] Bluetooth: hci2: command 0x0401 tx timeout
[   92.172528][ T8292] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   92.272447][ T8320] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   92.278375][ T8320] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   92.283024][ T8320] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   92.287522][ T8320] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   92.293039][ T8320] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   92.296932][ T8320] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   92.304529][ T8320] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   92.317095][ T8320] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   92.323530][ T8320] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   92.327918][ T8320] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   92.407366][ T8328] __nla_validate_parse: 30 callbacks suppressed
[   92.407376][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'.
[   92.438857][ T8330] netlink: 'syz.0.817': attribute type 30 has an invalid length.
[   92.441221][ T8331] netlink: 'syz.0.817': attribute type 30 has an invalid length.
[   92.448675][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'.
[   92.554292][ T8334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.652149][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'.
[   93.018324][ T8366] netlink: 19 bytes leftover after parsing attributes in process `syz.0.831'.
[   93.172715][ T8380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.832'.
[   93.175679][ T8380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.832'.
[   93.185736][ T8380] batadv0: entered promiscuous mode
[   93.188517][ T8380] team0: entered promiscuous mode
[   93.191290][ T8380] team_slave_0: entered promiscuous mode
[   93.193647][ T8380] team_slave_1: entered promiscuous mode
[   93.197747][ T8380] debugfs: 'hsr1' already exists in 'hsr'
[   93.201050][ T8380] Cannot create hsr debugfs directory
[   93.206039][ T8380] 8021q: adding VLAN 0 to HW filter on device hsr1
[   93.351932][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'.
[   93.375222][ T8391] netlink: 88 bytes leftover after parsing attributes in process `syz.0.839'.
[   93.378261][ T8391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.839'.
[   93.455369][ T8398] netlink: 28 bytes leftover after parsing attributes in process `syz.3.842'.
[   93.460415][ T8398] netlink: 'syz.3.842': attribute type 7 has an invalid length.
[   93.463379][ T8398] netlink: 'syz.3.842': attribute type 8 has an invalid length.
[   94.259099][ T5842] Bluetooth: hci2: command 0x0401 tx timeout
[   94.296222][ T8490] : entered promiscuous mode
[   94.956556][ T8560] validate_nla: 3 callbacks suppressed
[   94.956569][ T8560] netlink: 'syz.0.899': attribute type 1 has an invalid length.
[   95.138285][ T8578] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   95.232119][ T8587] netlink: 'syz.2.910': attribute type 1 has an invalid length.
[   95.825936][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   95.828488][ T8612] veth0_to_bridge: entered promiscuous mode
[   95.831610][ T8612] veth0_to_bridge: left promiscuous mode
[   95.838720][ T8612] gtp1: entered promiscuous mode
[   95.840937][ T8612] gtp1: entered allmulticast mode
[   97.446900][ T8688] netlink: 'syz.3.947': attribute type 1 has an invalid length.
[   97.468783][ T8688] bond2: (slave bridge2): making interface the new active one
[   97.471806][ T8688] bond2: (slave bridge2): Enslaving as an active interface with an up link
[   97.475212][ T8691] __nla_validate_parse: 18 callbacks suppressed
[   97.475223][ T8691] netlink: 28 bytes leftover after parsing attributes in process `syz.0.948'.
[   97.488741][ T8691] netlink: 'syz.0.948': attribute type 7 has an invalid length.
[   97.492187][ T8691] netlink: 'syz.0.948': attribute type 8 has an invalid length.
[   97.495442][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'.
[   97.528752][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'.
[   97.533039][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'.
[   97.586196][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.952'.
[   97.596818][ T8706] tipc: Started in network mode
[   97.598608][ T8706] tipc: Node identity fe4d20ff27f6, cluster identity 4711
[   97.606153][ T8706] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.610916][ T8706] syzkaller0: entered promiscuous mode
[   97.612869][ T8706] syzkaller0: entered allmulticast mode
[   97.616479][ T8704] tipc: Resetting bearer <eth:syzkaller0>
[   97.627456][ T8704] tipc: Disabling bearer <eth:syzkaller0>
[   97.695243][ T8710] netlink: 'syz.0.955': attribute type 1 has an invalid length.
[   97.709113][ T8710] 8021q: adding VLAN 0 to HW filter on device bond4
[   97.758689][ T8715] netlink: 36 bytes leftover after parsing attributes in process `syz.2.957'.
[   97.874587][ T8729] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   97.882508][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.962'.
[   98.082772][ T8744] mac80211_hwsim hwsim11 wlan0: left promiscuous mode
[   98.095298][ T8744] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   98.115990][ T8744] netlink: 68 bytes leftover after parsing attributes in process `syz.3.966'.
[   98.182551][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'.
[   98.306749][ T8770] netlink: 256 bytes leftover after parsing attributes in process `syz.3.976'.
[   98.759328][ T8822] netlink: 'syz.3.995': attribute type 4 has an invalid length.
[   98.775367][ T8822] netlink: 'syz.3.995': attribute type 4 has an invalid length.
[   99.674945][ T8903] can: request_module (can-proto-0) failed.
[   99.890161][ T8927] bond0: invalid ARP target 0.0.0.0 specified for addition
[   99.892622][ T8927] bond0: option arp_ip_target: invalid value (0)
[   99.894760][ T8926] bond0: invalid ARP target 0.0.0.0 specified for addition
[   99.897537][ T8926] bond0: option arp_ip_target: invalid value (0)
[  100.036088][ T8944] netlink: 'syz.2.1035': attribute type 83 has an invalid length.
[  100.649110][ T5852] Bluetooth: hci3: command 0x0405 tx timeout
[  100.854203][ T9025] netlink: 'syz.0.1059': attribute type 3 has an invalid length.
[  101.522113][ T9088] netlink: 'syz.0.1079': attribute type 1 has an invalid length.
[  101.725590][ T9104] netlink: 'syz.0.1086': attribute type 10 has an invalid length.
[  102.186580][ T9156] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  102.227342][ T9163] syz_tun: entered allmulticast mode
[  102.236677][ T9162] syz_tun: left allmulticast mode
[  102.251197][ T9167] netlink: 'syz.2.1110': attribute type 11 has an invalid length.
[  102.482462][ T9202] vti0: entered promiscuous mode
[  102.660168][ T9222] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  102.662993][ T9222] __nla_validate_parse: 30 callbacks suppressed
[  102.663001][ T9222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1124'.
[  102.712641][ T9227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1126'.
[  102.735148][ T5842] Bluetooth: hci3: command 0x0405 tx timeout
[  102.770185][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'.
[  102.774828][ T9234] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1127'.
[  102.849770][ T9230] block nbd1: server does not support multiple connections per device.
[  102.853372][ T9230] block nbd1: shutting down sockets
[  102.959817][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1132'.
[  102.996247][ T9255] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.002681][ T9255] syzkaller0: entered promiscuous mode
[  103.004580][ T9255] syzkaller0: entered allmulticast mode
[  103.031601][ T9261] tipc: Resetting bearer <eth:syzkaller0>
[  103.052384][ T9259] tipc: Resetting bearer <eth:syzkaller0>
[  103.088232][ T9259] tipc: Disabling bearer <eth:syzkaller0>
[  103.153391][ T9277] netlink: 'syz.3.1139': attribute type 11 has an invalid length.
[  103.155919][ T9277] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1139'.
[  103.161608][ T9275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1140'.
[  103.165747][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'.
[  103.218607][ T9287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1142'.
[  103.322066][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1144'.
[  103.357505][ T9305] unsupported nlmsg_type 40
[  103.412473][ T9313] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  103.707692][ T9347] tipc: Enabling of bearer <b:lp> rejected, media not registered
[  104.357820][ T9392] sctp: [Deprecated]: syz.0.1170 (pid 9392) Use of int in max_burst socket option.
[  104.357820][ T9392] Use struct sctp_assoc_value instead
[  104.793257][ T9454] netlink: 'syz.2.1188': attribute type 28 has an invalid length.
[  104.804624][ T9441] netlink: 'syz.0.1185': attribute type 1 has an invalid length.
[  104.886385][ T9464] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  106.257415][ T9546] netlink: 'syz.0.1218': attribute type 12 has an invalid length.
[  106.711273][ T9575] netlink: 'syz.2.1229': attribute type 1 has an invalid length.
[  106.714260][ T9575] netlink: 'syz.2.1229': attribute type 1 has an invalid length.
[  106.889818][ T9592] netlink: 'syz.2.1236': attribute type 2 has an invalid length.
[  106.892961][ T9592] netlink: 'syz.2.1236': attribute type 2 has an invalid length.
[  107.012905][ T9608] netlink: 'syz.3.1244': attribute type 20 has an invalid length.
[  107.240666][ T9609] ip6erspan0: left promiscuous mode
[  107.294177][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.297013][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.301223][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.304162][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.504294][ T9633] netlink: 'syz.2.1250': attribute type 1 has an invalid length.
[  107.875874][ T9656] netlink: 'syz.3.1257': attribute type 23 has an invalid length.
[  108.802572][ T9662] __nla_validate_parse: 26 callbacks suppressed
[  108.802584][ T9662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1258'.
[  108.803475][ T9664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1259'.
