last executing test programs:

1.457454846s ago: executing program 0 (id=3086):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001d00010026bd7000fedbdf4ad5cf15db", @ANYRES32=0x0, @ANYBLOB="1000cc0414000100"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xe4, 0x4, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1e5afd24}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2023a760}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x7f, 0xc, "bb27b76b27a440d1504dc0b3c50e81d8580b4762e5b77f6d60986737a22814752a9a7ee56686cf1e5a5decf066324dc24d64e3f908f71a73fc515f398ff7698ca877a30d40a69d71abca1b737afb7baa9a61b6307f97bc59b19331ad3dcf8b8eef439462bfc7a5275a24a29a99237f1d49f0aad74b42445c5cb2f3"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xe4, 0x4, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1e5afd24}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2023a760}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x7f, 0xc, "bb27b76b27a440d1504dc0b3c50e81d8580b4762e5b77f6d60986737a22814752a9a7ee56686cf1e5a5decf066324dc24d64e3f908f71a73fc515f398ff7698ca877a30d40a69d71abca1b737afb7baa9a61b6307f97bc59b19331ad3dcf8b8eef439462bfc7a5275a24a29a99237f1d49f0aad74b42445c5cb2f3"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r2 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x81, '\x00', r4, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, <r9=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x5, 0x3, 0x4, 0x5, 0xa, 0xffffffffffffffff, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xab, &(0x7f0000000480)=""/171, 0x61800, 0x1, '\x00', r4, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0xe, 0xfffffffe, 0x42}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000540)=[r9], &(0x7f0000000600)=[{0x2, 0x1, 0x4, 0x5}, {0x0, 0x3, 0x1}, {0x5, 0x1, 0x3, 0xa}, {0x5, 0x3, 0xf, 0x7}, {0x0, 0x3, 0x7, 0x5}, {0x2, 0x1, 0xc, 0x8}], 0x10, 0x6}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x5, 0x3, 0x4, 0x5, 0xa, 0xffffffffffffffff, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xab, &(0x7f0000000480)=""/171, 0x61800, 0x1, '\x00', r4, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0xe, 0xfffffffe, 0x42}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000540)=[r9], &(0x7f0000000600)=[{0x2, 0x1, 0x4, 0x5}, {0x0, 0x3, 0x1}, {0x5, 0x1, 0x3, 0xa}, {0x5, 0x3, 0xf, 0x7}, {0x0, 0x3, 0x7, 0x5}, {0x2, 0x1, 0xc, 0x8}], 0x10, 0x6}, 0x94)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r10, {0xe, 0x6}, {0x4, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r12, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000280)={r12, r12, 0x1, 0x9, &(0x7f0000000240)="00005dc169be5cb39e", 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r11, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(r11, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

680.548981ms ago: executing program 2 (id=3095):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1a00000000000000182900000e95f1816bd9ce291e1653019e7828128f543dbda619a4b2d1211fc3d687435c5105660062f6c7b403a2e332f27d3075a5e3e889ea49bcc7b220efafc0d73004a25de2cf46022edf9e7f8a8704122a2bef4f250ddaf797c20ff3de792c24a6296f780a5181311b5622e00fd3cf9383dcf97378abba6acbbf3aa49cc255a67e44550e6dbd99e484cd48b9d37374317dc18db325587c44000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5, 0x4}, 0x20)
socket(0x10, 0x80003, 0x0) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095080000000000002f7e71b5618f1ee16af22a7508b5d9eaa029e273bfc7f2b2bab0ad8f84c88946ee24c18a521dcf22eeed227f18732444499c827bb71f9a8029951edeb471e9008e"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) (async)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
unshare(0x2a020400) (async)
socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={<r7=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) (async)
socket(0x1d, 0x2, 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x6, @mcast1, 0x10001}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)

679.03883ms ago: executing program 2 (id=3096):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socket$kcm(0xa, 0x2, 0x0) (async)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0)
socket$kcm(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4008000)
socket$unix(0x1, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0)
write$cgroup_type(r7, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket$inet(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r8)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000240)={'team0\x00', <r10=>0x0})
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r9, @ANYBLOB="05043fbd7000fddbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="9800028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000900090603000000feff00070000000000000005f60000009e0c0907"], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r9, @ANYBLOB="05043fbd7000fddbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="9800028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000900090603000000feff00070000000000000005f60000009e0c0907"], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r12], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r12], 0x3c}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400729736a586ebd7177e267ec5087096a2ecac4a7aba36ceaa00c4390dcb6853c0f76c8d80a41ab07d5de008ff67d8ddbb9146d5a13e8d2f1c14537a608c3811305d6c4258367e104b0f993d6201fd1fc558cd79a28831538433a486939952e1bf92f7b879b1c2e2694357cb0a072faf692b3b8de6b77c65ec10daaca2c82712f5a13a793ff936fa274d8656dfb04375ffc304f375ba0a86b4be81e0fb8f60af34deb984457f11f1b9e9", @ANYRES16=r5, @ANYBLOB="010000000000ffdbdf250100000000000000014100000018001700000000000000006574683a7465616d30000000"], 0x34}}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400729736a586ebd7177e267ec5087096a2ecac4a7aba36ceaa00c4390dcb6853c0f76c8d80a41ab07d5de008ff67d8ddbb9146d5a13e8d2f1c14537a608c3811305d6c4258367e104b0f993d6201fd1fc558cd79a28831538433a486939952e1bf92f7b879b1c2e2694357cb0a072faf692b3b8de6b77c65ec10daaca2c82712f5a13a793ff936fa274d8656dfb04375ffc304f375ba0a86b4be81e0fb8f60af34deb984457f11f1b9e9", @ANYRES16=r5, @ANYBLOB="010000000000ffdbdf250100000000000000014100000018001700000000000000006574683a7465616d30000000"], 0x34}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x12160) (async)
recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x12160)

548.931113ms ago: executing program 2 (id=3097):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
socket(0x2c, 0x3, 0xe7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={<r1=>0x0, 0x4, 0x401}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={r1, 0x7f, 0x6, 0xd, 0xc, 0x1000}, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0x800000000000d}, 0xfffffffffffffffe)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003900010324bd7002fadfdf9b000000b5554908f12b0696124e696efebd405a3ee982dfa8656ed31a246dcb19901f26cf17792cf22412b82bcc1a4467665faca17c74b424ff6c60383dc3b7de70a914fa5acf74ee556edc6eb1023ead9dd2641709"], 0x14}}, 0x4000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00000c00000000000000000000000400080088856d00f92fb75e907b22b4d70848507ea830038a000000000000e80300efff0000000002010000ac1414aa00001c00000000000300060000000000020000000a0101010000000000000000"], 0x60}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x31, 0xa, 0x5a, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
unshare(0x24040400)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x5d28}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000500)}, 0x10)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_int(r8, 0x6, 0x1d, &(0x7f0000000000)=0xfff, 0x4)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket(0x18, 0x800, 0xfffffff4)

547.167013ms ago: executing program 0 (id=3098):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x84000) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x20004000)
r4 = accept4(r2, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000000)=0x80, 0x80000)
listen(r0, 0x0) (async)
sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x40) (async)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000100)={<r5=>0x0}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x80000001}}, 0xf0000000, 0x1, 0x6, 0x7fff, 0x51, 0x101, 0xcb}, 0x9c) (async)
sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c00ca)

448.870556ms ago: executing program 1 (id=3099):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xe4, 0x3, 0xa, 0x301, 0x7000, 0xfff5, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_USERDATA={0xae, 0xc, "e2eabff3803e42c697385bb747244f4125590186360e8ed33d17c35b30ebc2911efdfd4c02dee1cf9344849bcd9eefd72176dbbd310d5a67a500cebaef221a9ba8df5942ca577c1dbc708e3be5f3a70592e2ba8635e9325988c8fcc462c0216d8ea2dbd0ee4d3d16cc719a9ce891b22316e6e8690f06bff3d4b968bdf2a4dbea429a18c90b83215c0ed48c5dbd9414d432cdc2b853481a73d2fec430864372b4c8841372b05cc4d45025"}]}], {0x14}}, 0x12c}, 0x1, 0x1000000}, 0x0)

448.322251ms ago: executing program 0 (id=3100):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
pread64(r2, &(0x7f0000000180)=""/77, 0x4d, 0x3)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x1c, &(0x7f0000001080)=[@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x5, @empty, 0x4}}}, &(0x7f0000000040)=0x84)
getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012)

447.429735ms ago: executing program 1 (id=3101):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x108, r1, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ID={0x1b, 0x3, "ed82bdebc3393c682b15a5871d06045770065fa17f061f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000000}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "73a073881ddbc5659f9f950ab11ae709775422b6481dbf39394be70ae2e8"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x24008080}, 0x40c0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x54, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x7fff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r2], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048080)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000500)={{0xa, 0x4e21, 0x7, @empty, 0x80000001}, {0xa, 0x4e23, 0x0, @local, 0x5}, 0x1, {[0x4, 0xd78f, 0x32, 0x7fffffff, 0x1, 0x3, 0xe8c, 0x7fffffff]}}, 0x5c)

364.844305ms ago: executing program 0 (id=3102):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
socket$unix(0x1, 0x5, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffc, 0x8, 0x7, 0x4, 0x4, 0x0, 0x200, 0x6, 0x1}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0xb9b8, 0xe81, 0x0, 0x8, 0x28ec}}, {0x4}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4c085}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xdb, 0x2, 0x7, 0x41, 0x7dd, 0x1}, {0xb2, 0x1, 0x2, 0x1000, 0x3, 0x6}, 0xcf0, 0x5, 0xd65}}, @TCA_TBF_RATE64={0xc, 0x4, 0xafdc78dbe0554eb6}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee7f8a24a6399ccf}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

363.505195ms ago: executing program 1 (id=3103):
r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x5})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={<r1=>r0, 0x6, 0xdf, 0x5})
write$cgroup_type(r1, &(0x7f0000000100), 0x9)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r2 = accept4$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x1c, 0x80000)
r3 = gettid()
r4 = getpid()
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000280)=<r5=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
r7 = socket$caif_stream(0x25, 0x1, 0x5)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000016c0)={0x0, <r8=>0x0}, &(0x7f0000001700)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001a40)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000001b40)=0xe8)
r10 = gettid()
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@multicast1}}}, &(0x7f0000001f00)=0xe8)
r12 = getgid()
r13 = socket$nl_rdma(0x10, 0x3, 0x14)
r14 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r15 = getpid()
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001f40)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000002040)=0xe8)
r17 = getgid()
r18 = gettid()
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002080)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000002180)=0xe8)
r20 = getgid()
sendmsg$netlink(r1, &(0x7f0000002280)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001dc0)=[{&(0x7f0000000400)={0x1284, 0x22, 0x100, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x37, 0xff, 0x0, 0x0, @binary="49204a42f88efb4b298a1edf62042b4f843ce4931cde71fcba87dbf6cc0e1bc3fe59e15ba9be71c219ddba4555357a50ee5d40"}, @nested={0x133, 0x4e, 0x0, 0x1, [@typed={0x8, 0x98, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x6e}, @typed={0x8, 0xef, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x44}}, @typed={0x14, 0x13d, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="69f0dd4ea58b6ca7ecfb813d03ee3971b72a02a6def3e052db5b49b5c1cdc8ce7114479a5bae2acb4b459e7bff0152fe6a688880a651a5a9a6a24fab23b31c87d2ea8f10e0282d8841f0d06f0b73b2ffeafb7e943ff6f0f0e1f9640bdbfafa268f45863ac95401a82ada17747a5162fabcdfd550032d2b120c6e619f70e6fca7c7148218b8cc7baf2bd5", @generic="6f0d30cd8255fa11d87eef2dcd732cc09a9853044f4b206a285a9e6ca28867512050a3a01c516c0cf36ded3399d75ca890bf1561f09a9e8a1ad1cf34a1d13f978ba32fcfbbf9c5893f652218453ea55a91d1f725ff51e3e763a2a63484ae32e3b5d30a8e33", @nested={0x4, 0xab}, @typed={0x14, 0x81, 0x0, 0x0, @ipv6=@loopback}]}, @nested={0x1c, 0x100, 0x0, 0x1, [@typed={0x8, 0xee, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x6d, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xac, 0x0, 0x0, @pid=r4}]}, @nested={0x10b0, 0x3d, 0x0, 0x1, [@typed={0x8f, 0x11, 0x0, 0x0, @binary="a4b765b01a038bfc68fc43c2d96e8a734d1b49508c26df1bc9d0b9b1d3581d0ccc4a719f00eb00a2787bbf3c29d73c736bf8c1eab71bf8d6144dad37e526894b91405f4a559d3d96296a2ffbbc32651965b7c3c31315c76ff3ad3f2746d157e2dcdae060a3e9299ad5445ced1404d56ae70fe01362d7d73785faecfd0e124cc11d8f2ad881a90f54aa7c7f"}, @typed={0x8, 0xac, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x13e, 0x0, 0x0, @uid=r5}, @generic="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", @typed={0x8, 0xbb, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x59}]}, @typed={0x14, 0xc9, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="3520f5d53f64f6c55f63d90b203f2c341e44bd90264b2f242ceca3e4f9eeeab9c1c8c3d8ff4f3b"]}, 0x1284}, {&(0x7f0000001740)={0x2d0, 0x2b, 0x400, 0x70bd28, 0x25dfdbff, "", [@nested={0x299, 0xb1, 0x0, 0x1, [@generic, @nested={0x4, 0x94}, @typed={0x8, 0x10b, 0x0, 0x0, @u32=0xfffffd50}, @generic="e268ff7213da36d9a17a3bb97724b4bfa24823ccabb76b8907c386044cb10a87a3359649245f6463d8b2d6e024b9af8f03e6b015152157c55b1ded9338d4dc51f9bc373a7351cdeb2df03dfbe927012db5ca1de00e32af74fea17f68a7de5d3114d2f9f867bff2f3964222256bc0ebdaf099a9dbb137c5", @generic="0bd94b9db74cba1731aa811ea0a1a38c9a3597b64fefd921a827c5e443933f45eef118f867ff3c3ec76242b0a69cd6a6211fdb3cb1cff782ade5884e72de1e0602528a9bc0fca33f9b4cdcf9eeaf1a8243ee178c859b52ed9432a0b706f4f1f097dfc98bca839df5be1c7a6413c278d61953d71d2f5ed09a4965ceb5e6f3da973597f8c5", @generic="09dd9064444ec9a6a8e103b9b7246bf9069d6cf8d76553f7f0b3ab24217760798d90afdbfb5ea8a64e7530b1b0dd4f44e4b4deafb06bf2aa68e77671e64455e61cf46146c7702ffbed5a1d", @generic="17a21ee251ffb84622eb3b885671dcee2e4da6dc909fb42f0577908a123d1c903ed1d5fd70abea84f25e2e514118e01c64d28f6a27fd24ee308db04100437a0f07d49e951492eb81850ffea0aa57239e5028f0b8da59726047a18ccddf457640793a1d36769e3ead865cfc703ced255c293d134d95933d6633099966206ab9052e", @nested={0x4, 0x2f}, @generic="120ed5c3ef8673ad9ee844e848b856cdd04286c42adf1250a378b93d367d2de23d6f8a05b98d235edb3222fec3213bdcbe160005cba5533c439e040dc70ef35ebf31ae0a8d687703b25467827fbd412702d9d0412a02b44b0f88c67db127f030345b41186cff31b911d19638aecf9f7349dc17732db79b79ec1304dc455dfbf0116380a291f62c3591e79c26f4007b269c9176707288470b3e36c9fe95d6c347a43474681f22d00f4d5da4340f76fbc86f204b83a480", @typed={0x8, 0x69, 0x0, 0x0, @fd=r7}]}, @nested={0x14, 0x7, 0x0, 0x1, [@typed={0xd, 0x69, 0x0, 0x0, @str='threaded\x00'}]}, @typed={0x8, 0x17, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xcb, 0x0, 0x0, @uid=r8}]}, 0x2d0}, {&(0x7f0000001b80)={0x240, 0x29, 0x302, 0x70bd25, 0x25dfdbfe, "", [@nested={0x9f, 0x37, 0x0, 0x1, [@generic="2e1f7ef8a445fe6248480caa9fce8f5ea567c70e875fe0d18944208e05f58a7d3bb518aceb68cccfa694c78a94e6f40491fbe94293bce6e0ff15205b0a", @nested={0x4, 0x82}, @typed={0x8, 0x13b, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="cfd23c02f7c58cab805c3f1e563c3fe4eb47b984e537a898f21355376e27a65ed9c1ac82c2eaffa46b66c0879efaf7d6707a3c0f5eef743232924ee27a2b4aa3c288ba839072", @typed={0x4, 0x4f}, @typed={0x8, 0x141, 0x0, 0x0, @fd=r0}]}, @generic="cedce8594527cbfee269fb1220d7f138072ab7c5c5ab3c3f49768f174a371607ef483ece7e7e42c94793a045bb07c32ada1e32700f1568a5afe59e744595ad87cfd60ec9b1dbbd663c8d8eb6b916184f3164f96f71f50b40c7c5955dff6c828f190aae18a19a914acfe92bed0b8353dd8b99b19a58ce3f8847a183f5d45dd5510a15f787868d7fe6f10b570c144024cc57574909d499932f7b6236651f76bbfcd80185297888e40d992f745b4af4a51b36ca6af7806433cd89c27d0694e224b9b811b99c8a0f53941ee8df001f910251fd0e6d801e7bb972d85c844af67a368256e24a6c74d1d617", @generic="91bb022c3a8a5580ad57410d06d71e5c73ead6f8d6ede738e4ad5920225a6a6519da6d8bd60414adae664f0e2be8025d70d0c48047843a4055fa56dd8008c8976b15243763cad6373d9cd794ab815c065203dc0e83700d858f626c23d5940ea2b458dc3c99b74ec2c434681d9b946f67ef6778e324cf7f8b67ff2ae3845ea222a7", @generic="b78152f5f0f437d78b84f33a79ab075cb53327eb5a399abb9da88f9d638f", @typed={0x8, 0x12c, 0x0, 0x0, @uid=r9}]}, 0x240}], 0x3, &(0x7f00000021c0)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r1, r13, r1, r0, r1, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}], 0xa8, 0x20000000}, 0x1)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000022c0)=r1, 0x4)
r21 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r21)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000002340)={0x8}, 0x1)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000002380)=0x4010, 0x4)

