last executing test programs:

1.659369591s ago: executing program 1 (id=18800):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020605000000000000000000ffec000014000780080011400000000005001500000000000500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x82, 0xfffffffffffffffe, &(0x7f00000000c0)=0x95)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r5, 0x10c, 0x1, &(0x7f00000000c0)=0xffff6a4b, 0x4)
unshare(0x480)
bind$bt_l2cap(r2, 0x0, 0x0)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)="0bc3a3", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f00000000c0)='\x00'/10, 0xa}], 0x3)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x80fe)

1.53817197s ago: executing program 1 (id=18803):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0xf95}, 0x8)
read$ptp(r1, &(0x7f0000000000)=""/124, 0x7c)

1.53762596s ago: executing program 1 (id=18805):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x3, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000001c0)=0x1, 0x4)
preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/212, 0xd4}, {&(0x7f0000000300)=""/65, 0x41}, {&(0x7f0000000380)=""/173, 0xad}, {&(0x7f0000000440)=""/236, 0xec}, {&(0x7f0000000540)=""/90, 0x5a}], 0x5, 0x5, 0xffffff81)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xe, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8b}, [@map_fd={0x18, 0x6, 0x1, 0x0, r1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000006c0)='syzkaller\x00', 0x3, 0x39, &(0x7f0000000700)=""/57, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0x0, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000780)=[{0x2, 0x2, 0x1, 0x5}]}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={r4, r0, 0x13, 0x0, @val=@netfilter={0x0, 0x1, 0xffffff91, 0x1}}, 0x20)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000008c0)=0x7, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r5, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x62}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4008010)
r6 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000a40))
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000a80)={'team0\x00', <r8=>0x0})
ioctl$int_in(r6, 0x5452, &(0x7f0000000ac0)=0x8)
r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r9, 0x800448d3, &(0x7f0000000b00)={@none, 0x5, 0x9, 0x0, 0x2, 0x4, "dea01406482a61315143aada2fa22fd864c191249ca22ddbbfe0c6e688f46a6f6868fca5534bd1392a5c914ece2ae40846711b9036fa6980457a26f24214701fa351b8f90f6e3459a72f33d6bb9baa5d7639b159faf77737b4b18c19d7da6d7b322e28a0f48730213863edadfeb90896d07e6ec97b37bbf12e952030c03dc4e8"})
socket(0x6, 0x3, 0x2)
r10 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0xc4)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000bc0)={<r11=>0x0, 0x7, 0xe, 0x200, 0xfff8, 0x7, 0x81, 0x10, {0x0, @in6={{0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xae}}, 0x300, 0xa, 0x2, 0x9, 0x4}}, &(0x7f0000000c80)=0xb0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000d00)={r11, 0x1c, &(0x7f0000000cc0)=[@in6={0xa, 0x4e23, 0x6b, @private2, 0x2}]}, &(0x7f0000000d40)=0x10)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d80)={0xffffffffffffffff, 0xd45, 0x8}, 0xc)
r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001000)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001080)={0xdaf, <r14=>0x0}, 0x8)
r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x5, '\x00', r8, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xc, 0x2a, &(0x7f0000000dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x1, 0x2, 0xb, 0x8, 0x8}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0x4, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0xd71}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000f40)='GPL\x00', 0x0, 0x4c, &(0x7f0000000f80)=""/76, 0x40f00, 0x4, '\x00', r8, @fallback=0x1a, r13, 0x8, &(0x7f0000001040)={0x6, 0x8}, 0x8, 0x10, 0x0, 0x0, r14, r4, 0x3, &(0x7f0000001140)=[r1, r2, r15, r1, r1], &(0x7f0000001180)=[{0x1, 0x5, 0x3, 0xa}, {0x0, 0x3, 0x4, 0xb}, {0x5, 0x5, 0x3, 0xc}], 0x10, 0x2}, 0x94)

1.099054065s ago: executing program 0 (id=18815):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'rose0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xff, 0x2, 0xfe, 0x0, 0x1000}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r4, 0xffffffffffffffff, 0x4, 0x4}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r5=>0x0})
clock_gettime(0x5, &(0x7f0000000200))
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r6)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r6, 0x40047459, 0x0)
getsockname$netlink(r1, &(0x7f0000000240), &(0x7f0000000280)=0xc)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000940)={0x2bc, r9, 0x8, 0x1070bd29, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x40}, 0x10008050)

987.540185ms ago: executing program 0 (id=18816):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x6d5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800fc0014001901000000000000000228"], 0x28}}, 0x0)

987.021007ms ago: executing program 0 (id=18817):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={0x1c, r1, 0x201, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0)

930.563439ms ago: executing program 0 (id=18818):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r3=>0x0})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@ipv4={""/10, ""/2, @initdev}, <r4=>0x0}, &(0x7f0000000140)=0x14)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x12288}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@mpls_newroute={0x17c, 0x18, 0x300, 0x70bd2b, 0x25dfdbfb, {0x1c, 0x20, 0x14, 0x8, 0xfc, 0x3, 0xfd, 0x8, 0x1900}, [@RTA_MULTIPATH={0xc, 0x9, {0xffff, 0x4, 0x5, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x0, 0x8, r4}}, @RTA_NEWDST={0x84, 0x13, [{0xaa5}, {0xa, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x80000}, {0xec}, {0x0, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x80}, {0x9, 0x0, 0x1}, {}, {0x3}, {0x8}, {0xecc6d}, {0x6}, {0x8}, {0x101, 0x0, 0x1}, {0x3}, {0x9}, {0xffff}, {0x5}, {0x48}, {0xa4, 0x0, 0x1}, {0x401}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xfff3f}, {0x8001}, {0xe}, {0x7, 0x0, 0x1}, {0xffffa}, {0x8}]}, @RTA_OIF={0x8, 0x4, r6}, @RTA_VIA={0x14, 0x12, {0x10, "e6b26c4b0a5c9799545f771af05b"}}, @RTA_NEWDST={0x84, 0x13, [{0x1}, {0x3, 0x0, 0x1}, {0x80}, {0x9, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0xbdb}, {0x3, 0x0, 0x1}, {0x4}, {0xe}, {0x5, 0x0, 0x1}, {0x9}, {0x3}, {0x1000}, {0x200, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8}, {0xfa5}, {0x2, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x6}, {0x3}, {0x2, 0x0, 0x1}, {0x6}, {0x7}, {0x3}, {0x400, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0xdaa}, {0x4, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x9}}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x14, 0x80, r9}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xa}]}, 0x17c}, 0x1, 0x0, 0x0, 0x100}, 0x1)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0)
r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdf25047c000004006e001c00018006000600800a0000100007"], 0x34}}, 0x0)
r14 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), r13)
sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r14, @ANYBLOB="27030000040008000000000000"], 0x14}}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)={0x74, r14, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xfff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xe69}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x20000040)
r15 = socket$nl_route(0x10, 0x3, 0x0)
accept4$ax25(r8, &(0x7f0000000240)={{}, [@bcast, @default, @rose, @default, @default, @rose, @null, @rose]}, &(0x7f0000000300)=0x48, 0x800)
sendmsg$nl_route(r15, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0)

688.721958ms ago: executing program 1 (id=18819):
syz_emit_ethernet(0x72, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x64, 0x67, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x7, 0x25, [@dev={0xac, 0x14, 0x14, 0x1d}]}]}}, {{0x4e27, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "abb9bfe0c34c72d50c66fa8369f6e787"}, @md5sig={0x13, 0x12, "2a9c444be69caceb3fbd4ef8047b79a3"}, @eol, @fastopen={0x22, 0xb, "e3dc7db08210d755c9"}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0)

687.049463ms ago: executing program 0 (id=18825):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r9, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x54}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x3}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x5}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x7}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001840)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56741, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4009c}, 0x4000080)
socket$inet(0x2, 0x2, 0x0)
r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r10, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r10, 0x4008af23, &(0x7f0000000080)={0x1, 0x915})

618.974117ms ago: executing program 1 (id=18820):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@empty, @dev, <r2=>0x0}, &(0x7f0000000400)=0xc)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000004c0)={r2, 0x1, 0x6, @multicast}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x6}}}}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r5], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r6, &(0x7f0000000d40), 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r7 = socket$kcm(0x10, 0x100000000002, 0x4)
recvmsg$kcm(r7, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x40010002)
sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xf, 0x304, &(0x7f0000000040)="b90703600000f007049e0ff088471fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)

516.245486ms ago: executing program 1 (id=18822):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'macsec0\x00', <r1=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r1, 0xffffffffffffffff, 0x5, 0x1}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0xb, 0x40}, 0x8)
r5 = getpid()
syz_open_procfs$namespace(r5, &(0x7f0000000000)='ns/pid\x00')
syz_open_procfs$namespace(r5, &(0x7f0000000140)='ns/uts\x00')
syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/pid_for_children\x00')
write(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r7, &(0x7f0000000180), 0x10)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x8000000, 0xfffffffd, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x12, 0x3, 0xffffffffffffffff, 0x1, 0x7c2}, 0x40000002}}]}, {0x4, 0x6, "156c58e6140000000000000047d3289b"}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x240400c0)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000a00)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x6b3}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffff9, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x1, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2f, 0xe, 0x3, 0xa, 0x3, 0x1, 0xb, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0xfffffffe, 0x8fc, 0x84, 0x9, 0x3, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x820, 0x9, 0x1, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10004, 0x4, 0x1, 0x7f, 0xfffffffc, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x4, 0x8000, 0x0, 0x9, 0xffffffff, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0xa7, 0x5, 0x3, 0x10004, 0x5, 0x1, 0x0, 0x2, 0x7, 0x5, 0x6, 0x5, 0x4, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x4, 0x89, 0x2, 0x6, 0x100, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3d, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x2, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xb, 0x8, 0x101, 0x7, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x265, 0x4, 0xfffffa0c, 0x3, 0x0, 0x4, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0x0, 0x800, 0x723, 0x0, 0xe, 0x9, 0x4, 0x6, 0x7, 0x1, 0xfffffbff, 0x7, 0x3, 0x8, 0x57, 0xfffffffb, 0x2, 0x7f, 0x2, 0x81000001, 0x0, 0x9, 0xf, 0x5, 0x928, 0x4, 0xfffffffd, 0x5, 0x6042, 0xb87, 0x6, 0x8d8d, 0x55, 0x101, 0x2, 0x64e8, 0xc, 0x82f, 0x2, 0x80a, 0xfff, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x0, 0x3, 0x1, {0xe, 0x2, 0x1, 0x2, 0xbbbc, 0x6}, {0x6, 0x1, 0x2, 0xdc2f, 0xfff9, 0xf}, 0xc, 0x0, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xffff, 0x6c57, 0x0, 0x2, 0x4, 0x7fff, 0x400, 0x1ff, 0x5518, 0x9, 0x200, 0x80010000, 0x1, 0x437, 0xdb0, 0x7a2357cd, 0xb05b, 0x2, 0x0, 0xffff, 0x1, 0x4, 0x3ff, 0x7f, 0x5, 0xfffff800, 0x0, 0x9, 0xffffff7e, 0x4, 0x401, 0x5eb, 0xa, 0x1ff, 0x9fa, 0x5, 0x8e5, 0x5, 0x5, 0x0, 0x10, 0x80, 0x8001, 0xab, 0xffff1efb, 0x4, 0xfff, 0x2, 0x3, 0xc, 0x4, 0x1, 0x51, 0x3, 0x101, 0x2, 0x5, 0x3, 0x1, 0x2, 0xf6a6, 0x5, 0x5, 0xaf1c, 0xc8, 0x6, 0x40, 0x9, 0x986, 0x10000, 0xe, 0x6, 0x80, 0x245, 0x38b, 0x5, 0xffffff13, 0xc00000, 0x8, 0xd0bd, 0xfffffff8, 0x0, 0x9, 0xc3a, 0x7, 0x3, 0x80000000, 0x0, 0x8, 0x8, 0x7, 0x0, 0x861a, 0x9, 0x5, 0xc605, 0x8eb6, 0x401, 0x0, 0x0, 0x6, 0x1, 0x8, 0x1, 0x1ff, 0xb2d, 0x5, 0xb, 0x0, 0x0, 0xfffffeff, 0x5, 0x9, 0x8, 0xffff, 0x2dd9c5a4, 0x0, 0x9, 0x81, 0xffff, 0x8, 0x2, 0x7, 0x7, 0x5, 0x2, 0x4, 0x57, 0x6, 0x8, 0x5, 0x25, 0x3, 0xe8, 0x1000, 0x0, 0xfe6, 0x50, 0xd3, 0x12cd2b8b, 0x2, 0x9, 0x7f, 0x7, 0x2, 0xb72c, 0x0, 0x80, 0x93, 0x30, 0x7, 0x5, 0x6000000, 0x8, 0xfffffffa, 0x0, 0x5, 0x2, 0x8001, 0xffffffff, 0x6, 0x2, 0x4, 0x80000000, 0x3ff, 0xbd49, 0x8, 0x8, 0x3, 0x9, 0x7, 0x5, 0x2, 0xfffffff8, 0xa2db, 0x400, 0x4, 0x5, 0x0, 0x4, 0xf45, 0x9, 0xc, 0x7fff, 0x3, 0x2, 0x400, 0x501, 0xd, 0xbb, 0x2, 0x402, 0x3, 0x10, 0x0, 0x10, 0xfff, 0x0, 0x5, 0x6, 0x6a, 0x10, 0x8, 0xfffffff7, 0x4, 0x3, 0xff, 0xfffffff8, 0x6, 0xff, 0x79, 0x10000, 0x8, 0x8000000, 0x0, 0x1ff, 0xd5a9, 0xb, 0x6, 0x1, 0x6, 0x8, 0xffffffb0, 0x5, 0x4447, 0x1, 0x4, 0xffffff78, 0x2, 0x6, 0x3, 0x8000, 0xffffff3e, 0x5, 0x3, 0x4, 0x4, 0xfd95, 0x6, 0x4, 0xb, 0xea, 0x385a9732, 0x81, 0xfd9, 0xffffffff, 0x97, 0x0, 0x2bb7, 0x2, 0x9c7, 0x7f, 0x78a6, 0x40004, 0x7]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x894}}, 0x0)

379.916682ms ago: executing program 0 (id=18826):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
close(r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x80000)
nanosleep(&(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180))
unshare(0x6a040000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r4}, &(0x7f0000000040), &(0x7f0000000940)=r3}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x6}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x1}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000380001070000ef067c6c580e08"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000000})
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6], 0xec}}, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @rand_addr=0x64010102}, {0x2, 0x0, @empty}, 0x2a0})
socket$xdp(0x2c, 0x3, 0x0)

375.58483ms ago: executing program 2 (id=18827):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES8=r1, @ANYRES64=r1], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x5, 0x3}, &(0x7f00000000c0)=0x8)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r2}, 0x18)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x44880}, 0x850)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x0, 0x8})

300.412381ms ago: executing program 2 (id=18828):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000080), &(0x7f00000000c0)='%pI4   \x00'}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x4028af11, &(0x7f0000000300)={{0x0, 0x4, 0x7, 0x1000, 0x2, 0x100, 0x100, 0x8, 0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5}})

299.96319ms ago: executing program 2 (id=18829):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
unshare(0x26000400)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, &(0x7f0000000080))
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0xf4240}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r3, 0x28, 0x8001, 0xfffffffffffffffc, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1400000004000000080000000a00000004080000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000852baf99570c01d6b3d0b7611baa90f453b24839e15b03eb2db0fcc8579844e950e41d6fd9c60c0182b7c016f12b521680d6cf8482bbfc4e87c34b0c80a9705932f1407197f027659686adcc7ccdbc886f2caae2cf9bac88", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x4008af22, &(0x7f0000000300)={{0x0, 0x4, 0x7, 0x1000, 0x2, 0x100, 0x100, 0x8, 0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5}})

230.413439ms ago: executing program 2 (id=18830):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x4008000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r8)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000240)=0x4)
socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

87.088302ms ago: executing program 2 (id=18831):
unshare(0x48000d00)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000580)=<r4=>0x0)
sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)