[  108.847207][ T9664] bond5: entered promiscuous mode
[  108.863516][ T9664] gtp1: entered promiscuous mode
[  108.866455][ T9664] team0: Port device gtp1 added
[  108.887764][ T9664] syz.0.1259 (9664) used greatest stack depth: 19416 bytes left
[  108.894584][ T9672] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  108.923399][ T9672] bond4: entered promiscuous mode
[  108.925659][ T9672] bond4: entered allmulticast mode
[  108.929689][ T9672] 8021q: adding VLAN 0 to HW filter on device bond4
[  109.072485][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'.
[  109.200720][ T9702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1273'.
[  109.211354][ T9705] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1274'.
[  109.222015][ T9705] netlink: 'syz.0.1274': attribute type 3 has an invalid length.
[  109.227558][ T9705] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1274'.
[  109.287915][ T9711] netlink: 'syz.3.1277': attribute type 1 has an invalid length.
[  109.294212][ T9712] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1277'.
[  109.297965][ T9711] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1277'.
[  109.439840][ T9700] syzkaller1: entered allmulticast mode
[  109.458324][ T9730] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.463367][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'.
[  109.475609][ T9730] syzkaller0: entered promiscuous mode
[  109.477439][ T9730] syzkaller0: entered allmulticast mode
[  109.488017][ T9730] tipc: Resetting bearer <eth:syzkaller0>
[  109.492672][ T9729] tipc: Resetting bearer <eth:syzkaller0>
[  109.515901][ T9729] tipc: Disabling bearer <eth:syzkaller0>
[  109.648298][ T9740] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1286'.
[  109.754550][ T9749] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.757779][ T9750] syzkaller0: entered promiscuous mode
[  109.762461][ T9750] syzkaller0: entered allmulticast mode
[  109.776793][ T9751] tipc: Resetting bearer <eth:syzkaller0>
[  109.785994][ T9751] tipc: Disabling bearer <eth:syzkaller0>
[  109.964375][ T9761] syzkaller1: entered allmulticast mode
[  110.385132][ T9786] vlan2: entered allmulticast mode
[  110.387185][ T9786] erspan0: entered allmulticast mode
[  110.935077][ T9810] nft_compat: unsupported protocol 0
[  111.140921][ T9823] bond0: (slave batadv0): Releasing backup interface
[  111.150743][ T9823] bridge_slave_0: left allmulticast mode
[  111.153385][ T9823] bridge_slave_0: left promiscuous mode
[  111.159420][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.166209][ T9823] bridge_slave_1: left allmulticast mode
[  111.168012][ T9823] bridge_slave_1: left promiscuous mode
[  111.173162][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.180742][ T9823] bond0: (slave bond_slave_0): Releasing backup interface
[  111.190980][ T9823] bond0: (slave bond_slave_1): Releasing backup interface
[  111.198534][ T9823] team_slave_0: left promiscuous mode
[  111.205557][ T9823] team0: Port device team_slave_0 removed
[  111.212882][ T9823] team_slave_1: left promiscuous mode
[  111.223866][ T9823] team0: Port device team_slave_1 removed
[  111.227104][ T9823] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.233073][ T9823] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.237182][ T9823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.241279][ T9823] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.250882][ T9823] team0: Port device vlan0 removed
[  111.256453][ T9823] batman_adv: batadv0: Interface deactivated: macvtap1
[  111.260100][ T9823] batman_adv: batadv0: Removing interface: macvtap1
[  111.265629][ T9823] bond1: (slave veth3): Releasing backup interface
[  111.450900][   T61] block nbd0: Possible stuck request ffff888022b10000: control (read@0,4096B). Runtime 60 seconds
[  111.796723][ T9889] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  112.629830][ T9941] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  112.712582][ T9945] validate_nla: 4 callbacks suppressed
[  112.712595][ T9945] netlink: 'syz.0.1351': attribute type 5 has an invalid length.
[  112.722146][ T9945] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  112.816829][ T9949] netlink: 'syz.3.1353': attribute type 3 has an invalid length.
[  112.823077][ T9949] netlink: 'syz.3.1353': attribute type 2 has an invalid length.
[  112.834823][ T9949] netlink: 'syz.3.1353': attribute type 2 has an invalid length.
[  113.900111][ T9997] sctp: [Deprecated]: syz.3.1372 (pid 9997) Use of struct sctp_assoc_value in delayed_ack socket option.
[  113.900111][ T9997] Use struct sctp_sack_info instead
[  113.910237][ T9997] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  114.113253][T10009] netlink: 'syz.3.1377': attribute type 2 has an invalid length.
[  114.116652][T10009] __nla_validate_parse: 30 callbacks suppressed
[  114.116664][T10009] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1377'.
[  114.127719][T10009] pim6reg1: entered promiscuous mode
[  114.131954][T10009] pim6reg1: entered allmulticast mode
[  114.286806][T10016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1380'.
[  114.632329][T10031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1386'.
[  114.738312][T10044] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  114.771538][T10044] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  114.842311][T10049] netlink: 'syz.0.1392': attribute type 1 has an invalid length.
[  114.845494][T10049] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1392'.
[  114.849531][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'.
[  114.971330][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'.
[  114.975066][T10057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1396'.
[  114.980614][T10057] netlink: 'syz.2.1396': attribute type 5 has an invalid length.
[  115.054007][T10064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1399'.
[  115.077463][T10067] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1400'.
[  115.089570][T10067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1400'.
[  115.094019][T10067] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  115.299196][T10086] openvswitch: netlink: Flow actions attr not present in new flow.
[  116.186665][T10147] netlink: 'syz.3.1427': attribute type 4 has an invalid length.
[  116.303812][T10159] tap0: tun_chr_ioctl cmd 1074025680
[  116.308012][T10159] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.314578][T10159] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073701165882)
[  116.318837][T10159] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  116.324172][T10159] D: renamed from syzkaller0
[  116.327303][T10159] tipc: Disabling bearer <eth:syzkaller0>
[  116.850548][T10209] syzkaller1: entered allmulticast mode
[  117.077651][T10224] netlink: 'syz.0.1456': attribute type 1 has an invalid length.
[  117.197629][T10234] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  117.202181][T10234] syzkaller0: entered promiscuous mode
[  117.204602][T10234] syzkaller0: entered allmulticast mode
[  118.030210][T10260] netlink: 'syz.3.1471': attribute type 1 has an invalid length.
[  118.538125][T10308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.863850][T10322] netlink: 'syz.3.1491': attribute type 12 has an invalid length.
[  119.025311][T10332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.037829][   T13] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96
[  119.258818][T10334] macvlan2: entered allmulticast mode
[  119.261233][T10334] veth1_vlan: entered allmulticast mode
[  119.266313][T10334] veth1_vlan: left allmulticast mode
[  119.622286][T10352] __nla_validate_parse: 26 callbacks suppressed
[  119.622302][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1504'.
[  119.774830][T10368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1509'.
[  119.822401][T10370] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.836655][T10370] syzkaller0: entered promiscuous mode
[  119.841275][T10370] syzkaller0: entered allmulticast mode
[  119.843603][T10374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1511'.
[  119.852104][T10370] tipc: Resetting bearer <eth:syzkaller0>
[  119.859849][T10369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.864537][T10369] tipc: Resetting bearer <eth:syzkaller0>
[  119.890937][T10369] tipc: Disabling bearer <eth:syzkaller0>
[  119.917352][T10378] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1514'.
[  120.157672][T10400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1519'.
[  120.441774][T10411] netlink: 'syz.3.1527': attribute type 1 has an invalid length.
[  120.445288][T10411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1527'.
[  120.795194][T10428] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1528'.
[  120.798163][T10428] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1528'.
[  120.856745][T10438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1530'.
[  121.166179][T10455] 8021q: adding VLAN 0 to HW filter on device bond6
[  121.262238][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1538'.
[  121.313703][T10462] nbd: must specify an index to disconnect
[  121.321026][T10463] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  121.376368][T10470] netlink: 'syz.3.1538': attribute type 1 has an invalid length.
[  121.778401][T10487] pimreg: entered allmulticast mode
[  122.255105][T10525] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  122.447852][T10540] netlink: 'syz.3.1568': attribute type 1 has an invalid length.
[  122.502338][T10540] bond5: (slave gretap1): making interface the new active one
[  122.506926][T10540] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  122.874327][T10585] openvswitch: netlink: Missing valid actions attribute.
[  122.876774][T10585] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.293593][T10608] gtp2: entered promiscuous mode
[  123.296518][T10608] team0: Port device gtp2 added
[  124.730541][T10690] syzkaller1: entered promiscuous mode
[  124.732714][T10690] syzkaller1: entered allmulticast mode
[  124.735017][T10692] __nla_validate_parse: 25 callbacks suppressed
[  124.735030][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1626'.
[  124.743370][T10692] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1626'.
[  124.994188][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'.
[  125.019166][T10715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1635'.
[  125.234255][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'.
[  125.579802][T10763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1655'.
[  125.877804][T10780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1662'.
[  125.985288][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'.
[  126.176931][T10798] syzkaller0: create flow: hash 345849938 index 1
[  126.180404][T10798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1668'.
[  126.277193][T10804] pim6reg: entered allmulticast mode
[  126.291367][T10804] pim6reg: left allmulticast mode
[  126.561696][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'.