351.59282ms ago: executing program 1 (id=3104):
r0 = socket$inet6(0xa, 0x5, 0x0)
syz_emit_ethernet(0x6b6, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd61a3fc0006803afffe8000000000000000000000000000bbff0200000000000000000000000000018600907800110400180c00001000000a0314e71f8e70c28ec69e8ebe36aca03a343cbfbd82c7b4788d9f5e26ff1ff40a4572988b545c2c7f46e027f5f058d3a20bd75b518999f69f73fd43b26b59422724c3d26b021d0f215b77f276fd8c09b9a8f636fc53b62f654bd7ea12660d45d8af19e9cc6eb5a024f086e9c8dfef81a25cc6361c3f1ff0e6738d612ce2fcfc864eb187d7f93a550397138b8b35aa4ff465f56ff147340b0dc170df0000000000030dad76198c18d1313cc877cfdffd832556357f0d4509e2a7b895c47fe891c2c7407af9c873a3595d3c015c06028675b479c67091ecb309bc3612cc4f731686381c2ab65ec1db6441cddf9cc3010837d0bc576b97ca438056094843b67304db01ef535eb34d1bd70313c5af417b80835fbcc25455b7e13aad37405651c6bc79fd506803586fdfaa7701c039c5f8471e3deb6f39743e6b08724cad55b642e6024a4ed07ac03bcaba137d397beca669c6d7d4bfe5ed62c49c92d41259b28d0bef013c2fbf0c26bca3404ffdc21f8bfa5706dbaf65c0de91bddd85a60cc0bd9b7145c12eaae3e1731ec2994d77412405d8f8c6157663aa5b2e2d45f3e3561a70d1ee9a7080730299ec0cf65406d655d9136e2bc478e94a04ccd1ba082b3f580f6f71bc0de9647358ca36c79879ea0e3680dd1df4578048053be5c66d4a76e00d449a4c6f1c1cda2bf64912581454501f001596c8cd6f03f08dd22a3c5df0092afc2c0723ae593789333f710f5d7036871b05a6462fccae790475c31fcc2ffff95c2211332d51ba4abea15c61f0328fcf3a852e6b6275d9e9cfbba7f3b8e9b48bf2c4f7ecc6b38b64e3106481eb8ac2d469a591ab2259fa9d70f04092f7379963eaac8cf183d33e744d8def4cc872c9f0a84dac84e2a360430707922486ab63072eaca10686ae355949189719ecfadeb8cd1de02426891bdb749b04f770db15d637d2db9dd12bb94ead8c4d506d24a5c9d5cc4be6d77b78d2739b26df21758cf5fe03f5148c58d8cba72897f1256b5e49f6e3ff1e39cc6070df18e74e707324633917f1a97f8c2b97faa0da365f91abec1b060b2c8452872e2e5cf78871a06c21503cde0e97ad6c8615e307aa49a3faecd1b4c2cba297ebf95173b96ad7d11490e55707024c3152232d7e3c33b1b8e308b69235de82a1684083dacc13c0b20ef4110765cb2f647e10b98c13138b832d34e1fb0d3ba23ab76665d363c33538a5992adbf01beabd1eaadfeb71c3f2b3faedb8a28dc69ebb1495c6134a684919dacd49172c56fc2a639909004fb062711b9c7c6c17a978d35c8b0f8bff9a633acb597808e89b38a3c396c81b05cbce459bfbc49997772fa53e12013a973c52a95465d6fb89ef2726793af1ff967de5fc24f2b6dc95b3f112ffe58c64c30836e69a092cd7561de0d219d7b1041dc04737889bc7e4731fd6c47f0fee1411ac25f9012c6017cb209711ed733b24b1fd5fc77980907b0157f7e1b13857d0ec33eaa2b26a5e8ec1ab3016f0b52f180c3255e607946e034b5e8395378e08f4ec86aa92c628a3030251fb5dcc5e899633e06710d10e0aa8cf323a32540ce2e4c8710395ad2961e81fbc94dac4eba5d7e2c1346bc0c09fd0211fe79936231fa20b3df3f1ad5610cad5bb185906d23622753b9bd9e9145277838fccd5133355b0f4079a16fc0d617459de5c0437409b730dea24250f34fe0ab40af43341338708adfd0367a885a7508b1b4b6e1a8ba0f08660ae1b9afdb282806c93886a814283231d294904529e58e21c61276b48fe247eaf03159e68270dfc7ca7fcae8d73b6fb8e9b5c0ebf6ea381444a90132d9c3b647ed1cac3d7f8acfea29c10e3610f6103d272ebbd778485908dafd0ad5860efc1119e49eba94d5dadfb779187cfce17677da5794a41ac5faccaebaf2c312fe32a4b18567ee12eae3087a4838bfbbb801fa581d432224be8b667dfa6b96af0ea8e1114fe817fde23b4c2537fd3155e5e41b99248fca517a6d36e503abc64a25bd6bdf5d7f964e946a8585c809989ac033535eda9cefa1bb842b3f34ae6cdbf69c37f8bc74bdd086eaffb19146a9d13ff374323c9bf3910ee259fc812dd201ff8cca0b1fd55602734162ad65f03e09feb59d07989e9e314dfd87c96f62274819134868e44e581bfb5025befbdb37bd4fdbfe1eacf6e16710fa934206a9377a97982c9d33657d259051ab0ea89a314673478b728252f99d2819b26c9154bd560a6dee9cf97dd7354193882a0afb53abc24f8f8f739521781a37b8dce916939d4ecd7aeb42e1512251f7f838f6bbf1b4540904f451a82dff8facfc79892f7c61f6d7e7e6cfb55c29e"], 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x0, 0xd7d9, @loopback}, @in={0x2, 0x4e21, @dev}], 0x4c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000001040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000140), 0x12)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(r12, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000080000000000090000000000", @ANYRES32=0x0, @ANYBLOB="ac1414bb7f000001000000002400000000000000000000000700000007130e00000000ac1414bbac1414aa7f0000010000000000"], 0x48}, 0x20040044)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x49200}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40090}, 0x20000800)
sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)
r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000053c275700400000002000000004cef0c02000000000000000000000d0000000000005f00"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800110000000000000000000000ca6c9500000000000000ffdb360734076d08000d0ba8897489c522ba66c5439753d3e0c9b47bef3c2879fc55ce1649fcc6cff6b7eddc1ae3947efadabc0399ee4099902841e1c394783c541a69c0b2af1dcd8598b5c388992876d8e7858aed8e2f5308e47d9b93e38f092f022e25a098b85645ea1b65d5b5e38355cb7d53cb83ed9d6bc2756c81b8692e12b1b572660c0d83d23e57f5ffa19bad8b1feca88786116725e92d6d6e399a37a38899d361337c02c04a0dbda849dc41b918a60e7830677446f3280ea4f0e5"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r13, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfd90}, 0x90)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000380)=0x1, 0x2a)

346.440372ms ago: executing program 2 (id=3105):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f00000002c0), &(0x7f0000000240)=r4}, 0x20)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="60000000031401000000c3e063d9df250900020073797a3100000000080041007369770014003300627269646765300000000000000000000900020073797a3200000000080041007278650014003300767863616e3100"/96], 0x60}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r8, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x963}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0)
r9 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000140)=0x1de, 0x4)
close(r9)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r9, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x80)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r9, 0x800448d3, &(0x7f00000014c0)={@none, 0x8, 0xe, 0x7f, 0x0, 0xb, "4b0f0e970375b30d6c8ccebc1134a4400b49de297a3c4197119d515bd230a5c3dca1113b0d86dbb5feb1f5e753f7876bae5c6747167e12a36627e05239316fa0eee94850f2a260369df511e7ef9569ad44d0f0c41228a4d234a63f6070db500f7035b6fdf417795734fea83c6d9bec0e8a177f1fadbf70c268d87930f11749d2"})
ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x0, 0x2e, "f42a637b0000dda5b89a02db8deea00b06ee73e9da31e2faa7a8c01332068d1962fcd5e4e4fc12d7a545aa3ed6ba"}})
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$bt_hci(r11, 0x0, 0x1, &(0x7f0000000c40)=""/3, &(0x7f0000000c80)=0x3)
sendmsg$inet(r1, 0x0, 0x4048884)

343.498774ms ago: executing program 0 (id=3106):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x2, @rand_addr=0x64010102}]}, &(0x7f0000000280)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x200, 0xd78e, 0x0, 0x0, 0x0, 0x7}, 0x9c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="110000004200015b"], 0x18}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x5502000000000000}, 0x4000)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r9, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r8, &(0x7f0000000080)={0x1d, r9, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x8}, 0x3c)

260.37421ms ago: executing program 1 (id=3107):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xe4, 0x3, 0xa, 0x301, 0x7000, 0x1000000, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_USERDATA={0xae, 0xc, "e2eabff3803e42c697385bb747244f4125590186360e8ed33d17c35b30ebc2911efdfd4c02dee1cf9344849bcd9eefd72176dbbd310d5a67a500cebaef221a9ba8df5942ca577c1dbc708e3be5f3a70592e2ba8635e9325988c8fcc462c0216d8ea2dbd0ee4d3d16cc719a9ce891b22316e6e8690f06bff3d4b968bdf2a4dbea429a18c90b83215c0ed48c5dbd9414d432cdc2b853481a73d2fec430864372b4c8841372b05cc4d45025"}]}], {0x14}}, 0x12c}, 0x1, 0x1000000}, 0x0)

259.655363ms ago: executing program 1 (id=3108):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
listen(r2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)
shutdown(r2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000005c0)={'gretap0\x00', <r6=>0x0, 0x8, 0x700, 0x8001, 0x5, {{0x32, 0x4, 0x0, 0x3a, 0xc8, 0x64, 0x0, 0x3, 0x2, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x44, 0x75, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}, {@broadcast, 0x5b}, {@private=0xa010101, 0x5}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xfffffffe}, {@multicast1, 0xa00}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @end, @rr={0x7, 0x13, 0xe4, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}, @generic={0x86, 0x3, 'v'}, @timestamp_addr={0x44, 0x3c, 0x8b, 0x1, 0xc, [{@multicast2, 0x1}, {@multicast1, 0x4}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x1}, {@broadcast, 0x5}, {@broadcast, 0x149fea77}]}, @ssrr={0x89, 0x17, 0x5b, [@private=0xa010102, @multicast1, @remote, @multicast2, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x5, 0x4, 0x9, 0x59, 0x1})
r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, <r8=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r8, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x6, 0xbc, &(0x7f0000000480)=""/188, 0x41000, 0x46, '\x00', r6, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xb, 0xdd, 0x9}, 0x10, r8, r3, 0x0, &(0x7f0000000780)=[r4, r1, r4, r4, r4, r4, r4], 0x0, 0x10, 0x48}, 0x94)
ppoll(&(0x7f0000000080)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
r10 = socket(0x10, 0x3, 0x0)
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x800000, 0x0, 0xffffffff}, 0x20, 0x0, 0x7, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x0, {0x200}}}}]}, 0x78}}, 0x4080)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x13, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0)

169.615668ms ago: executing program 2 (id=3109):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="09000000070000002a00000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000ffffffb703000008000000b704000000000000850000000100000095ed06ac30c40af618e9aef3512be76e09b064"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="77f400000000"], 0x18}}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10)
write(r4, &(0x7f0000000000)='$\x00\x00\x00', 0x4)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r5 = accept4(r3, 0x0, 0x0, 0x800)
recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000f40)={'syztnl2\x00', <r6=>0x0, 0x700, 0x1, 0x1, 0x3, {{0x14, 0x4, 0x3, 0x8, 0x50, 0x67, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @local, {[@timestamp_addr={0x44, 0xc, 0x6c, 0x1, 0x4, [{@broadcast, 0x2}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0xe4, [@loopback, @rand_addr=0x64010102, @local, @rand_addr=0x64010100, @multicast1, @rand_addr=0x64010102, @empty]}, @generic={0x94, 0xd, "e95dd948662c31eafa9470"}]}}}}})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0)
mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r7, 0x5c2a7000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x40010, 0xffffffffffffffff, 0xac9d4000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r4, 0x1c814000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000000fc0)={'syztnl2\x00', r6, 0x8, 0x8, 0x5, 0x3, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x7e, 0x3, 0x1, [{@loopback, 0x10000000}, {@multicast1, 0xf49}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}]}}}}})
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="f72cc1579abcf88c173f11174ea72f90615c1c1a86401d1855ac18e237f32ee821", 0x21}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0x2000300, 0x22, 0x0, &(0x7f0000000300)="63ffed8e46dc3f0a7f562b27f4cb9df90dfac8a4ac18e9dbff544ec2d9d873a31301", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)

79.533778ms ago: executing program 0 (id=3110):
r0 = socket(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x80000)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894)
socket(0x10, 0x803, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, &(0x7f0000000080)=0xa, 0x4)

0s ago: executing program 2 (id=3111):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r12=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r12], 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r9, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r11, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044010}, 0xa000)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r15 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r15], 0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