0s ago: executing program 2 (id=18832):
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000020301020000000000d3288ff4000009"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x4000004)
r0 = socket(0x22, 0x803, 0x0)
bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB="e0000000120001000000000000000000647262675f70725f736861333834000000000000000000000000000000000000000000d71c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/226], 0xe0}}, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000140)=0x94e, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0xb, &(0x7f0000000400)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x55f4}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], &(0x7f0000000540)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6], &(0x7f0000000c00)=[{0x1, 0x3, 0x8, 0xc}], 0x10, 0x7fff}, 0x94)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r7=>0x0})
sendto$packet(r5, 0x0, 0x0, 0x20000080, &(0x7f0000000080)={0x11, 0xf6, r7, 0x1, 0x1, 0x6, @broadcast}, 0x14)
close(0x3)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r3)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000900)={0x130, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x300000}, {0x6, 0x11, 0xf7b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb8}, {0x6, 0x11, 0x10}}]}, 0x130}, 0x1, 0x0, 0x0, 0x804}, 0x2050)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r8, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x60, r8, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @local, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_emit_ethernet(0x8e, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x18, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x5, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0xda, 0x1, 0x3, [{@private=0xa010100, 0x1ff}, {@multicast2, 0x43d}, {@private=0xa010101, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7f}, {@loopback, 0x2}, {@private=0xa010100, 0x80000000}, {@multicast1, 0x8000}]}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x5, 0x0]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x800, {[@timestamp={0x8, 0xa, 0xfffffffe, 0x3ff}]}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:44100kB local_pcp:17976kB free_cma:0kB
[  633.489717][ T8877] lowmem_reserve[]: 0 0 0 0 0
[  633.492315][ T8877] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  633.507772][ T8877] lowmem_reserve[]: 0 0 854 854 854
[  633.510031][ T8877] Node 1 Normal free:271364kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31220kB inactive_anon:0kB active_file:580kB inactive_file:17620kB unevictable:3536kB writepending:76kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38880kB local_pcp:21764kB free_cma:0kB
[  633.523920][ T8877] lowmem_reserve[]: 0 0 0 0 0
[  633.526881][ T8877] Node 0 DMA: 2*4kB (UM) 1*8kB (U) 1*16kB (M) 4*32kB (U) 3*64kB (U) 5*128kB (UM) 5*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 0*4096kB = 10976kB
[  633.533878][ T8877] Node 0 DMA32: 461*4kB (U) 691*8kB (U) 202*16kB (U) 179*32kB (UME) 167*64kB (UM) 170*128kB (UME) 109*256kB (U) 36*512kB (UME) 16*1024kB (UM) 1*2048kB (M) 0*4096kB = 113548kB
[  633.543370][ T8877] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (UM) = 458616kB
[  633.550124][ T8877] Node 1 Normal: 864*4kB (UE) 277*8kB (U) 83*16kB (U) 123*32kB (UM) 361*64kB (UM) 96*128kB (UME) 27*256kB (UM) 34*512kB (UM) 26*1024kB (UM) 13*2048kB (UME) 36*4096kB (U) = 271352kB
[  633.559421][ T8877] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  633.563961][ T8877] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  633.568338][ T8877] 42220 total pagecache pages
[  633.570676][ T8877] 0 pages in swap cache
[  633.572854][ T8877] Free swap  = 124996kB
[  633.574843][ T8877] Total swap = 124996kB
[  633.576893][ T8877] 786301 pages RAM
[  633.578801][ T8877] 0 pages HighMem/MovableOnly
[  633.581521][ T8877] 241344 pages reserved
[  633.583918][ T8877] 0 pages cma reserved
[  634.130494][ T8936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  634.134242][ T8936] syzkaller0: entered promiscuous mode
[  634.136813][ T8936] syzkaller0: entered allmulticast mode
[  634.260710][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.264680][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.427200][ T8937] tipc: Resetting bearer <eth:syzkaller0>
[  634.429990][ T8937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.451444][ T8937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.464369][ T8935] tipc: Resetting bearer <eth:syzkaller0>
[  634.491145][ T8935] tipc: Disabling bearer <eth:syzkaller0>
[  634.577849][ T8928] lo speed is unknown, defaulting to 1000
[  634.581313][ T8928] C speed is unknown, defaulting to 1000
[  635.123094][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15388'.
[  635.469259][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15401'.
[  635.473411][ T9014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15401'.
[  635.477422][ T9014] netlink: 'syz.2.15401': attribute type 20 has an invalid length.
[  635.484253][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15401'.
[  635.488708][ T9014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15401'.
[  635.494774][ T9014] netlink: 'syz.2.15401': attribute type 20 has an invalid length.
[  635.570891][   T60] block nbd3: Possible stuck request ffff888021540000: control (read@0,1024B). Runtime 180 seconds
[  635.574847][   T60] block nbd3: Possible stuck request ffff888021540200: control (read@1024,1024B). Runtime 180 seconds
[  635.578522][   T60] block nbd3: Possible stuck request ffff888021540400: control (read@2048,1024B). Runtime 180 seconds
[  635.582871][   T60] block nbd3: Possible stuck request ffff888021540600: control (read@3072,1024B). Runtime 180 seconds
[  635.944990][ T9038] netlink: 'syz.0.15411': attribute type 1 has an invalid length.
[  635.948068][ T9038] netlink: 1 bytes leftover after parsing attributes in process `syz.0.15411'.
[  636.038705][ T9011] lo speed is unknown, defaulting to 1000
[  636.043835][ T9011] C speed is unknown, defaulting to 1000
[  636.255518][ T9016] lo speed is unknown, defaulting to 1000
[  636.259202][ T9016] C speed is unknown, defaulting to 1000
[  637.010880][ T9057] lo speed is unknown, defaulting to 1000
[  637.035377][ T9057] C speed is unknown, defaulting to 1000
[  637.849522][ T9078] netlink: 'syz.2.15426': attribute type 10 has an invalid length.
[  637.938316][ T9085] netlink: 200 bytes leftover after parsing attributes in process `syz.1.15429'.
[  637.948301][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15429'.
[  637.967527][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15430'.
[  638.050073][ T9095] netlink: 9 bytes leftover after parsing attributes in process `syz.1.15433'.
[  638.073390][ T9097] netlink: 'syz.2.15435': attribute type 4 has an invalid length.
[  638.130038][ T9105] netlink: 200 bytes leftover after parsing attributes in process `syz.2.15440'.
[  638.142677][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15440'.
[  638.233795][ T9117] netlink: 'syz.0.15443': attribute type 9 has an invalid length.
[  638.236407][ T9117] netlink: 'syz.0.15443': attribute type 7 has an invalid length.
[  638.241783][ T9117] netlink: 'syz.0.15443': attribute type 8 has an invalid length.
[  638.663349][ T9152] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15461'.
[  638.667543][ T9152] netlink: 'syz.1.15461': attribute type 1 has an invalid length.
[  638.759811][ T9156] bond0 (unregistering): Released all slaves
[  638.910801][ T9170] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  639.448863][ T9189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15477'.
[  639.575936][ T9194] netlink: 'syz.0.15480': attribute type 1 has an invalid length.
[  639.579394][ T9194] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15480'.
[  639.744171][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15483'.
[  639.747974][ T9201] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  640.311843][ T9231] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  640.315667][ T9231] syzkaller0: entered promiscuous mode
[  640.318030][ T9231] syzkaller0: entered allmulticast mode
[  640.335565][ T9231] tipc: Resetting bearer <eth:syzkaller0>
[  640.344535][ T9230] tipc: Resetting bearer <eth:syzkaller0>
[  640.361642][ T9230] tipc: Disabling bearer <eth:syzkaller0>
[  641.865105][ T9333] netlink: 'syz.0.15539': attribute type 7 has an invalid length.
[  641.965091][ T9327] lo speed is unknown, defaulting to 1000
[  641.968039][ T9327] C speed is unknown, defaulting to 1000
[  642.075758][ T9348] sit0: entered promiscuous mode
[  642.084419][ T9348] netlink: 'syz.1.15543': attribute type 1 has an invalid length.
[  642.268684][ T9362] sctp: [Deprecated]: syz.0.15548 (pid 9362) Use of struct sctp_assoc_value in delayed_ack socket option.
[  642.268684][ T9362] Use struct sctp_sack_info instead
[  643.487635][ T9397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  643.496743][ T9397] syzkaller0: entered promiscuous mode
[  643.499245][ T9397] syzkaller0: entered allmulticast mode
[  644.162731][ T9402] tipc: Resetting bearer <eth:syzkaller0>
[  644.168213][ T9395] tipc: Resetting bearer <eth:syzkaller0>
[  644.191812][ T9395] tipc: Disabling bearer <eth:syzkaller0>
[  644.192941][ T9406] netlink: 'syz.2.15568': attribute type 2 has an invalid length.
[  644.271682][ T9415] netlink: 'syz.1.15572': attribute type 31 has an invalid length.
[  644.516060][ T9449] __nla_validate_parse: 7 callbacks suppressed
[  644.516075][ T9449] netlink: 88 bytes leftover after parsing attributes in process `syz.0.15589'.
[  644.533266][ T9450] veth1_macvtap: entered allmulticast mode
[  644.594060][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15593'.
[  644.860042][ T9493] netlink: 596 bytes leftover after parsing attributes in process `syz.2.15610'.
[  644.984389][ T9511] netlink: 'syz.2.15618': attribute type 5 has an invalid length.
[  645.034054][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15621'.
[  645.498224][ T9558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15641'.
[  645.628927][ T9573] netlink: 'syz.1.15647': attribute type 5 has an invalid length.
[  645.844522][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15653'.
[  645.924694][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15657'.
[  646.108631][ T9609] netlink: 248 bytes leftover after parsing attributes in process `syz.1.15662'.
[  646.182197][ T9613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15664'.
[  646.219527][ T9613] nbd: socks must be embedded in a SOCK_ITEM attr
[  646.238676][T30467] block nbd64: NBD_DISCONNECT
[  647.089595][ T9678] netlink: 'syz.2.15691': attribute type 3 has an invalid length.
[  647.092919][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15691'.
[  647.134217][ T9680] netlink: 'syz.2.15692': attribute type 1 has an invalid length.
[  647.185086][ T9687] netlink: 'syz.1.15695': attribute type 4 has an invalid length.
[  647.482124][ T9727] netlink: 'syz.0.15713': attribute type 1 has an invalid length.
[  649.459633][ T5292] udevd[5292]: worker [30415] /devices/virtual/block/nbd3 timeout; kill it
[  649.464305][ T5292] udevd[5292]: seq 22014 '/devices/virtual/block/nbd3' killed
[  650.244454][ T9852] netlink: 'syz.2.15772': attribute type 1 has an invalid length.
[  650.247181][ T9852] __nla_validate_parse: 7 callbacks suppressed
[  650.247216][ T9852] netlink: 3 bytes leftover after parsing attributes in process `syz.2.15772'.
[  650.387366][ T9868] netlink: 41 bytes leftover after parsing attributes in process `syz.1.15778'.
[  650.637511][ T9882] netlink: 'syz.2.15782': attribute type 10 has an invalid length.
[  651.642740][ T9918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15797'.
[  651.645974][ T9918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15797'.
[  651.694717][ T9920] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  651.874273][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15803'.
[  651.878148][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15803'.
[  651.900066][ T9934] netlink: 324 bytes leftover after parsing attributes in process `syz.2.15805'.
[  653.070065][T10012] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  653.760969][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15845'.
[  653.764168][T10034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15845'.
[  653.767176][T10034] netlink: 540 bytes leftover after parsing attributes in process `syz.2.15845'.
[  654.083496][T10057] netlink: 'syz.0.15855': attribute type 1 has an invalid length.
[  654.588183][T10111] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  654.682459][T10123] nbd: socks must be embedded in a SOCK_ITEM attr
[  654.933521][T10154] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  655.090344][T10173] netlink: 'syz.1.15909': attribute type 1 has an invalid length.
[  655.095224][T10173] netlink: 'syz.1.15909': attribute type 3 has an invalid length.
[  655.097706][T10173] netlink: 'syz.1.15909': attribute type 1 has an invalid length.
[  655.100733][T10173] NCSI netlink: No device for ifindex 0
[  655.393350][T10196] netlink: 'syz.1.15920': attribute type 1 has an invalid length.
[  655.453603][T10204] __nla_validate_parse: 10 callbacks suppressed
[  655.453618][T10204] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15923'.
[  655.461989][T10204] IPVS: Unknown mcast interface: vetN1_macvtap
[  655.860526][T10209] lo speed is unknown, defaulting to 1000
[  655.863291][T10209] C speed is unknown, defaulting to 1000
[  656.488128][T10247] netlink: 144 bytes leftover after parsing attributes in process `syz.1.15940'.
[  656.795908][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15949'.
[  656.799422][T10266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15949'.
[  658.065128][T10309] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15967'.
[  658.114014][T10313] netlink: 'syz.0.15969': attribute type 7 has an invalid length.
[  658.117563][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15969'.
[  658.176561][T10318] netlink: 256 bytes leftover after parsing attributes in process `syz.1.15971'.
[  658.181815][T10313] bridge19: port 1(bond0) entered blocking state
[  658.184803][T10313] bridge19: port 1(bond0) entered disabled state
[  658.187713][T10313] bond0: entered allmulticast mode
[  658.263894][T10321] netlink: 'syz.0.15972': attribute type 10 has an invalid length.
[  658.364016][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15976'.
[  659.058120][T10350] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.15985'.
[  659.168174][T10345] lo speed is unknown, defaulting to 1000
[  659.188855][T10345] C speed is unknown, defaulting to 1000
[  659.738370][T10393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16003'.
[  660.279138][T10430] netlink: 'syz.0.16020': attribute type 10 has an invalid length.
[  660.313446][T10434] netlink: 'syz.2.16022': attribute type 6 has an invalid length.
[  660.494189][T10455] sctp: [Deprecated]: syz.0.16032 (pid 10455) Use of int in max_burst socket option deprecated.
[  660.494189][T10455] Use struct sctp_assoc_value instead
[  660.537473][T10459] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  660.541862][T10459] __nla_validate_parse: 1 callbacks suppressed
[  660.541871][T10459] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16034'.
[  660.827663][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16049'.
[  660.872873][T10491] vlan2: entered allmulticast mode
[  660.875156][T10491] bond24: entered allmulticast mode
[  661.727425][T10529] x9: renamed from bridge_slave_0
[  661.764987][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16066'.
[  661.795046][T10535] netlink: del zone limit has 8 unknown bytes
[  661.811210][T10531] netlink: 1032 bytes leftover after parsing attributes in process `syz.0.16066'.
[  662.152578][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16081'.
[  662.160292][T10563] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  662.164152][T10563] CPU: 0 UID: 0 PID: 10563 Comm: syz.2.16081 Not tainted syzkaller #0 PREEMPT(full) 
[  662.164163][T10563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  662.164169][T10563] Call Trace:
[  662.164172][T10563]  <TASK>
[  662.164175][T10563]  dump_stack_lvl+0x189/0x250
[  662.164191][T10563]  ? __pfx_dump_stack_lvl+0x10/0x10
[  662.164199][T10563]  ? __pfx__printk+0x10/0x10
[  662.164215][T10563]  ? kernfs_path_from_node+0x2f/0x290
[  662.164226][T10563]  ? kernfs_path_from_node+0x250/0x290
[  662.164237][T10563]  ? kernfs_path_from_node+0x2f/0x290
[  662.164251][T10563]  sysfs_warn_dup+0x8e/0xa0
[  662.164261][T10563]  sysfs_do_create_link_sd+0xc0/0x110
[  662.164269][T10563]  device_add_class_symlinks+0x1cf/0x240
[  662.164279][T10563]  device_add+0x475/0xb50
[  662.164287][T10563]  wiphy_register+0x1ba6/0x28d0
[  662.164303][T10563]  ? __pfx_wiphy_register+0x10/0x10
[  662.164310][T10563]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  662.164322][T10563]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  662.164334][T10563]  ieee80211_register_hw+0x3425/0x4080
[  662.164349][T10563]  ? ieee80211_register_hw+0x14a1/0x4080
[  662.164361][T10563]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  662.164371][T10563]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  662.164386][T10563]  ? __hrtimer_setup+0x187/0x210
[  662.164392][T10563]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  662.164404][T10563]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  662.164425][T10563]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  662.164433][T10563]  ? trace_kmalloc+0x1f/0xd0
[  662.164458][T10563]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  662.164467][T10563]  ? kstrndup+0xbf/0x160
[  662.164480][T10563]  hwsim_new_radio_nl+0xea4/0x1b10
[  662.164491][T10563]  ? __pfx___nla_validate_parse+0x10/0x10
[  662.164508][T10563]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  662.164523][T10563]  ? __nla_parse+0x40/0x60
[  662.164535][T10563]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  662.164549][T10563]  genl_family_rcv_msg_doit+0x215/0x300
[  662.164566][T10563]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  662.164580][T10563]  ? bpf_lsm_capable+0x9/0x20
[  662.164588][T10563]  ? security_capable+0x7e/0x2e0
[  662.164602][T10563]  genl_rcv_msg+0x60e/0x790
[  662.164614][T10563]  ? __pfx_genl_rcv_msg+0x10/0x10
[  662.164622][T10563]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  662.164638][T10563]  netlink_rcv_skb+0x208/0x470
[  662.164645][T10563]  ? __lock_acquire+0xab9/0xd20
[  662.164655][T10563]  ? __pfx_genl_rcv_msg+0x10/0x10
[  662.164665][T10563]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  662.164679][T10563]  ? down_read+0x1ad/0x2e0
[  662.164688][T10563]  genl_rcv+0x28/0x40
[  662.164696][T10563]  netlink_unicast+0x82f/0x9e0
[  662.164709][T10563]  ? __pfx_netlink_unicast+0x10/0x10
[  662.164721][T10563]  ? netlink_sendmsg+0x642/0xb30
[  662.164730][T10563]  ? skb_put+0x11b/0x210
[  662.164739][T10563]  netlink_sendmsg+0x805/0xb30
[  662.164750][T10563]  ? __pfx_netlink_sendmsg+0x10/0x10
[  662.164758][T10563]  ? aa_sock_msg_perm+0xf1/0x1d0