[  126.614740][T10816] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.618310][T10816] syzkaller0: entered promiscuous mode
[  126.621226][T10816] syzkaller0: entered allmulticast mode
[  126.641145][T10816] tipc: Resetting bearer <eth:syzkaller0>
[  126.644297][T10816] netlink: 'syz.0.1676': attribute type 1 has an invalid length.
[  126.667855][T10816] 8021q: adding VLAN 0 to HW filter on device bond7
[  126.694955][T10816] veth11: entered promiscuous mode
[  126.735208][T10820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.774827][T10815] tipc: Resetting bearer <eth:syzkaller0>
[  126.786345][T10815] tipc: Disabling bearer <eth:syzkaller0>
[  126.909704][T10828] netlink: 'syz.2.1680': attribute type 3 has an invalid length.
[  126.951561][T10796] syzkaller0: delete flow: hash 345849938 index 1
[  128.353256][T10897] IPv6: sit1: Disabled Multicast RS
[  128.476870][T10914] netlink: 'syz.3.1711': attribute type 2 has an invalid length.
[  128.524733][T10920] netlink: 'syz.3.1714': attribute type 12 has an invalid length.
[  128.642861][T10934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.801699][T10940] netlink: 'syz.2.1722': attribute type 15 has an invalid length.
[  128.805373][T10940] netlink: 'syz.2.1722': attribute type 15 has an invalid length.
[  129.766285][T10967] __nla_validate_parse: 18 callbacks suppressed
[  129.766296][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'.
[  129.776227][T10966] netlink: 'syz.0.1730': attribute type 1 has an invalid length.
[  129.780610][T10970] netlink: 'syz.2.1729': attribute type 7 has an invalid length.
[  129.782763][T10967] netlink: 'syz.0.1730': attribute type 12 has an invalid length.
[  129.783958][T10970] netlink: 'syz.2.1729': attribute type 8 has an invalid length.
[  129.795791][T10970] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1729'.
[  129.806542][T10970] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1729'.
[  129.810644][T10970] netem: unknown loss type 0
[  129.812842][T10970] netem: change failed
[  129.866622][T10975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.894912][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'.
[  130.005775][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1736'.
[  130.033313][T10991] openvswitch: netlink: Key type 251 is out of range max 32
[  130.091838][T10997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.332334][T11009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1745'.
[  130.367141][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1746'.
[  130.428226][T11013] 8021q: adding VLAN 0 to HW filter on device bond6
[  130.436919][T11013] bond0: (slave bond6): Enslaving as an active interface with an up link
[  130.485861][T11013] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1747'.
[  130.754016][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'.
[  130.810618][T11048] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1758'.
[  130.845230][T11051] geneve0: entered promiscuous mode
[  130.847534][T11051] team0: Port device geneve0 added
[  131.185118][T11090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.307686][T11090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.694427][T11109] v: renamed from ip6_vti0
[  132.418559][T11143] netlink: zone id is out of range
[  132.455526][T11143] netlink: zone id is out of range
[  132.457470][T11143] netlink: zone id is out of range
[  132.461725][T11143] netlink: zone id is out of range
[  132.467539][T11143] netlink: zone id is out of range
[  132.469522][T11143] netlink: zone id is out of range
[  132.471402][T11143] netlink: zone id is out of range
[  132.514474][T11147] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  132.518111][T11147] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  132.572795][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  133.267886][T11192] validate_nla: 4 callbacks suppressed
[  133.267896][T11192] netlink: 'syz.3.1808': attribute type 1 has an invalid length.
[  134.112365][T11234] netlink: 'syz.3.1824': attribute type 13 has an invalid length.
[  134.176997][T11234] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.179892][T11234] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.238487][T11234] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.248186][T11234] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.410701][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.413756][   T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0
[  134.417332][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.423822][   T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0
[  134.440123][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.443798][   T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0
[  134.447828][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.452456][   T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0
[  134.790634][T11261] __nla_validate_parse: 22 callbacks suppressed
[  134.790643][T11261] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1833'.
[  134.842893][T11268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1836'.
[  135.030945][T11284] : left promiscuous mode
[  135.067306][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1843'.
[  135.094374][T11284] veth1_to_bond: entered allmulticast mode
[  135.097715][T11283] veth1_to_bond: left allmulticast mode
[  135.262598][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1851'.
[  135.265834][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1851'.
[  135.289388][ T5852] Bluetooth: hci3: command 0x0405 tx timeout
[  135.380392][T11318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1855'.
[  135.486671][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'.
[  135.693325][T11345] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1864'.
[  135.696207][T11346] netlink: 'syz.2.1865': attribute type 1 has an invalid length.
[  135.741051][T11346] bond3: (slave bridge25): making interface the new active one
[  135.745030][T11346] bond3: (slave bridge25): Enslaving as an active interface with an up link
[  135.781833][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'.
[  135.789056][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'.
[  135.814371][T11356] ipvlan0: entered allmulticast mode
[  135.819016][T11356] bond0: entered allmulticast mode
[  136.350104][T11401] bridge0: entered allmulticast mode
[  137.199347][T11439] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.202799][T11439] syzkaller0: entered promiscuous mode
[  137.205177][T11439] syzkaller0: entered allmulticast mode
[  137.226661][T11439] tipc: Resetting bearer <eth:syzkaller0>
[  137.232701][T11439] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  137.236085][T11439] net_ratelimit: 7 callbacks suppressed
[  137.236095][T11439] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  137.248695][T11438] tipc: Resetting bearer <eth:syzkaller0>
[  137.274803][T11438] tipc: Disabling bearer <eth:syzkaller0>
[  137.899663][ T5294] udevd[5294]: worker [5844] /devices/virtual/block/nbd0 is taking a long time
[  138.213323][T11514] IPv6: Can't replace route, no match found
[  139.220089][T11591] sctp: [Deprecated]: syz.2.1946 (pid 11591) Use of struct sctp_assoc_value in delayed_ack socket option.
[  139.220089][T11591] Use struct sctp_sack_info instead
[  139.536468][ T5869] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  139.542386][T11613] 8021q: adding VLAN 0 to HW filter on device team0
[  140.363593][T11633] __nla_validate_parse: 17 callbacks suppressed
[  140.363603][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1958'.
[  140.397068][T11635] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.400404][T11635] syzkaller0: entered promiscuous mode
[  140.402668][T11635] syzkaller0: entered allmulticast mode
[  140.417597][T11635] tipc: Resetting bearer <eth:syzkaller0>
[  140.423634][T11634] tipc: Resetting bearer <eth:syzkaller0>
[  140.435388][T11634] tipc: Disabling bearer <eth:syzkaller0>
[  140.563648][T11641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1961'.
[  140.587936][T11643] syzkaller1: entered promiscuous mode
[  140.600431][T11643] syzkaller1: entered allmulticast mode
[  140.707219][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'.
[  140.711534][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'.
[  140.715893][T11655] ieee802154 phy0 wpan0: encryption failed: -22
[  140.884598][T11672] sit2: entered promiscuous mode
[  140.913815][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1971'.
[  140.941276][T11676] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.945044][T11676] syzkaller0: entered promiscuous mode
[  140.947457][T11676] syzkaller0: entered allmulticast mode
[  140.962694][T11675] tipc: Resetting bearer <eth:syzkaller0>
[  140.974537][T11675] tipc: Disabling bearer <eth:syzkaller0>
[  141.084504][T11682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1975'.
[  141.136098][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'.
[  141.142216][T11685] netlink: 'syz.2.1976': attribute type 33 has an invalid length.
[  141.145562][T11685] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1976'.
[  141.160589][T11685] netlink: 'syz.2.1976': attribute type 10 has an invalid length.
[  141.180739][T11685] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  141.498193][T11710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1987'.
[  141.525147][T11713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1988'.
[  141.530257][   T61] block nbd0: Possible stuck request ffff888022b10000: control (read@0,4096B). Runtime 90 seconds
[  142.161033][T11786] tipc: New replicast peer: 255.255.255.255
[  142.163188][T11786] tipc: Enabled bearer <udp:syz2>, priority 10
[  143.280286][ T9616] tipc: Node number set to 3595100236
[  144.170156][T11922] netlink: 'syz.0.2065': attribute type 1 has an invalid length.
[  144.211150][T11922] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  144.234148][T11922] veth13: entered promiscuous mode
[  144.237738][T11922] bond8: (slave veth13): Enslaving as a backup interface with a down link
[  144.328027][T11942] netdevsim netdevsim3: Direct firmware load for .. failed with error -2
[  144.336942][T11942] netdevsim netdevsim3: Falling back to sysfs fallback for: ..
[  144.632047][T11963] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.651792][T11963] syzkaller0: entered promiscuous mode
[  144.653720][T11963] syzkaller0: entered allmulticast mode
[  145.502088][T11964] tipc: Resetting bearer <eth:syzkaller0>
[  145.524874][T11962] tipc: Resetting bearer <eth:syzkaller0>
[  145.533696][T11962] tipc: Disabling bearer <eth:syzkaller0>
[  145.786577][T11996] __nla_validate_parse: 14 callbacks suppressed
[  145.786588][T11996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2087'.