1074025676
[  153.629790][T10838] tap0: owner set to 0
[  153.817057][T10851] tc_dump_action: action bad kind
[  153.956142][T10868] wlan1 speed is unknown, defaulting to 1000
[  154.065784][T10868] vxcan1 speed is unknown, defaulting to 1000
[  154.442989][T10899] __nla_validate_parse: 6 callbacks suppressed
[  154.442998][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'.
[  154.493602][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1358'.
[  154.524693][T10915] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  154.549603][T10917] 8021q: adding VLAN 0 to HW filter on device bond10
[  154.563977][T10917] vlan3: entered promiscuous mode
[  154.565592][T10917] bond10: entered promiscuous mode
[  154.567313][T10917] vlan3: entered allmulticast mode
[  154.569577][T10917] bond10: entered allmulticast mode
[  154.579887][T10917] bond10: (slave gretap1): making interface the new active one
[  154.583121][T10917] gretap1: entered promiscuous mode
[  154.585191][T10917] gretap1: entered allmulticast mode
[  154.588430][T10917] bond10: (slave gretap1): Enslaving as an active interface with an up link
[  154.811033][T10927] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1363'.
[  154.897314][T10931] IPv6: sit1: Disabled Multicast RS
[  155.117910][T10933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  155.334946][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1368'.
[  155.404662][T10946] wlan1 speed is unknown, defaulting to 1000
[  155.502449][T10958] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  155.528408][T10946] vxcan1 speed is unknown, defaulting to 1000
[  156.015290][T10983] tipc: Resetting bearer <eth:syzkaller0>
[  156.734531][T11024] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1382'.
[  156.739151][T11015] nbd1: detected capacity change from 0 to 127
[  156.747238][T10056] block nbd1: Receive control failed (result -32)
[  156.751815][T10987] block nbd1: Dead connection, failed to find a fallback
[  156.754180][T10987] block nbd1: shutting down sockets
[  156.755962][T10987] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  156.761280][T10987] Buffer I/O error on dev nbd1, logical block 0, async page read
[  156.761381][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'.
[  156.764039][T10987] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  156.764062][T10987] Buffer I/O error on dev nbd1, logical block 1, async page read
[  156.764115][T10987] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  156.764134][T10987] Buffer I/O error on dev nbd1, logical block 2, async page read
[  156.764184][T10987] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  156.764193][T10987] Buffer I/O error on dev nbd1, logical block 3, async page read
[  156.764264][T10987] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  156.764273][T10987] Buffer I/O error on dev nbd1, logical block 0, async page read
[  156.764323][T10987] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  156.764331][T10987] Buffer I/O error on dev nbd1, logical block 1, async page read
[  156.764380][T10987] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  156.764389][T10987] Buffer I/O error on dev nbd1, logical block 2, async page read
[  156.764438][T10987] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  156.764447][T10987] Buffer I/O error on dev nbd1, logical block 3, async page read
[  156.764501][T10987] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  156.764509][T10987] Buffer I/O error on dev nbd1, logical block 0, async page read
[  156.764559][T10987] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  156.764567][T10987] Buffer I/O error on dev nbd1, logical block 1, async page read
[  156.766588][T10987] ldm_validate_partition_table(): Disk read failed.
[  156.823487][T11029] 8021q: adding VLAN 0 to HW filter on device bond11
[  156.835906][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1383'.
[  156.836701][T10987] Dev nbd1: unable to read RDB block 0
[  156.844595][T11030] bond11: (slave veth9): Enslaving as an active interface with a down link
[  156.848578][T10987]  nbd1: unable to read partition table
[  156.865616][T10987] ldm_validate_partition_table(): Disk read failed.
[  156.874169][T10987] Dev nbd1: unable to read RDB block 0
[  156.877629][T10987]  nbd1: unable to read partition table
[  156.904769][T11042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1385'.
[  156.935131][T11030] wlan1 speed is unknown, defaulting to 1000
[  157.104951][T11048] wlan1 speed is unknown, defaulting to 1000
[  157.107742][T11030] vxcan1 speed is unknown, defaulting to 1000
[  157.451530][T11048] vxcan1 speed is unknown, defaulting to 1000
[  158.085292][T11103] validate_nla: 29 callbacks suppressed
[  158.085302][T11103] netlink: 'syz.1.1392': attribute type 1 has an invalid length.
[  158.092325][T11103] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1392'.
[  158.205961][T11112] bridge8: entered promiscuous mode
[  158.210128][T11112] bridge8: entered allmulticast mode
[  158.218500][T11112] team0: Device bridge8 is of different type
[  158.335113][T11124] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.354507][T11126] netlink: 'syz.2.1398': attribute type 13 has an invalid length.
[  158.357933][T11126] netlink: 'syz.2.1398': attribute type 17 has an invalid length.
[  158.368191][T11126] erspan0: left allmulticast mode
[  158.396570][T11126] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.403448][T11126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.411606][T11131] vlan0: entered promiscuous mode
[  158.413537][T11131] team0: Device vlan0 is of different type
[  158.427532][ T5310] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  158.452892][T11136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1401'.
[  158.460800][T11138] netlink: 'syz.2.1402': attribute type 1 has an invalid length.
[  158.679067][ T5310] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  159.082603][T11195] netlink: 'syz.0.1414': attribute type 1 has an invalid length.
[  159.106580][T11195] 8021q: adding VLAN 0 to HW filter on device bond11
[  159.124015][T11195] vlan2: entered promiscuous mode
[  159.126014][T11195] bond11: entered promiscuous mode
[  159.128170][T11195] vlan2: entered allmulticast mode
[  159.130742][T11195] bond11: entered allmulticast mode
[  159.188074][T11205] rdma_rxe: rxe_newlink: failed to add lo
[  159.191241][T11204] rdma_rxe: rxe_newlink: failed to add lo
[  159.206771][T11205] 8021q: adding VLAN 0 to HW filter on device team0
[  159.211419][T11205] tipc: Resetting bearer <eth:team0>
[  159.213349][T11205] tipc: Resetting bearer <eth:team0>
[  159.216266][T11205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  159.321667][T11226] netlink: 'syz.0.1426': attribute type 1 has an invalid length.
[  159.541835][T11245] __nla_validate_parse: 12 callbacks suppressed
[  159.541851][T11245] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1432'.
[  159.571341][T11247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1434'.
[  159.674129][T11255] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1436'.
[  159.743541][T11264] netlink: 'syz.1.1438': attribute type 12 has an invalid length.
[  159.796906][T11275] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1440'.
[  159.802268][T11275] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1440'.
[  159.806003][T11275] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1440'.
[  159.910702][T11288] netlink: 'syz.2.1442': attribute type 1 has an invalid length.
[  159.923914][T11290] erspan0: left allmulticast mode
[  159.927215][T11288] netlink: 'syz.2.1442': attribute type 1 has an invalid length.
[  159.936420][T11290] erspan0: left promiscuous mode
[  159.943343][T11290] bridge0: port 1(erspan0) entered disabled state
[  159.960545][T11290] tipc: Resetting bearer <eth:team0>
[  159.964334][T11290] bond0: (slave wlan0): Releasing active interface
[  159.971913][T11290] bond3: (slave gretap1): Releasing active interface
[  159.981196][T11290] bond5: (slave bridge3): Releasing active interface
[  159.984261][T11290] bond5: (slave bridge3): the permanent HWaddr of slave - e6:8a:3f:19:4c:4f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  159.995541][T11290] bond5: (slave bridge4): Releasing active interface
[  160.000563][T11290] team0: Port device sit2 removed
[  160.003654][T11290] bond7: (slave veth7): Releasing active interface
[  160.008513][T11290] bond9: (slave gretap2): Releasing active interface
[  160.011358][T11290] gretap2: left promiscuous mode
[  160.013099][T11290] gretap2: left allmulticast mode
[  160.020457][T11290] bond11: (slave veth9): Releasing active interface
[  160.040972][T11290] team0: Failed to send options change via netlink (err -105)
[  160.043513][T11290] team0: Mode changed to "activebackup"
[  160.048409][T11295] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1444'.
[  160.053894][T11295] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1444'.
[  160.057203][T11295] netlink: 'syz.2.1444': attribute type 6 has an invalid length.
[  160.061308][T11295] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1444'.
[  160.108543][T11301] ip6tnl2: entered promiscuous mode
[  160.111189][T11301] ip6tnl2: entered allmulticast mode
[  160.146670][T11303] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1447'.
[  160.433004][T11309] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.492738][T11309] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.501325][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  160.505016][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.393758][T11350] wlan1 speed is unknown, defaulting to 1000
[  161.498012][T11355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  161.859178][T11350] vxcan1 speed is unknown, defaulting to 1000
[  162.565993][T11408] 8021q: adding VLAN 0 to HW filter on device bond12
[  162.851302][T11435] xt_policy: too many policy elements
[  163.483814][T11441] validate_nla: 4 callbacks suppressed
[  163.483829][T11441] netlink: 'syz.0.1481': attribute type 6 has an invalid length.
[  163.501248][T11441] syzkaller1: entered promiscuous mode
[  163.504317][T11441] syzkaller1: entered allmulticast mode
[  163.615747][T11449] ipvlan0: entered promiscuous mode
[  163.626967][T11449] syzkaller1: entered promiscuous mode
[  163.628840][T11449] syzkaller1: entered allmulticast mode
[  164.053865][T11470] sctp: [Deprecated]: syz.1.1489 (pid 11470) Use of int in maxseg socket option.
[  164.053865][T11470] Use struct sctp_assoc_value instead
[  164.307535][T11499] openvswitch: netlink: Flow key attr not present in new flow.
[  164.363067][T11502] wlan1 speed is unknown, defaulting to 1000
[  164.457326][T11502] vxcan1 speed is unknown, defaulting to 1000
[  164.696337][T11520] __nla_validate_parse: 14 callbacks suppressed
[  164.696424][T11520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1504'.
[  164.742870][T11524] netlink: 'syz.1.1505': attribute type 1 has an invalid length.
[  164.745576][T11524] netlink: 'syz.1.1505': attribute type 4 has an invalid length.
[  164.748187][T11524] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1505'.
[  164.887363][T11538] delete_channel: no stack
[  164.945372][T11544] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.1512'.
[  164.973212][T11546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1513'.
[  164.989965][T11549] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  164.993255][T11551] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1515'.
[  165.010588][T11550] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  165.054683][T11562] netlink: 'syz.2.1519': attribute type 2 has an invalid length.
[  165.066554][T11562] k*: entered promiscuous mode
[  165.119478][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  165.127491][T11562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  165.144072][T11562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1519'.
[  165.240484][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  165.441952][T11590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1527'.
[  165.445165][T11590] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1527'.
[  165.547410][T11597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1530'.
[  165.876226][T11614] netlink: 'syz.2.1534': attribute type 4 has an invalid length.
[  165.879923][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'.
[  165.884574][T11614] netlink: 'syz.2.1534': attribute type 6 has an invalid length.
[  166.291899][T11626] syzkaller0: entered promiscuous mode
[  166.296270][T11626] syzkaller0: entered allmulticast mode
[  166.309217][T11629] netlink: 'syz.1.1539': attribute type 178 has an invalid length.
[  166.315924][T11630] netlink: 'syz.1.1539': attribute type 10 has an invalid length.
[  166.319442][T11629] netlink: 'syz.1.1539': attribute type 10 has an invalid length.
[  166.322647][T11630] tipc: Resetting bearer <eth:team0>
[  166.480463][T11647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  166.509348][ T5310] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  166.593954][T11657] netlink: 'syz.2.1546': attribute type 10 has an invalid length.
[  166.702322][T11664] wlan1 speed is unknown, defaulting to 1000
[  166.821953][T11664] vxcan1 speed is unknown, defaulting to 1000
[  167.269403][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  167.690364][   T25] block nbd0: Possible stuck request ffff8880225d0000: control (read@0,1024B). Runtime 30 seconds
[  167.695246][   T25] block nbd0: Possible stuck request ffff8880225d0200: control (read@1024,1024B). Runtime 30 seconds
[  167.700297][   T25] block nbd0: Possible stuck request ffff8880225d0400: control (read@2048,1024B). Runtime 30 seconds
[  167.704784][   T25] block nbd0: Possible stuck request ffff8880225d0600: control (read@3072,1024B). Runtime 30 seconds
[  167.880110][T11702] vxcan5: entered allmulticast mode
[  167.889464][T11700] wlan1 speed is unknown, defaulting to 1000
[  167.939343][T11704] batadv1: entered promiscuous mode
[  167.941124][T11704] batadv1: entered allmulticast mode
[  167.946513][T11707] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  167.984065][T11708] macsec2: entered promiscuous mode
[  167.986254][T11708] macsec0: entered promiscuous mode
[  167.995958][T11708] macsec2: entered allmulticast mode
[  167.997858][T11708] macsec0: entered allmulticast mode
[  168.116247][T11700] vxcan1 speed is unknown, defaulting to 1000
[  168.152892][T11714] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  168.156103][T11714] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  168.381506][T11723] pim6reg1: entered promiscuous mode
[  168.385684][T11723] pim6reg1: entered allmulticast mode
[  168.512154][T11723] 8021q: adding VLAN 0 to HW filter on device bond8
[  168.515176][T11723] team0: Port device bond8 added
[  168.691995][T11742] delete_channel: no stack
[  169.173439][T11780] validate_nla: 1 callbacks suppressed
[  169.173448][T11780] netlink: 'syz.2.1583': attribute type 3 has an invalid length.
[  169.180182][T11780] netlink: 'syz.2.1583': attribute type 3 has an invalid length.
[  170.020236][T11787] __nla_validate_parse: 14 callbacks suppressed
[  170.020246][T11787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1585'.
[  170.053683][T11790] syzkaller0: entered promiscuous mode
[  170.055574][T11790] syzkaller0: entered allmulticast mode
[  170.156943][T11805] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  170.159390][T11806] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1591'.
[  170.165381][T11805] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  170.169252][T11805] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  170.179400][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1591'.
[  170.318555][T11819] wlan1 speed is unknown, defaulting to 1000
[  170.337751][T11817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1594'.
[  170.446574][T11819] vxcan1 speed is unknown, defaulting to 1000
[  170.628988][T11834] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1598'.
[  170.634871][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'.
[  170.957628][T11846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1602'.
[  171.251970][T11856] netlink: 'syz.1.1604': attribute type 6 has an invalid length.
[  171.367922][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'.
[  171.552427][T11884] netlink: 'syz.1.1609': attribute type 28 has an invalid length.
[  171.573479][T11887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1610'.
[  171.657618][T11889] netlink: 'syz.0.1610': attribute type 10 has an invalid length.
[  171.684868][T11892] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1611'.
[  171.694933][T11892] openvswitch: netlink: Flow key attr not present in new flow.
[  171.703042][T11889] dummy0: entered promiscuous mode
[  171.713472][T11889] team0: Port device dummy0 added
[  172.303802][T11929] IPVS: stopping backup sync thread 7077 ...
[  172.511178][T11946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.514939][T11946] syzkaller0: entered promiscuous mode
[  172.516856][T11946] syzkaller0: entered allmulticast mode
[  172.528987][T11946] tipc: Resetting bearer <eth:syzkaller0>
[  172.534258][T11945] tipc: Resetting bearer <eth:syzkaller0>
[  172.549348][T11945] tipc: Disabling bearer <eth:syzkaller0>
[  173.360661][T12021] netlink: 'syz.1.1629': attribute type 58 has an invalid length.
[  173.381749][T12024] netlink: 'syz.2.1630': attribute type 1 has an invalid length.
[  173.397618][T12024] 8021q: adding VLAN 0 to HW filter on device bond9
[  173.408623][T12024] bond9: (slave gretap5): making interface the new active one
[  173.412644][T12024] bond9: (slave gretap5): Enslaving as an active interface with an up link
[  173.428878][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  173.698258][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.703313][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.713027][T12058] netlink: 'syz.0.1640': attribute type 12 has an invalid length.
[  173.724191][T12055] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  173.727924][T12055] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  173.806602][T12067] IPVS: Scheduler module ip_vs_sip not found
[  173.892345][T12073] ip6gre2: entered allmulticast mode
[  174.040299][T12077] netlink: 'syz.0.1646': attribute type 2 has an invalid length.
[  174.101335][T12084] netlink: 'syz.0.1646': attribute type 11 has an invalid length.
[  174.535561][T12122] sctp: [Deprecated]: syz.0.1659 (pid 12122) Use of int in max_burst socket option deprecated.
[  174.535561][T12122] Use struct sctp_assoc_value instead
[  174.558168][T12122] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20001
[  174.666836][T12130] validate_nla: 2 callbacks suppressed
[  174.666846][T12130] netlink: 'syz.0.1662': attribute type 1 has an invalid length.
[  174.687367][T12130] 8021q: adding VLAN 0 to HW filter on device bond13
[  174.698461][T12130] bond13: (slave ip6gretap4): making interface the new active one
[  174.703697][T12130] bond13: (slave ip6gretap4): Enslaving as an active interface with an up link