[  662.164765][T10563]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  662.164772][T10563]  ? __pfx_netlink_sendmsg+0x10/0x10
[  662.164779][T10563]  __sock_sendmsg+0x21c/0x270
[  662.164790][T10563]  ____sys_sendmsg+0x505/0x830
[  662.164800][T10563]  ? __pfx_____sys_sendmsg+0x10/0x10
[  662.164813][T10563]  ? import_iovec+0x74/0xa0
[  662.164823][T10563]  ___sys_sendmsg+0x21f/0x2a0
[  662.164832][T10563]  ? __pfx____sys_sendmsg+0x10/0x10
[  662.164854][T10563]  ? __fget_files+0x2a/0x420
[  662.164860][T10563]  ? __fget_files+0x3a0/0x420
[  662.164871][T10563]  __x64_sys_sendmsg+0x19b/0x260
[  662.164879][T10563]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  662.164891][T10563]  ? rcu_is_watching+0x15/0xb0
[  662.164900][T10563]  ? do_syscall_64+0xbe/0x3b0
[  662.164912][T10563]  do_syscall_64+0xfa/0x3b0
[  662.164921][T10563]  ? lockdep_hardirqs_on+0x9c/0x150
[  662.164931][T10563]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  662.164941][T10563]  ? exc_page_fault+0x9f/0xf0
[  662.164952][T10563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  662.164960][T10563] RIP: 0033:0x7fab45f8ebe9
[  662.164968][T10563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  662.164974][T10563] RSP: 002b:00007fab46e04038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  662.164983][T10563] RAX: ffffffffffffffda RBX: 00007fab461c5fa0 RCX: 00007fab45f8ebe9
[  662.164988][T10563] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  662.164993][T10563] RBP: 00007fab46011e19 R08: 0000000000000000 R09: 0000000000000000
[  662.164998][T10563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  662.165002][T10563] R13: 00007fab461c6038 R14: 00007fab461c5fa0 R15: 00007ffc8c9e0b48
[  662.165039][T10563]  </TASK>
[  662.451003][ T5891] page_pool_release_retry() stalled pool shutdown: id 147, 3329 inflight 60 sec
[  664.372095][T10561] lo speed is unknown, defaulting to 1000
[  664.381975][T10561] C speed is unknown, defaulting to 1000
[  664.798476][T10616] lo speed is unknown, defaulting to 1000
[  664.807955][T10616] C speed is unknown, defaulting to 1000
[  665.212936][T10648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  665.661223][   T60] block nbd3: Possible stuck request ffff888021540000: control (read@0,1024B). Runtime 210 seconds
[  665.665715][   T60] block nbd3: Possible stuck request ffff888021540200: control (read@1024,1024B). Runtime 210 seconds
[  665.671557][   T60] block nbd3: Possible stuck request ffff888021540400: control (read@2048,1024B). Runtime 210 seconds
[  665.676620][   T60] block nbd3: Possible stuck request ffff888021540600: control (read@3072,1024B). Runtime 210 seconds
[  666.401590][T10705] lo speed is unknown, defaulting to 1000
[  666.405969][T10705] C speed is unknown, defaulting to 1000
[  666.698566][T10727] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16140'.
[  666.988516][T10752] netlink: 'syz.0.16149': attribute type 32 has an invalid length.
[  667.300023][T10780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16163'.
[  667.465409][T10797] netlink: 'syz.2.16169': attribute type 10 has an invalid length.
[  667.468841][T10797] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16169'.
[  667.629604][T10820] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  667.819825][T10847] vlan2: entered promiscuous mode
[  667.822680][T10847] hsr_slave_1: entered promiscuous mode
[  667.824474][T10847] vlan2: entered allmulticast mode
[  667.826666][T10847] hsr_slave_1: entered allmulticast mode
[  667.844018][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16187'.
[  667.968992][T10859] netlink: 68 bytes leftover after parsing attributes in process `syz.2.16197'.
[  668.026755][T10864] sit0: entered promiscuous mode
[  668.028861][T10864] netlink: 'syz.2.16198': attribute type 1 has an invalid length.
[  668.035749][T10864] netlink: 1 bytes leftover after parsing attributes in process `syz.2.16198'.
[  668.042885][T10841] lo speed is unknown, defaulting to 1000
[  668.045750][T10841] C speed is unknown, defaulting to 1000
[  669.400224][T10931] openvswitch: netlink: Multiple metadata blocks provided
[  669.492368][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16227'.
[  669.677526][T10958] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  670.585490][T10980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16242'.
[  670.663635][T10990] netlink: 'syz.2.16248': attribute type 28 has an invalid length.
[  671.077146][T11020] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  671.080534][T11020] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16262'.
[  671.084369][T11020] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  671.715969][T11056] netlink: 264 bytes leftover after parsing attributes in process `syz.2.16277'.
[  671.774777][T11060] netlink: 'syz.0.16279': attribute type 10 has an invalid length.
[  671.778251][T11060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16279'.
[  671.788638][T11060] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  671.854684][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16282'.
[  671.923745][T11069] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  671.926760][T11069] syzkaller0: entered promiscuous mode
[  671.928757][T11069] syzkaller0: entered allmulticast mode
[  671.950758][T11069] tipc: Resetting bearer <eth:syzkaller0>
[  671.963270][T11068] tipc: Resetting bearer <eth:syzkaller0>
[  671.983851][T11068] tipc: Disabling bearer <eth:syzkaller0>
[  672.131223][T11093] netlink: 'syz.0.16296': attribute type 10 has an invalid length.
[  672.288754][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16308'.
[  672.504998][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16321'.
[  672.931827][T11176] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  672.935260][T11177] netlink: 'syz.2.16334': attribute type 4 has an invalid length.
[  673.531536][T11213] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16350'.
[  673.828026][T11225] netlink: 'syz.0.16356': attribute type 10 has an invalid length.
[  673.930355][T11250] netlink: 'syz.0.16363': attribute type 13 has an invalid length.
[  673.935821][T11250] gretap0: refused to change device tx_queue_len
[  673.938047][T11250] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  673.947089][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16362'.
[  674.737847][T11287] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  674.742584][T11287] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  675.037011][T11306] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  675.084046][T11308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16389'.
[  675.219098][T11319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16394'.
[  675.455367][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16400'.
[  675.459186][T11333] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  675.752946][T11356] netlink: 'syz.0.16410': attribute type 3 has an invalid length.
[  675.845856][T11367] netlink: 'syz.1.16415': attribute type 3 has an invalid length.
[  676.412488][T11381] lo speed is unknown, defaulting to 1000
[  676.417764][T11381] C speed is unknown, defaulting to 1000
[  677.013662][T11433] __nla_validate_parse: 5 callbacks suppressed
[  677.013671][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16442'.
[  677.198012][T11445] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16448'.
[  677.206039][T11445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16448'.
[  677.214022][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16448'.
[  677.416545][T11465] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  677.462192][T11468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16459'.
[  677.477998][T11470] erspan0: left allmulticast mode
[  677.479852][T11470] sit0: left promiscuous mode
[  677.487582][T11470] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[  677.494677][T11470] veth15: left promiscuous mode
[  677.685425][T11481] veth1_macvtap: left allmulticast mode
[  677.717491][ T5870] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  677.721633][ T5870] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  677.725288][ T5870] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  677.728739][ T5870] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  678.383495][T11479] lo speed is unknown, defaulting to 1000
[  678.387379][T11479] C speed is unknown, defaulting to 1000
[  678.831510][T11484] lo speed is unknown, defaulting to 1000
[  678.835281][T11484] C speed is unknown, defaulting to 1000
[  679.416443][T11577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16506'.
[  679.722087][T11601] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  679.726386][T11601] tipc: Failed to remove unknown binding: 66,1,1/616170557:2857845150/2857845152
[  679.744626][T11601] tipc: Failed to remove unknown binding: 66,1,1/616170557:2857845150/2857845152
[  679.748532][T11601] tipc: Failed to remove unknown binding: 66,1,1/616170557:2857845150/2857845152
[  679.758655][T11601] netlink: 788 bytes leftover after parsing attributes in process `syz.1.16517'.
[  680.040569][T11634] netlink: 'syz.0.16533': attribute type 1 has an invalid length.
[  680.043615][T11634] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16533'.
[  681.149475][T11682] netlink: 830 bytes leftover after parsing attributes in process `syz.1.16556'.
[  681.159767][T11684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16555'.
[  681.583973][T11729] IPVS: length: 169 != 8
[  682.187819][T11770] __nla_validate_parse: 1 callbacks suppressed
[  682.187865][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16594'.
[  682.742708][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16611'.
[  683.412063][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16627'.
[  685.733729][T11961] netlink: 'syz.1.16666': attribute type 3 has an invalid length.
[  685.946888][T11990] netlink: 'syz.1.16687': attribute type 32 has an invalid length.
[  685.950070][T11990] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16687'.
[  686.010118][T11999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  686.490101][T12022] lo speed is unknown, defaulting to 1000
[  686.493225][T12022] C speed is unknown, defaulting to 1000
[  687.206842][T12051] netlink: 'syz.2.16709': attribute type 6 has an invalid length.
[  687.323918][T12060] nbd: must specify at least one socket
[  687.521487][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16711'.
[  687.571705][T12039] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  688.189005][T12072] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  688.240664][T12074] tun0: tun_chr_ioctl cmd 2148553947
[  688.298265][T12077] netlink: 48 bytes leftover after parsing attributes in process `syz.1.16716'.
[  688.318641][T12079] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  689.477078][T12119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16737'.
[  689.648728][T12130] veth0_virt_wifi: renamed from veth0_macvtap
[  689.863206][T12145] netlink: 324 bytes leftover after parsing attributes in process `syz.2.16748'.
[  689.878199][T12145] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16748'.
[  689.890779][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16748'.
[  690.210519][   T51] page_pool_release_retry() stalled pool shutdown: id 161, 3329 inflight 60 sec
[  690.222134][T12158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16753'.
[  690.262023][T12143] lo speed is unknown, defaulting to 1000
[  690.265319][T12143] C speed is unknown, defaulting to 1000
[  690.617489][T12170] openvswitch: netlink: IP tunnel dst address not specified
[  691.605204][T12228] netlink: 'syz.2.16783': attribute type 2 has an invalid length.
[  691.723229][T12239] block nbd2: NBD_DISCONNECT
[  692.171702][T12263] netlink: 'syz.1.16792': attribute type 6 has an invalid length.
[  692.274412][T12269] netlink: 304 bytes leftover after parsing attributes in process `syz.1.16798'.
[  692.606199][T12301] gre6: entered allmulticast mode
[  692.612538][T12303] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  692.902254][T12330] netlink: 'syz.0.16824': attribute type 13 has an invalid length.
[  692.905574][T12330] netlink: 'syz.0.16824': attribute type 17 has an invalid length.
[  692.938431][T12330] tipc: Resetting bearer <ib:ip6gre0>
[  692.941698][T12330] tipc: Resetting bearer <ib:ip6gre0>
[  692.945174][T12330] bridge0: left promiscuous mode
[  692.956419][T12330] bridge0: entered promiscuous mode
[  692.963489][T12330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  692.974593][   T51] C speed is unknown, defaulting to 1000
[  692.977996][   T51] syz2: Port: 1 Link ACTIVE
[  693.282936][   T33] audit: type=1800 audit(1756947799.066:17): pid=12349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.16830" name="memory.events" dev="tmpfs" ino=26446 res=0 errno=0
[  693.408905][T12330] lo speed is unknown, defaulting to 1000
[  693.413659][T12330] C speed is unknown, defaulting to 1000
[  693.537484][T12338] lo speed is unknown, defaulting to 1000
[  693.542462][T12338] C speed is unknown, defaulting to 1000
[  694.044828][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16846'.
[  694.588679][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16859'.
[  695.111335][T12450] netlink: 'syz.2.16876': attribute type 10 has an invalid length.
[  695.237915][T12473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16886'.
[  695.242736][T12473] netlink: 48 bytes leftover after parsing attributes in process `syz.1.16886'.
[  695.246846][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16886'.
[  695.730799][   T60] block nbd3: Possible stuck request ffff888021540000: control (read@0,1024B). Runtime 240 seconds
[  695.734967][   T60] block nbd3: Possible stuck request ffff888021540200: control (read@1024,1024B). Runtime 240 seconds
[  695.739414][   T60] block nbd3: Possible stuck request ffff888021540400: control (read@2048,1024B). Runtime 240 seconds
[  695.744816][   T60] block nbd3: Possible stuck request ffff888021540600: control (read@3072,1024B). Runtime 240 seconds
[  695.749943][T12484] lo speed is unknown, defaulting to 1000
[  695.762013][T12484] C speed is unknown, defaulting to 1000
[  695.857747][T12506] netlink: 348 bytes leftover after parsing attributes in process `syz.1.16901'.
[  696.197316][T12522] team0: entered promiscuous mode
[  696.199631][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16908'.
[  696.287151][T12522] team0 (unregistering): left promiscuous mode
[  696.289304][T12522] tipc: Disabling bearer <eth:team0>
[  696.493809][T12539] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  696.587667][T12551] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16921'.
[  696.789454][T12577] netlink: 'syz.1.16934': attribute type 4 has an invalid length.
[  696.866835][T12587] netlink: 5 bytes leftover after parsing attributes in process `syz.2.16939'.
[  696.980135][T12603] ip6tnl0: entered promiscuous mode
[  696.984328][T12603] ip6tnl0: entered allmulticast mode
[  696.987767][T12603] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  697.396252][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16960'.
[  697.774133][T12660] netlink: 'syz.0.16971': attribute type 10 has an invalid length.
[  697.778763][T12660] netlink: 'syz.0.16971': attribute type 10 has an invalid length.
[  697.786772][T12660] 8021q: adding VLAN 0 to HW filter on device bond1
[  698.007213][T12677] block nbd0: NBD_DISCONNECT
[  698.009292][T12677] block nbd0: Send disconnect failed -32
[  698.395826][T12686] lo speed is unknown, defaulting to 1000
[  698.398983][T12686] C speed is unknown, defaulting to 1000
[  699.369366][T12761] __nla_validate_parse: 1 callbacks suppressed
[  699.369380][T12761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17012'.
[  699.623484][T12787] netlink: 34 bytes leftover after parsing attributes in process `syz.2.17025'.
[  700.048497][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17041'.
[  700.052783][T12823] netlink: 216 bytes leftover after parsing attributes in process `syz.2.17041'.
[  700.668844][T12849] lo speed is unknown, defaulting to 1000
[  700.672991][T12849] C speed is unknown, defaulting to 1000
[  700.799587][T12860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17057'.
[  701.013376][T12866] tipc: Invalid UDP bearer configuration
[  701.013418][T12866] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  701.440124][T12882] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17064'.
[  701.756595][T12889] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  701.769299][T12889] syzkaller0: entered promiscuous mode
[  701.795554][T12889] syzkaller0: entered allmulticast mode
[  701.817051][T12889] tipc: Resetting bearer <eth:syzkaller0>
[  701.853592][T12886] tipc: Resetting bearer <eth:syzkaller0>
[  701.869190][T12886] tipc: Disabling bearer <eth:syzkaller0>
[  702.246053][T12905] lo speed is unknown, defaulting to 1000
[  702.248570][T12905] C speed is unknown, defaulting to 1000
[  702.893862][T12957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17098'.
[  703.046663][T12968] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  704.440967][T13036] nbd0: detected capacity change from 0 to 127
[  704.445222][   T56] block nbd0: Receive control failed (result -32)
[  704.461538][T31931] block nbd0: Dead connection, failed to find a fallback
[  704.464486][T31931] block nbd0: shutting down sockets
[  704.466644][T31931] blk_print_req_error: 24 callbacks suppressed
[  704.466655][T31931] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  704.505746][T31931] buffer_io_error: 23 callbacks suppressed
[  704.505760][T31931] Buffer I/O error on dev nbd0, logical block 0, async page read
[  704.516880][T31931] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  704.522965][T31931] Buffer I/O error on dev nbd0, logical block 1, async page read
[  704.535501][T31931] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  704.539459][T31931] Buffer I/O error on dev nbd0, logical block 2, async page read
[  704.547992][T31931] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  704.554592][T31931] Buffer I/O error on dev nbd0, logical block 3, async page read
[  704.558390][T31931] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  704.564006][T31931] Buffer I/O error on dev nbd0, logical block 0, async page read
[  704.567774][T31931] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  704.573984][T31931] Buffer I/O error on dev nbd0, logical block 1, async page read
[  704.577586][T31931] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  704.595252][T31931] Buffer I/O error on dev nbd0, logical block 2, async page read
[  704.602407][T31931] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  704.607243][T31931] Buffer I/O error on dev nbd0, logical block 3, async page read
[  704.612365][T31931] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  704.616228][T31931] Buffer I/O error on dev nbd0, logical block 0, async page read
[  704.619973][T31931] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  704.625857][T31931] Buffer I/O error on dev nbd0, logical block 1, async page read