[  145.917793][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.923380][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.929777][T12013] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2093'.
[  146.352810][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2104'.
[  146.466913][T12061] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2108'.
[  146.474991][ T9616] IPVS: starting estimator thread 0...
[  146.571605][T12066] IPVS: using max 81 ests per chain, 194400 per kthread
[  146.897464][T12115] GUP no longer grows the stack in syz.0.2121 (12115): 200000003000-20000000a000 (200000001000)
[  146.906720][T12115] CPU: 1 UID: 0 PID: 12115 Comm: syz.0.2121 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59-dirty #0 PREEMPT(full) 
[  146.906738][T12115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.906744][T12115] Call Trace:
[  146.906748][T12115]  <TASK>
[  146.906753][T12115]  dump_stack_lvl+0x189/0x250
[  146.906772][T12115]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.906785][T12115]  ? __pfx__printk+0x10/0x10
[  146.906797][T12115]  ? find_vma+0xe7/0x160
[  146.906811][T12115]  ? __lock_acquire+0xab9/0xd20
[  146.906863][T12115]  __get_user_pages+0x24d0/0x2ce0
[  146.906879][T12115]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  146.906911][T12115]  ? rcu_is_watching+0x15/0xb0
[  146.906926][T12115]  __gup_longterm_locked+0xde9/0x1660
[  146.906948][T12115]  ? sanity_check_pinned_pages+0x123a/0x1300
[  146.906967][T12115]  gup_fast_fallback+0x1e6a/0x2010
[  146.907003][T12115]  ? __pfx_gup_fast_fallback+0x10/0x10
[  146.907014][T12115]  ? stack_trace_save+0x9c/0xe0
[  146.907034][T12115]  ? __pfx_stack_trace_save+0x10/0x10
[  146.907054][T12115]  ? pin_user_pages_fast+0x4d/0xb0
[  146.907068][T12115]  iov_iter_extract_pages+0x35a/0x5e0
[  146.907087][T12115]  extract_iter_to_sg+0xe46/0x24e0
[  146.907114][T12115]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  146.907143][T12115]  ? __asan_memset+0x22/0x50
[  146.907157][T12115]  af_alg_get_rsgl+0x436/0x810
[  146.907184][T12115]  aead_recvmsg+0x4cc/0x13f0
[  146.907214][T12115]  ? __pfx_aead_recvmsg+0x10/0x10
[  146.907230][T12115]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  146.907242][T12115]  ? __pfx_aead_recvmsg+0x10/0x10
[  146.907256][T12115]  sock_recvmsg_nosec+0x186/0x1c0
[  146.907273][T12115]  ____sys_recvmsg+0x3aa/0x460
[  146.907291][T12115]  ? __pfx_____sys_recvmsg+0x10/0x10
[  146.907315][T12115]  ? import_iovec+0x74/0xa0
[  146.907329][T12115]  ___sys_recvmsg+0x1b5/0x510
[  146.907344][T12115]  ? __pfx____sys_recvmsg+0x10/0x10
[  146.907378][T12115]  ? __might_fault+0xb0/0x130
[  146.907394][T12115]  do_recvmmsg+0x307/0x770
[  146.907412][T12115]  ? __pfx_do_recvmmsg+0x10/0x10
[  146.907421][T12115]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  146.907446][T12115]  ? __pfx_do_futex+0x10/0x10
[  146.907471][T12115]  __x64_sys_recvmmsg+0x190/0x240
[  146.907485][T12115]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  146.907494][T12115]  ? rcu_is_watching+0x15/0xb0
[  146.907509][T12115]  ? do_syscall_64+0xbe/0x3b0
[  146.907526][T12115]  do_syscall_64+0xfa/0x3b0
[  146.907538][T12115]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.907551][T12115]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.907562][T12115]  ? exc_page_fault+0x9f/0xf0
[  146.907577][T12115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.907587][T12115] RIP: 0033:0x7f736318ebe9
[  146.907598][T12115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.907606][T12115] RSP: 002b:00007f7364093038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  146.907618][T12115] RAX: ffffffffffffffda RBX: 00007f73633b5fa0 RCX: 00007f736318ebe9
[  146.907626][T12115] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008
[  146.907632][T12115] RBP: 00007f7363211e19 R08: 0000000000000000 R09: 0000000000000000
[  146.907638][T12115] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  146.907644][T12115] R13: 00007f73633b6038 R14: 00007f73633b5fa0 R15: 00007ffe77a39fd8
[  146.907664][T12115]  </TASK>
[  147.042061][T12122] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.045815][T12120] syzkaller0: entered promiscuous mode
[  147.047752][T12120] syzkaller0: entered allmulticast mode
[  147.057664][T12119] tipc: Resetting bearer <eth:syzkaller0>
[  147.075616][T12119] tipc: Disabling bearer <eth:syzkaller0>
[  147.086600][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2123'.
[  147.218305][T12134] 8021q: adding VLAN 0 to HW filter on device bond4
[  147.222058][T12134] bond0: (slave bond4): Enslaving as an active interface with an up link
[  147.301608][T12146] netlink: 'syz.3.2131': attribute type 1 has an invalid length.
[  147.305118][T12146] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2131'.
[  147.308778][T12146] netlink: 'syz.3.2131': attribute type 1 has an invalid length.
[  147.442318][T12155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2135'.
[  147.463124][ T9614] IPVS: starting estimator thread 0...
[  147.569755][T12158] IPVS: using max 82 ests per chain, 196800 per kthread
[  147.783610][T12189] netlink: 'syz.3.2146': attribute type 4 has an invalid length.
[  147.854695][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'.
[  148.086631][T12207] netlink: 'syz.3.2152': attribute type 21 has an invalid length.
[  148.090369][T12207] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2152'.
[  148.094373][T12207] netlink: 'syz.3.2152': attribute type 5 has an invalid length.
[  148.097785][T12207] netlink: 'syz.3.2152': attribute type 6 has an invalid length.
[  148.102531][T12207] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2152'.
[  148.460382][T12226] trusted_key: syz.2.2161 sent an empty control message without MSG_MORE.
[  148.604071][T12234] netlink: 'syz.2.2163': attribute type 1 has an invalid length.
[  149.365115][T12289] syzkaller0: entered promiscuous mode
[  149.367550][T12289] syzkaller0: entered allmulticast mode
[  149.548603][T12316] netlink: 'syz.2.2186': attribute type 14 has an invalid length.
[  149.796619][T12347] netlink: 'syz.0.2196': attribute type 10 has an invalid length.
[  149.957052][T12368] netlink: 'syz.2.2203': attribute type 13 has an invalid length.
[  149.966026][T12368] gretap0: refused to change device tx_queue_len
[  149.968171][T12368] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  149.993296][T12357] team0: Device bond9 is of different type
[  149.997220][T12357] bond9 (unregistering): Released all slaves
[  150.008976][T12373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  150.020295][T12373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  150.024468][T12373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  150.034924][T12373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  150.198037][T12377] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  150.628527][T12395] tun0: tun_chr_ioctl cmd 2148553947
[  150.824748][T12416] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  151.017671][T12430] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.021394][T12430] syzkaller0: entered promiscuous mode
[  151.031848][T12430] syzkaller0: entered allmulticast mode
[  151.056589][T12434] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  151.097603][T12438] __nla_validate_parse: 15 callbacks suppressed
[  151.097616][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2232'.
[  151.153016][T12444] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2235'.
[  151.242577][T12449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2237'.
[  151.255383][T12449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2237'.
[  151.314312][T12455] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  151.412904][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2243'.
[  151.726097][T12421] tipc: Resetting bearer <eth:syzkaller0>
[  151.741718][T12421] tipc: Disabling bearer <eth:syzkaller0>
[  151.834175][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'.
[  151.848159][T12497] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2254'.
[  151.858567][T12497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2254'.
[  152.105991][T12523] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2263'.
[  152.212056][T12536] IPv6: sit3: Disabled Multicast RS
[  152.323554][T12559] validate_nla: 6 callbacks suppressed
[  152.323563][T12559] netlink: 'syz.0.2270': attribute type 15 has an invalid length.
[  152.328722][T12559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2270'.
[  152.379872][T12562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.429293][T12575] netlink: 'syz.3.2275': attribute type 1 has an invalid length.
[  152.501103][T12584] syzkaller0: entered promiscuous mode
[  152.502996][T12584] syzkaller0: entered allmulticast mode
[  152.506014][T12583] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.516344][T12584] tipc: Resetting bearer <eth:syzkaller0>
[  152.593955][T12582] tipc: Resetting bearer <eth:syzkaller0>
[  152.601999][T12582] tipc: Disabling bearer <eth:syzkaller0>
[  152.705600][T12599] netlink: 'syz.3.2284': attribute type 1 has an invalid length.
[  153.059991][T12635] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.062758][T12635] syzkaller0: entered promiscuous mode
[  153.064701][T12635] syzkaller0: entered allmulticast mode
[  153.817450][T12628] tipc: Resetting bearer <eth:syzkaller0>
[  153.828748][T12628] tipc: Disabling bearer <eth:syzkaller0>
[  154.083913][T12664] netlink: 'syz.0.2307': attribute type 1 has an invalid length.