[  174.717984][T12135] netlink: 'syz.1.1664': attribute type 12 has an invalid length.
[  174.718236][T12130] veth9: entered promiscuous mode
[  174.726501][T12130] bond13: (slave veth9): Enslaving as an active interface with a down link
[  174.735398][T12130] erspan0: entered allmulticast mode
[  174.748265][T12130] bond13: (slave erspan0): Enslaving as an active interface with an up link
[  174.925670][T12149] wlan1 speed is unknown, defaulting to 1000
[  174.973478][T12157] pim6reg: entered allmulticast mode
[  175.053392][T12164] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.063473][T12164] __nla_validate_parse: 24 callbacks suppressed
[  175.063483][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'.
[  175.086363][T12149] vxcan1 speed is unknown, defaulting to 1000
[  175.094720][T12166] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1674'.
[  175.126659][T12168] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  175.138811][T12169] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  175.168404][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'.
[  175.279675][T12176] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1679'.
[  175.288872][T12176] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1679'.
[  175.377940][T12180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1680'.
[  175.389438][T12180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1680'.
[  175.392627][T12180] openvswitch: netlink: Flow key attr not present in new flow.
[  175.421264][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1683'.
[  175.452963][T12192] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1682'.
[  175.576358][T12202] netlink: 'syz.0.1686': attribute type 1 has an invalid length.
[  175.581440][T12202] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  176.344855][T12195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  176.388983][T12215] 8021q: adding VLAN 0 to HW filter on device bond14
[  176.442883][T12221] vxcan6: entered promiscuous mode
[  176.584618][T12241] tipc: Resetting bearer <eth:gre0>
[  176.624431][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1699'.
[  176.829083][T12273] tipc: Bearer <udp:sy{>: already 2 bearers with priority 10
[  176.839119][T12273] tipc: Bearer <udp:sy{>: trying with adjusted priority
[  176.842073][T12273] tipc: Enabling of bearer <udp:sy{> rejected, max 3 bearers permitted
[  176.936608][T12283] netlink: 'syz.1.1709': attribute type 16 has an invalid length.
[  176.939441][T12283] netlink: 'syz.1.1709': attribute type 17 has an invalid length.
[  176.944361][T12283] tipc: Resetting bearer <eth:gre0>
[  176.984692][T12283] tipc: Resetting bearer <eth:syzkaller0>
[  176.991211][T12284] IPv6: NLM_F_REPLACE set, but no existing node found!
[  176.996341][T12283] bridge0: left promiscuous mode
[  177.024128][T12283] macsec0: left allmulticast mode
[  177.026539][T12283] macsec0: left promiscuous mode
[  177.853702][T12296] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  177.968595][T12307] smc: net device bond0 applied user defined pnetid SYZ2
[  178.260877][T12342] netlink: 'syz.1.1730': attribute type 23 has an invalid length.
[  178.281428][T12344] netlink: 'syz.0.1731': attribute type 10 has an invalid length.
[  178.310081][T12347] netlink: 'syz.0.1732': attribute type 1 has an invalid length.
[  178.313309][T12347] netlink: 'syz.0.1732': attribute type 1 has an invalid length.
[  178.345802][T12351] : left promiscuous mode
[  178.372335][T12347] netlink: 'syz.0.1732': attribute type 1 has an invalid length.
[  178.386391][T12347] 8021q: adding VLAN 0 to HW filter on device bond15
[  178.392720][T12347] bond15: (slave wlan0): Enslaving as an active interface with a down link
[  178.399723][T12347] vlan0: entered allmulticast mode
[  178.401500][T12347] veth1: entered allmulticast mode
[  178.403741][T12347] bond15: (slave vlan0): Opening slave failed
[  178.704921][T12376] wlan1 speed is unknown, defaulting to 1000
[  178.784668][T12376] vxcan1 speed is unknown, defaulting to 1000
[  178.934839][T12379] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  178.937324][T12379] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  178.941792][T12379] tipc: Resetting bearer <eth:syzkaller0>
[  179.032228][T12384] wlan1 speed is unknown, defaulting to 1000
[  179.214096][T12384] vxcan1 speed is unknown, defaulting to 1000
[  179.895428][T12435] netlink: 'syz.1.1756': attribute type 2 has an invalid length.
[  179.969437][T12441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.028601][T12451] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.033412][T12451] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  180.035994][T12451] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  180.048770][T12451] tipc: Resetting bearer <eth:syzkaller0>
[  180.136646][T12456] __nla_validate_parse: 22 callbacks suppressed
[  180.136655][T12456] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1763'.
[  180.197659][T12461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1764'.
[  180.246788][T12466] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1765'.
[  180.401551][T12479] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  180.469015][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  180.629235][ T5233] Bluetooth: hci1: command 0x0406 tx timeout
[  181.137866][T12507] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1774'.
[  181.159306][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1773'.
[  181.184168][T12511] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1775'.
[  181.187346][T12511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1775'.
[  181.295608][T12520] tipc: Resetting bearer <eth:syzkaller0>
[  181.305251][T12520] bond0: left promiscuous mode
[  181.307617][T12520] veth7: left promiscuous mode
[  181.309894][T12520] macsec1: left promiscuous mode
[  181.311878][T12520] vlan3: left promiscuous mode
[  181.313707][T12520] bond9: left promiscuous mode
[  181.315459][T12520] vlan3: left allmulticast mode
[  181.317499][T12520] bond9: left allmulticast mode
[  181.321354][T12520] bond10: left promiscuous mode
[  181.324178][T12520] ipvlan0: left promiscuous mode
[  181.326243][T12520] macsec2: left promiscuous mode
[  181.328134][T12520] macsec2: left allmulticast mode
[  181.444723][T12523] wlan1 speed is unknown, defaulting to 1000
[  181.527377][T12523] vxcan1 speed is unknown, defaulting to 1000
[  181.591887][T12524] netlink: 'syz.1.1778': attribute type 2 has an invalid length.
[  181.707074][T12528] syzkaller1: entered promiscuous mode
[  181.709264][T12528] syzkaller1: entered allmulticast mode
[  181.741058][T12528] wlan1 speed is unknown, defaulting to 1000
[  181.849702][T12528] vxcan1 speed is unknown, defaulting to 1000
[  182.024042][T12531] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1780'.
[  182.027963][T12531] netlink: zone id is out of range
[  182.031999][T12531] netlink: zone id is out of range
[  182.033774][T12531] netlink: zone id is out of range
[  182.035501][T12531] netlink: get zone limit has 8 unknown bytes
[  182.118296][T12533] GUP no longer grows the stack in syz.0.1781 (12533): 200000003000-20000000a000 (200000001000)
[  182.122893][T12533] CPU: 1 UID: 0 PID: 12533 Comm: syz.0.1781 Not tainted syzkaller #0 PREEMPT(full) 
[  182.122905][T12533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  182.122909][T12533] Call Trace:
[  182.122913][T12533]  <TASK>
[  182.122916][T12533]  dump_stack_lvl+0x189/0x250
[  182.122931][T12533]  ? __pfx_dump_stack_lvl+0x10/0x10
[  182.122939][T12533]  ? __pfx__printk+0x10/0x10
[  182.122947][T12533]  ? find_vma+0xe7/0x160
[  182.122963][T12533]  ? __lock_acquire+0xab9/0xd20
[  182.122978][T12533]  __get_user_pages+0x24d0/0x2ce0
[  182.122988][T12533]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  182.123007][T12533]  ? rcu_is_watching+0x15/0xb0
[  182.123018][T12533]  __gup_longterm_locked+0xde9/0x1660
[  182.123031][T12533]  ? sanity_check_pinned_pages+0x123a/0x1300
[  182.123044][T12533]  gup_fast_fallback+0x1e6a/0x2010
[  182.123064][T12533]  ? __pfx_gup_fast_fallback+0x10/0x10
[  182.123078][T12533]  ? pin_user_pages_fast+0x4d/0xb0
[  182.123088][T12533]  iov_iter_extract_pages+0x35a/0x5e0
[  182.123100][T12533]  extract_iter_to_sg+0xe46/0x24e0
[  182.123112][T12533]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  182.123129][T12533]  ? __asan_memset+0x22/0x50
[  182.123137][T12533]  af_alg_get_rsgl+0x436/0x810
[  182.123152][T12533]  aead_recvmsg+0x4cc/0x13f0
[  182.123169][T12533]  ? __pfx_aead_recvmsg+0x10/0x10
[  182.123179][T12533]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  182.123187][T12533]  ? __pfx_aead_recvmsg+0x10/0x10
[  182.123197][T12533]  sock_recvmsg_nosec+0x186/0x1c0
[  182.123210][T12533]  ____sys_recvmsg+0x3aa/0x460
[  182.123221][T12533]  ? __pfx_____sys_recvmsg+0x10/0x10
[  182.123235][T12533]  ? import_iovec+0x74/0xa0
[  182.123244][T12533]  ___sys_recvmsg+0x1b5/0x510
[  182.123254][T12533]  ? __pfx____sys_recvmsg+0x10/0x10
[  182.123274][T12533]  ? __might_fault+0xb0/0x130
[  182.123284][T12533]  do_recvmmsg+0x307/0x770
[  182.123296][T12533]  ? __pfx_do_recvmmsg+0x10/0x10
[  182.123302][T12533]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  182.123319][T12533]  ? __pfx_do_futex+0x10/0x10
[  182.123334][T12533]  __x64_sys_recvmmsg+0x190/0x240
[  182.123344][T12533]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  182.123352][T12533]  ? rcu_is_watching+0x15/0xb0
[  182.123361][T12533]  ? do_syscall_64+0xbe/0x3b0
[  182.123371][T12533]  do_syscall_64+0xfa/0x3b0
[  182.123377][T12533]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.123384][T12533]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.123391][T12533]  ? exc_page_fault+0x9f/0xf0
[  182.123398][T12533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.123405][T12533] RIP: 0033:0x7f143c98ebe9
[  182.123412][T12533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.123418][T12533] RSP: 002b:00007f143d830038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  182.123427][T12533] RAX: ffffffffffffffda RBX: 00007f143cbc5fa0 RCX: 00007f143c98ebe9
[  182.123432][T12533] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000009
[  182.123436][T12533] RBP: 00007f143ca11e19 R08: 0000000000000000 R09: 0000000000000000
[  182.123440][T12533] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  182.123445][T12533] R13: 00007f143cbc6038 R14: 00007f143cbc5fa0 R15: 00007fff4e7eb1c8
[  182.123456][T12533]  </TASK>
[  182.277788][T12537] netlink: 'syz.0.1782': attribute type 1 has an invalid length.
[  182.310077][T12537] veth13: entered promiscuous mode
[  182.314294][T12537] bond16: (slave veth13): Enslaving as a backup interface with a down link
[  182.322934][T12537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1782'.
[  182.330124][T12537] 8021q: adding VLAN 0 to HW filter on device bond16
[  182.371282][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1785'.
[  182.518438][T12552] netlink: 'syz.1.1787': attribute type 13 has an invalid length.
[  182.521411][T12552] netlink: 'syz.1.1787': attribute type 17 has an invalid length.
[  182.586707][T12552] 8021q: adding VLAN 0 to HW filter on device team0
[  182.599432][T12552] tipc: Resetting bearer <eth:team0>
[  182.608516][T12552] tipc: Resetting bearer <eth:team0>
[  182.637433][T12552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  182.657230][T12555] wlan1 speed is unknown, defaulting to 1000
[  182.758879][T12555] vxcan1 speed is unknown, defaulting to 1000
[  183.881381][ T5901] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  183.884406][ T5901] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  183.887189][ T5901] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  183.900070][ T5901] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  184.001401][T12589] wlan1 speed is unknown, defaulting to 1000
[  184.091165][T12583] netlink: 'syz.0.1795': attribute type 1 has an invalid length.
[  184.094159][T12583] netlink: 'syz.0.1795': attribute type 1 has an invalid length.
[  184.434655][T12601] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  184.461463][T12589] vxcan1 speed is unknown, defaulting to 1000
[  184.891811][T12626] wlan1 speed is unknown, defaulting to 1000
[  185.136785][T12626] vxcan1 speed is unknown, defaulting to 1000
[  185.214197][T12657] netlink: 'syz.2.1816': attribute type 12 has an invalid length.
[  185.291134][T12659] netlink: zone id is out of range
[  185.292883][T12659] netlink: zone id is out of range
[  185.294583][T12659] netlink: zone id is out of range
[  185.296275][T12659] netlink: zone id is out of range
[  185.298088][T12659] netlink: zone id is out of range
[  185.300024][T12659] netlink: zone id is out of range
[  185.303750][T12659] netlink: zone id is out of range
[  185.309763][T12659] netlink: zone id is out of range
[  185.311766][T12659] netlink: zone id is out of range
[  185.339641][T12659] netlink: zone id is out of range
[  185.387598][T12662] __nla_validate_parse: 12 callbacks suppressed
[  185.387607][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1818'.
[  185.396006][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1818'.
[  185.448067][T12670] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1821'.
[  185.685937][T12691] netlink: 'syz.0.1828': attribute type 1 has an invalid length.
[  185.974669][T12709] bond1: left allmulticast mode
[  185.978400][T12709] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[  185.981379][T12709] macsec1: left allmulticast mode
[  185.996430][T12709] vti0: left allmulticast mode
[  186.005754][T12709] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  186.018380][T12709] ip6gre1: left allmulticast mode
[  186.022530][T12709] vlan0: left allmulticast mode
[  186.024293][T12709] hsr_slave_1: left allmulticast mode
[  186.031156][T12709] bridge6: left allmulticast mode
[  186.037832][T12709] ip6tnl2: left promiscuous mode
[  186.039751][T12709] ip6tnl2: left allmulticast mode
[  186.066218][   T52] vxcan1 speed is unknown, defaulting to 1000
[  186.069206][T12719] syzkaller1: entered promiscuous mode
[  186.070049][   T52] syz2: Port: 1 Link DOWN
[  186.071604][T12719] syzkaller1: entered allmulticast mode
[  186.076346][ T5691] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.090983][ T5691] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.093934][ T5691] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.097107][ T5691] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.106249][   T52] vxcan1 speed is unknown, defaulting to 1000
[  186.124118][ T5691] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.126948][ T5691] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.130853][ T5691] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.134272][ T5691] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.141235][T12726] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.145156][T12724] netlink: 'syz.0.1836': attribute type 1 has an invalid length.
[  186.145206][T12726] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  186.151670][T12726] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  186.183673][T12726] tipc: Resetting bearer <eth:syzkaller0>
[  186.265068][T12740] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  186.351706][T12753] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1843'.
[  186.371123][T12756] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  186.440590][T12764] netlink: 'syz.2.1847': attribute type 29 has an invalid length.
[  186.460916][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1848'.
[  186.472519][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1849'.
[  186.592571][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1853'.
[  186.681706][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1854'.
[  186.688230][T12793] geneve2: entered promiscuous mode
[  186.694319][T10551] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.697210][T10551] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.702030][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'.
[  186.705833][T10551] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.709619][T10551] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.715038][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'.
[  186.818920][T12798] netlink: 'syz.1.1856': attribute type 5 has an invalid length.
[  186.827181][T12798] geneve3: entered promiscuous mode
[  186.832018][T12798] geneve3: entered allmulticast mode
[  186.839403][T10551] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  186.842606][T10551] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  186.847517][T10551] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  186.852831][T10551] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  186.858627][T12803] wlan1 speed is unknown, defaulting to 1000
[  186.951642][T12803] vxcan1 speed is unknown, defaulting to 1000
[  186.954046][T12811] x9: renamed from bridge_slave_0
[  187.964916][T12838] vlan0: entered allmulticast mode
[  187.966949][T12838] gretap0: entered allmulticast mode
[  188.203776][T12854] netlink: 'syz.0.1869': attribute type 1 has an invalid length.
[  188.302976][T12864] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  188.307663][T12864] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  188.410045][T12875] netlink: 'syz.0.1877': attribute type 1 has an invalid length.
[  188.412771][T12876] netlink: 'syz.0.1877': attribute type 1 has an invalid length.
[  189.141992][T12932] Bluetooth: MGMT ver 1.23
[  189.182370][T12931] netlink: 'syz.1.1895': attribute type 12 has an invalid length.
[  189.686239][T12969] netlink: 'syz.0.1905': attribute type 4 has an invalid length.
[  189.694322][T12969] : renamed from bond0 (while UP)
[  190.470025][T12994] netlink: 'syz.2.1914': attribute type 10 has an invalid length.
[  190.473478][T12994] bond0: (slave wlan1): refused to change device type
[  190.484173][T12997] __nla_validate_parse: 21 callbacks suppressed
[  190.484182][T12997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1915'.
[  190.498293][T12997] dummy0: left promiscuous mode
[  190.502726][T12997] team0: Port device dummy0 removed
[  190.505380][T12997] batman_adv: batadv0: Adding interface: dummy0
[  190.507616][T12997] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  190.517175][T12997] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  190.534640][T12997] batman_adv: batadv0: Adding interface: ip6gretap5
[  190.536914][T12997] batman_adv: batadv0: The MTU of interface ip6gretap5 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  190.545689][T12997] batman_adv: batadv0: Interface activated: ip6gretap5
[  190.838541][T13032] netlink: 'syz.0.1925': attribute type 4 has an invalid length.
[  190.874543][T13036] bond13: (slave erspan0): Releasing active interface
[  190.876794][T13036] ip6gretap4: entered promiscuous mode
[  190.880919][T13036] batman_adv: batadv0: Removing interface: dummy0
[  190.884147][T13036] bond15: (slave wlan0): Releasing active interface
[  190.892773][T13036] bond10: (slave gretap1): Releasing active interface