[  704.632405][T31931] ldm_validate_partition_table(): Disk read failed.
[  704.637243][T31931] Dev nbd0: unable to read RDB block 0
[  704.645830][T31931]  nbd0: unable to read partition table
[  704.656556][T31931] ldm_validate_partition_table(): Disk read failed.
[  704.669934][T31931] Dev nbd0: unable to read RDB block 0
[  704.680000][T31931]  nbd0: unable to read partition table
[  704.808510][T13058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17140'.
[  705.245247][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17158'.
[  705.288565][T13111] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17161'.
[  705.295840][T13111] netlink: 'syz.2.17161': attribute type 32 has an invalid length.
[  705.299071][T13111] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  705.463763][T13132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17171'.
[  705.531477][T13142] netlink: 'syz.0.17176': attribute type 10 has an invalid length.
[  705.534998][T13142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17176'.
[  705.580285][T13145] netlink: 'syz.0.17177': attribute type 5 has an invalid length.
[  705.817265][T13160] netlink: 'syz.2.17183': attribute type 1 has an invalid length.
[  705.820110][T13160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17183'.
[  705.848949][T13162] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17184'.
[  705.853701][T13162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17184'.
[  705.857960][T13162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17184'.
[  706.055012][T13172] openvswitch: netlink: Message has 4 unknown bytes.
[  706.388288][T13174] lo speed is unknown, defaulting to 1000
[  706.393931][T13174] C speed is unknown, defaulting to 1000
[  706.465839][T13151] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  706.639222][T13202] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  707.291680][T13228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17212'.
[  707.505421][T13243] IPVS: Unknown mcast interface: bridGe_slave0
[  708.328812][T13275] netlink: 'syz.1.17224': attribute type 3 has an invalid length.
[  708.385144][T13278] netlink: 'syz.0.17225': attribute type 2 has an invalid length.
[  708.396416][T13278] : entered promiscuous mode
[  708.460860][T13275] siw: device registration error -23
[  708.463443][T13275] sit0: left promiscuous mode
[  708.467207][T13275] macsec0: left allmulticast mode
[  708.475248][T13275] geneve0: left promiscuous mode
[  708.665491][T13301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  708.690530][T13301] syzkaller0: entered promiscuous mode
[  708.692728][T13301] syzkaller0: entered allmulticast mode
[  710.046958][T13309] tipc: Resetting bearer <eth:syzkaller0>
[  710.049831][T13307] smc: net device bond0 applied user defined pnetid SYZ2
[  710.052803][T13314] smc: net device bond0 erased user defined pnetid SYZ2
[  710.075670][T13313] tipc: Resetting bearer <eth:syzkaller0>
[  710.086306][T13313] tipc: Disabling bearer <eth:syzkaller0>
[  710.291497][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  710.342556][T13347] netlink: 'syz.0.17236': attribute type 1 has an invalid length.
[  710.484435][T13335] lo speed is unknown, defaulting to 1000
[  710.487190][T13335] C speed is unknown, defaulting to 1000
[  710.616658][T13360] batadv_slave_0: entered promiscuous mode
[  710.619157][T13360] __nla_validate_parse: 7 callbacks suppressed
[  710.619164][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17239'.
[  710.725378][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17241'.
[  710.786139][T13369] netlink: 'syz.2.17242': attribute type 10 has an invalid length.
[  710.789406][T13369] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up
[  710.807237][T13372] netlink: 'syz.0.17243': attribute type 2 has an invalid length.
[  710.819501][T13372] k*: entered promiscuous mode
[  710.825991][T13372] ip6tnl0: left promiscuous mode
[  710.828128][T13372] ip6tnl0: left allmulticast mode
[  710.831423][T13372] tipc: Resetting bearer <ib:ip6gre0>
[  710.834169][T13372] tipc: Resetting bearer <ib:ip6gre0>
[  710.837026][T13372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  710.891631][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17243'.
[  712.043915][T13405] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17250'.
[  712.195420][T13401] tipc: Resetting bearer <ib:ip6gre0>
[  712.224885][T13401] macvtap3: left promiscuous mode
[  712.227037][T13401] macvtap3: left allmulticast mode
[  712.236898][T13401] gre6: left allmulticast mode
[  712.242723][ T3008] C speed is unknown, defaulting to 1000
[  712.244824][ T3008] syz2: Port: 1 Link DOWN
[  712.316726][T13426] netlink: 'syz.0.17256': attribute type 4 has an invalid length.
[  712.325653][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17256'.
[  712.424196][T13440] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  712.559490][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17260'.
[  712.835375][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17262'.
[  712.838504][T13456] netlink: 'syz.2.17262': attribute type 30 has an invalid length.
[  712.842015][T13456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17262'.
[  713.369430][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17266'.
[  713.558959][T13473] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17266'.
[  713.563432][T13473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  713.957981][T13497] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  713.979072][T13497] tipc: Disabling bearer <eth:syzkaller0>
[  714.229007][T13503] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  714.395342][T13514] bond0: left allmulticast mode
[  714.397524][T13514] bridge19: port 1(bond0) entered disabled state
[  714.598839][T13514] team0: Mode changed to "broadcast"
[  714.653746][T13523] netlink: 'syz.0.17279': attribute type 1 has an invalid length.
[  714.738135][T13537] netlink: 'syz.2.17283': attribute type 11 has an invalid length.
[  714.814325][T13540] netlink: 'syz.2.17284': attribute type 1 has an invalid length.
[  714.859146][T13544] erspan0: entered promiscuous mode
[  714.864775][T13544] erspan0: left promiscuous mode
[  714.987236][T13561] 8021q: VLANs not supported on vxcan1
[  715.161563][T13550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  715.209998][T13565] nbd: must specify a size in bytes for the device
[  715.278948][T13582] netlink: 'syz.1.17294': attribute type 2 has an invalid length.
[  716.022247][T13604] netlink: 'syz.0.17300': attribute type 4 has an invalid length.
[  716.183883][T13611] dvmrp8: entered allmulticast mode
[  716.199898][T13612] dvmrp8: left allmulticast mode
[  716.258858][T13619] __nla_validate_parse: 10 callbacks suppressed
[  716.258858][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17304'.
[  716.258871][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17304'.
[  716.258882][T13619] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  716.265378][T13618] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  716.705587][T13646] netlink: 1 bytes leftover after parsing attributes in process `syz.0.17313'.
[  716.712599][T13646] rdma_rxe: rxe_newlink: failed to add vxcan1
[  716.958715][T13669] openvswitch: netlink: Key type 8208 is out of range max 32
[  717.007543][T13673] bridge0: port 1(erspan0) entered blocking state
[  717.013278][T13673] bridge0: port 1(erspan0) entered disabled state
[  717.016138][T13673] erspan0: entered allmulticast mode
[  717.018799][T13673] erspan0: left allmulticast mode
[  717.241228][T13684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17322'.
[  717.297933][T13691] netlink: 'syz.2.17324': attribute type 1 has an invalid length.
[  717.324828][T13691] 8021q: adding VLAN 0 to HW filter on device bond20
[  717.328089][T13691] bond19: (slave bond20): making interface the new active one
[  717.331783][T13691] bond19: (slave bond20): Enslaving as an active interface with an up link
[  717.341578][T13691] bond19: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  717.345790][T13691] bond19: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  717.424899][T13695] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17325'.
[  717.614690][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17332'.
[  717.656654][T13717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  717.788166][T13728] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17337'.
[  717.809167][T13730] netlink: 224 bytes leftover after parsing attributes in process `syz.1.17338'.
[  717.820323][T13730] netlink: 'syz.1.17338': attribute type 1 has an invalid length.
[  717.837733][T13730] 8021q: adding VLAN 0 to HW filter on device bond13
[  717.857240][T13730] bond13: (slave gretap2): making interface the new active one
[  717.861916][T13730] bond13: (slave gretap2): Enslaving as an active interface with an up link
[  717.871096][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17338'.
[  718.219908][T13756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17345'.
[  718.426118][T13773] vlan2: entered promiscuous mode
[  718.427927][T13773] macvtap0: entered promiscuous mode
[  718.447403][T13771] vxcan1 (unregistering): left allmulticast mode
[  719.048467][T13847] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003
[  719.154918][T13856] netlink: 'syz.1.17368': attribute type 16 has an invalid length.
[  719.158685][T13856] netlink: 'syz.1.17368': attribute type 17 has an invalid length.
[  719.159918][T13859] netlink: 'syz.0.17369': attribute type 1 has an invalid length.
[  719.199678][T13856] 8021q: adding VLAN 0 to HW filter on device 
[  719.205978][T13856] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  719.237787][T13863] _Z`Ԁ@S!: entered promiscuous mode
[  719.241048][ T5907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  719.270850][ T5907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  719.305715][T13869] netlink: 'syz.1.17372': attribute type 1 has an invalid length.
[  719.334213][T13869] 8021q: adding VLAN 0 to HW filter on device bond14
[  719.353675][T13869] veth17: entered promiscuous mode
[  719.430897][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  719.519023][T13877] netlink: 'syz.1.17374': attribute type 83 has an invalid length.
[  719.727768][T13883] bridge0: entered promiscuous mode
[  719.740346][T13883] bridge0: entered allmulticast mode
[  720.075957][T13885] lo speed is unknown, defaulting to 1000
[  720.079837][T13885] C speed is unknown, defaulting to 1000
[  720.188846][T13905] vxcan4: entered promiscuous mode
[  720.255729][T13907] vxcan4: entered promiscuous mode
[  720.545061][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  720.552276][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  720.608959][T13892] lo speed is unknown, defaulting to 1000
[  720.616524][T13892] C speed is unknown, defaulting to 1000
[  720.663508][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  720.765004][T13919] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  720.976711][T13927] netlink: 'syz.0.17387': attribute type 1 has an invalid length.
[  721.012152][T13927] bond25: entered promiscuous mode
[  721.014840][T13927] 8021q: adding VLAN 0 to HW filter on device bond25
[  721.386654][T13933] lo speed is unknown, defaulting to 1000
[  721.390834][T13933] C speed is unknown, defaulting to 1000
[  721.436038][T13953] netlink: 'syz.2.17395': attribute type 4 has an invalid length.
[  722.201197][T13983] netlink: 'syz.2.17402': attribute type 4 has an invalid length.
[  722.493567][T13998] __nla_validate_parse: 15 callbacks suppressed
[  722.493582][T13998] netlink: 788 bytes leftover after parsing attributes in process `syz.1.17406'.
[  722.546031][T14003] netlink: 'syz.1.17407': attribute type 10 has an invalid length.
[  722.548882][T14003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17407'.
[  722.553534][T14003] veth0_vlan: left promiscuous mode
[  722.555724][T14003] veth0_vlan: entered promiscuous mode
[  722.557617][T14003] veth0_vlan: entered allmulticast mode
[  722.562283][T14003] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  722.756717][T14014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17412'.
[  722.763065][T14014] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17412'.
[  722.770753][   T51] page_pool_release_retry() stalled pool shutdown: id 147, 3329 inflight 120 sec
[  723.139610][T14033] : (slave batadv_slave_0): Releasing backup interface
[  723.147422][T14033] bond13: (slave gretap2): Releasing active interface
[  723.161005][T12331] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  723.218320][T14034] openvswitch: netlink: Tunnel attr 15109 out of range max 16
[  723.224588][T14034] netlink: 'syz.1.17420': attribute type 10 has an invalid length.
[  723.229585][T14034] wlan1: mtu less than device minimum
[  723.233738][T14034] : (slave wlan1): Error -22 calling dev_set_mtu
[  723.237590][T14029] lo speed is unknown, defaulting to 1000
[  723.240316][T14029] C speed is unknown, defaulting to 1000
[  723.700687][T12331] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  724.045341][T14052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17429'.
[  724.049080][T14052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17429'.
[  724.083311][T14052] gretap0: entered promiscuous mode
[  724.096904][T14052] gretap0: left promiscuous mode
[  724.136383][T14055] dvmrp1: entered allmulticast mode
[  724.249996][T14061] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  724.258007][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17434'.
[  724.263148][T14061] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  724.266373][T14061] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  724.318189][T14071] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  724.430100][T14089] netlink: 27 bytes leftover after parsing attributes in process `syz.2.17442'.
[  724.637520][T14110] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  724.643938][T14110] syzkaller0: entered promiscuous mode
[  724.645923][T14110] syzkaller0: entered allmulticast mode
[  724.649827][T14110] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  724.669064][T14110] tipc: Resetting bearer <eth:syzkaller0>
[  724.672942][T14110] netlink: 'syz.1.17449': attribute type 2 has an invalid length.
[  724.678107][T14109] tipc: Resetting bearer <eth:syzkaller0>
[  724.691156][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  724.695509][T14109] tipc: Disabling bearer <eth:syzkaller0>
[  725.817967][   T60] block nbd3: Possible stuck request ffff888021540000: control (read@0,1024B). Runtime 270 seconds
[  725.822060][   T60] block nbd3: Possible stuck request ffff888021540200: control (read@1024,1024B). Runtime 270 seconds
[  725.825905][   T60] block nbd3: Possible stuck request ffff888021540400: control (read@2048,1024B). Runtime 270 seconds
[  725.829518][   T60] block nbd3: Possible stuck request ffff888021540600: control (read@3072,1024B). Runtime 270 seconds
[  725.844937][T14134] netlink: 224 bytes leftover after parsing attributes in process `syz.0.17458'.
[  725.848825][T14134] netlink: 'syz.0.17458': attribute type 1 has an invalid length.
[  725.958543][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17458'.
[  726.148021][T14134] 8021q: adding VLAN 0 to HW filter on device bond26
[  726.168216][T14135] bond26: (slave gretap4): making interface the new active one
[  726.179205][T14135] bond26: (slave gretap4): Enslaving as an active interface with an up link
[  726.198475][T14141] netlink: 'syz.2.17460': attribute type 1 has an invalid length.
[  726.202698][T14136] macsec3: entered promiscuous mode
[  726.204649][T14136] bond0: entered promiscuous mode
[  726.208273][T14136] bond0: left promiscuous mode
[  726.246372][T14141] 8021q: adding VLAN 0 to HW filter on device bond21
[  726.269481][T14148] bond21: (slave veth17): Enslaving as an active interface with a down link
[  726.295471][T14141] macvlan2: entered promiscuous mode
[  726.297894][T14141] macvlan2: entered allmulticast mode
[  726.302805][T14141] bond21: entered promiscuous mode
[  726.305568][T14141] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  726.309148][T14141] bond21: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  726.316651][T14141] bond21: left promiscuous mode
[  726.836260][T14176] sctp: [Deprecated]: syz.2.17471 (pid 14176) Use of int in max_burst socket option.
[  726.836260][T14176] Use struct sctp_assoc_value instead
[  726.924973][T14157] lo speed is unknown, defaulting to 1000
[  726.939010][T14157] C speed is unknown, defaulting to 1000
[  727.538624][T14200] __nla_validate_parse: 5 callbacks suppressed
[  727.538638][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17478'.
[  727.548395][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17478'.
[  727.979122][T14222] netlink: 64 bytes leftover after parsing attributes in process `syz.1.17485'.
[  728.005576][T14222] netlink: zone id is out of range
[  728.009303][T14222] netlink: zone id is out of range
[  728.080869][T14222] netlink: zone id is out of range
[  728.092987][T14222] netlink: zone id is out of range
[  728.095847][T14222] netlink: zone id is out of range
[  728.098054][T14222] netlink: zone id is out of range
[  728.100126][T14222] netlink: zone id is out of range
[  728.355865][T14228] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17486'.
[  728.687359][T14242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17490'.
[  728.780917][T14245] nbd2: detected capacity change from 0 to 63
[  728.785245][T14246] block nbd2: NBD_DISCONNECT
[  728.789207][T14246] block nbd2: Disconnected due to user request.
[  728.794562][T14246] block nbd2: shutting down sockets
[  728.801178][    C0] blk_print_req_error: 138 callbacks suppressed
[  728.801192][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  728.803945][T14245] netlink: 3 bytes leftover after parsing attributes in process `syz.2.17493'.
[  728.807120][    C0] buffer_io_error: 138 callbacks suppressed
[  728.807130][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  728.813296][T14245] 0X: renamed from caif0
[  728.815740][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  728.820689][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[  728.823268][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  728.826295][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[  728.828908][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  728.832315][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[  728.837184][T14245] 0X: entered allmulticast mode
[  728.838099][T31931] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  728.843545][T31931] Buffer I/O error on dev nbd2, logical block 0, async page read
[  728.846889][T31931] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  728.853111][T31931] Buffer I/O error on dev nbd2, logical block 1, async page read
[  728.856579][T31931] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  728.865699][T31931] Buffer I/O error on dev nbd2, logical block 2, async page read