[  154.161014][T12671] tipc: Enabled bearer <udp:syz0>, priority 10
[  154.283462][T12688] tc_dump_action: action bad kind
[  154.428302][T12699] sctp: [Deprecated]: syz.2.2319 (pid 12699) Use of int in max_burst socket option deprecated.
[  154.428302][T12699] Use struct sctp_assoc_value instead
[  154.552929][T12706] openvswitch: netlink: Flow key attr not present in new flow.
[  154.983873][T12735] ieee802154 phy0 wpan0: encryption failed: -22
[  156.037464][T12824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  156.041977][T12828] netlink: 'syz.0.2360': attribute type 1 has an invalid length.
[  156.120449][T12841] __nla_validate_parse: 53 callbacks suppressed
[  156.120458][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2364'.
[  156.145176][T12843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2365'.
[  156.326376][T12848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2366'.
[  156.483531][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'.
[  156.797066][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2384'.
[  156.870712][T12896] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2385'.
[  156.948298][T12904] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.954460][T12904] syzkaller0: entered promiscuous mode
[  156.956419][T12904] syzkaller0: entered allmulticast mode
[  156.968716][T12904] tipc: Resetting bearer <eth:syzkaller0>
[  156.977413][T12903] tipc: Resetting bearer <eth:syzkaller0>
[  156.987304][T12903] tipc: Disabling bearer <eth:syzkaller0>
[  157.107475][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2392'.
[  157.111102][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2387'.
[  157.176627][T12924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2396'.
[  157.269909][T12930] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2395'.
[  158.201217][T12943] netem: incorrect gi model size
[  158.203405][T12943] netem: change failed
[  158.539960][T12978] netlink: 'syz.3.2417': attribute type 13 has an invalid length.
[  158.542472][T12978] netlink: 'syz.3.2417': attribute type 17 has an invalid length.
[  158.556987][T12978] gretap0: refused to change device tx_queue_len
[  158.562014][T12978] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  159.097929][T13028] pimreg: left allmulticast mode
[  159.405417][T13047] netlink: 'syz.2.2440': attribute type 14 has an invalid length.
[  159.439769][T13047] netlink: 'syz.2.2440': attribute type 14 has an invalid length.
[  159.963556][T13090] netlink: zone id is out of range
[  159.972473][T13090] netlink: zone id is out of range
[  159.978400][T13090] netlink: zone id is out of range
[  159.982943][T13090] netlink: zone id is out of range
[  159.988072][T13090] netlink: zone id is out of range
[  159.990248][T13090] netlink: zone id is out of range
[  159.992080][T13090] netlink: zone id is out of range
[  159.994519][T13090] netlink: zone id is out of range
[  159.996888][T13090] netlink: zone id is out of range
[  160.648599][T13149] syzkaller1: entered promiscuous mode
[  160.656298][T13149] syzkaller1: entered allmulticast mode
[  160.817340][T13162] 8021q: adding VLAN 0 to HW filter on device bond7
[  160.821171][T13162] bond7: entered promiscuous mode
[  160.823890][T13162] team0: Port device bond7 added
[  161.091630][T13189] netlink: 'syz.0.2485': attribute type 13 has an invalid length.
[  161.094889][T13189] netlink: 'syz.0.2485': attribute type 12 has an invalid length.
[  161.159859][T13195] netlink: 'syz.2.2488': attribute type 11 has an invalid length.
[  161.287537][T13199] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.291577][T13199] syzkaller0: entered promiscuous mode
[  161.293895][T13199] syzkaller0: entered allmulticast mode
[  161.307918][T13199] tipc: Resetting bearer <eth:syzkaller0>
[  161.325057][T13199] tipc: Resetting bearer <eth:syzkaller0>
[  161.336119][T13199] tipc: Disabling bearer <eth:syzkaller0>
[  161.864861][T13234] __nla_validate_parse: 22 callbacks suppressed
[  161.864870][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2501'.
[  161.875875][T13236] netlink: 'syz.3.2502': attribute type 2 has an invalid length.
[  161.897080][T13236] : entered promiscuous mode
[  161.903652][T13236] netlink: 'syz.3.2502': attribute type 2 has an invalid length.
[  161.945457][T13244] bridge_slave_0: left allmulticast mode
[  161.947852][T13244] bridge_slave_0: left promiscuous mode
[  161.952244][T13244] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.957761][T13244] bridge_slave_1: left allmulticast mode
[  161.960553][T13244] bridge_slave_1: left promiscuous mode
[  161.962890][T13244] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.968159][T13244] bond0: (slave bond_slave_0): Releasing backup interface
[  161.974914][T13244] bond0: (slave bond_slave_1): Releasing backup interface
[  161.978601][T13244] team_slave_0: left promiscuous mode
[  161.983336][T13244] team0: Port device team_slave_0 removed
[  161.986488][T13244] team_slave_1: left promiscuous mode
[  161.991412][T13244] team0: Port device team_slave_1 removed
[  161.994369][T13244] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.996955][T13245] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2503'.
[  162.002637][T13244] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.004256][T13245] netlink: 'syz.3.2503': attribute type 1 has an invalid length.
[  162.010746][T13245] netlink: 'syz.3.2503': attribute type 4 has an invalid length.
[  162.011725][T13244] geneve0: left promiscuous mode
[  162.013896][T13245] netlink: 15538 bytes leftover after parsing attributes in process `syz.3.2503'.
[  162.025258][T13244] team0: Port device geneve0 removed
[  162.029362][T13244] bond1: (slave bridge1): Releasing active interface
[  162.034243][T13244] bond2: (slave bridge2): Releasing active interface
[  162.038753][T13244] bond5: (slave gretap1): Releasing active interface
[  162.047070][T13244] bond0: (slave bond6): Releasing backup interface
[  162.053515][T13244] bond7: left promiscuous mode
[  162.059958][T13244] team0: Port device bond7 removed
[  162.063195][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2503'.
[  162.189988][T13251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2506'.
[  162.424394][T13262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2510'.
[  163.176049][T13265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2511'.
[  163.179711][T13265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2511'.
[  163.186312][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2511'.
[  163.263512][T13271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2513'.
[  163.915152][T13342] validate_nla: 2 callbacks suppressed
[  163.915162][T13342] netlink: 'syz.2.2540': attribute type 5 has an invalid length.
[  163.961138][T13348] gtp0: entered promiscuous mode
[  164.091503][T13357] netlink: 'syz.3.2545': attribute type 9 has an invalid length.
[  164.110610][T13350] netlink: 'syz.2.2542': attribute type 1 has an invalid length.
[  164.113473][T13350] nbd: error processing sock list
[  164.115500][T13350] block nbd2: shutting down sockets
[  164.155515][T13361] vlan4: entered promiscuous mode
[  164.157344][T13361] macvtap0: entered promiscuous mode
[  164.161728][T13363] netlink: 'syz.2.2548': attribute type 1 has an invalid length.
[  164.185649][T13363] bond6: entered promiscuous mode
[  164.187808][T13363] 8021q: adding VLAN 0 to HW filter on device bond6
[  164.204005][T13365] net_ratelimit: 18 callbacks suppressed
[  164.204018][T13365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.211417][T13363] bond6: (slave bridge33): making interface the new active one
[  164.216528][T13363] bridge33: entered promiscuous mode
[  164.220666][T13363] bond6: (slave bridge33): Enslaving as an active interface with an up link
[  164.346629][T13372] bond8: entered promiscuous mode
[  164.348769][T13372] bond8: entered allmulticast mode
[  164.357304][T13372] 8021q: adding VLAN 0 to HW filter on device bond8
[  164.607757][T13399] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  165.561981][T13465] netlink: 'syz.0.2581': attribute type 10 has an invalid length.
[  165.719978][T13479] batadv_slave_0: entered promiscuous mode
[  165.730356][T13478] batadv_slave_0: left promiscuous mode
[  165.743997][T13483] netlink: 'syz.2.2587': attribute type 33 has an invalid length.
[  165.823639][T13489] sctp: [Deprecated]: syz.0.2590 (pid 13489) Use of int in max_burst socket option deprecated.
[  165.823639][T13489] Use struct sctp_assoc_value instead
[  166.021922][T13506] netlink: 'syz.0.2596': attribute type 29 has an invalid length.
[  166.192280][T13525] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.208446][T13524] tipc: Disabling bearer <eth:syzkaller0>
[  166.270571][T13533] netlink: 'syz.2.2604': attribute type 30 has an invalid length.
[  166.280696][ T5858] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  166.283909][ T5858] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  166.287317][T13533] netlink: 'syz.2.2604': attribute type 30 has an invalid length.
[  166.293056][ T5858] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  166.295826][ T5858] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  166.358381][T13543] netlink: 'syz.2.2604': attribute type 41 has an invalid length.
[  166.665070][T13567] tipc: New replicast peer: 255.255.255.255
[  166.667952][T13567] tipc: Enabled bearer <udp:syz2>, priority 10
[  166.778131][T13575] macsec0: entered allmulticast mode
[  166.806029][T13577] bond0: Error: Cannot enslave bond to itself.
[  167.258425][T13605] __nla_validate_parse: 32 callbacks suppressed
[  167.258435][T13605] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2626'.
[  167.324058][T13612] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2629'.
[  167.500632][T13613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2628'.