[  190.894951][T13036] gretap1: left promiscuous mode
[  190.896599][T13036] gretap1: left allmulticast mode
[  190.902818][T13036] bond13: (slave ip6gretap4): Releasing active interface
[  190.905079][T13036] bond13: (slave ip6gretap4): the permanent HWaddr of slave - 32:7e:56:cf:fc:b7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  190.910584][T13036] ip6gretap4: left promiscuous mode
[  190.914287][T13036] bond13: (slave veth9): Releasing active interface
[  190.919528][T13036] bond16: (slave veth13): Releasing backup interface
[  190.923937][T13036] batman_adv: batadv0: Interface deactivated: ip6gretap5
[  190.926970][T13036] batman_adv: batadv0: Removing interface: ip6gretap5
[  191.006077][T13045] veth0: entered promiscuous mode
[  191.010077][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1928'.
[  191.023918][T13045] veth0 (unregistering): left promiscuous mode
[  191.088462][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1930'.
[  191.113947][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'.
[  191.120847][T13052] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  191.133025][T13054] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1932'.
[  191.147120][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1932'.
[  191.271438][T13063] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1933'.
[  191.657999][T13071] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  191.661331][T13071] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  191.665811][T13071] geneve2: left promiscuous mode
[  191.670696][ T5901] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.673699][ T5901] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.676569][ T5901] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.681821][ T5901] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.836179][T13078] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  191.840425][T13078] CPU: 0 UID: 0 PID: 13078 Comm: syz.2.1938 Not tainted syzkaller #0 PREEMPT(full) 
[  191.840436][T13078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  191.840441][T13078] Call Trace:
[  191.840444][T13078]  <TASK>
[  191.840448][T13078]  dump_stack_lvl+0x189/0x250
[  191.840478][T13078]  ? __pfx_dump_stack_lvl+0x10/0x10
[  191.840489][T13078]  ? __pfx__printk+0x10/0x10
[  191.840502][T13078]  ? kernfs_path_from_node+0x2f/0x290
[  191.840511][T13078]  ? kernfs_path_from_node+0x250/0x290
[  191.840518][T13078]  ? kernfs_path_from_node+0x2f/0x290
[  191.840526][T13078]  sysfs_warn_dup+0x8e/0xa0
[  191.840534][T13078]  sysfs_do_create_link_sd+0xc0/0x110
[  191.840542][T13078]  device_add_class_symlinks+0x1cf/0x240
[  191.840552][T13078]  device_add+0x475/0xb50
[  191.840561][T13078]  wiphy_register+0x1ba6/0x28d0
[  191.840576][T13078]  ? __pfx_wiphy_register+0x10/0x10
[  191.840583][T13078]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  191.840595][T13078]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  191.840607][T13078]  ieee80211_register_hw+0x3425/0x4080
[  191.840624][T13078]  ? ieee80211_register_hw+0x14a1/0x4080
[  191.840636][T13078]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  191.840647][T13078]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  191.840661][T13078]  ? __hrtimer_setup+0x187/0x210
[  191.840668][T13078]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  191.840679][T13078]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  191.840701][T13078]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  191.840709][T13078]  ? trace_kmalloc+0x1f/0xd0
[  191.840717][T13078]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  191.840726][T13078]  ? kstrndup+0xbf/0x160
[  191.840737][T13078]  hwsim_new_radio_nl+0xea4/0x1b10
[  191.840747][T13078]  ? __pfx___nla_validate_parse+0x10/0x10
[  191.840765][T13078]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  191.840780][T13078]  ? __nla_parse+0x40/0x60
[  191.840792][T13078]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  191.840804][T13078]  genl_family_rcv_msg_doit+0x215/0x300
[  191.840816][T13078]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  191.840830][T13078]  ? bpf_lsm_capable+0x9/0x20
[  191.840839][T13078]  ? security_capable+0x7e/0x2e0
[  191.840852][T13078]  genl_rcv_msg+0x60e/0x790
[  191.840863][T13078]  ? __pfx_genl_rcv_msg+0x10/0x10
[  191.840871][T13078]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  191.840886][T13078]  netlink_rcv_skb+0x208/0x470
[  191.840892][T13078]  ? __lock_acquire+0xab9/0xd20
[  191.840902][T13078]  ? __pfx_genl_rcv_msg+0x10/0x10
[  191.840911][T13078]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  191.840925][T13078]  ? down_read+0x1ad/0x2e0
[  191.840934][T13078]  genl_rcv+0x28/0x40
[  191.840942][T13078]  netlink_unicast+0x82f/0x9e0
[  191.840955][T13078]  ? __pfx_netlink_unicast+0x10/0x10
[  191.840966][T13078]  ? netlink_sendmsg+0x642/0xb30
[  191.840972][T13078]  ? skb_put+0x11b/0x210
[  191.840981][T13078]  netlink_sendmsg+0x805/0xb30
[  191.840991][T13078]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.840999][T13078]  ? aa_sock_msg_perm+0xf1/0x1d0
[  191.841007][T13078]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  191.841014][T13078]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.841021][T13078]  __sock_sendmsg+0x21c/0x270
[  191.841032][T13078]  ____sys_sendmsg+0x505/0x830
[  191.841043][T13078]  ? __pfx_____sys_sendmsg+0x10/0x10
[  191.841055][T13078]  ? import_iovec+0x74/0xa0
[  191.841064][T13078]  ___sys_sendmsg+0x21f/0x2a0
[  191.841073][T13078]  ? __pfx____sys_sendmsg+0x10/0x10
[  191.841096][T13078]  ? __fget_files+0x2a/0x420
[  191.841102][T13078]  ? __fget_files+0x3a0/0x420
[  191.841112][T13078]  __x64_sys_sendmsg+0x19b/0x260
[  191.841121][T13078]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  191.841138][T13078]  ? do_syscall_64+0xbe/0x3b0
[  191.841170][T13078]  do_syscall_64+0xfa/0x3b0
[  191.841180][T13078]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.841188][T13078]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.841196][T13078]  ? exc_page_fault+0x9f/0xf0
[  191.841204][T13078]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.841212][T13078] RIP: 0033:0x7f1b1278ebe9
[  191.841220][T13078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.841227][T13078] RSP: 002b:00007f1b135b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  191.841235][T13078] RAX: ffffffffffffffda RBX: 00007f1b129c5fa0 RCX: 00007f1b1278ebe9
[  191.841239][T13078] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  191.841244][T13078] RBP: 00007f1b12811e19 R08: 0000000000000000 R09: 0000000000000000
[  191.841248][T13078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.841251][T13078] R13: 00007f1b129c6038 R14: 00007f1b129c5fa0 R15: 00007ffceb388238
[  191.841264][T13078]  </TASK>
[  192.057123][T13080] wlan1 speed is unknown, defaulting to 1000
[  192.105543][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'.
[  192.137904][T13082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1940'.
[  192.161289][T13091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1942'.
[  192.258195][T13080] vxcan1 speed is unknown, defaulting to 1000
[  192.323126][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.326742][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.834995][T13145] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  192.838299][T13145] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  192.842023][T13145] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  192.928121][T13148] net_ratelimit: 12 callbacks suppressed
[  192.928136][T13148] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  193.226196][T13160] erspan0: left allmulticast mode
[  193.281532][T13160] veth5: left promiscuous mode
[  193.283355][T13160] bridge6: left allmulticast mode
[  193.289254][T13160] bridge8: left promiscuous mode
[  193.290936][T13160] bridge8: left allmulticast mode
[  193.302766][T13160] bond8: left promiscuous mode
[  193.315022][T13160] vlan3: left promiscuous mode
[  193.316673][T13160] bond10: left promiscuous mode
[  193.318395][T13160] vlan3: left allmulticast mode
[  193.328406][T13160] bond10: left allmulticast mode
[  193.333789][T13160] vlan2: left promiscuous mode
[  193.337042][T13160] bond11: left promiscuous mode
[  193.353051][T13160] vlan2: left allmulticast mode
[  193.355329][T13160] bond11: left allmulticast mode
[  193.358225][T13160] vxcan5: left allmulticast mode
[  193.364543][T13160] ip6gre2: left allmulticast mode
[  193.372155][T13160] veth9: left promiscuous mode
[  193.376162][T13160] tipc: Resetting bearer <eth:syzkaller0>
[  193.388635][T13160] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  193.392773][T13160] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  193.400491][T13160] veth13: left promiscuous mode
[  193.472552][T13172] IPVS: set_ctl: invalid protocol: 59 172.30.1.1:20003
[  193.502162][T13172] bond0: entered promiscuous mode
[  193.503848][T13172] bond0: entered allmulticast mode
[  193.505714][T13172] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.571842][T13175] smc: net device bond0 erased user defined pnetid SYZ2
[  193.791812][T13188] openvswitch: netlink: Message has 4 unknown bytes.
[  193.851509][T13190] sctp: [Deprecated]: syz.0.1965 (pid 13190) Use of int in maxseg socket option.
[  193.851509][T13190] Use struct sctp_assoc_value instead
[  193.965504][T13194] netlink: 'syz.0.1967': attribute type 1 has an invalid length.
[  194.002610][T13194] 8021q: adding VLAN 0 to HW filter on device bond18
[  194.028400][T13194] bond18: (slave veth1): Enslaving as an active interface with a down link
[  194.036484][T13194] gretap2: entered promiscuous mode
[  194.043303][T13194] bond18: (slave gretap2): making interface the new active one
[  194.047167][T13194] bond18: (slave gretap2): Enslaving as an active interface with an up link
[  194.393141][T13207] netlink: 'syz.2.1971': attribute type 4 has an invalid length.
[  194.396668][T13207] : renamed from bond0
[  194.472740][T13211] dvmrp0: left allmulticast mode
[  194.569669][T13211] rdma_rxe: rxe_newlink: failed to add wlan1
[  194.576700][T13211] erspan0: left promiscuous mode
[  194.588633][T13211] 8021q: adding VLAN 0 to HW filter on device 
[  194.592846][T13211] 8021q: adding VLAN 0 to HW filter on device team0
[  194.597202][T13211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  194.609031][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  194.842023][T10551] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  194.943535][T13231] netlink: 'syz.0.1977': attribute type 1 has an invalid length.
[  194.967213][T13231] bond19: entered promiscuous mode
[  194.970008][T13231] 8021q: adding VLAN 0 to HW filter on device bond19
[  195.096468][T13239] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  195.113379][T13239] bridge9: entered promiscuous mode
[  195.115627][T13239] bridge9: entered allmulticast mode
[  195.121492][T13239] team0: Port device bridge9 added
[  195.130187][T11993] tipc: Resetting bearer <eth:team0>
[  195.150371][ T5310] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  195.495764][T13269] __nla_validate_parse: 17 callbacks suppressed
[  195.495774][T13269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1989'.
[  195.562958][T13278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1992'.
[  195.566137][T13279] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1992'.
[  195.586133][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1993'.
[  195.590100][T13283] netlink: 'syz.0.1993': attribute type 19 has an invalid length.
[  195.592893][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1993'.
[  195.601092][T10551] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  195.601177][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1993'.
[  195.607588][T13283] netlink: 'syz.0.1993': attribute type 19 has an invalid length.
[  195.609828][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  195.610642][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1993'.
[  195.613338][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  195.618092][T13284] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1987'.
[  195.624449][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  195.646826][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1994'.
[  195.762760][T13296] netlink: 'syz.0.1997': attribute type 21 has an invalid length.
[  195.765724][T13296] netlink: 'syz.0.1997': attribute type 22 has an invalid length.
[  195.770400][T13296] netlink: 'syz.0.1997': attribute type 23 has an invalid length.
[  195.773132][T13296] netlink: 'syz.0.1997': attribute type 25 has an invalid length.
[  195.775755][T13296] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1997'.
[  195.910899][T10551] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  195.914395][T10551] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  195.959393][ T5310] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  196.304631][T13317] wlan1 speed is unknown, defaulting to 1000
[  196.396380][T13317] vxcan1 speed is unknown, defaulting to 1000
[  196.751375][T13322] netlink: 'syz.0.2005': attribute type 10 has an invalid length.
[  196.873726][T13335] tc_dump_action: action bad kind
[  196.917938][T13339] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  197.001514][T13347] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  197.014953][T13347] sit3: entered promiscuous mode
[  197.142218][T13357] syzkaller1: entered promiscuous mode
[  197.144561][T13357] syzkaller1: entered allmulticast mode
[  197.165497][T13349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  197.171720][T13350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  197.390410][T13375] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  197.548052][T13374] wlan1 speed is unknown, defaulting to 1000
[  197.571557][T13381] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  197.574373][T13381] CPU: 0 UID: 0 PID: 13381 Comm: syz.2.2022 Not tainted syzkaller #0 PREEMPT(full) 
[  197.574389][T13381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  197.574396][T13381] Call Trace:
[  197.574401][T13381]  <TASK>
[  197.574406][T13381]  dump_stack_lvl+0x189/0x250
[  197.574427][T13381]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.574437][T13381]  ? __pfx__printk+0x10/0x10
[  197.574449][T13381]  ? kernfs_path_from_node+0x2f/0x290
[  197.574458][T13381]  ? kernfs_path_from_node+0x250/0x290
[  197.574465][T13381]  ? kernfs_path_from_node+0x2f/0x290
[  197.574475][T13381]  sysfs_warn_dup+0x8e/0xa0
[  197.574482][T13381]  sysfs_do_create_link_sd+0xc0/0x110
[  197.574490][T13381]  device_add_class_symlinks+0x1cf/0x240
[  197.574500][T13381]  device_add+0x475/0xb50
[  197.574509][T13381]  wiphy_register+0x1ba6/0x28d0
[  197.574524][T13381]  ? __pfx_wiphy_register+0x10/0x10
[  197.574531][T13381]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  197.574543][T13381]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  197.574553][T13381]  ieee80211_register_hw+0x3425/0x4080
[  197.574569][T13381]  ? ieee80211_register_hw+0x14a1/0x4080
[  197.574581][T13381]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  197.574592][T13381]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  197.574606][T13381]  ? __hrtimer_setup+0x187/0x210
[  197.574613][T13381]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  197.574624][T13381]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  197.574645][T13381]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  197.574653][T13381]  ? trace_kmalloc+0x1f/0xd0
[  197.574661][T13381]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  197.574669][T13381]  ? kstrndup+0xbf/0x160
[  197.574680][T13381]  hwsim_new_radio_nl+0xea4/0x1b10
[  197.574691][T13381]  ? __pfx___nla_validate_parse+0x10/0x10
[  197.574709][T13381]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  197.574722][T13381]  ? __nla_parse+0x40/0x60
[  197.574735][T13381]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  197.574747][T13381]  genl_family_rcv_msg_doit+0x215/0x300
[  197.574758][T13381]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  197.574773][T13381]  ? bpf_lsm_capable+0x9/0x20
[  197.574782][T13381]  ? security_capable+0x7e/0x2e0
[  197.574794][T13381]  genl_rcv_msg+0x60e/0x790
[  197.574806][T13381]  ? __pfx_genl_rcv_msg+0x10/0x10
[  197.574814][T13381]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  197.574828][T13381]  netlink_rcv_skb+0x208/0x470
[  197.574834][T13381]  ? __lock_acquire+0xab9/0xd20
[  197.574843][T13381]  ? __pfx_genl_rcv_msg+0x10/0x10
[  197.574852][T13381]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  197.574866][T13381]  ? down_read+0x1ad/0x2e0
[  197.574874][T13381]  genl_rcv+0x28/0x40
[  197.574882][T13381]  netlink_unicast+0x82f/0x9e0
[  197.574895][T13381]  ? __pfx_netlink_unicast+0x10/0x10
[  197.574904][T13381]  ? netlink_sendmsg+0x642/0xb30
[  197.574910][T13381]  ? skb_put+0x11b/0x210
[  197.574919][T13381]  netlink_sendmsg+0x805/0xb30
[  197.574929][T13381]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.574938][T13381]  ? aa_sock_msg_perm+0xf1/0x1d0
[  197.574945][T13381]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  197.574952][T13381]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.574959][T13381]  __sock_sendmsg+0x21c/0x270
[  197.574970][T13381]  ____sys_sendmsg+0x505/0x830
[  197.574980][T13381]  ? __pfx_____sys_sendmsg+0x10/0x10
[  197.574991][T13381]  ? import_iovec+0x74/0xa0
[  197.575000][T13381]  ___sys_sendmsg+0x21f/0x2a0
[  197.575009][T13381]  ? __pfx____sys_sendmsg+0x10/0x10
[  197.575036][T13381]  ? __fget_files+0x2a/0x420
[  197.575042][T13381]  ? __fget_files+0x3a0/0x420
[  197.575053][T13381]  __x64_sys_sendmsg+0x19b/0x260
[  197.575062][T13381]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  197.575075][T13381]  ? rcu_is_watching+0x15/0xb0
[  197.575085][T13381]  ? do_syscall_64+0xbe/0x3b0
[  197.575096][T13381]  do_syscall_64+0xfa/0x3b0
[  197.575103][T13381]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.575110][T13381]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.575117][T13381]  ? exc_page_fault+0x9f/0xf0
[  197.575125][T13381]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.575133][T13381] RIP: 0033:0x7f1b1278ebe9
[  197.575140][T13381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.575146][T13381] RSP: 002b:00007f1b135b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  197.575156][T13381] RAX: ffffffffffffffda RBX: 00007f1b129c5fa0 RCX: 00007f1b1278ebe9
[  197.575162][T13381] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  197.575166][T13381] RBP: 00007f1b12811e19 R08: 0000000000000000 R09: 0000000000000000
[  197.575170][T13381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  197.575174][T13381] R13: 00007f1b129c6038 R14: 00007f1b129c5fa0 R15: 00007ffceb388238
[  197.575185][T13381]  </TASK>
[  197.778930][   T25] block nbd0: Possible stuck request ffff8880225d0000: control (read@0,1024B). Runtime 60 seconds
[  197.783496][   T25] block nbd0: Possible stuck request ffff8880225d0200: control (read@1024,1024B). Runtime 60 seconds