[  728.870800][T31931] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  728.874524][T31931] Buffer I/O error on dev nbd2, logical block 3, async page read
[  728.877841][T31931] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  728.885939][T31931] Buffer I/O error on dev nbd2, logical block 0, async page read
[  728.892122][T31931] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  728.895960][T31931] Buffer I/O error on dev nbd2, logical block 1, async page read
[  728.902070][T31931] ldm_validate_partition_table(): Disk read failed.
[  728.906990][T31931] Dev nbd2: unable to read RDB block 0
[  728.911606][T31931]  nbd2: unable to read partition table
[  728.920944][T31931] ldm_validate_partition_table(): Disk read failed.
[  728.925150][T31931] Dev nbd2: unable to read RDB block 0
[  728.928951][T31931]  nbd2: unable to read partition table
[  729.022332][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17495'.
[  729.724736][T14289] lo speed is unknown, defaulting to 1000
[  729.728200][T14289] C speed is unknown, defaulting to 1000
[  729.937623][T14300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17509'.
[  729.942357][T14300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17509'.
[  729.993791][T14292] lo speed is unknown, defaulting to 1000
[  729.998571][T14292] C speed is unknown, defaulting to 1000
[  730.598275][T14341] netlink: 'syz.2.17519': attribute type 1 has an invalid length.
[  730.891047][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17522'.
[  731.610241][T14370] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  731.615853][T14370] syzkaller0: entered promiscuous mode
[  731.618078][T14370] syzkaller0: entered allmulticast mode
[  731.648953][T14370] tipc: Resetting bearer <eth:syzkaller0>
[  731.653003][T14369] tipc: Resetting bearer <eth:syzkaller0>
[  731.666197][T14369] tipc: Disabling bearer <eth:syzkaller0>
[  731.862039][T14392] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  731.869245][T14391] syzkaller0: entered promiscuous mode
[  731.874660][T14391] syzkaller0: entered allmulticast mode
[  731.896737][T14397] netlink: 'syz.1.17538': attribute type 1 has an invalid length.
[  731.937140][T14397] 8021q: adding VLAN 0 to HW filter on device bond15
[  731.957259][T14397] bond15: (slave bridge13): making interface the new active one
[  731.962480][T14397] bond15: (slave bridge13): Enslaving as an active interface with an up link
[  731.974494][T14394] tipc: Resetting bearer <eth:syzkaller0>
[  731.985220][T14401] net_ratelimit: 2 callbacks suppressed
[  731.985232][T14401] netlink: zone id is out of range
[  731.988912][T14401] netlink: zone id is out of range
[  731.994300][T14401] netlink: zone id is out of range
[  731.997458][T14390] tipc: Resetting bearer <eth:syzkaller0>
[  732.001708][T14401] netlink: zone id is out of range
[  732.003721][T14401] netlink: zone id is out of range
[  732.005785][T14401] netlink: zone id is out of range
[  732.008016][T14401] netlink: zone id is out of range
[  732.010063][T14401] netlink: zone id is out of range
[  732.021565][T14401] netlink: zone id is out of range
[  732.024271][T14390] tipc: Disabling bearer <eth:syzkaller0>
[  732.026518][T14401] netlink: zone id is out of range
[  732.607159][T14440] netlink: 'syz.2.17552': attribute type 28 has an invalid length.
[  732.610877][T14440] __nla_validate_parse: 6 callbacks suppressed
[  732.610889][T14440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17552'.
[  732.850608][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  733.043403][T14449] netlink: 'syz.1.17555': attribute type 21 has an invalid length.
[  733.959819][T14474] lo speed is unknown, defaulting to 1000
[  733.971608][T14474] C speed is unknown, defaulting to 1000
[  734.694961][T14505] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  734.697785][T14505] syzkaller0: entered promiscuous mode
[  734.699766][T14505] syzkaller0: entered allmulticast mode
[  734.721816][T14505] tipc: Resetting bearer <eth:syzkaller0>
[  734.726303][T14504] tipc: Resetting bearer <eth:syzkaller0>
[  734.739242][T14504] tipc: Disabling bearer <eth:syzkaller0>
[  734.971971][T14511] "syz.1.17577" (14511) uses obsolete ecb(arc4) skcipher
[  735.205958][T14523] netlink: 72 bytes leftover after parsing attributes in process `syz.1.17581'.
[  735.371913][T14527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17583'.
[  735.375858][   T33] audit: type=1800 audit(1756947841.156:18): pid=14527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.17583" name="blkio.bfq.time_recursive" dev="tmpfs" ino=27690 res=0 errno=0
[  735.542261][T14549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17590'.
[  735.555837][T14550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17591'.
[  735.559797][T14550] sch_fq: defrate 0 ignored.
[  735.569901][T14550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  735.577373][T14550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17591'.
[  735.584546][T14550] syzkaller0: entered promiscuous mode
[  735.587875][T14550] syzkaller0: entered allmulticast mode
[  735.592268][T14555] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  735.635317][T14550] tipc: Resetting bearer <eth:syzkaller0>
[  735.645688][T14548] tipc: Resetting bearer <eth:syzkaller0>
[  735.664906][T14565] netlink: 'syz.0.17595': attribute type 1 has an invalid length.
[  735.665144][T14548] tipc: Disabling bearer <eth:syzkaller0>
[  735.668709][T14565] netlink: 224 bytes leftover after parsing attributes in process `syz.0.17595'.
[  735.746830][T14574] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17599'.
[  735.770922][T14570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17597'.
[  735.863917][T14585] syzkaller0: entered promiscuous mode
[  735.865975][T14585] syzkaller0: entered allmulticast mode
[  735.919556][T14589] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17605'.
[  736.037810][T14596] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  736.210302][T14611] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  736.214140][T14611] syzkaller0: entered promiscuous mode
[  736.216548][T14611] syzkaller0: entered allmulticast mode
[  736.230327][ T5867] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  736.235263][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  736.238897][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  736.255749][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  736.288570][T14611] tipc: Resetting bearer <eth:syzkaller0>
[  736.297697][T14610] tipc: Resetting bearer <eth:syzkaller0>
[  736.314786][T14610] tipc: Disabling bearer <eth:syzkaller0>
[  736.562538][T14616] lo speed is unknown, defaulting to 1000
[  736.566022][T14616] C speed is unknown, defaulting to 1000
[  736.691566][T14632] bond23: entered promiscuous mode
[  736.693301][T14632] bond23: entered allmulticast mode
[  736.695477][T14632] 8021q: adding VLAN 0 to HW filter on device bond23
[  736.841606][T14643] sctp: [Deprecated]: syz.1.17620 (pid 14643) Use of struct sctp_assoc_value in delayed_ack socket option.
[  736.841606][T14643] Use struct sctp_sack_info instead
[  737.796774][T14685] __nla_validate_parse: 12 callbacks suppressed
[  737.796788][T14685] netlink: 424 bytes leftover after parsing attributes in process `syz.1.17636'.
[  737.959497][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17642'.
[  737.994531][T14705] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17643'.
[  737.997598][T14705] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17643'.
[  738.004553][ T5870] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  738.010933][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17641'.
[  738.666182][T14711] lo speed is unknown, defaulting to 1000
[  738.669268][T14711] C speed is unknown, defaulting to 1000
[  738.809887][T14716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17646'.
[  738.825860][T14716] net_ratelimit: 25 callbacks suppressed
[  738.825869][T14716] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  738.851091][T29233] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  738.887523][T14722] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.17648'.
[  738.977737][T14726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17650'.
[  739.140704][T29233] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  739.366392][T14744] netlink: 'syz.2.17655': attribute type 12 has an invalid length.
[  739.603996][T14758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17658'.
[  740.433936][T14762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  740.520161][T14779] netlink: 52 bytes leftover after parsing attributes in process `syz.1.17664'.
[  740.574783][T14789] sctp: [Deprecated]: syz.1.17667 (pid 14789) Use of int in maxseg socket option.
[  740.574783][T14789] Use struct sctp_assoc_value instead
[  740.737468][T14808] bond25: left promiscuous mode
[  740.759408][T14799] netlink: 'syz.0.17669': attribute type 13 has an invalid length.
[  740.928260][T14793] lo speed is unknown, defaulting to 1000
[  740.942180][T14817] veth0: entered promiscuous mode
[  740.964221][T14817] veth0 (unregistering): left promiscuous mode
[  741.005488][T14793] C speed is unknown, defaulting to 1000
[  741.172434][T14834] 8021q: adding VLAN 0 to HW filter on device bond16
[  741.176036][T14834] bond0: (slave bond16): Enslaving as an active interface with a down link
[  741.596787][T14861] netlink: 'syz.0.17689': attribute type 58 has an invalid length.
[  741.703332][T14866] netlink: 'syz.0.17690': attribute type 9 has an invalid length.
[  741.835568][T14868] netlink: 'syz.0.17691': attribute type 4 has an invalid length.
[  741.898437][T14870] netlink: 'syz.0.17692': attribute type 1 has an invalid length.
[  741.992169][T14875] netlink: 'syz.1.17693': attribute type 74 has an invalid length.
[  742.173900][T14895] syz.1.17699: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  742.179152][T14895] CPU: 1 UID: 0 PID: 14895 Comm: syz.1.17699 Not tainted syzkaller #0 PREEMPT(full) 
[  742.179165][T14895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  742.179170][T14895] Call Trace:
[  742.179174][T14895]  <TASK>
[  742.179178][T14895]  dump_stack_lvl+0x189/0x250
[  742.179192][T14895]  ? __pfx_dump_stack_lvl+0x10/0x10
[  742.179200][T14895]  ? __pfx__printk+0x10/0x10
[  742.179210][T14895]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  742.179218][T14895]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  742.179227][T14895]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  742.179236][T14895]  warn_alloc+0x214/0x310
[  742.179247][T14895]  ? stack_depot_save_flags+0x40/0x860
[  742.179258][T14895]  ? __pfx_warn_alloc+0x10/0x10
[  742.179268][T14895]  ? kasan_save_track+0x4f/0x80
[  742.179276][T14895]  ? xskq_create+0x56/0x170
[  742.179312][T14895]  ? xsk_init_queue+0xb0/0x110
[  742.179326][T14895]  ? xsk_setsockopt+0x4dc/0x8d0
[  742.179335][T14895]  ? do_sock_setsockopt+0x17c/0x1b0
[  742.179342][T14895]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  742.179349][T14895]  ? do_syscall_64+0xfa/0x3b0
[  742.179355][T14895]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.179365][T14895]  __vmalloc_node_range_noprof+0x125/0x12f0
[  742.179386][T14895]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  742.179398][T14895]  ? __kasan_kmalloc+0x93/0xb0
[  742.179407][T14895]  vmalloc_user_noprof+0xad/0xf0
[  742.179417][T14895]  ? xskq_create+0xbf/0x170
[  742.179423][T14895]  xskq_create+0xbf/0x170
[  742.179431][T14895]  xsk_init_queue+0xb0/0x110
[  742.179441][T14895]  xsk_setsockopt+0x4dc/0x8d0
[  742.179452][T14895]  ? __pfx_xsk_setsockopt+0x10/0x10
[  742.179461][T14895]  ? __pfx_aa_sk_perm+0x10/0x10
[  742.179472][T14895]  ? aa_sock_opt_perm+0xff/0x1b0
[  742.179480][T14895]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  742.179487][T14895]  ? __pfx_xsk_setsockopt+0x10/0x10
[  742.179497][T14895]  do_sock_setsockopt+0x17c/0x1b0
[  742.179506][T14895]  __x64_sys_setsockopt+0x13f/0x1b0
[  742.179515][T14895]  do_syscall_64+0xfa/0x3b0
[  742.179522][T14895]  ? lockdep_hardirqs_on+0x9c/0x150
[  742.179528][T14895]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.179534][T14895]  ? exc_page_fault+0x9f/0xf0
[  742.179541][T14895]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.179548][T14895] RIP: 0033:0x7f950058ebe9
[  742.179555][T14895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  742.179561][T14895] RSP: 002b:00007f950139e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  742.179569][T14895] RAX: ffffffffffffffda RBX: 00007f95007c5fa0 RCX: 00007f950058ebe9
[  742.179576][T14895] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  742.179582][T14895] RBP: 00007f9500611e19 R08: 0000000000000004 R09: 0000000000000000
[  742.179589][T14895] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  742.179595][T14895] R13: 00007f95007c6038 R14: 00007f95007c5fa0 R15: 00007ffedde74318
[  742.179613][T14895]  </TASK>
[  742.179617][T14895] Mem-Info:
[  742.310002][T14895] active_anon:16835 inactive_anon:0 isolated_anon:0
[  742.310002][T14895]  active_file:1461 inactive_file:38497 isolated_file:0
[  742.310002][T14895]  unevictable:1768 dirty:192 writeback:0
[  742.310002][T14895]  slab_reclaimable:11645 slab_unreclaimable:98617
[  742.310002][T14895]  mapped:18369 shmem:2447 pagetables:1147
[  742.310002][T14895]  sec_pagetables:0 bounce:0
[  742.310002][T14895]  kernel_misc_reclaimable:0
[  742.310002][T14895]  free:227427 free_pcp:14713 free_cma:0
[  742.348827][T14895] Node 0 active_anon:36220kB inactive_anon:0kB active_file:5128kB inactive_file:136208kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28364kB dirty:644kB writeback:0kB shmem:4884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7408kB pagetables:2292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  742.416533][T14895] Node 1 active_anon:31324kB inactive_anon:0kB active_file:716kB inactive_file:17780kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45112kB dirty:124kB writeback:0kB shmem:4904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6488kB pagetables:2364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  742.463059][T14895] Node 0 DMA free:14620kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:736kB local_pcp:352kB free_cma:0kB
[  742.483624][T14895] lowmem_reserve[]: 0 811 811 811 811
[  742.486128][T14895] Node 0 DMA32 free:158912kB boost:12288kB min:45948kB low:54360kB high:62772kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36152kB inactive_anon:0kB active_file:5128kB inactive_file:136208kB unevictable:3536kB writepending:644kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:22944kB local_pcp:8200kB free_cma:0kB
[  742.499880][T14895] lowmem_reserve[]: 0 0 0 0 0
[  742.504965][T14895] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  742.517137][T14895] lowmem_reserve[]: 0 0 854 854 854
[  742.519465][T14895] Node 1 Normal free:283180kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31460kB inactive_anon:0kB active_file:716kB inactive_file:17780kB unevictable:3536kB writepending:124kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:30460kB local_pcp:17304kB free_cma:0kB
[  742.536996][T14895] lowmem_reserve[]: 0 0 0 0 0
[  742.539192][T14895] Node 0 DMA: 9*4kB (UM) 3*8kB (UM) 4*16kB (UM) 7*32kB (U) 3*64kB (U) 4*128kB (UM) 5*256kB (UM) 6*512kB (UM) 7*1024kB (UM) 1*2048kB (U) 0*4096kB = 14620kB
[  742.546345][T14895] Node 0 DMA32: 996*4kB (UME) 417*8kB (UME) 492*16kB (UME) 360*32kB (UME) 394*64kB (UME) 228*128kB (UM) 120*256kB (UM) 50*512kB (UME) 19*1024kB (UME) 1*2048kB (M) 0*4096kB = 158936kB
[  742.555348][T14924] netlink: 'syz.2.17707': attribute type 1 has an invalid length.
[  742.557484][T14895] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (UM) = 458616kB
[  742.568797][T14895] Node 1 Normal: 575*4kB (UE) 902*8kB (UME) 595*16kB (UM) 491*32kB (UM) 394*64kB (UME) 140*128kB (UME) 57*256kB (UM) 18*512kB (UM) 27*1024kB (UME) 5*2048kB (UM) 35*4096kB (U) = 282940kB
[  742.581251][T14895] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  742.586799][T14895] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  742.593576][T14895] 42405 total pagecache pages
[  742.595902][T14895] 0 pages in swap cache
[  742.598489][T14895] Free swap  = 124996kB
[  742.600944][T14895] Total swap = 124996kB
[  742.603424][T14895] 786301 pages RAM
[  742.605331][T14895] 0 pages HighMem/MovableOnly
[  742.607616][T14895] 241344 pages reserved
[  742.609721][T14895] 0 pages cma reserved
[  742.684602][T14935] bridge0: entered promiscuous mode
[  742.686620][T14935] bridge0: entered allmulticast mode
[  742.716015][T14938] syzkaller1: entered promiscuous mode
[  742.718002][T14938] syzkaller1: entered allmulticast mode
[  742.737479][T14940] netlink: 'syz.1.17714': attribute type 18 has an invalid length.
[  742.820894][T14944] delete_channel: no stack
[  742.862363][T14950] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  742.866635][T14950] syzkaller0: entered promiscuous mode
[  742.868444][T14950] syzkaller0: entered allmulticast mode
[  742.875496][T14950] tipc: Resetting bearer <eth:syzkaller0>
[  742.884381][T14949] tipc: Resetting bearer <eth:syzkaller0>
[  742.896944][T14949] tipc: Disabling bearer <eth:syzkaller0>
[  742.909787][T14943] delete_channel: no stack
[  742.990204][T14961] netlink: 'syz.2.17721': attribute type 10 has an invalid length.
[  742.993227][T14958] __nla_validate_parse: 20 callbacks suppressed
[  742.993240][T14958] netlink: 88 bytes leftover after parsing attributes in process `syz.0.17720'.
[  742.993790][T14961] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17721'.
[  743.209768][T14982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17725'.
[  743.276344][T14985] ip6tnl0: Master is either lo or non-ether device
[  743.291036][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17725'.
[  743.493991][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  743.497368][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  743.809463][T15012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17734'.
[  743.994755][T15029] netlink: 'syz.2.17740': attribute type 4 has an invalid length.
[  743.999748][   T51] lo speed is unknown, defaulting to 1000
[  744.003316][   T51] syz1: Port: 1 Link ACTIVE
[  744.178480][T15047] syzkaller0: entered promiscuous mode
[  744.182362][T15047] syzkaller0: entered allmulticast mode
[  744.747474][T15064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17750'.
[  745.549129][T15071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  745.826677][T15107] validate_nla: 2 callbacks suppressed
[  745.826690][T15107] netlink: 'syz.1.17760': attribute type 12 has an invalid length.
[  745.841241][T15100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17758'.
[  745.895886][T15109] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17761'.
[  745.899773][T15109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  746.161021][T15118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17764'.
[  746.346223][T15124] netlink: 92 bytes leftover after parsing attributes in process `syz.1.17767'.
[  746.448784][T15128] bond15: (slave bridge13): Releasing active interface
[  746.457815][T15128] bond0: (slave bond16): Releasing active interface