[  167.510476][T13613] ip6gre0: entered promiscuous mode
[  167.515533][T13613] ip6gre0: entered allmulticast mode
[  167.518461][T13621] unsupported nla_type 52263
[  167.521454][T13621] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2631'.
[  167.528391][T13621] syz_tun: entered allmulticast mode
[  167.540103][T13621] dvmrp1: entered allmulticast mode
[  167.594616][T13619] syz_tun: left allmulticast mode
[  167.634551][T13627] sctp: [Deprecated]: syz.2.2633 (pid 13627) Use of int in max_burst socket option deprecated.
[  167.634551][T13627] Use struct sctp_assoc_value instead
[  167.779127][ T9614] tipc: Node number set to 1521863989
[  167.974927][T13642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2637'.
[  168.463036][T13654] netlink: 'syz.0.2641': attribute type 11 has an invalid length.
[  168.780012][T13681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2650'.
[  168.991336][T13695] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  168.994368][T13695] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  168.997280][T13695] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  169.003645][T13695] tipc: Enabled bearer <udp:syz1>, priority 9
[  169.009964][T13695] bridge0: entered allmulticast mode
[  169.014920][T13695] pim6reg: entered allmulticast mode
[  169.017618][T13695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2654'.
[  169.022386][T13695] openvswitch: netlink: Flow actions attr not present in new flow.
[  169.048466][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2655'.
[  169.098574][T13700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  169.101130][T13700] IPv6: NLM_F_CREATE should be set when creating new route
[  169.105247][T13700] validate_nla: 2 callbacks suppressed
[  169.105254][T13700] netlink: 'syz.2.2656': attribute type 7 has an invalid length.
[  169.383154][T13705] syzkaller0: entered promiscuous mode
[  169.386579][T13705] syzkaller0: entered allmulticast mode
[  169.667403][T13716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2662'.
[  169.741191][T13724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2666'.
[  170.394679][T13770] 8021q: VLANs not supported on team0
[  170.489070][ T5842] Bluetooth: hci1: command 0x0406 tx timeout
[  170.556583][T13778] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  170.622481][T13781] : entered promiscuous mode
[  170.625375][T13781] netlink: 'syz.3.2682': attribute type 2 has an invalid length.
[  170.628128][T13781] netlink: 'syz.3.2682': attribute type 2 has an invalid length.
[  170.631442][T13781] netlink: 'syz.3.2682': attribute type 2 has an invalid length.
[  170.635071][T13781] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.089822][T13795] 8021q: adding VLAN 0 to HW filter on device bond7
[  171.107222][T13795] netlink: 'syz.2.2685': attribute type 6 has an invalid length.
[  171.503249][T13822] batadv_slave_1: entered promiscuous mode
[  171.541726][T13822] batadv_slave_1: left promiscuous mode
[  171.610505][   T61] block nbd0: Possible stuck request ffff888022b10000: control (read@0,4096B). Runtime 120 seconds
[  172.339857][T13891] __nla_validate_parse: 12 callbacks suppressed
[  172.339872][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2715'.
[  172.522496][T13911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2720'.
[  172.597965][T13916] bridge0: port 1(syz_tun) entered blocking state
[  172.609365][T13916] bridge0: port 1(syz_tun) entered disabled state
[  172.613034][T13916] syz_tun: entered allmulticast mode
[  172.616873][T13916] syz_tun: entered promiscuous mode
[  172.632588][T13916] geneve3: entered allmulticast mode
[  172.657618][T13918] netlink: 'syz.0.2723': attribute type 39 has an invalid length.
[  172.776613][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2725'.
[  172.780306][T13925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2725'.
[  172.864058][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2726'.
[  172.874003][T13929] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2726'.
[  173.028628][T13944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2730'.
[  173.107402][T13950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2732'.
[  173.168595][T13953] openvswitch: netlink: Message has 4 unknown bytes.
[  173.172241][T13953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.197223][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2734'.
[  173.202805][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2734'.
[  173.324882][T13968] netlink: 'syz.2.2739': attribute type 15 has an invalid length.
[  173.396921][T13972] netlink: 'syz.3.2741': attribute type 1 has an invalid length.
[  173.418695][T13972] 8021q: adding VLAN 0 to HW filter on device bond9
[  173.433183][T13972] bond9: (slave geneve3): making interface the new active one
[  173.435636][T13975] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  173.437417][T13972] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  173.439586][T13975] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.442892][ T5858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.451358][ T5858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.454968][ T5858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.457898][ T5858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.469665][T13972] bond9: entered promiscuous mode
[  173.473905][T13972] geneve3: entered promiscuous mode
[  173.944123][ T5858] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  173.947395][ T5858] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  173.956777][ T5858] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  173.963512][ T5858] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.015216][T14026] Unsupported ieee802154 address type: 0
[  174.028506][T14021] bond_slave_1: entered promiscuous mode
[  174.030944][T14021] bond_slave_1: entered allmulticast mode
[  174.093021][T14022] syzkaller0: entered promiscuous mode
[  174.095411][T14022] syzkaller0: entered allmulticast mode
[  174.225799][T14039] netlink: 'syz.0.2766': attribute type 6 has an invalid length.
[  174.253852][T14039] netlink: 'syz.0.2766': attribute type 1 has an invalid length.
[  174.680776][T14069] ieee802154 phy0 wpan0: encryption failed: -126
[  176.156739][T14125] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.164362][T14125] team0: Device gtp3 is up. Set it down before adding it as a team port
[  176.193558][T14128] syz.3.2798 uses old SIOCAX25GETINFO
[  177.023433][T14183] Bluetooth: MGMT ver 1.23
[  177.027007][T14183] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  177.203964][T14194] netlink: 'syz.3.2818': attribute type 1 has an invalid length.
[  177.487608][T14223] netlink: 'syz.0.2828': attribute type 1 has an invalid length.
[  177.512171][T14223] __nla_validate_parse: 19 callbacks suppressed
[  177.512189][T14223] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2828'.
[  177.635737][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2833'.
[  177.883455][T14257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2837'.
[  177.891613][T14257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2837'.
[  177.896019][T14260] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2837'.
[  177.900915][T14260] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  178.015795][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2840'.
[  178.324827][T14290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2847'.
[  178.331465][T14290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2847'.
[  178.335159][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2847'.
[  178.368481][T14296] netlink: 'syz.2.2850': attribute type 6 has an invalid length.
[  178.372902][T14298] netlink: 'syz.2.2850': attribute type 6 has an invalid length.
[  178.446212][T14302] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2849'.
[  178.697734][T14324] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  179.445059][T14358] tun0: tun_chr_ioctl cmd 2148045848
[  179.447975][T14358] tun0: tun_chr_ioctl cmd 21731
[  179.522376][T14360] netlink: 'syz.0.2872': attribute type 1 has an invalid length.
[  179.716686][T14372] netlink: 'syz.2.2877': attribute type 29 has an invalid length.
[  180.180247][T14411] netlink: 'syz.0.2890': attribute type 21 has an invalid length.
[  180.387414][T14428] macsec1: entered promiscuous mode
[  180.390195][T14428] ip6gretap0: entered promiscuous mode
[  180.392768][T14428] macsec1: entered allmulticast mode
[  180.395052][T14428] ip6gretap0: entered allmulticast mode
[  180.550880][T14444] netlink: 'syz.3.2901': attribute type 23 has an invalid length.
[  180.602272][T14448] netlink: set zone limit has 8 unknown bytes
[  180.765965][T14458] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  180.769727][T14458] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  180.782602][T14459] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.807441][T14459] syzkaller0: entered promiscuous mode
[  180.810340][T14459] syzkaller0: entered allmulticast mode
[  180.812798][T14459] tipc: Resetting bearer <eth:syzkaller0>
[  180.824781][T14456] tipc: Resetting bearer <eth:syzkaller0>
[  181.819155][ T9614] tipc: Node number set to 3652919551
[  181.862540][T14456] tipc: Disabling bearer <eth:syzkaller0>
[  182.023176][T14490] netlink: 'syz.3.2917': attribute type 1 has an invalid length.
[  182.026306][T14490] netlink: 'syz.3.2917': attribute type 2 has an invalid length.
[  182.198200][T14507] openvswitch: netlink: Multiple metadata blocks provided
[  182.291326][T14516] netlink: 'syz.0.2926': attribute type 21 has an invalid length.
[  182.716456][T14543] __nla_validate_parse: 21 callbacks suppressed
[  182.716466][T14543] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2932'.
[  183.319893][T14596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2947'.
[  183.475754][T14612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2952'.
[  183.508402][T14612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2952'.
[  183.710268][T14640] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  183.720978][T14640] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  183.744063][T14646] ieee802154 phy0 wpan0: encryption failed: -22
[  184.075547][T14674] tun0: tun_chr_ioctl cmd 2148045848
[  184.077681][T14674] tun0: tun_chr_ioctl cmd 21731
[  184.199962][T14683] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  184.374099][T14713] netlink: 'syz.3.2971': attribute type 1 has an invalid length.
[  184.377387][T14713] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2971'.
[  184.411038][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2971'.
[  184.901288][T14751] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2986'.
[  184.907366][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2986'.
[  184.911051][T14751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2986'.