[  197.788141][   T25] block nbd0: Possible stuck request ffff8880225d0400: control (read@2048,1024B). Runtime 60 seconds
[  197.792900][   T25] block nbd0: Possible stuck request ffff8880225d0600: control (read@3072,1024B). Runtime 60 seconds
[  197.916962][T13386] tipc: Resetting bearer <eth:gre0>
[  197.938822][T13386] tipc: Resetting bearer <eth:team0>
[  197.951588][T13386] tipc: Resetting bearer <eth:syzkaller0>
[  197.970533][T13386] geneve3: left promiscuous mode
[  197.972374][T13386] geneve3: left allmulticast mode
[  197.975535][T13386] vlan0: left allmulticast mode
[  197.977569][T13386] gretap0: left allmulticast mode
[  197.980773][T13386] bridge9: left promiscuous mode
[  197.982956][T13386] bridge9: left allmulticast mode
[  197.994082][T13374] vxcan1 speed is unknown, defaulting to 1000
[  197.996952][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.008746][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  198.016597][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.023868][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  198.029746][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.034938][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  198.043074][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.051904][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  198.211282][T13398] wlan1 speed is unknown, defaulting to 1000
[  198.383690][T13398] vxcan1 speed is unknown, defaulting to 1000
[  198.987153][T13429] netlink: 'syz.0.2034': attribute type 1 has an invalid length.
[  199.013014][T13429] bond20: (slave geneve3): making interface the new active one
[  199.016575][T13429] bond20: (slave geneve3): Enslaving as an active interface with an up link
[  199.024716][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  199.030550][T13429] 8021q: adding VLAN 0 to HW filter on device bond20
[  199.034678][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  199.042741][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  199.045856][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  199.108971][T13434] syzkaller1: entered promiscuous mode
[  199.111141][T13434] syzkaller1: entered allmulticast mode
[  199.289115][T11999] smc: removing ib device syz0
[  199.748770][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  200.187183][T13486] netlink: 'syz.1.2053': attribute type 28 has an invalid length.
[  200.358317][T13493] netlink: 'syz.1.2054': attribute type 1 has an invalid length.
[  200.371905][T13493] 8021q: adding VLAN 0 to HW filter on device bond14
[  200.379401][T13493] bond14: (slave wlan0): Enslaving as an active interface with a down link
[  200.387611][T13493] vlan1: entered allmulticast mode
[  200.389907][T13493] veth1: entered allmulticast mode
[  200.635209][T13507] __nla_validate_parse: 28 callbacks suppressed
[  200.635218][T13507] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2058'.
[  200.665617][T13509] validate_nla: 1 callbacks suppressed
[  200.665631][T13509] netlink: 'syz.1.2059': attribute type 3 has an invalid length.
[  200.759923][T13515] netlink: 'syz.1.2062': attribute type 4 has an invalid length.
[  200.792849][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'.
[  200.797584][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'.
[  200.872748][T13525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2066'.
[  200.876961][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2066'.
[  200.882808][T13525] netlink: 'syz.0.2066': attribute type 19 has an invalid length.
[  200.940211][T13541] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2069'.
[  200.943285][T13541] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2069'.
[  201.161621][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2073'.
[  201.243453][T13557] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2075'.
[  201.246856][T13557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2075'.
[  201.368068][T13562] vxcan1 speed is unknown, defaulting to 1000
[  201.663359][T13573] vxcan1 speed is unknown, defaulting to 1000
[  202.573899][T13609] macsec2: entered promiscuous mode
[  202.576053][T13609] dummy0: entered promiscuous mode
[  202.583611][T13609] dummy0: left promiscuous mode
[  202.636019][T13617] netlink: 'syz.2.2090': attribute type 7 has an invalid length.
[  202.639972][T13617] netlink: 'syz.2.2090': attribute type 8 has an invalid length.
[  202.941670][T13639] vxcan1 speed is unknown, defaulting to 1000
[  203.724110][T13685] netlink: 'syz.1.2102': attribute type 7 has an invalid length.
[  203.727481][T13685] netlink: 'syz.1.2102': attribute type 8 has an invalid length.
[  204.963453][T13746] pimreg: entered allmulticast mode
[  204.964630][T13744] netlink: 'syz.2.2120': attribute type 1 has an invalid length.
[  204.965397][T13746] pimreg: left allmulticast mode
[  205.012518][T13744] bond10: entered promiscuous mode
[  205.015157][T13744] 8021q: adding VLAN 0 to HW filter on device bond10
[  205.214979][T13767] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  205.229486][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  205.600606][T13789] netlink: 'syz.2.2134': attribute type 1 has an invalid length.
[  205.603373][T13789] netlink: 'syz.2.2134': attribute type 1 has an invalid length.
[  205.666637][T13795] __nla_validate_parse: 21 callbacks suppressed
[  205.666646][T13795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2136'.
[  205.802331][T13801] netlink: 'syz.2.2138': attribute type 12 has an invalid length.
[  205.804988][T13801] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2138'.
[  205.901110][T13803] netlink: 'syz.2.2139': attribute type 1 has an invalid length.
[  205.904598][T13803] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2139'.
[  205.915615][T13803] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  205.977673][T13805] batadv2: entered promiscuous mode
[  206.069615][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  206.187839][T13815] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  206.290316][T13824] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  206.293022][T13824] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  206.295845][T13824] tipc: Resetting bearer <eth:syzkaller0>
[  206.311031][T13828] netlink: 'syz.2.2147': attribute type 4 has an invalid length.
[  206.330710][T13828] netlink: 'syz.2.2147': attribute type 4 has an invalid length.
[  206.405515][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2148'.
[  206.476530][T13847] netlink: 'syz.0.2152': attribute type 1 has an invalid length.
[  206.493432][T13847] bond22: entered promiscuous mode
[  206.495316][T13847] bond22: entered allmulticast mode
[  206.497461][T13847] 8021q: adding VLAN 0 to HW filter on device bond22
[  206.532054][T13847] bond0: left promiscuous mode
[  206.534158][T13847] bond0: left allmulticast mode
[  206.547686][T13847] gretap2: left promiscuous mode
[  206.551127][T13847] bond19: left promiscuous mode
[  206.560274][T13847] sit3: left promiscuous mode
[  206.580035][T13847] bond22: left promiscuous mode
[  206.582915][T13847] bond22: left allmulticast mode
[  206.586090][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  206.588960][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  206.591796][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  206.594648][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  206.599474][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  206.602266][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  206.602421][T13852] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2150'.
[  206.605634][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  206.615369][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  206.697555][T13857] netlink: 'syz.0.2153': attribute type 1 has an invalid length.
[  206.717977][T13857] 8021q: adding VLAN 0 to HW filter on device bond23
[  206.733554][T13857] bond23: (slave geneve4): making interface the new active one
[  206.737594][T13857] bond23: (slave geneve4): Enslaving as an active interface with an up link
[  206.741295][T10551] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.745120][T10551] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.750184][T10551] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.754004][T10551] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.292031][T13864] netlink: 'syz.2.2156': attribute type 20 has an invalid length.
[  207.740496][T13878] IPVS: Scheduler module ip_vs_sip not found
[  207.775569][T13883] ip6tnl3: entered allmulticast mode
[  207.808463][T13885] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2162'.
[  207.814747][T13885] nbd: nbd0 already in use
[  207.817124][T13885] block nbd0: NBD_DISCONNECT
[  207.821196][T13885] block nbd0: Send disconnect failed -32
[  207.825636][T13885] block nbd0: shutting down sockets
[  207.831451][    C1] blk_print_req_error: 138 callbacks suppressed
[  207.831463][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.837925][    C1] buffer_io_error: 138 callbacks suppressed
[  207.837936][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  207.843848][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.847642][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  207.851057][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.854873][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  207.858107][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.862051][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  207.865533][ T9630] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.870654][ T9630] Buffer I/O error on dev nbd0, logical block 0, async page read
[  207.873191][ T9630] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.876085][ T9630] Buffer I/O error on dev nbd0, logical block 1, async page read
[  207.878964][ T9630] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.881845][ T9630] Buffer I/O error on dev nbd0, logical block 2, async page read
[  207.884967][ T9630] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.888610][ T9630] Buffer I/O error on dev nbd0, logical block 3, async page read
[  207.891946][ T9630] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.896135][ T9630] Buffer I/O error on dev nbd0, logical block 0, async page read
[  207.902063][ T9630] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.908996][ T9630] Buffer I/O error on dev nbd0, logical block 1, async page read
[  207.913920][ T9630] ldm_validate_partition_table(): Disk read failed.
[  207.918048][ T9630] Dev nbd0: unable to read RDB block 0
[  207.923193][ T9630]  nbd0: unable to read partition table
[  207.930311][ T9630] ldm_validate_partition_table(): Disk read failed.
[  207.933507][ T9630] Dev nbd0: unable to read RDB block 0
[  207.934487][T13891] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2163'.
[  207.936219][ T9630]  nbd0: unable to read partition table
[  207.943468][T13891] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2163'.
[  207.952788][T13891] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2163'.
[  207.961611][T13891] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2163'.
[  207.988815][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  208.173850][T13907] netlink: 'syz.2.2168': attribute type 10 has an invalid length.
[  208.177525][T13907] : (slave wlan1): refused to change device type
[  208.240805][T13911] vxcan1 speed is unknown, defaulting to 1000
[  208.541551][T13950] netlink: 'syz.0.2179': attribute type 6 has an invalid length.
[  208.544090][T13950] netlink: 'syz.0.2179': attribute type 4 has an invalid length.
[  208.759391][T13969] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  208.762205][T13969] openvswitch: netlink: Duplicate key (type 0).
[  208.859316][T13979] siw: device registration error -23
[  209.631667][T14005] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.029589][ T5310] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  210.038114][T14021] team0: Port device geneve0 removed
[  210.041602][T14021] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  210.129399][T14033] bond3: (slave macvlan2): Releasing backup interface
[  210.136479][T14033] team0: Port device bond4 removed
[  210.143072][T14033] batman_adv: batadv0: Removing interface: ip6gretap1
[  210.150622][T14033] team0: Port device bond5 removed
[  210.152995][T14033] bond6: (slave gretap2): Releasing active interface
[  210.155799][T14033] bond7: left allmulticast mode
[  210.157810][T14033] bond7: left promiscuous mode
[  210.162725][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  210.171453][T14033] bridge0: port 1(bond7) entered disabled state
[  210.182451][T14033] team0: Port device bond8 removed
[  210.185174][T14033] bond9: (slave gretap5): Releasing active interface
[  210.222533][T14033] team0: Failed to send options change via netlink (err -105)
[  210.225037][T14033] team0: Mode changed to "activebackup"
[  210.297970][T14053] NCSI netlink: No device for ifindex 0
[  210.472785][T14084] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  210.504200][T14086] 8021q: adding VLAN 0 to HW filter on device bond15
[  210.509434][ T5310] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  210.514765][T14089] openvswitch: netlink: IPv4 tun info is not correct
[  210.515272][T14086] macsec4: entered promiscuous mode
[  210.519464][T14086] bond0: entered promiscuous mode
[  210.522918][T14086] bond0: left promiscuous mode
[  211.198797][   T33] audit: type=1800 audit(1756951554.304:5): pid=14137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2235" name="memory.events" dev="tmpfs" ino=3636 res=0 errno=0
[  211.300577][T14142] __nla_validate_parse: 178 callbacks suppressed
[  211.300591][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'.
[  211.307047][T14142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2237'.
[  211.321188][T14142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2237'.
[  211.376147][T14146] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2238'.
[  211.509127][ T5310] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  211.605350][T14177] sctp: [Deprecated]: syz.1.2246 (pid 14177) Use of struct sctp_assoc_value in delayed_ack socket option.
[  211.605350][T14177] Use struct sctp_sack_info instead
[  211.615545][T14180] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  211.639003][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  211.675777][T14192] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2251'.
[  211.740829][T14197] vxcan1 speed is unknown, defaulting to 1000
[  211.813357][T14203] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2253'.
[  211.853512][T14201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2252'.
[  211.976706][T14216] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.002252][T14216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2256'.
[  212.007482][T14216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2256'.
[  212.013837][T14218] syzkaller1: entered promiscuous mode
[  212.016276][T14218] syzkaller1: entered allmulticast mode
[  212.232855][T14228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2260'.
[  212.264904][T14228] batman_adv: batadv0: Adding interface: ip6gretap2
[  212.267156][T14228] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.277428][T14228] batman_adv: batadv0: Interface activated: ip6gretap2
[  212.313482][T14232] validate_nla: 7 callbacks suppressed
[  212.313492][T14232] netlink: 'syz.1.2261': attribute type 10 has an invalid length.
[  212.318253][T14232] netlink: 'syz.1.2261': attribute type 10 has an invalid length.
[  212.325868][T14232] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  212.329169][T14232] bond1: (slave macvlan0): Enslaving as a backup interface with a down link
[  212.487935][T14248] netlink: 'syz.1.2267': attribute type 9 has an invalid length.
[  212.492895][T14248] netlink: 'syz.1.2267': attribute type 6 has an invalid length.
[  212.495631][T14248] netlink: 'syz.1.2267': attribute type 7 has an invalid length.
[  212.498102][T14248] netlink: 'syz.1.2267': attribute type 8 has an invalid length.
[  212.624968][T14262] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  212.719515][   T52] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  212.923145][T14277] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  212.926796][T14277] netlink: 'syz.0.2274': attribute type 1 has an invalid length.
[  213.285740][T14296] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  213.423259][T14304] netlink: 'syz.2.2284': attribute type 10 has an invalid length.
[  213.491311][T14309] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  213.833162][T14317] netlink: 'syz.1.2288': attribute type 1 has an invalid length.
[  213.890230][T14322] hsr_slave_0: left promiscuous mode
[  213.892829][T14322] hsr_slave_1: left promiscuous mode
[  214.101702][T14334] netlink: 'syz.1.2294': attribute type 21 has an invalid length.
[  214.189987][T14339] sctp: [Deprecated]: syz.0.2295 (pid 14339) Use of struct sctp_assoc_value in delayed_ack socket option.
[  214.189987][T14339] Use struct sctp_sack_info instead
[  214.686698][T14386] bond0: (slave rose0): Error: Device can not be enslaved while up
[  214.705361][T14380] vxcan1 speed is unknown, defaulting to 1000
[  214.762682][T14391] 8021q: adding VLAN 0 to HW filter on device bond11
[  214.765216][T14393] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  214.793744][T14395] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  214.920938][T14411] 8021q: adding VLAN 0 to HW filter on device bond12
[  215.015068][T14411] 8021q: adding VLAN 0 to HW filter on device batadv2
[  215.028255][T14411] team0: Failed to send port change of device batadv2 via netlink (err -105)
[  215.041303][T14411] team0: Failed to send options change via netlink (err -105)
[  215.045140][T14411] team0: Port device batadv2 added
[  215.105925][T14411] bond12: (slave bridge9): Enslaving as a backup interface with an up link
[  215.159494][   T12] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  215.285923][   T12] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  215.557401][T14446] vxcan1 speed is unknown, defaulting to 1000
[  216.009530][T14457] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.023428][T14462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  216.269561][T14470] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.301913][T14470] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.341441][T14484] __nla_validate_parse: 27 callbacks suppressed
[  216.341450][T14484] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2332'.
[  216.373424][T14470] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.376891][T14488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2333'.
[  216.383320][T14488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2333'.
[  216.425254][T14470] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.488591][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.498213][ T5901] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.510422][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.518623][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.520027][T14489] nbd0: detected capacity change from 0 to 127