[  746.471512][T29233] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  746.475386][T15128] netlink: 'syz.1.17768': attribute type 10 has an invalid length.
[  746.479411][T15128] wlan1: mtu less than device minimum
[  746.483557][T15128] : (slave wlan1): Error -22 calling dev_set_mtu
[  746.492209][T15128] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  746.495566][T15128] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  747.000672][T29233] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  747.203570][T15178] tipc: Invalid UDP bearer configuration
[  747.203612][T15178] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  747.531863][T15180] lo speed is unknown, defaulting to 1000
[  747.536457][T15180] C speed is unknown, defaulting to 1000
[  748.118097][ T5867] nci: nci_rx_work: unknown MT 0x1
[  748.207604][T15210] __nla_validate_parse: 10 callbacks suppressed
[  748.207615][T15210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17792'.
[  748.225905][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17792'.
[  748.877034][T15216] netlink: 14 bytes leftover after parsing attributes in process `syz.0.17794'.
[  749.148934][T15243] netlink: 'syz.2.17797': attribute type 28 has an invalid length.
[  749.208826][T15247] bond0: (slave rose0): Error: Device can not be enslaved while up
[  749.212404][T15247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17798'.
[  749.358027][T15267] netlink: 'syz.1.17806': attribute type 64 has an invalid length.
[  749.622518][T15285] vxcan0: entered promiscuous mode
[  749.798014][T15294] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  749.803064][T15294] syzkaller0: entered promiscuous mode
[  749.805111][T15294] syzkaller0: entered allmulticast mode
[  749.812988][T15294] tipc: Resetting bearer <eth:syzkaller0>
[  749.816688][T15293] tipc: Resetting bearer <eth:syzkaller0>
[  749.829515][T15293] tipc: Disabling bearer <eth:syzkaller0>
[  750.087622][T15310] netlink: 'syz.2.17819': attribute type 10 has an invalid length.
[  750.093263][T15310] netlink: 'syz.2.17819': attribute type 10 has an invalid length.
[  750.140751][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  750.234899][T15273] delete_channel: no stack
[  750.292986][T15312] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  750.346569][T15312] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  750.405846][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17820'.
[  750.414520][T15312] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  750.467321][T15312] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  750.549384][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  750.557970][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  750.568509][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  750.578689][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  750.610604][   T51] page_pool_release_retry() stalled pool shutdown: id 161, 3329 inflight 120 sec
[  751.088913][T15335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17828'.
[  751.110392][T15337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17827'.
[  751.143836][T15341] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17829'.
[  751.997135][T15367] netlink: 'syz.0.17836': attribute type 4 has an invalid length.
[  752.400236][T15401] netlink: 'syz.1.17848': attribute type 2 has an invalid length.
[  752.433392][T15405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17850'.
[  752.478300][T15409] netlink: 'syz.2.17851': attribute type 1 has an invalid length.
[  752.481476][T15409] netlink: 'syz.2.17851': attribute type 1 has an invalid length.
[  752.485101][T15409] netlink: 364 bytes leftover after parsing attributes in process `syz.2.17851'.
[  752.488149][T15409] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1294) !
[  752.686296][T15418] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (9)
[  752.872863][T15431] netlink: 'syz.2.17859': attribute type 58 has an invalid length.
[  752.904318][T15434] openvswitch: netlink: VXLAN extension 2 out of range max 1
[  753.054105][T15441] syzkaller1: entered promiscuous mode
[  753.056524][T15441] syzkaller1: entered allmulticast mode
[  753.179343][T15448] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  753.216774][T15453] tipc: Disabling bearer <eth:syzkaller0>
[  753.393376][T15470] ipvlan2: entered promiscuous mode
[  753.657553][T15489] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  753.663551][T15489] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  753.684050][T15481] lo speed is unknown, defaulting to 1000
[  753.686741][T15481] C speed is unknown, defaulting to 1000
[  753.725968][T15491] netlink: 'syz.0.17880': attribute type 1 has an invalid length.
[  753.903626][T15507] __nla_validate_parse: 4 callbacks suppressed
[  753.903637][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17885'.
[  754.014865][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17889'.
[  754.160337][T15524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17891'.
[  754.219371][T15527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17892'.
[  754.227510][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17890'.
[  754.342097][T15536] netlink: 'syz.0.17896': attribute type 4 has an invalid length.
[  754.345480][T15536] netlink: 17 bytes leftover after parsing attributes in process `syz.0.17896'.
[  755.033789][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17910'.
[  755.036729][T15578] netlink: 7 bytes leftover after parsing attributes in process `syz.1.17910'.
[  755.134052][T15588] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (3)
[  755.257817][T15603] ip6gretap6: default qdisc (pfifo_fast) fail, fallback to noqueue
[  755.276478][T15604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17914'.
[  755.332571][T15607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17914'.
[  755.346860][T15605] tc_dump_action: action bad kind
[  755.521774][T15600] lo speed is unknown, defaulting to 1000
[  755.528377][T15600] C speed is unknown, defaulting to 1000
[  755.682316][T15618] vlan6: entered promiscuous mode
[  755.684692][T15618] bond0: entered promiscuous mode
[  755.686928][T15618] bond9: entered promiscuous mode
[  755.689464][T15618] vlan6: entered allmulticast mode
[  755.699891][T15618] bond0: entered allmulticast mode
[  755.712249][T15618] bond9: entered allmulticast mode
[  755.890665][   T60] block nbd3: Possible stuck request ffff888021540000: control (read@0,1024B). Runtime 300 seconds
[  755.894766][   T60] block nbd3: Possible stuck request ffff888021540200: control (read@1024,1024B). Runtime 300 seconds
[  755.899586][   T60] block nbd3: Possible stuck request ffff888021540400: control (read@2048,1024B). Runtime 300 seconds
[  755.904624][   T60] block nbd3: Possible stuck request ffff888021540600: control (read@3072,1024B). Runtime 300 seconds
[  755.913478][T15610] lo speed is unknown, defaulting to 1000
[  755.917812][T15610] C speed is unknown, defaulting to 1000
[  756.359604][T15656] netlink: 'syz.2.17936': attribute type 4 has an invalid length.
[  757.025614][T15742] pim6reg: entered allmulticast mode
[  757.038918][T15741] pim6reg: left allmulticast mode
[  757.215074][T15766] netlink: 'syz.2.17973': attribute type 19 has an invalid length.
[  757.230856][T15766] netlink: 'syz.2.17973': attribute type 19 has an invalid length.
[  757.573759][T15803] netlink: 'syz.2.17984': attribute type 1 has an invalid length.
[  757.576772][T15803] netlink: 'syz.2.17984': attribute type 2 has an invalid length.
[  757.579567][T15803] netlink: 'syz.2.17984': attribute type 1 has an invalid length.
[  757.638645][T15807] netlink: 'syz.0.17986': attribute type 1 has an invalid length.
[  757.847239][T15820] 8021q: adding VLAN 0 to HW filter on device batadv4
[  757.851058][T15820] batadv4: entered promiscuous mode
[  757.854091][T15820] team0: Failed to send port change of device batadv4 via netlink (err -105)
[  757.857992][T15820] team0: Failed to send options change via netlink (err -105)
[  757.861830][T15820] team0: Port device batadv4 added
[  758.118045][T15822] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  758.122320][T15822] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  759.015811][T15868] netlink: 'syz.0.18007': attribute type 1 has an invalid length.
[  759.019319][T15868] __nla_validate_parse: 18 callbacks suppressed
[  759.019328][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18007'.
[  759.025502][T15868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18007'.
[  759.056529][T15872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18009'.
[  759.066678][T15872] netlink: 'syz.0.18009': attribute type 4 has an invalid length.
[  759.069366][T15872] netlink: 'syz.0.18009': attribute type 4 has an invalid length.
[  759.075692][T29233] C speed is unknown, defaulting to 1000
[  759.077871][T29233] syz2: Port: 1 Link ACTIVE
[  759.111053][T15876] netlink: 92 bytes leftover after parsing attributes in process `syz.0.18011'.
[  759.229406][T15885] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  759.230501][T15887] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  759.237596][T15885] syzkaller0: entered promiscuous mode
[  759.239790][T15885] syzkaller0: entered allmulticast mode
[  759.249262][T15885] tipc: Resetting bearer <eth:syzkaller0>
[  759.257557][T15884] tipc: Resetting bearer <eth:syzkaller0>
[  759.273110][T15884] tipc: Disabling bearer <eth:syzkaller0>
[  759.355629][T15898] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  759.433552][T15901] netlink: 288 bytes leftover after parsing attributes in process `syz.0.18020'.
[  759.624347][T15911] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18024'.
[  759.727304][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18024'.
[  759.847898][T15917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18025'.
[  760.275070][T15919] lo speed is unknown, defaulting to 1000
[  760.277913][T15919] C speed is unknown, defaulting to 1000
[  760.664912][T15942] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.18028'.
[  760.690655][T15931] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.18028'.
[  760.879008][T15946] netlink: 'syz.2.18033': attribute type 2 has an invalid length.
[  760.914475][T15945] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  760.919741][T15945] syzkaller0: entered promiscuous mode
[  760.921877][T15945] syzkaller0: entered allmulticast mode
[  760.927057][T15943] tipc: Resetting bearer <eth:syzkaller0>
[  760.942640][T15943] tipc: Disabling bearer <eth:syzkaller0>
[  760.977353][T15927] lo speed is unknown, defaulting to 1000
[  760.980067][T15927] C speed is unknown, defaulting to 1000
[  761.303888][T15958] lo speed is unknown, defaulting to 1000
[  761.306508][T15958] C speed is unknown, defaulting to 1000
[  761.571532][T16003] 8021q: adding VLAN 0 to HW filter on device bond24
[  761.574650][T16003] bridge21: port 1(bond24) entered blocking state
[  761.580513][T16003] bridge21: port 1(bond24) entered disabled state
[  761.582977][T16003] bond24: entered allmulticast mode
[  761.586603][T16003] bridge21: port 1(bond24) entered blocking state
[  761.588985][T16003] bridge21: port 1(bond24) entered forwarding state
[  761.732736][T16015] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  761.736393][T16015] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  761.906601][T16028] xfrm1: entered promiscuous mode
[  761.908978][T16028] xfrm1: entered allmulticast mode
[  762.183271][ T1091] bridge21: port 1(bond24) entered disabled state
[  762.404446][T16050] can: request_module (can-proto-0) failed.
[  762.411037][T16050] openvswitch: netlink: IP tunnel dst address not specified
[  762.795958][T16071] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  762.798670][T16071] syzkaller0: entered promiscuous mode
[  762.800617][T16071] syzkaller0: entered allmulticast mode
[  762.859221][T16071] tipc: Resetting bearer <eth:syzkaller0>
[  762.863923][T16070] tipc: Resetting bearer <eth:syzkaller0>
[  762.874334][T16070] tipc: Disabling bearer <eth:syzkaller0>
[  763.003194][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  763.063795][T16086] vlan0: entered promiscuous mode
[  763.069011][T16086] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  763.343433][ T5891] C speed is unknown, defaulting to 1000
[  763.345398][ T5891] syz2: Port: 1 Link DOWN
[  763.812312][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  763.950141][T16171] validate_nla: 3 callbacks suppressed
[  763.950150][T16171] netlink: 'syz.1.18104': attribute type 1 has an invalid length.
[  763.957181][T16171] netlink: 'syz.1.18104': attribute type 2 has an invalid length.
[  763.968188][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  763.972129][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  764.035281][T16175] netlink: 'syz.1.18106': attribute type 1 has an invalid length.
[  764.069425][T16175] bond17: (slave gretap3): making interface the new active one
[  764.073064][T16175] bond17: (slave gretap3): Enslaving as an active interface with an up link
[  764.078159][T16175] __nla_validate_parse: 21 callbacks suppressed
[  764.078170][T16175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18106'.
[  764.086292][T16175] 8021q: adding VLAN 0 to HW filter on device bond17
[  764.267858][T16190] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18111'.
[  764.277319][T16190] bridge_slave_0: entered allmulticast mode
[  764.345028][T16194] netlink: 788 bytes leftover after parsing attributes in process `syz.0.18113'.
[  764.512660][T16208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18120'.
[  764.515870][T16208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18120'.
[  764.518904][T16208] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18120'.
[  765.518908][T16254] netlink: 100 bytes leftover after parsing attributes in process `syz.0.18134'.
[  765.682965][T16268] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  765.807818][T16281] Unsupported ieee802154 address type: 0
[  765.869329][T16291] bond17: (slave erspan0): Releasing active interface
[  765.873886][T16291] ip6gretap2: entered promiscuous mode
[  765.881771][T16291] bond1: (slave gretap1): Releasing active interface
[  765.884808][T16291] bond3: left allmulticast mode
[  765.886665][T16291] bridge4: port 1(bond3) entered disabled state
[  765.892857][T16291] bond4: (slave wireguard0): Releasing backup interface
[  765.895360][T16291] bond4: (slave wireguard1): making interface the new active one
[  765.900159][T16291] bond4: (slave wireguard1): Releasing backup interface
[  765.904950][T16291] bond6: (slave bridge8): Releasing backup interface
[  765.908667][T16291] bond7: (slave gretap2): Releasing active interface
[  765.913879][T16291] bond8: (slave veth1): Releasing active interface
[  765.916715][T16291] bond8: (slave veth1): the permanent HWaddr of slave - 9a:fb:62:a6:3c:ef - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  765.924026][T16291] gretap3: entered promiscuous mode
[  765.928941][T16291] bond8: (slave gretap3): Releasing active interface
[  765.931850][T16291] gretap3: left promiscuous mode
[  765.935502][T16291] bond0: (slave bond9): Releasing backup interface
[  765.938434][T16291] bond9: left promiscuous mode
[  765.940358][T16291] bond9: left allmulticast mode
[  765.943188][T16291] bond11: (slave bond12): Releasing backup interface
[  765.946489][T16291] bond14: (slave gretap5): Releasing active interface
[  765.949666][T16291] bond15: left allmulticast mode
[  765.951892][T16291] bridge17: port 1(bond15) entered disabled state
[  765.956714][T16291] bond17: (slave ip6gretap2): Releasing active interface
[  765.959219][T16291] bond17: (slave ip6gretap2): the permanent HWaddr of slave - 4a:bb:b3:e0:cc:7c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  765.965729][T16291] ip6gretap2: left promiscuous mode
[  765.969965][T16291] bond17: (slave veth15): Releasing active interface
[  765.979919][T16291] bond19: (slave bond20): Releasing backup interface
[  765.987870][T16291] bond21: (slave veth17): Releasing active interface
[  765.999053][T16291] batadv4: left promiscuous mode
[  766.009161][T16291] team0: Port device batadv4 removed
[  766.015800][T16291] bond24: left allmulticast mode
[  766.018175][T16291] bridge21: port 1(bond24) entered disabled state
[  766.024400][T16293] team0: Mode changed to "broadcast"
[  766.162148][T16310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18154'.
[  766.266520][T16318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18157'.
[  766.305312][T16318] netlink: 'syz.1.18157': attribute type 1 has an invalid length.
[  766.568594][T16360] openvswitch: netlink: Duplicate or invalid key (type 0).
[  766.574547][T16360] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  766.738461][T16367] netlink: 'syz.2.18172': attribute type 12 has an invalid length.
[  767.899273][T16372] ip6gretap0: entered promiscuous mode
[  767.907831][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18176'.
[  767.911219][T16372] sche: entered allmulticast mode
[  767.913649][T16372] ip6gretap0: entered allmulticast mode
[  767.943758][T16372] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  767.971408][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  767.997985][T16380] IPVS: ip_vs_edit_dest(): server weight less than zero
[  768.022526][T16383] vti0: entered promiscuous mode
[  768.042606][T16383] vti0: entered allmulticast mode
[  768.336797][T16406] dvmrp6: entered allmulticast mode
[  768.357979][T16406] dvmrp6: left allmulticast mode
[  768.389148][T16393] lo speed is unknown, defaulting to 1000
[  768.393093][T16393] C speed is unknown, defaulting to 1000
[  768.718984][T16441] netlink: 'syz.0.18197': attribute type 12 has an invalid length.
[  769.020842][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  769.049095][T16463] bond26: (slave gretap4): Releasing active interface
[  769.084405][T16455] lo speed is unknown, defaulting to 1000
[  769.087630][T16455] C speed is unknown, defaulting to 1000
[  769.114929][T16464] netlink: 'syz.0.18206': attribute type 10 has an invalid length.
[  769.166302][T16467] __nla_validate_parse: 9 callbacks suppressed
[  769.166318][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18207'.
[  769.315777][T16472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18209'.
[  769.334097][T16472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18209'.
[  770.075743][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18218'.
[  770.181939][T16510] netlink: 'syz.0.18219': attribute type 1 has an invalid length.
[  770.185361][T16510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  770.264999][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18222'.
[  770.316901][T16524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18224'.
[  770.539833][T16549] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18233'.
[  771.629444][T16626] netlink: 'syz.1.18255': attribute type 1 has an invalid length.
[  771.640300][T16626] netlink: 212 bytes leftover after parsing attributes in process `syz.1.18255'.
[  771.649301][T16626] netlink: 'syz.1.18255': attribute type 1 has an invalid length.