[  185.033493][T14759] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  185.345344][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2997'.
[  185.353946][T14784] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  185.357513][T14784] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.476171][T14795] syzkaller0: entered promiscuous mode
[  185.477966][T14795] syzkaller0: entered allmulticast mode
[  185.496554][T14794] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.524552][T14794] tipc: Resetting bearer <eth:syzkaller0>
[  185.545926][T14794] tipc: Disabling bearer <eth:syzkaller0>
[  185.633574][T14806] pimreg: entered allmulticast mode
[  185.882253][T14841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.936745][T14850] netlink: 'syz.2.3014': attribute type 1 has an invalid length.
[  186.103006][T14865] geneve2: entered promiscuous mode
[  186.105405][ T5869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.108592][ T5869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.114217][ T5869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.117747][ T5869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.160420][T14871] netlink: 'syz.2.3021': attribute type 1 has an invalid length.
[  186.164557][T14871] openvswitch: netlink: Flow key attr not present in new flow.
[  186.356768][T14882] pim6reg: entered allmulticast mode
[  186.365036][T14882] pim6reg: left allmulticast mode
[  186.367284][T14882] bridge0: left allmulticast mode
[  186.664905][T14905] netlink: zone id is out of range
[  186.667073][T14905] netlink: zone id is out of range
[  186.670915][T14905] netlink: zone id is out of range
[  186.674320][T14905] netlink: zone id is out of range
[  186.676587][T14905] netlink: zone id is out of range
[  186.890379][T14933] netlink: 'syz.2.3047': attribute type 1 has an invalid length.
[  186.916331][T14933] 8021q: adding VLAN 0 to HW filter on device bond8
[  186.926669][T14933] gretap3: entered promiscuous mode
[  186.934059][T14933] bond8: (slave gretap3): making interface the new active one
[  186.938809][T14933] bond8: (slave gretap3): Enslaving as an active interface with an up link
[  186.950323][T14933] macvlan2: entered promiscuous mode
[  186.952341][T14933] macvlan2: entered allmulticast mode
[  186.956020][T14933] bond8: entered promiscuous mode
[  186.960357][T14933] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  186.963851][T14933] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  186.971535][T14933] bond8: left promiscuous mode
[  187.215623][T14959] 8021q: adding VLAN 0 to HW filter on device bond9
[  187.225763][T14959] bond0: (slave bond9): Enslaving as an active interface with an up link
[  187.544743][T14982] bridge15: entered allmulticast mode
[  187.826383][T15001] __nla_validate_parse: 17 callbacks suppressed
[  187.826394][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3071'.
[  187.855833][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3073'.
[  187.858804][T15005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3073'.
[  187.981161][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3078'.
[  187.986215][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3078'.
[  188.068503][T15032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3081'.
[  188.105639][T15034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3082'.
[  188.109840][T15034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3082'.
[  188.109892][T15026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  188.130329][T15027] netlink: 'syz.3.3080': attribute type 1 has an invalid length.
[  188.137005][T15027] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3080'.
[  188.143797][T15027] NCSI netlink: No device for ifindex 0
[  188.204361][T15044] net_ratelimit: 30 callbacks suppressed
[  188.204371][T15044] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  188.214081][T15044] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3085'.
[  188.219479][T15044] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  188.384409][T15061] tipc: Enabled bearer <udp:syz0>, priority 10
[  188.531768][T15078] netlink: 'syz.2.3096': attribute type 13 has an invalid length.
[  188.585838][T15079] netlink: 'syz.2.3096': attribute type 23 has an invalid length.
[  188.881018][T15102] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20001
[  189.200085][T15133] sctp: [Deprecated]: syz.3.3118 (pid 15133) Use of struct sctp_assoc_value in delayed_ack socket option.
[  189.200085][T15133] Use struct sctp_sack_info instead
[  189.236286][T15140] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  189.392131][T15167] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.487464][T15179] netlink: 'syz.0.3126': attribute type 5 has an invalid length.
[  189.521955][T15167] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.552066][T15179] geneve3: entered promiscuous mode
[  189.554187][T15179] geneve3: entered allmulticast mode
[  189.561152][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  189.567964][ T5858] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  189.602006][T15167] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.606197][T15167] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  189.687195][T15167] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.692675][T15167] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  189.777207][ T5869] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  189.781234][ T5869] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  189.798230][ T5869] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  189.804772][ T5869] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  189.824443][T15199] tc_dump_action: action bad kind
[  189.829295][ T5869] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  189.834842][ T5869] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  189.851737][ T5869] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  189.855346][ T5869] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  189.937154][T15214] netlink: zone id is out of range
[  189.940071][T15214] netlink: zone id is out of range
[  189.941979][T15214] netlink: zone id is out of range
[  189.943986][T15214] netlink: zone id is out of range
[  189.945603][T15214] netlink: zone id is out of range
[  189.947313][T15214] netlink: zone id is out of range
[  189.949582][T15214] netlink: zone id is out of range
[  190.319419][T15235] block nbd2: server does not support multiple connections per device.
[  190.330746][T15235] block nbd2: shutting down sockets
[  190.344209][T15235] netlink: 'syz.2.3149': attribute type 5 has an invalid length.
[  192.373488][T15394] netlink: 'syz.3.3197': attribute type 13 has an invalid length.
[  192.376773][T15394] netlink: 'syz.3.3197': attribute type 17 has an invalid length.
[  192.657375][T15416] netlink: 'syz.2.3204': attribute type 21 has an invalid length.
[  192.836801][T15434] __nla_validate_parse: 42 callbacks suppressed
[  192.836811][T15434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3210'.
[  192.914016][T15433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.976983][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3214'.
[  193.096435][T15455] netlink: 'syz.3.3216': attribute type 13 has an invalid length.
[  193.099654][T15455] netlink: 'syz.3.3216': attribute type 17 has an invalid length.
[  193.141143][T15455] bridge0: port 1(syz_tun) entered blocking state
[  193.143832][T15455] bridge0: port 1(syz_tun) entered listening state
[  193.147796][T15455] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.230839][T15455] net_ratelimit: 16 callbacks suppressed
[  193.230844][T15455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  193.395928][    C0] ==================================================================
[  193.398592][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  193.401741][    C0] Write of size 8 at addr ffff888111e9f630 by task swapper/0/0
[  193.405275][    C0] 
[  193.406115][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59-dirty #0 PREEMPT(full) 
[  193.406126][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  193.406131][    C0] Call Trace:
[  193.406135][    C0]  <IRQ>
[  193.406139][    C0]  dump_stack_lvl+0x189/0x250
[  193.406150][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  193.406161][    C0]  ? rcu_is_watching+0x15/0xb0
[  193.406167][    C0]  ? __kasan_check_byte+0x12/0x40
[  193.406177][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.406183][    C0]  ? rcu_is_watching+0x15/0xb0
[  193.406190][    C0]  ? lock_release+0x4b/0x3e0
[  193.406199][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  193.406206][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  193.406214][    C0]  print_report+0xca/0x240
[  193.406220][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  193.406230][    C0]  kasan_report+0x118/0x150
[  193.406239][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  193.406248][    C0]  __xfrm_state_delete+0x696/0xca0
[  193.406259][    C0]  xfrm_timer_handler+0x18f/0xa00
[  193.406269][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  193.406277][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  193.406285][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.406294][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  193.406301][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  193.406309][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  193.406318][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  193.406326][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  193.406335][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  193.406341][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  193.406349][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  193.406356][    C0]  handle_softirqs+0x286/0x870
[  193.406363][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  193.406370][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  193.406376][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  193.406384][    C0]  __irq_exit_rcu+0xca/0x1f0
[  193.406390][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  193.406398][    C0]  irq_exit_rcu+0x9/0x30
[  193.406403][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  193.406411][    C0]  </IRQ>
[  193.406414][    C0]  <TASK>
[  193.406416][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  193.406424][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  193.406433][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 33 d7 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  193.406439][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  193.406446][    C0] RAX: f50371f03df9e500 RBX: ffffffff81968308 RCX: f50371f03df9e500
[  193.406451][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b6eaa RDI: ffffffff8be33400
[  193.406456][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  193.406460][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa37f30
[  193.406465][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  193.406469][    C0]  ? do_idle+0x1e8/0x510
[  193.406477][    C0]  default_idle+0x13/0x20