[  216.528925][T10056] block nbd0: Receive control failed (result -104)
[  216.718190][T14504] tipc: Resetting bearer <eth:syzkaller0>
[  216.731210][T14504] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  216.736406][T14504] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  216.747263][T14504] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  216.872568][T14523] vxcan1 speed is unknown, defaulting to 1000
[  217.161649][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2351'.
[  217.236138][T14549] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  217.241349][T14548] IPVS: stopping backup sync thread 14549 ...
[  217.285857][T14551] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  217.359904][T14551] nbd4: detected capacity change from 0 to 127
[  217.365335][   T58] block nbd4: Receive control failed (result -104)
[  217.451837][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2359'.
[  217.455106][T14563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2359'.
[  217.488256][T14566] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2360'.
[  217.842741][T14578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2363'.
[  218.347158][T14581] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2364'.
[  218.402475][T14583] netlink: 464 bytes leftover after parsing attributes in process `syz.1.2365'.
[  218.463598][T14592] validate_nla: 6 callbacks suppressed
[  218.463607][T14592] netlink: 'syz.1.2368': attribute type 4 has an invalid length.
[  218.471266][T14592] netlink: 'syz.1.2368': attribute type 4 has an invalid length.
[  218.553000][T14594] netlink: 'syz.1.2369': attribute type 4 has an invalid length.
[  218.586825][T14600] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  218.591734][T14600] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  218.643752][T14608] ip6tnl4: entered promiscuous mode
[  218.646901][T14608] ip6tnl4: entered allmulticast mode
[  218.651549][T14608] team0: Device ip6tnl4 is up. Set it down before adding it as a team port
[  218.694048][T14613] netlink: 'syz.0.2374': attribute type 4 has an invalid length.
[  218.825246][T14625] openvswitch: netlink: Key type 46 is out of range max 32
[  218.838452][T14625] tipc: Invalid UDP bearer configuration
[  218.838477][T14625] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  219.018175][T14643] tipc: Resetting bearer <eth:syzkaller0>
[  219.028873][T14643] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  219.045073][T14643] ip6tnl3: left allmulticast mode
[  219.048334][ T5691] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.051969][T14647] netlink: 'syz.1.2384': attribute type 16 has an invalid length.
[  219.055158][T14647] netlink: 'syz.1.2384': attribute type 17 has an invalid length.
[  219.063922][ T5691] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.067414][ T5691] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.074797][ T5691] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.079301][T14647] IPv6: NLM_F_REPLACE set, but no existing node found!
[  219.154274][ T5691] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  219.159319][ T5691] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  219.162480][T14654] netlink: 'syz.0.2385': attribute type 10 has an invalid length.
[  219.166172][T14654] dummy0: entered promiscuous mode
[  219.168180][T14654] team0: Port device dummy0 added
[  219.170548][ T5691] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  219.173156][T14654] netlink: 'syz.0.2385': attribute type 10 has an invalid length.
[  219.175667][ T5691] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  219.181749][T14654] dummy0: left promiscuous mode
[  219.184422][T14654] team0: Port device dummy0 removed
[  219.188058][T14654] : (slave dummy0): Enslaving as an active interface with an up link
[  219.602462][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.605047][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.749093][ T5233] Bluetooth: hci2: command 0x040f tx timeout
[  220.565682][T14765] netlink: 'syz.0.2414': attribute type 4 has an invalid length.
[  220.667208][T14775] netlink: 'syz.0.2416': attribute type 1 has an invalid length.
[  220.746984][T14787] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  220.760966][T14787] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  220.891451][T14802] nbd5: detected capacity change from 0 to 127
[  220.896197][T10056] block nbd5: Receive control failed (result -104)
[  221.484778][T14858] __nla_validate_parse: 26 callbacks suppressed
[  221.484789][T14858] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2435'.
[  221.490216][T14858] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2435'.
[  222.418023][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2440'.
[  222.565180][T14894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2445'.
[  222.568265][T14893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2445'.
[  222.572361][T14896] : (slave dummy0): Releasing backup interface
[  222.576955][T14896] bond18: (slave veth1): Releasing active interface
[  222.581205][T14896] bond18: (slave veth1): the permanent HWaddr of slave - 7e:79:99:b5:82:15 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  222.586752][T14896] gretap2: entered promiscuous mode
[  222.589801][T14896] bond18: (slave gretap2): Releasing active interface
[  222.592158][T14896] gretap2: left promiscuous mode
[  222.595240][T14896] bond20: (slave geneve3): Releasing active interface
[  222.598515][T14896] bond23: (slave geneve4): Releasing active interface
[  223.472322][T14915] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  223.476267][T14915] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  223.488434][T14915] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  223.494888][T14914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2449'.
[  223.591378][T14927] validate_nla: 4 callbacks suppressed
[  223.591388][T14927] netlink: 'syz.0.2454': attribute type 1 has an invalid length.
[  223.606154][T14927] 8021q: adding VLAN 0 to HW filter on device bond24
[  223.624201][T14929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2454'.
[  223.628580][T14927] veth17: entered promiscuous mode
[  223.635370][T14927] bond24: (slave veth17): Enslaving as an active interface with an up link
[  224.053291][T14941] netlink: 'syz.0.2458': attribute type 2 has an invalid length.
[  224.057695][T14941] netlink: 'syz.0.2458': attribute type 1 has an invalid length.
[  224.061182][T14941] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2458'.
[  224.433507][T14962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2461'.
[  224.628796][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  224.726295][T14977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2466'.
[  225.146609][T15002] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  225.701420][T15036] bridge12: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  225.762533][T15046] netlink: 'syz.2.2477': attribute type 1 has an invalid length.
[  225.797652][T15052] netlink: 'syz.1.2479': attribute type 6 has an invalid length.
[  225.803124][T15046] 8021q: adding VLAN 0 to HW filter on device bond13
[  225.846878][T15046] veth13: entered promiscuous mode
[  225.856742][T15046] bond13: (slave veth13): Enslaving as an active interface with an up link
[  225.916491][T15070] netlink: 'syz.2.2483': attribute type 4 has an invalid length.
[  225.937811][T15070] vlan4: entered allmulticast mode
[  225.940435][T15070] bridge_slave_0: entered allmulticast mode
[  226.084563][T15089] netlink: 'syz.0.2487': attribute type 1 has an invalid length.
[  226.165693][T15092] geneve3: entered promiscuous mode
[  226.167575][T15092] geneve3: entered allmulticast mode
[  226.174015][T15090] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[  226.178025][T15090] bond1: (slave vcan0): Error -95 calling set_mac_address
[  226.184371][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  226.187159][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  226.191731][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  226.194606][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  226.225043][T15095] geneve4: entered promiscuous mode
[  226.226936][T15095] geneve4: entered allmulticast mode
[  226.247417][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 43824 - 0
[  226.250668][   T13] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 46302 - 0
[  226.257132][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 43824 - 0
[  226.262932][   T13] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 46302 - 0
[  226.274553][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 43824 - 0
[  226.277273][   T13] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 46302 - 0
[  226.281369][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 43824 - 0
[  226.284632][   T13] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 46302 - 0
[  226.354653][T15110] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  226.417847][T15119] sch_fq: defrate 0 ignored.
[  226.535318][T15140] __nla_validate_parse: 5 callbacks suppressed
[  226.535331][T15140] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2491'.
[  226.733655][T15159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2508'.
[  226.852111][T15170] bond0: entered promiscuous mode
[  226.855228][T15170] bond0: left promiscuous mode
[  227.320270][T15188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2517'.
[  227.384314][T15200] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Lv^侦Kc'A
[  227.452867][T15206] netlink: 'syz.0.2522': attribute type 1 has an invalid length.
[  227.455567][T15206] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2522'.
[  227.501742][T15213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2524'.
[  227.530456][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2525'.
[  227.533851][T15217] openvswitch: netlink: Unknown nsh attribute 0
[  227.536165][T15217] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.543814][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2525'.
[  227.673195][T15236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2528'.
[  227.677085][T15224] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2528'.
[  227.697374][T15239] netlink: 'syz.0.2530': attribute type 3 has an invalid length.
[  227.701629][T15239] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2530'.
[  227.730415][T15241] vlan1: entered allmulticast mode
[  227.908290][T15251] netlink: 'syz.1.2534': attribute type 39 has an invalid length.
[  227.959424][T15252] macsec0: entered allmulticast mode
[  228.135892][T15257] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.148832][   T24] page_pool_release_retry() stalled pool shutdown: id 74, 1 inflight 60 sec
[  228.185256][T15257] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.244747][T15257] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.284893][T15257] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.360434][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  228.369745][ T5691] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  228.384407][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  228.397293][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  228.582021][T15288] veth0: entered allmulticast mode
[  228.613721][T15290] netlink: 'syz.1.2546': attribute type 4 has an invalid length.
[  228.779389][T15292] netlink: 'syz.0.2547': attribute type 1 has an invalid length.
[  228.782889][T15292] nbd: error processing sock list
[  228.785568][T15292] block nbd6: shutting down sockets
[  228.789188][T15294] netlink: 'syz.2.2548': attribute type 1 has an invalid length.
[  228.842631][T15299] bridge19: the hash_elasticity option has been deprecated and is always 16
[  229.015229][T15310] vxcan1 speed is unknown, defaulting to 1000
[  229.076283][T15317] 8021q: adding VLAN 0 to HW filter on device 
[  229.082467][T15317] 8021q: adding VLAN 0 to HW filter on device team0
[  229.087399][T15317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  229.109905][ T2202] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  229.133589][T15317] _Z`Ԁ@S!: entered promiscuous mode
[  229.394432][T15286] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  229.417394][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  229.421669][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  229.424381][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  229.433862][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  229.580569][ T2202] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  229.915180][T15384] netlink: 'syz.0.2574': attribute type 10 has an invalid length.
[  229.999882][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  230.037526][T15399] netlink: 'syz.0.2576': attribute type 1 has an invalid length.
[  230.056549][T15399] 8021q: adding VLAN 0 to HW filter on device bond25
[  230.360435][T15422] openvswitch: netlink: Message has 4 unknown bytes.
[  230.362814][T15422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.405472][T15425] netlink: 'syz.2.2584': attribute type 39 has an invalid length.
[  230.527602][T15428] netlink: 'syz.1.2585': attribute type 1 has an invalid length.
[  230.834245][T15453] tun0: tun_chr_ioctl cmd 1074025694
[  230.836205][T15453] tun0: tun_chr_ioctl cmd 35111
[  230.890114][T15461] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  231.032415][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  231.041075][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  231.293069][T15478] geneve4: entered promiscuous mode
[  231.440273][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  231.594114][T15497] netlink: 'syz.1.2604': attribute type 13 has an invalid length.
[  231.596574][T15497] netlink: 'syz.1.2604': attribute type 17 has an invalid length.
[  231.626879][T15497] 8021q: adding VLAN 0 to HW filter on device team0
[  231.631527][T15497] tipc: Resetting bearer <eth:team0>
[  231.633640][T15497] tipc: Resetting bearer <eth:team0>
[  231.636655][T15497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  231.663157][T15495] vxcan1 speed is unknown, defaulting to 1000
[  232.037216][T15507] vxcan1 speed is unknown, defaulting to 1000
[  232.059925][T15510] netlink: 'syz.0.2607': attribute type 1 has an invalid length.
[  232.171143][T15512] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.176792][T15512] __nla_validate_parse: 18 callbacks suppressed
[  232.176800][T15512] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2608'.
[  232.312495][T15504] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2606'.
[  232.463039][T15523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2611'.
[  232.469557][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  232.472909][T15523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2611'.
[  232.670849][T15541] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2616'.
[  232.679517][T15541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2616'.
[  232.733721][T15551] vxcan1 speed is unknown, defaulting to 1000
[  232.831937][T15556] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2619'.
[  232.944799][T15561] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2620'.
[  233.146763][T15574] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  233.215195][T15572] tipc: Resetting bearer <eth:gre0>
[  233.255554][T15572] tipc: Resetting bearer <eth:team0>
[  233.264674][T15576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2623'.
[  233.322450][T15582] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20003
[  233.388531][T15589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2628'.
[  233.732260][T15615] 8021q: adding VLAN 0 to HW filter on device bond26
[  233.855854][T15635] vxcan1 speed is unknown, defaulting to 1000
[  233.923016][T15647] vlan0: entered promiscuous mode
[  233.924701][T15647] hsr_slave_1: entered promiscuous mode
[  233.938199][T15647] vlan0: entered allmulticast mode
[  233.941075][T15647] hsr_slave_1: entered allmulticast mode
[  234.558447][T15688] validate_nla: 4 callbacks suppressed
[  234.558456][T15688] netlink: 'syz.0.2658': attribute type 4 has an invalid length.
[  234.708924][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  234.924759][T15710] netlink: 'syz.2.2664': attribute type 4 has an invalid length.
[  235.008534][T15721] netlink: 'syz.2.2667': attribute type 10 has an invalid length.
[  235.194913][T15730] netlink: 'syz.2.2670': attribute type 9 has an invalid length.
[  235.407845][T15738] bridge20: entered allmulticast mode
[  235.569872][T15766] netlink: 'syz.1.2681': attribute type 7 has an invalid length.
[  235.572399][T15766] netlink: 'syz.1.2681': attribute type 8 has an invalid length.
[  235.786601][T15796] netlink: 'syz.0.2688': attribute type 1 has an invalid length.
[  235.823255][T15796] macsec2: entered promiscuous mode
[  235.825047][T15796] bond0: entered promiscuous mode
[  235.828300][T15796] bond0: left promiscuous mode
[  237.053946][T15847] .70: renamed from hsr0
[  237.058066][T15847] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  237.065815][T15847] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  237.071101][T15847] .70: entered allmulticast mode
[  237.073253][T15847] hsr_slave_0: entered allmulticast mode
[  237.075632][T15847] hsr_slave_1: entered allmulticast mode
[  237.083094][T15847] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  237.184222][T15858] __nla_validate_parse: 65 callbacks suppressed
[  237.184231][T15858] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2707'.
[  237.192576][T15858] bridge0: entered allmulticast mode
[  237.194476][T15858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2707'.
[  237.337295][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2710'.
[  237.559478][T15876] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.567603][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2713'.
[  237.584430][T15874] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  237.595508][T15874] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  237.855501][T15890] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2717'.
[  237.906383][T15891] netlink: 'syz.1.2718': attribute type 10 has an invalid length.
[  237.938306][T15900] ipip0: entered promiscuous mode
[  237.944191][T15893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2719'.
[  237.993156][T15907] vxcan1 speed is unknown, defaulting to 1000
[  238.221666][T15918] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  238.310848][T15920] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2725'.
[  238.318862][T15918] nbd6: detected capacity change from 0 to 127
[  238.326472][   T58] block nbd6: Receive control failed (result -32)
[  238.331658][ T9630] block nbd6: Dead connection, failed to find a fallback
[  238.334709][ T9630] block nbd6: shutting down sockets
[  238.337478][ T9630] blk_print_req_error: 138 callbacks suppressed
[  238.337489][ T9630] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.343995][ T9630] buffer_io_error: 138 callbacks suppressed