[  772.181979][T16669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18268'.
[  772.187411][T16645] lo speed is unknown, defaulting to 1000
[  772.189599][T16669] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  772.190556][T16645] C speed is unknown, defaulting to 1000
[  772.202988][T16669] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  772.276770][T16679] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18270'.
[  773.304214][T16721] netlink: zone id is out of range
[  773.306398][T16721] netlink: zone id is out of range
[  773.308124][T16721] netlink: zone id is out of range
[  773.312426][T16721] netlink: zone id is out of range
[  773.315107][T16721] netlink: zone id is out of range
[  773.316950][T16721] netlink: zone id is out of range
[  773.318767][T16721] netlink: zone id is out of range
[  773.327508][T16721] netlink: zone id is out of range
[  773.985485][T16749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  774.060100][T16763] syzkaller1: entered promiscuous mode
[  774.062194][T16763] syzkaller1: entered allmulticast mode
[  774.123288][T16769] netlink: 'syz.2.18297': attribute type 6 has an invalid length.
[  774.413259][T16805] syzkaller1: entered promiscuous mode
[  774.415068][T16805] syzkaller1: entered allmulticast mode
[  777.384031][T16819] __nla_validate_parse: 10 callbacks suppressed
[  777.384045][T16819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18312'.
[  777.461647][T16834] netlink: 'syz.1.18318': attribute type 1 has an invalid length.
[  777.558246][T16853] netlink: 'syz.1.18318': attribute type 3 has an invalid length.
[  777.570375][T16851] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  777.573802][T16851] syzkaller0: entered promiscuous mode
[  777.576072][T16851] syzkaller0: entered allmulticast mode
[  777.594945][T16851] tipc: Resetting bearer <eth:syzkaller0>
[  777.612663][T16851] tipc: Resetting bearer <eth:syzkaller0>
[  777.637337][T16851] tipc: Disabling bearer <eth:syzkaller0>
[  777.794055][T16852] lo speed is unknown, defaulting to 1000
[  777.799154][T16852] C speed is unknown, defaulting to 1000
[  778.534295][T16875] : left promiscuous mode
[  778.764101][T16886] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18337'.
[  778.783208][T16889] net_ratelimit: 35 callbacks suppressed
[  778.783217][T16889] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  778.856584][T16900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18339'.
[  778.878282][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18340'.
[  778.980859][T16920] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  778.987084][T16920] netlink: 134820 bytes leftover after parsing attributes in process `syz.0.18344'.
[  779.025504][T16925] nbd: must specify an index to disconnect
[  779.028116][T16926] nbd: must specify an index to disconnect
[  779.730816][T16938] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.18352'.
[  779.735926][T16938] netlink: 'syz.2.18352': attribute type 1 has an invalid length.
[  779.739873][T16938] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.18352'.
[  779.785783][T16941] netlink: 104 bytes leftover after parsing attributes in process `syz.2.18353'.
[  779.795633][T16941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18353'.
[  779.875718][T16948] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  779.940119][T16954] netlink: 17 bytes leftover after parsing attributes in process `syz.0.18358'.
[  779.991350][T16958] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  780.000505][T16958] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  780.015771][T16959] netlink: 'syz.0.18358': attribute type 10 has an invalid length.
[  780.052847][T16959] netlink: 'syz.0.18358': attribute type 10 has an invalid length.
[  781.146757][T16984] lo speed is unknown, defaulting to 1000
[  781.150362][T16984] C speed is unknown, defaulting to 1000
[  781.171652][T17006] netlink: 'syz.0.18376': attribute type 33 has an invalid length.
[  781.222481][T17006] netlink: 'syz.0.18376': attribute type 4 has an invalid length.
[  781.284986][T17017] netlink: 'syz.1.18379': attribute type 1 has an invalid length.
[  781.300247][T17017] bond19: entered promiscuous mode
[  781.303128][T17017] bond19: entered allmulticast mode
[  781.312847][T17017] bridge17: entered promiscuous mode
[  781.314617][T17017] bridge17: entered allmulticast mode
[  781.318519][T17017] bond19: (slave bridge17): making interface the new active one
[  781.322165][T17017] bond19: (slave bridge17): Enslaving as an active interface with an up link
[  781.426248][T17029] dvmrp1: left allmulticast mode
[  781.591421][T17029] bond20: entered promiscuous mode
[  781.593154][T17029] bond20: entered allmulticast mode
[  781.595033][T17029] 8021q: adding VLAN 0 to HW filter on device bond20
[  781.598227][T17031] syzkaller0: entered promiscuous mode
[  781.603158][T17031] syzkaller0: entered allmulticast mode
[  781.875296][T17065] sctp: [Deprecated]: syz.2.18395 (pid 17065) Use of int in max_burst socket option deprecated.
[  781.875296][T17065] Use struct sctp_assoc_value instead
[  782.507214][T17078] __nla_validate_parse: 5 callbacks suppressed
[  782.507229][T17078] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.18401'.
[  782.624280][T17085] pim6reg1: entered allmulticast mode
[  782.754970][T17091] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.18405'.
[  782.786932][T17094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18406'.
[  782.791024][T17094] netlink: 'syz.0.18406': attribute type 29 has an invalid length.
[  782.794527][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18406'.
[  782.809047][T17094] vlan0: entered promiscuous mode
[  782.815222][T17094] gretap0: entered promiscuous mode
[  782.850560][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  782.912539][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18410'.
[  782.938928][T17108] geneve9: entered promiscuous mode
[  782.950611][T17108] geneve9: entered allmulticast mode
[  782.954951][ T5870] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  782.959272][ T5870] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  782.968115][ T5870] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  782.975790][ T5870] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  783.005195][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18413'.
[  783.090948][ T5891] page_pool_release_retry() stalled pool shutdown: id 147, 3329 inflight 181 sec
[  783.115381][T17127] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18417'.
[  783.119324][T17129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18416'.
[  783.125537][T17129] netlink: 'syz.2.18416': attribute type 30 has an invalid length.
[  783.133184][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  783.136087][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  783.139051][T17129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18416'.
[  783.148048][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  783.150587][T17129] netlink: 'syz.2.18416': attribute type 30 has an invalid length.
[  783.152033][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  783.211718][T17132] netlink: 256 bytes leftover after parsing attributes in process `syz.0.18418'.
[  783.265360][T17132] rdma_rxe: rxe_newlink: failed to add wlan1
[  783.275494][T17132] tipc: Resetting bearer <ib:ip6gre0>
[  783.277642][T17132] tipc: Resetting bearer <ib:ip6gre0>
[  783.284320][T17132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  783.289163][ T5891] C speed is unknown, defaulting to 1000
[  783.292871][ T5891] syz2: Port: 1 Link ACTIVE
[  783.410665][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  783.483233][T17138] netlink: 'syz.0.18420': attribute type 32 has an invalid length.
[  783.487975][T17138] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  783.873964][T17155] openvswitch: netlink: Missing key (keys=40, expected=80)
[  783.959516][T17143] lo speed is unknown, defaulting to 1000
[  783.963419][T17143] C speed is unknown, defaulting to 1000
[  784.857226][T17200] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  785.349258][T17234] syzkaller1: entered promiscuous mode
[  785.351291][T17234] syzkaller1: entered allmulticast mode
[  785.490010][T17243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  785.495375][T17243] syzkaller0: entered promiscuous mode
[  785.497301][T17243] syzkaller0: entered allmulticast mode
[  785.526591][T17243] tipc: Resetting bearer <eth:syzkaller0>
[  785.533034][T17242] tipc: Resetting bearer <eth:syzkaller0>
[  785.557132][T17242] tipc: Disabling bearer <eth:syzkaller0>
[  785.725542][T17248] validate_nla: 5 callbacks suppressed
[  785.725555][T17248] netlink: 'syz.1.18457': attribute type 8 has an invalid length.
[  785.973229][   T60] block nbd3: Possible stuck request ffff888021540000: control (read@0,1024B). Runtime 330 seconds
[  785.977774][   T60] block nbd3: Possible stuck request ffff888021540200: control (read@1024,1024B). Runtime 330 seconds
[  785.982971][   T60] block nbd3: Possible stuck request ffff888021540400: control (read@2048,1024B). Runtime 330 seconds
[  785.987569][   T60] block nbd3: Possible stuck request ffff888021540600: control (read@3072,1024B). Runtime 330 seconds
[  786.103024][T17278] bond23: (slave geneve4): Enslaving as an active interface with an up link
[  786.107044][ T5867] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  786.110564][ T5867] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  786.113892][ T5867] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  786.118177][ T5867] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  786.134289][T17283] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  786.137110][T17283] syzkaller0: entered promiscuous mode
[  786.140244][T17283] syzkaller0: entered allmulticast mode
[  786.150074][T17282] tipc: Resetting bearer <eth:syzkaller0>
[  786.164639][T17282] tipc: Disabling bearer <eth:syzkaller0>
[  786.306344][T17300] pim6reg: entered allmulticast mode
[  786.309221][T17304] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  786.376087][T17299] pim6reg: left allmulticast mode
[  786.750511][T17358] bridge0: port 1(veth0_to_team) entered blocking state
[  786.753201][T17358] bridge0: port 1(veth0_to_team) entered disabled state
[  786.755698][T17358] veth0_to_team: entered allmulticast mode
[  786.760196][T17358] veth0_to_team: entered promiscuous mode
[  786.769021][T17358] veth0_to_team: left allmulticast mode
[  786.771367][T17358] veth0_to_team: left promiscuous mode
[  786.773562][T17358] bridge0: port 1(veth0_to_team) entered disabled state
[  787.172423][T17392] syzkaller0: entered promiscuous mode
[  787.174195][T17392] syzkaller0: entered allmulticast mode
[  788.366349][T17413] 0X: left allmulticast mode
[  788.373640][T17413] batadv_slave_0: left promiscuous mode
[  788.406812][T17413] bond23: left promiscuous mode
[  788.408577][T17413] bond23: left allmulticast mode
[  788.412954][T17413] vlan6: left promiscuous mode
[  788.414659][T17413] bond0: left promiscuous mode
[  788.416398][T17413] vlan6: left allmulticast mode
[  788.418317][T17413] bond0: left allmulticast mode
[  788.426045][T17413] xfrm1: left promiscuous mode
[  788.427670][T17413] xfrm1: left allmulticast mode
[  788.459988][ T3008] lo speed is unknown, defaulting to 1000
[  788.462316][ T3008] syz1: Port: 1 Link DOWN
[  788.468329][ T5867] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  788.471805][ T5867] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  788.476790][ T5867] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  788.483422][ T5867] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  788.564722][T17425] __nla_validate_parse: 30 callbacks suppressed
[  788.564772][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18509'.
[  788.572721][   T56] block nbd2: Receive control failed (result -107)
[  788.583204][T17417] netlink: 'syz.0.18509': attribute type 1 has an invalid length.
[  788.586806][T17417] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.18509'.
[  788.622001][T17425] nbd2: detected capacity change from 0 to 32
[  788.628565][T17431] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18512'.
[  788.885675][T17449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18517'.
[  788.975488][T17451] netlink: 'syz.2.18518': attribute type 1 has an invalid length.
[  789.899685][T17468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18524'.
[  790.173443][T17485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18530'.
[  790.301068][T17488] netlink: 'syz.2.18531': attribute type 10 has an invalid length.
[  790.463266][T17495] netlink: 'syz.2.18534': attribute type 29 has an invalid length.
[  790.474705][T17495] netlink: 'syz.2.18534': attribute type 29 has an invalid length.
[  790.593493][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18539'.
[  790.665677][T17522] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18545'.
[  790.706626][T17527] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18547'.
[  790.776180][T17533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18549'.
[  790.788253][T17535] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  791.164896][T17575] netlink: 'syz.0.18563': attribute type 1 has an invalid length.
[  791.167543][T17574] netlink: 'syz.0.18563': attribute type 1 has an invalid length.
[  791.429282][T17575] lo speed is unknown, defaulting to 1000
[  791.432129][T17575] C speed is unknown, defaulting to 1000
[  791.894263][T17604] sctp: [Deprecated]: syz.2.18572 (pid 17604) Use of struct sctp_assoc_value in delayed_ack socket option.
[  791.894263][T17604] Use struct sctp_sack_info instead
[  792.043615][T17615] netlink: 'syz.0.18576': attribute type 3 has an invalid length.
[  792.046401][T17615] netlink: 'syz.0.18576': attribute type 3 has an invalid length.
[  792.336662][T17635] netlink: zone id is out of range
[  792.338471][T17635] netlink: zone id is out of range
[  792.340680][T17635] netlink: zone id is out of range
[  792.350524][T17635] netlink: zone id is out of range
[  792.352212][T17635] netlink: zone id is out of range
[  792.354424][T17635] netlink: zone id is out of range
[  792.357312][T17635] netlink: zone id is out of range
[  792.359042][T17635] netlink: zone id is out of range
[  792.361159][T17635] netlink: zone id is out of range
[  792.363538][T17635] netlink: zone id is out of range
[  792.504006][T17618] lo speed is unknown, defaulting to 1000
[  792.509462][T17618] C speed is unknown, defaulting to 1000
[  792.672386][T17660] vxcan0: entered promiscuous mode
[  793.191141][T17717] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  793.196950][T17717] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  793.219035][T17721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  793.249572][T17724] tipc: Disabling bearer <eth:syzkaller0>
[  794.107495][T17745] __nla_validate_parse: 11 callbacks suppressed
[  794.107511][T17745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18613'.
[  794.208772][T17752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18617'.
[  794.213011][T17752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18617'.
[  794.215985][T17752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18617'.
[  794.219236][T17752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18617'.
[  794.224213][T17752] netlink: 5 bytes leftover after parsing attributes in process `syz.2.18617'.
[  794.233885][T17752] netlink: 'syz.2.18617': attribute type 16 has an invalid length.
[  794.237503][T17752] netlink: 'syz.2.18617': attribute type 17 has an invalid length.
[  794.303313][T17752] IPv6: NLM_F_REPLACE set, but no existing node found!
[  794.349443][T17760] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  794.439900][T17773] netlink: 68 bytes leftover after parsing attributes in process `syz.0.18622'.
[  794.541082][T17754] lo speed is unknown, defaulting to 1000
[  794.545227][T17754] C speed is unknown, defaulting to 1000
[  794.782436][T17749] lo speed is unknown, defaulting to 1000
[  794.786683][T17749] C speed is unknown, defaulting to 1000
[  795.013216][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18624'.
[  795.220100][T17785] lo speed is unknown, defaulting to 1000
[  795.224682][T17785] C speed is unknown, defaulting to 1000
[  795.370288][T17792] netlink: 'syz.0.18625': attribute type 6 has an invalid length.
[  795.648262][T17807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18631'.
[  795.915444][T17827] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  795.924285][T17827] syzkaller0: entered promiscuous mode
[  795.926509][T17827] syzkaller0: entered allmulticast mode
[  795.936209][T17827] netlink: 'syz.2.18640': attribute type 1 has an invalid length.
[  795.952644][T17827] tipc: Resetting bearer <eth:syzkaller0>
[  795.955570][T17826] tipc: Resetting bearer <eth:syzkaller0>
[  795.972685][T17826] tipc: Disabling bearer <eth:syzkaller0>
[  797.028241][T17854] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18650'.
[  797.346677][T17872] netlink: 'syz.2.18657': attribute type 303 has an invalid length.
[  797.360021][T17872] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  797.364286][T17872] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  798.353100][T17912] netlink: 'syz.0.18666': attribute type 10 has an invalid length.
[  798.911717][T17922] netlink: 'syz.1.18672': attribute type 13 has an invalid length.
[  798.970912][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  799.181020][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  799.355975][T17946] netlink: 'syz.2.18675': attribute type 7 has an invalid length.
[  800.129374][T17998] __nla_validate_parse: 2 callbacks suppressed
[  800.129383][T17998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18682'.
[  800.138539][T17998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18682'.
[  800.387928][T18019] ip6tnl4: entered promiscuous mode
[  800.389674][T18019] ip6tnl4: entered allmulticast mode
[  800.454595][T18031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18694'.
[  800.621538][T18057] netlink: 'syz.1.18703': attribute type 1 has an invalid length.
[  800.652463][T18057] 8021q: adding VLAN 0 to HW filter on device bond25
[  800.656849][T18057] bond24: (slave bond25): making interface the new active one
[  800.660039][T18057] bond24: (slave bond25): Enslaving as an active interface with an up link
[  800.667156][T18057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18703'.
[  800.672523][T18057] 8021q: adding VLAN 0 to HW filter on device bond24
[  800.834712][T18066] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18705'.
[  800.854718][T18046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18700'.
[  801.381212][T18083] : left promiscuous mode
[  801.523435][T18093] team0: Mode "l" not found
[  801.531340][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18713'.
[  801.581559][T18099] netlink: 108 bytes leftover after parsing attributes in process `syz.2.18717'.
[  801.605787][T18105] : left promiscuous mode
[  801.646289][T18107] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.18720'.