[  193.406483][    C0]  default_idle_call+0x74/0xb0
[  193.406489][    C0]  do_idle+0x1e8/0x510
[  193.406496][    C0]  ? __pfx_do_idle+0x10/0x10
[  193.406503][    C0]  ? do_idle+0x5/0x510
[  193.406508][    C0]  cpu_startup_entry+0x44/0x60
[  193.406514][    C0]  rest_init+0x2de/0x300
[  193.406521][    C0]  start_kernel+0x3a9/0x410
[  193.406529][    C0]  x86_64_start_reservations+0x24/0x30
[  193.406538][    C0]  x86_64_start_kernel+0x143/0x1c0
[  193.406546][    C0]  common_startup_64+0x13e/0x147
[  193.406557][    C0]  </TASK>
[  193.406559][    C0] 
[  193.529730][    C0] Allocated by task 13245:
[  193.531355][    C0]  kasan_save_track+0x3e/0x80
[  193.533077][    C0]  __kasan_slab_alloc+0x6c/0x80
[  193.534938][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  193.537081][    C0]  xfrm_state_alloc+0x24/0x2f0
[  193.538819][    C0]  __find_acq_core+0x8a7/0x1c00
[  193.540648][    C0]  xfrm_find_acq+0x78/0xa0
[  193.542351][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  193.544249][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  193.546039][    C0]  netlink_rcv_skb+0x208/0x470
[  193.547848][    C0]  xfrm_netlink_rcv+0x79/0x90
[  193.549729][    C0]  netlink_unicast+0x82f/0x9e0
[  193.551649][    C0]  netlink_sendmsg+0x805/0xb30
[  193.553545][    C0]  __sock_sendmsg+0x21c/0x270
[  193.555182][    C0]  ____sys_sendmsg+0x505/0x830
[  193.556933][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  193.558817][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  193.560644][    C0]  do_syscall_64+0xfa/0x3b0
[  193.562369][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.564662][    C0] 
[  193.565582][    C0] Freed by task 47:
[  193.567136][    C0]  kasan_save_track+0x3e/0x80
[  193.568824][    C0]  kasan_save_free_info+0x46/0x50
[  193.570427][    C0]  __kasan_slab_free+0x5b/0x80
[  193.572013][    C0]  kmem_cache_free+0x18f/0x400
[  193.573879][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  193.575619][    C0]  process_scheduled_works+0xae1/0x17b0
[  193.577467][    C0]  worker_thread+0x8a0/0xda0
[  193.579010][    C0]  kthread+0x711/0x8a0
[  193.580391][    C0]  ret_from_fork+0x3fc/0x770
[  193.581928][    C0]  ret_from_fork_asm+0x1a/0x30
[  193.583515][    C0] 
[  193.584336][    C0] The buggy address belongs to the object at ffff888111e9f600
[  193.584336][    C0]  which belongs to the cache xfrm_state of size 928
[  193.589789][    C0] The buggy address is located 48 bytes inside of
[  193.589789][    C0]  freed 928-byte region [ffff888111e9f600, ffff888111e9f9a0)
[  193.595127][    C0] 
[  193.595969][    C0] The buggy address belongs to the physical page:
[  193.598103][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888111e9e400 pfn:0x111e9c
[  193.601535][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  193.604535][    C0] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  193.607435][    C0] page_type: f5(slab)
[  193.608795][    C0] raw: 057ff00000000040 ffff88801d777280 dead000000000122 0000000000000000
[  193.611829][    C0] raw: ffff888111e9e400 00000000800e000d 00000000f5000000 0000000000000000
[  193.614953][    C0] head: 057ff00000000040 ffff88801d777280 dead000000000122 0000000000000000
[  193.618379][    C0] head: ffff888111e9e400 00000000800e000d 00000000f5000000 0000000000000000
[  193.621239][    C0] head: 057ff00000000002 ffffea000447a701 00000000ffffffff 00000000ffffffff
[  193.624087][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  193.626921][    C0] page dumped because: kasan: bad access detected
[  193.629027][    C0] page_owner tracks the page as allocated
[  193.631324][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6180, tgid 6178 (syz.2.76), ts 52411663898, free_ts 52386812721
[  193.638881][    C0]  post_alloc_hook+0x240/0x2a0
[  193.640478][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  193.642318][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  193.644258][    C0]  alloc_pages_mpol+0x232/0x4a0
[  193.645878][    C0]  allocate_slab+0x8a/0x370
[  193.647391][    C0]  ___slab_alloc+0xbeb/0x1410
[  193.649238][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  193.651163][    C0]  xfrm_state_alloc+0x24/0x2f0
[  193.652820][    C0]  pfkey_add+0x6e4/0x2e00
[  193.654274][    C0]  pfkey_sendmsg+0xbfe/0x1090
[  193.655870][    C0]  __sock_sendmsg+0x21c/0x270
[  193.657427][    C0]  ____sys_sendmsg+0x505/0x830
[  193.659027][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  193.660580][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  193.662267][    C0]  do_syscall_64+0xfa/0x3b0
[  193.664033][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.666389][    C0] page last free pid 5294 tgid 5294 stack trace:
[  193.669064][    C0]  __free_frozen_pages+0xbc4/0xd30
[  193.671184][    C0]  __slab_free+0x303/0x3c0
[  193.672994][    C0]  qlist_free_all+0x97/0x140
[  193.674759][    C0]  kasan_quarantine_reduce+0x148/0x160
[  193.676652][    C0]  __kasan_slab_alloc+0x22/0x80
[  193.678321][    C0]  __kmalloc_noprof+0x224/0x4f0
[  193.680132][    C0]  tomoyo_realpath_from_path+0xe3/0x5d0
[  193.682157][    C0]  tomoyo_path_perm+0x213/0x4b0
[  193.684175][    C0]  security_inode_getattr+0x12f/0x330
[  193.686202][    C0]  vfs_fstatat+0xb1/0x170
[  193.687640][    C0]  __x64_sys_newfstatat+0x116/0x190
[  193.689382][    C0]  do_syscall_64+0xfa/0x3b0
[  193.691259][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.693485][    C0] 
[  193.694299][    C0] Memory state around the buggy address:
[  193.696230][    C0]  ffff888111e9f500: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  193.698953][    C0]  ffff888111e9f580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  193.701600][    C0] >ffff888111e9f600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  193.704321][    C0]                                      ^
[  193.706271][    C0]  ffff888111e9f680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  193.709040][    C0]  ffff888111e9f700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  193.711804][    C0] ==================================================================
[  193.714789][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  193.717286][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59-dirty #0 PREEMPT(full) 
[  193.722032][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  193.725898][    C0] Call Trace:
[  193.727354][    C0]  <IRQ>
[  193.728473][    C0]  dump_stack_lvl+0x99/0x250
[  193.730255][    C0]  ? __asan_memcpy+0x40/0x70
[  193.731904][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.734077][    C0]  ? __pfx__printk+0x10/0x10
[  193.735658][    C0]  vpanic+0x281/0x750
[  193.737090][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  193.739310][    C0]  ? __pfx_vpanic+0x10/0x10
[  193.741287][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  193.743959][    C0]  panic+0xb9/0xc0
[  193.745564][    C0]  ? __pfx_panic+0x10/0x10
[  193.747443][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  193.749935][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  193.752186][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  193.754182][    C0]  check_panic_on_warn+0x89/0xb0
[  193.755943][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  193.758163][    C0]  end_report+0x78/0x160
[  193.759971][    C0]  kasan_report+0x129/0x150
[  193.761763][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  193.763885][    C0]  __xfrm_state_delete+0x696/0xca0
[  193.766012][    C0]  xfrm_timer_handler+0x18f/0xa00
[  193.768124][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  193.770352][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  193.772764][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.774780][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  193.777203][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  193.779836][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  193.782137][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  193.784296][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  193.786107][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  193.788051][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  193.790022][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  193.791983][    C0]  handle_softirqs+0x286/0x870
[  193.793813][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  193.795593][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  193.797867][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  193.800052][    C0]  __irq_exit_rcu+0xca/0x1f0
[  193.802027][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  193.804244][    C0]  irq_exit_rcu+0x9/0x30
[  193.806086][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  193.808518][    C0]  </IRQ>
[  193.809799][    C0]  <TASK>
[  193.811069][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  193.813616][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  193.815973][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 33 d7 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  193.824140][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  193.826760][    C0] RAX: f50371f03df9e500 RBX: ffffffff81968308 RCX: f50371f03df9e500
[  193.830118][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b6eaa RDI: ffffffff8be33400
[  193.833114][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  193.835912][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa37f30
[  193.839280][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  193.842732][    C0]  ? do_idle+0x1e8/0x510
[  193.844586][    C0]  default_idle+0x13/0x20
[  193.846483][    C0]  default_idle_call+0x74/0xb0
[  193.848575][    C0]  do_idle+0x1e8/0x510
[  193.850364][    C0]  ? __pfx_do_idle+0x10/0x10
[  193.852395][    C0]  ? do_idle+0x5/0x510
[  193.853882][    C0]  cpu_startup_entry+0x44/0x60
[  193.855456][    C0]  rest_init+0x2de/0x300
[  193.856873][    C0]  start_kernel+0x3a9/0x410
[  193.858388][    C0]  x86_64_start_reservations+0x24/0x30
[  193.860357][    C0]  x86_64_start_kernel+0x143/0x1c0
[  193.862081][    C0]  common_startup_64+0x13e/0x147
[  193.864018][    C0]  </TASK>
[  193.865908][    C0] Kernel Offset: disabled
[  193.867673][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:49:09  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073b0
R8 =ffff8880215a0237 R9 =1ffff110042b4046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98fb R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3e1b34 CR3=0000000025e76000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0a3020646165725f 6b72616d20302073
XMM06=65746174735f6b61 6570203020736574 XMM07=6174735f6c61746f 742030206e736e69
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007f6fc7a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=846f2878bd10ef00 RBX=ffffffff81968308 RCX=846f2878bd10ef00 RDX=0000000000000001
RSI=ffffffff8d9b6eaa RDI=ffffffff8be33400 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37f30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d6000
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001000 CR3=0000000028c7a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