[  801.668324][T18109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18721'.
[  801.784762][T18122] netlink: 'syz.2.18725': attribute type 8 has an invalid length.
[  801.789626][T18122] net_ratelimit: 16 callbacks suppressed
[  801.789635][T18122] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  801.801224][T18122] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  801.804536][T18122] netlink: 'syz.2.18725': attribute type 12 has an invalid length.
[  801.907606][T18130] syzkaller0: entered promiscuous mode
[  801.909744][T18130] syzkaller0: entered allmulticast mode
[  802.034085][T18148] openvswitch: netlink: Flow key attr not present in new flow.
[  802.394859][T18190] netlink: 'syz.2.18749': attribute type 22 has an invalid length.
[  802.409224][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  802.410675][T18190] netlink: 'syz.2.18749': attribute type 22 has an invalid length.
[  802.413020][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  802.419703][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  802.424471][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  802.431099][T18192] netlink: 'syz.2.18749': attribute type 22 has an invalid length.
[  802.434669][T18192] netlink: 'syz.2.18749': attribute type 22 has an invalid length.
[  802.532622][T18178] lo speed is unknown, defaulting to 1000
[  802.535459][T18178] C speed is unknown, defaulting to 1000
[  803.359588][ T5851] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  803.367236][ T5851] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  803.374898][ T5851] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  803.381369][ T5851] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  803.436370][T18221] lo speed is unknown, defaulting to 1000
[  803.439325][T18221] C speed is unknown, defaulting to 1000
[  803.519145][T18253] netlink: 'syz.1.18769': attribute type 2 has an invalid length.
[  803.544311][T18253] k*]: entered promiscuous mode
[  803.580679][T18253] veth0_to_team: entered promiscuous mode
[  803.583173][T18253] veth0_to_team: entered allmulticast mode
[  803.655938][T18258] netlink: 'syz.1.18770': attribute type 10 has an invalid length.
[  803.874460][T18267] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  803.967981][T18278] rdma_rxe: rxe_newlink: failed to add wlan1
[  804.006798][T18278] 8021q: adding VLAN 0 to HW filter on device team0
[  804.014096][T18278] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  804.021432][ T3008] lo speed is unknown, defaulting to 1000
[  804.024065][ T3008] syz1: Port: 1 Link ACTIVE
[  804.242202][T18303] nbd: must specify at least one socket
[  804.354171][T18314] netlink: 'syz.0.18789': attribute type 11 has an invalid length.
[  804.368651][T18314] tipc: Resetting bearer <ib:ip6gre0>
[  804.372121][T18314] tipc: Resetting bearer <ib:ip6gre0>
[  804.478358][T18326] netlink: 'syz.1.18792': attribute type 10 has an invalid length.
[  804.482843][T18326] wlan1: mtu less than device minimum
[  804.484982][T18326] : (slave wlan1): Error -22 calling dev_set_mtu
[  804.647401][T18343] netlink: 'syz.0.18798': attribute type 10 has an invalid length.
[  805.230304][T18395] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  805.234688][T18395] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  805.455505][T18408] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  805.462553][T18408] __nla_validate_parse: 17 callbacks suppressed
[  805.462563][T18408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18818'.
[  805.735225][T18412] bond0: down delay (5) is not a multiple of miimon (33271), value rounded to 0 ms
[  805.738421][T18412] bond0: option all_slaves_active: invalid value (7)
[  805.960037][T18421] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18822'.
[  805.963282][T18421] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18822'.
[  806.153877][T18440] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  806.188384][T18440] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  806.193439][T18440] syzkaller0: entered promiscuous mode
[  806.195336][T18440] syzkaller0: entered allmulticast mode
[  806.200863][T18440] tipc: Resetting bearer <eth:syzkaller0>
[  806.208136][T18439] tipc: Resetting bearer <eth:syzkaller0>
[  806.232796][T18439] tipc: Disabling bearer <eth:syzkaller0>
[  806.329775][T18428] netlink: 156 bytes leftover after parsing attributes in process `syz.0.18826'.
[  806.342802][T18435] lo speed is unknown, defaulting to 1000
[  806.345544][T18435] C speed is unknown, defaulting to 1000
[  806.422325][T18449] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  806.425457][T18449] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  806.453222][   T34] INFO: task udevd:30415 blocked for more than 143 seconds.
[  806.459815][   T34]       Not tainted syzkaller #0
[  806.462713][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  806.472330][   T34] task:udevd           state:D stack:22632 pid:30415 tgid:30415 ppid:1      task_flags:0x400140 flags:0x00004006
[  806.476835][   T34] Call Trace:
[  806.480122][   T34]  <TASK>
[  806.484486][   T34]  __schedule+0x1798/0x4cc0
[  806.487560][   T34]  ? __pfx___schedule+0x10/0x10
[  806.489417][   T34]  ? schedule+0x91/0x360
[  806.491194][   T34]  schedule+0x165/0x360
[  806.492917][   T34]  io_schedule+0x80/0xd0
[  806.494811][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  806.496877][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  806.499172][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  806.504725][   T34]  ? __filemap_get_folio+0x770/0xaf0
[  806.507255][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  806.509395][   T34]  do_read_cache_folio+0x1aa/0x590
[  806.511394][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  806.513709][   T34]  read_part_sector+0xb6/0x2b0
[  806.515519][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  806.517665][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  806.519861][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  806.525389][   T34]  bdev_disk_changed+0x75f/0x14b0
[  806.527949][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  806.530588][ T3008] page_pool_release_retry() stalled pool shutdown: id 191, 1 inflight 60 sec
[  806.530668][   T34]  ? wait_on_inode+0xc0/0x230
[  806.535330][   T34]  blkdev_get_whole+0x380/0x510
[  806.537273][   T34]  bdev_open+0x31e/0xd30
[  806.538958][   T34]  blkdev_open+0x3a8/0x510
[  806.543322][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  806.545263][   T34]  do_dentry_open+0x953/0x13f0
[  806.547090][   T34]  vfs_open+0x3b/0x340
[  806.548757][   T34]  ? path_openat+0x2ecd/0x3830
[  806.550805][   T34]  path_openat+0x2ee5/0x3830
[  806.552590][   T34]  ? arch_stack_walk+0xfc/0x150
[  806.554513][   T34]  ? stack_depot_save_flags+0x40/0x860
[  806.556536][   T34]  ? __pfx_path_openat+0x10/0x10
[  806.558366][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  806.563238][   T34]  do_filp_open+0x1fa/0x410
[  806.565262][   T34]  ? __lock_acquire+0xab9/0xd20
[  806.567116][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  806.568948][   T34]  ? _raw_spin_unlock+0x28/0x50
[  806.571238][   T34]  ? alloc_fd+0x64c/0x6c0
[  806.573054][   T34]  do_sys_openat2+0x121/0x1c0
[  806.574804][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  806.576831][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  806.578816][   T34]  ? rcu_is_watching+0x15/0xb0
[  806.580970][   T34]  __x64_sys_openat+0x138/0x170
[  806.583117][   T34]  do_syscall_64+0xfa/0x3b0
[  806.585221][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  806.587618][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  806.589922][   T34]  ? exc_page_fault+0x9f/0xf0
[  806.591815][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  806.593912][   T34] RIP: 0033:0x7fc122f169a4
[  806.595622][   T34] RSP: 002b:00007ffc62be5f80 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  806.598634][   T34] RAX: ffffffffffffffda RBX: 00005645423b1780 RCX: 00007fc122f169a4
[  806.601628][   T34] RDX: 00000000000a0800 RSI: 00005645423b8200 RDI: 00000000ffffff9c
[  806.604560][   T34] RBP: 00005645423b8200 R08: 0000000000000001 R09: 7fffffffffffffff
[  806.607388][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  806.610026][   T34] R13: 00005645423a2aa0 R14: 0000000000000001 R15: 0000564542391910
[  806.612907][   T34]  </TASK>
[  806.614161][   T34] 
[  806.614161][   T34] Showing all locks held in the system:
[  806.616902][   T34] 1 lock held by khungtaskd/34:
[  806.618812][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  806.622848][   T34] 2 locks held by getty/5669:
[  806.625008][   T34]  #0: ffff888028e530a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  806.629020][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  806.632971][   T34] 1 lock held by syz-executor/5768:
[  806.634866][   T34]  #0: ffff88804b039f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  806.638401][   T34] 1 lock held by udevd/30415:
[  806.640302][   T34]  #0: ffff8880214ab358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  806.644459][   T34] 3 locks held by kworker/u9:6/4771:
[  806.646297][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  806.650154][   T34]  #1: ffffc90028b67bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  806.654420][   T34]  #2: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  806.658663][   T34] 1 lock held by syz.1.18822/18420:
[  806.660758][   T34]  #0: ffff88811c63a608 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  806.665133][   T34] 5 locks held by syz.0.18826/18428:
[  806.667478][   T34] 2 locks held by syz.2.18832/18448:
[  806.669878][   T34]  #0: ffff88802b679408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  806.674203][   T34]  #1: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  806.678531][   T34] 
[  806.679439][   T34] =============================================
[  806.679439][   T34] 
[  806.683137][   T34] NMI backtrace for cpu 1
[  806.683146][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  806.683155][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  806.683159][   T34] Call Trace:
[  806.683163][   T34]  <TASK>
[  806.683166][   T34]  dump_stack_lvl+0x189/0x250
[  806.683180][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  806.683188][   T34]  ? __pfx__printk+0x10/0x10
[  806.683201][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  806.683213][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  806.683223][   T34]  ? __pfx__printk+0x10/0x10
[  806.683233][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  806.683244][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  806.683254][   T34]  watchdog+0xf93/0xfe0
[  806.683265][   T34]  ? watchdog+0x1de/0xfe0
[  806.683276][   T34]  kthread+0x711/0x8a0
[  806.683286][   T34]  ? __pfx_watchdog+0x10/0x10
[  806.683295][   T34]  ? __pfx_kthread+0x10/0x10
[  806.683303][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  806.683313][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  806.683320][   T34]  ? __pfx_kthread+0x10/0x10
[  806.683328][   T34]  ret_from_fork+0x3fc/0x770
[  806.683336][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  806.683345][   T34]  ? __switch_to_asm+0x39/0x70
[  806.683353][   T34]  ? __switch_to_asm+0x33/0x70
[  806.683361][   T34]  ? __pfx_kthread+0x10/0x10
[  806.683369][   T34]  ret_from_fork_asm+0x1a/0x30
[  806.683382][   T34]  </TASK>
[  806.683385][   T34] Sending NMI from CPU 1 to CPUs 0:
[  806.733935][    C0] NMI backtrace for cpu 0
[  806.733949][    C0] CPU: 0 UID: 0 PID: 18449 Comm: syz.2.18832 Not tainted syzkaller #0 PREEMPT(full) 
[  806.733960][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  806.733966][    C0] RIP: 0010:folio_remove_rmap_ptes+0x390/0xaf0
[  806.733980][    C0] Code: ff ff ff ff e8 21 a4 ae ff 41 39 ee 0f 88 84 00 00 00 e8 d3 9f ae ff 49 bf 00 00 00 00 00 fc ff df 4c 8b 2c 24 e9 64 01 00 00 <e8> bb 9f ae ff e9 0c 03 00 00 e8 b1 9f ae ff 49 bf 00 00 00 00 00
[  806.733988][    C0] RSP: 0018:ffffc90020b97310 EFLAGS: 00000202
[  806.733998][    C0] RAX: ffffffff8211092f RBX: ffffea00046f1200 RCX: 0000000000000000
[  806.734005][    C0] RDX: ffff88801f42b980 RSI: 0000000000000000 RDI: 0000000000000000
[  806.734011][    C0] RBP: 0000000000000000 R08: ffffea00046f1233 R09: 1ffffd40008de246
[  806.734018][    C0] R10: dffffc0000000000 R11: fffff940008de247 R12: ffffea00046f1200
[  806.734024][    C0] R13: ffff888115ad7980 R14: 0000000000000001 R15: dffffc0000000000
[  806.734031][    C0] FS:  0000000000000000(0000) GS:ffff8880b8616000(0000) knlGS:0000000000000000
[  806.734038][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  806.734045][    C0] CR2: 00007fab46de2fc8 CR3: 000000000df36000 CR4: 00000000000006f0
[  806.734075][    C0] Call Trace:
[  806.734081][    C0]  <TASK>
[  806.734087][    C0]  ? page_table_check_clear+0x187/0x700
[  806.734100][    C0]  ? page_table_check_clear+0x4f3/0x700
[  806.734112][    C0]  unmap_page_range+0x1f7f/0x4370
[  806.734134][    C0]  ? __pfx_unmap_page_range+0x10/0x10
[  806.734142][    C0]  ? unmap_vmas+0x144/0x580
[  806.734157][    C0]  ? unmap_vmas+0x144/0x580
[  806.734173][    C0]  unmap_vmas+0x399/0x580
[  806.734184][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  806.734199][    C0]  exit_mmap+0x248/0xb50
[  806.734212][    C0]  ? uprobe_clear_state+0x20f/0x290
[  806.734222][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  806.734232][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  806.734245][    C0]  ? __pfx_exit_aio+0x10/0x10
[  806.734261][    C0]  ? uprobe_clear_state+0x274/0x290
[  806.734272][    C0]  __mmput+0x118/0x420
[  806.734283][    C0]  exit_mm+0x1da/0x2c0
[  806.734294][    C0]  ? __pfx_exit_mm+0x10/0x10
[  806.734306][    C0]  ? rcu_is_watching+0x15/0xb0
[  806.734316][    C0]  do_exit+0x648/0x2300
[  806.734329][    C0]  ? cgroup_freezing+0x20/0x350
[  806.734340][    C0]  ? __pfx_do_exit+0x10/0x10
[  806.734352][    C0]  ? cgroup_freezing+0x20/0x350
[  806.734361][    C0]  ? cgroup_freezing+0x20/0x350
[  806.734373][    C0]  do_group_exit+0x21c/0x2d0
[  806.734383][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  806.734393][    C0]  get_signal+0x1286/0x1340
[  806.734406][    C0]  arch_do_signal_or_restart+0x9a/0x750
[  806.734421][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  806.734432][    C0]  ? __might_fault+0xb0/0x130
[  806.734447][    C0]  ? exit_to_user_mode_loop+0x40/0x110
[  806.734460][    C0]  exit_to_user_mode_loop+0x75/0x110
[  806.734473][    C0]  do_syscall_64+0x2bd/0x3b0
[  806.734482][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  806.734491][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  806.734500][    C0]  ? exc_page_fault+0x9f/0xf0
[  806.734508][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  806.734517][    C0] RIP: 0033:0x7fab45f8ebe9
[  806.734525][    C0] Code: Unable to access opcode bytes at 0x7fab45f8ebbf.
[  806.734529][    C0] RSP: 002b:00007fab46e040e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  806.734539][    C0] RAX: fffffffffffffe00 RBX: 00007fab461c5fa8 RCX: 00007fab45f8ebe9
[  806.734546][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fab461c5fa8
[  806.734551][    C0] RBP: 00007fab461c5fa0 R08: 0000000000000000 R09: 0000000000000000
[  806.734557][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  806.734563][    C0] R13: 00007fab461c6038 R14: 00007ffc8c9e0a60 R15: 00007ffc8c9e0b48
[  806.734574][    C0]  </TASK>
[  806.734947][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  806.863851][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  806.867527][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  806.871411][   T34] Call Trace:
[  806.872670][   T34]  <TASK>
[  806.873700][   T34]  dump_stack_lvl+0x99/0x250
[  806.875252][   T34]  ? __asan_memcpy+0x40/0x70
[  806.877014][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  806.878697][   T34]  ? __pfx__printk+0x10/0x10
[  806.880393][   T34]  vpanic+0x281/0x750
[  806.881879][   T34]  ? __pfx_vpanic+0x10/0x10
[  806.883429][   T34]  ? preempt_schedule+0xae/0xc0
[  806.885011][   T34]  ? preempt_schedule_common+0x83/0xd0
[  806.886788][   T34]  panic+0xb9/0xc0
[  806.888012][   T34]  ? __pfx_panic+0x10/0x10
[  806.889456][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  806.891227][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  806.893235][   T34]  watchdog+0xfd2/0xfe0
[  806.894574][   T34]  ? watchdog+0x1de/0xfe0
[  806.896081][   T34]  kthread+0x711/0x8a0
[  806.897428][   T34]  ? __pfx_watchdog+0x10/0x10
[  806.898956][   T34]  ? __pfx_kthread+0x10/0x10
[  806.900461][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  806.902348][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  806.904139][   T34]  ? __pfx_kthread+0x10/0x10
[  806.905620][   T34]  ret_from_fork+0x3fc/0x770
[  806.907114][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  806.908820][   T34]  ? __switch_to_asm+0x39/0x70
[  806.910394][   T34]  ? __switch_to_asm+0x33/0x70
[  806.911999][   T34]  ? __pfx_kthread+0x10/0x10
[  806.913541][   T34]  ret_from_fork_asm+0x1a/0x30
[  806.915102][   T34]  </TASK>
[  806.916766][   T34] Kernel Offset: disabled
[  806.918193][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:05:12  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff8b781143 RBX=ffff88803a97cdc2 RCX=0000000000000002 RDX=ffff8880218cd640
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc90020b67530
R8 =0000000000000000 R9 =ffffffff81f6a16d R10=ffffc90020b67640 R11=fffff5200416cecb
R12=ffff888049cde5b8 R13=ffffc90020b67638 R14=ffffc90020b67620 R15=1ffff9200416cec7
RIP=ffffffff81a52f30 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd1e75d56c0 ffffffff 00c00000
GS =0000 ffff8880b8616000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3817ef CR3=00000001236cc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000200000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fab46012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81a16b9b RBX=00000001000000b8 RCX=ffffffff81a16ba8 RDX=0000000000000001
RSI=0000000000000008 RDI=ffffc9000068f5e0 RBP=ffffffff8e017040 RSP=ffffc9000068f470
R8 =ffffffff8e017047 R9 =1ffffffff1c02e08 R10=dffffc0000000000 R11=fffffbfff1c02e09
R12=ffffc9000068f5e0 R13=0000000000000002 R14=00000001000000b8 R15=80000001000000b8
RIP=ffffffff822303ab RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c16000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000558a3ce61da8 CR3=000000010ead6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000003bf12
XMM02=041880020804bc00 0804b4000a00040a XMM03=0200040a04b00340 05dc000401808002
XMM04=0000000000000000 0000000000000000 XMM05=000055556772af87 000055556772abf0
XMM06=0000000000000000 0000000000000000 XMM07=4005dc0004018080 02041880020804bc
XMM08=000804b4000a0004 0a05fc030ffe0488 XMM09=6b5f5f2e636f6c6c 615f79656b5f7074
XMM10=3631306139666666 66666666660a7965 XMM11=6574756f725f7074 636d206220303438
XMM12=7574726976207374 6962203834202c6c XMM13=6d6567616e616d20 7265776f700a6c61
XMM14=6f72702f0000000d 00000a0a3a746e65 XMM15=000000060000006f 666e697570632f63