[  238.344003][ T9630] Buffer I/O error on dev nbd6, logical block 0, async page read
[  238.353867][ T9630] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.357725][ T9630] Buffer I/O error on dev nbd6, logical block 1, async page read
[  238.360720][ T9630] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.364286][ T9630] Buffer I/O error on dev nbd6, logical block 2, async page read
[  238.367018][ T9630] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.376933][ T9630] Buffer I/O error on dev nbd6, logical block 3, async page read
[  238.380729][ T9630] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.384308][T15928] netlink: 'syz.0.2727': attribute type 1 has an invalid length.
[  238.384741][ T9630] Buffer I/O error on dev nbd6, logical block 0, async page read
[  238.390403][ T9630] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.393842][ T9630] Buffer I/O error on dev nbd6, logical block 1, async page read
[  238.396491][ T9630] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.397269][T15928] workqueue: Failed to create a rescuer kthread for wq "bond27": -EINTR
[  238.399656][ T9630] Buffer I/O error on dev nbd6, logical block 2, async page read
[  238.399730][ T9630] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.399740][ T9630] Buffer I/O error on dev nbd6, logical block 3, async page read
[  238.399801][ T9630] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.399810][ T9630] Buffer I/O error on dev nbd6, logical block 0, async page read
[  238.399858][ T9630] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.399867][ T9630] Buffer I/O error on dev nbd6, logical block 1, async page read
[  238.400929][ T9630] ldm_validate_partition_table(): Disk read failed.
[  238.425780][ T9630] Dev nbd6: unable to read RDB block 0
[  238.430041][ T9630]  nbd6: unable to read partition table
[  238.438248][ T9630] ldm_validate_partition_table(): Disk read failed.
[  238.450422][ T9630] Dev nbd6: unable to read RDB block 0
[  238.454357][ T9630]  nbd6: unable to read partition table
[  238.626564][T15950] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2733'.
[  238.638121][T15950] openvswitch: netlink: IP tunnel TTL not specified.
[  238.869476][T15967] vxcan1 speed is unknown, defaulting to 1000
[  238.900983][T15971] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  239.434251][T15991] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2745'.
[  239.814039][T15994] netlink: 'syz.1.2746': attribute type 4 has an invalid length.
[  239.817805][T15994] netlink: 'syz.1.2746': attribute type 4 has an invalid length.
[  239.897912][T16002] vlan5: entered promiscuous mode
[  239.901981][T16002] macvtap0: entered promiscuous mode
[  239.945331][T16002] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2748'.
[  239.951543][T16004] netlink: 'syz.2.2749': attribute type 29 has an invalid length.
[  239.957606][T16004] netlink: 'syz.2.2749': attribute type 29 has an invalid length.
[  239.966011][T16004] unsupported nla_type 58
[  240.037165][T16012] netlink: 'syz.2.2753': attribute type 2 has an invalid length.
[  240.041238][T16012] netlink: 'syz.2.2753': attribute type 1 has an invalid length.
[  240.068115][T16014] netlink: 'syz.1.2752': attribute type 4 has an invalid length.
[  240.073895][T16014] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  240.310862][T16020] vxcan1 speed is unknown, defaulting to 1000
[  240.941446][T16027] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  240.994162][T16033] netlink: 'syz.2.2760': attribute type 1 has an invalid length.
[  242.051158][T16093] netlink: 'syz.0.2776': attribute type 10 has an invalid length.
[  242.207229][T16098] netlink: 'syz.0.2778': attribute type 12 has an invalid length.
[  242.273421][T16109] __nla_validate_parse: 14 callbacks suppressed
[  242.273431][T16109] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2781'.
[  242.280820][T16107] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2780'.
[  242.503210][T16128] bond27: (slave bridge21): making interface the new active one
[  242.508264][T16128] bond27: (slave bridge21): Enslaving as an active interface with an up link
[  242.516846][T16131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2787'.
[  242.548845][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  242.593047][T16137] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  242.597220][T16137] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  242.637829][T16140] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2790'.
[  242.641224][T16140] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2790'.
[  242.752351][T16144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2792'.
[  242.756262][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2792'.
[  242.796546][T16153] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  243.041400][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2800'.
[  243.064253][T16192] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2804'.
[  243.135301][T16196] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2806'.
[  243.275558][T16207] macsec3: entered promiscuous mode
[  243.277777][T16207] team0: entered promiscuous mode
[  243.279763][T16207] batadv2: entered promiscuous mode
[  243.281762][T16207] macsec3: entered allmulticast mode
[  243.283857][T16207] team0: entered allmulticast mode
[  243.286172][T16207] batadv2: entered allmulticast mode
[  243.291455][T16207] team0: Device macsec3 is already an upper device of the team interface
[  243.296288][T16207] team0: left allmulticast mode
[  243.298286][T16207] batadv2: left allmulticast mode
[  243.304454][T16207] team0: left promiscuous mode
[  243.306040][T16207] batadv2: left promiscuous mode
[  243.565154][T16232] IPVS: set_ctl: invalid protocol: 8 172.20.20.51:20001
[  243.911986][T16248] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  243.983089][T16256] sctp: [Deprecated]: syz.0.2830 (pid 16256) Use of struct sctp_assoc_value in delayed_ack socket option.
[  243.983089][T16256] Use struct sctp_sack_info instead
[  244.222779][T16263] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.501672][T16323] validate_nla: 10 callbacks suppressed
[  245.501682][T16323] netlink: 'syz.2.2850': attribute type 15 has an invalid length.
[  245.511800][T16323] netlink: 'syz.2.2850': attribute type 15 has an invalid length.
[  245.546119][T16325] netlink: 'syz.1.2851': attribute type 4 has an invalid length.
[  245.611333][T16336] netlink: 'syz.2.2853': attribute type 4 has an invalid length.
[  245.904846][T16368] netlink: 'syz.0.2864': attribute type 10 has an invalid length.
[  246.462795][   T33] audit: type=1804 audit(1756951589.574:6): pid=16418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2878" name="/newroot/883/cgroup.controllers" dev="tmpfs" ino=4517 res=1 errno=0
[  246.488210][   T33] audit: type=1800 audit(1756951589.574:7): pid=16418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2878" name="cgroup.controllers" dev="tmpfs" ino=4517 res=0 errno=0
[  246.498194][   T33] audit: type=1800 audit(1756951589.584:8): pid=16418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2878" name="cgroup.controllers" dev="tmpfs" ino=4517 res=0 errno=0
[  246.700993][T16444] TCP: TCP_TX_DELAY enabled
[  246.798227][T16450] bridge0: entered allmulticast mode
[  246.962614][T16453] bridge0 (unregistering): left allmulticast mode
[  247.032768][   T25] block nbd0: Possible stuck request ffff8880225d2600: control (read@0,1024B). Runtime 30 seconds
[  247.037405][   T25] block nbd0: Possible stuck request ffff8880225d2800: control (read@1024,1024B). Runtime 30 seconds
[  247.046312][   T25] block nbd0: Possible stuck request ffff8880225d2a00: control (read@2048,1024B). Runtime 30 seconds
[  247.050985][   T25] block nbd0: Possible stuck request ffff8880225d2c00: control (read@3072,1024B). Runtime 30 seconds
[  247.077898][T16464] smc: removing ib device syz2
[  247.192019][T16473] tipc: Can't bind to reserved service type 2
[  247.385587][T16486] netlink: 'syz.0.2899': attribute type 9 has an invalid length.
[  247.391129][T16486] __nla_validate_parse: 22 callbacks suppressed
[  247.391139][T16486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2899'.
[  247.500807][T16488] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2900'.
[  247.613804][T16496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2902'.
[  247.678735][   T25] block nbd4: Possible stuck request ffff888022788000: control (read@2048,1024B). Runtime 30 seconds
[  247.683943][   T25] block nbd4: Possible stuck request ffff888022788200: control (read@3072,1024B). Runtime 30 seconds
[  247.688267][   T25] block nbd4: Possible stuck request ffff888022790000: control (read@0,1024B). Runtime 30 seconds
[  247.692741][   T25] block nbd4: Possible stuck request ffff888022790200: control (read@1024,1024B). Runtime 30 seconds
[  247.806293][T16512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2907'.
[  247.808008][T16511] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  247.893185][T16521] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2909'.
[  247.907325][T16525] netlink: 'syz.1.2905': attribute type 12 has an invalid length.
[  248.653698][T16550] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  248.757023][T16560] netlink: 'syz.2.2920': attribute type 9 has an invalid length.
[  249.105902][T16575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2925'.
[  249.110578][T16575] netlink: 'syz.0.2925': attribute type 1 has an invalid length.
[  249.155632][T16575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2925'.
[  249.160085][T16575] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  249.237230][T16579] !: renamed from dummy0
[  249.525724][T16586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2928'.
[  249.530646][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  249.531676][T16586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2928'.
[  249.533768][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  249.533789][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  249.533805][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  249.826403][T16605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2933'.
[  250.347495][T16617] netlink: 'syz.0.2936': attribute type 83 has an invalid length.
[  250.426454][T16621] smc: net device bond0 applied user defined pnetid SYZ0
[  250.430783][T16621] smc: net device bond0 erased user defined pnetid SYZ0
[  250.509345][T16630] validate_nla: 2 callbacks suppressed
[  250.509354][T16630] netlink: 'syz.0.2940': attribute type 2 has an invalid length.
[  251.511173][   T62] block nbd5: Possible stuck request ffff8880227b0000: control (read@0,1024B). Runtime 30 seconds
[  251.516120][   T62] block nbd5: Possible stuck request ffff8880227b0200: control (read@1024,1024B). Runtime 30 seconds
[  251.521262][   T62] block nbd5: Possible stuck request ffff8880227b0400: control (read@2048,1024B). Runtime 30 seconds
[  251.525067][   T62] block nbd5: Possible stuck request ffff8880227b0600: control (read@3072,1024B). Runtime 30 seconds
[  251.596681][T16682] bridge0: failed insert local address into bridge forwarding table
[  251.612509][T16681] macsec0: left allmulticast mode
[  251.619765][T16681] vlan1: left allmulticast mode
[  251.622306][T16681] ipip0: left promiscuous mode
[  251.843420][T16697] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.063783][T16705] netlink: 'syz.2.2963': attribute type 1 has an invalid length.
[  252.213029][T16714] netlink: 'syz.2.2967': attribute type 10 has an invalid length.
[  252.217332][T16714] wlan1: mtu less than device minimum
[  252.220207][T16714] : (slave wlan1): Error -22 calling dev_set_mtu
[  252.227148][T16714] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  252.232269][T16714] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  252.402961][T16728] __nla_validate_parse: 12 callbacks suppressed
[  252.402974][T16728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2971'.
[  252.443480][T16730] netlink: 'syz.2.2972': attribute type 29 has an invalid length.
[  252.446883][T16730] netlink: 'syz.2.2972': attribute type 29 has an invalid length.
[  252.450506][T16730] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2972'.
[  252.473636][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2973'.
[  252.763060][T16743] bond0: Error: Cannot enslave bond to itself.
[  256.581770][T16773] netlink: 'syz.0.2984': attribute type 7 has an invalid length.
[  256.585198][T16773] netlink: 'syz.0.2984': attribute type 8 has an invalid length.
[  256.964287][T16795] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2989'.
[  256.971520][T16795] geneve5: entered promiscuous mode
[  256.974025][ T5691] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.976766][ T5691] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.986966][ T5691] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.993195][ T5691] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.099688][T16804] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  257.150256][T16809] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2994'.
[  257.177750][T16810] bridge: RTM_NEWNEIGH with invalid ether address
[  257.185411][T16812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2995'.
[  257.195483][T16812] netlink: 'syz.0.2995': attribute type 30 has an invalid length.
[  257.241989][T16813] netlink: 212228 bytes leftover after parsing attributes in process `syz.0.2995'.
[  257.383059][T16822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2999'.
[  257.421356][T16824] sctp: [Deprecated]: syz.0.3000 (pid 16824) Use of int in max_burst socket option.
[  257.421356][T16824] Use struct sctp_assoc_value instead
[  257.680295][T16846] raw_sendmsg: syz.0.3006 forgot to set AF_INET. Fix it!
[  257.680336][T16849] netlink: 'syz.0.3006': attribute type 11 has an invalid length.
[  257.704473][T16851] netlink: 'syz.1.3008': attribute type 1 has an invalid length.
[  257.712050][T16851] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR
[  257.747439][T16859] netlink: 'syz.1.3009': attribute type 39 has an invalid length.
[  257.751053][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3009'.
[  257.796510][T16861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3010'.
[  257.806791][T16862] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3010'.
[  257.812434][T16861] netlink: 34 bytes leftover after parsing attributes in process `syz.0.3010'.
[  257.912467][T16871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3012'.
[  257.936464][T16871] bridge0 (unregistering): left allmulticast mode
[  257.983246][T16874] netlink: 'syz.2.3013': attribute type 1 has an invalid length.
[  258.025866][T16874] 8021q: adding VLAN 0 to HW filter on device bond14
[  258.044292][T16874] 8021q: adding VLAN 0 to HW filter on device bond14
[  258.046908][T16874] bond14: (slave vxcan7): The slave device specified does not support setting the MAC address
[  258.054845][T16874] bond14: (slave vxcan7): Error -95 calling set_mac_address
[  258.097721][T16876] veth19: entered promiscuous mode
[  258.106534][T16876] bond14: (slave veth19): Enslaving as an active interface with a down link
[  258.142836][T16876] erspan0: entered allmulticast mode
[  258.237793][T16883] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.264118][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3016'.
[  258.264131][T16883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3016'.
[  258.280403][T16882] netlink: zone id is out of range
[  258.282271][T16882] netlink: zone id is out of range
[  258.283915][T16882] netlink: zone id is out of range
[  258.285668][T16882] netlink: zone id is out of range
[  258.287393][T16882] netlink: zone id is out of range
[  258.289151][T16882] netlink: zone id is out of range
[  258.290849][T16882] netlink: zone id is out of range
[  258.292678][T16882] netlink: zone id is out of range
[  258.294419][T16882] netlink: zone id is out of range
[  258.296204][T16882] netlink: zone id is out of range
[  258.419894][T16883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3016'.
[  258.516065][T16898] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  258.548803][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  258.592634][T16904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3021'.
[  258.620055][T16904] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3021'.
[  258.672250][T16888] netlink: 'syz.1.3017': attribute type 13 has an invalid length.
[  258.675476][T16888] netlink: 'syz.1.3017': attribute type 17 has an invalid length.
[  258.865265][T16926] netlink: 'syz.2.3026': attribute type 10 has an invalid length.
[  258.874057][T16926] netlink: 'syz.2.3026': attribute type 10 has an invalid length.
[  259.625390][T16930] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  260.085376][T16953] team0 (unregistering): left promiscuous mode
[  261.493219][T17016] 8021q: adding VLAN 0 to HW filter on device bond28
[  261.903290][T17033] can: request_module (can-proto-3) failed.
[  261.911185][T17033] vlan1: entered allmulticast mode
[  261.912991][T17033] bridge0: entered allmulticast mode
[  261.961798][T17033] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  262.066529][T17040] validate_nla: 2 callbacks suppressed
[  262.066539][T17040] netlink: 'syz.2.3059': attribute type 1 has an invalid length.
[  262.139004][T17046] netlink: 'syz.1.3061': attribute type 21 has an invalid length.
[  262.203008][T17049] netlink: 'syz.0.3060': attribute type 1 has an invalid length.
[  262.374960][T17057] syzkaller1: entered promiscuous mode
[  262.376836][T17057] syzkaller1: entered allmulticast mode
[  262.428282][T17064] netlink: 'syz.0.3066': attribute type 1 has an invalid length.
[  262.572401][T17079] netlink: 'syz.1.3070': attribute type 1 has an invalid length.
[  262.587387][T17079] syzkaller1: entered promiscuous mode
[  262.590619][T17079] syzkaller1: entered allmulticast mode
[  262.752996][T17094] netlink: 'syz.0.3074': attribute type 1 has an invalid length.
[  262.806280][T17094] 8021q: adding VLAN 0 to HW filter on device bond30
[  262.809893][T17094] bond29: (slave bond30): making interface the new active one
[  262.813531][T17094] bond29: (slave bond30): Enslaving as an active interface with an up link
[  262.830210][T17094] __nla_validate_parse: 22 callbacks suppressed
[  262.830220][T17094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3074'.
[  262.839691][T17099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3076'.
[  262.840172][T17094] 8021q: adding VLAN 0 to HW filter on device bond29
[  262.881175][T17102] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3077'.
[  262.947509][T17102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3077'.
[  263.044898][T17102] hsr_slave_1 (unregistering): left promiscuous mode
[  263.047876][T17113] netlink: 'syz.0.3079': attribute type 1 has an invalid length.
[  263.088433][T17113] 8021q: adding VLAN 0 to HW filter on device bond31
[  263.096221][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3081'.
[  263.122226][T17108] erspan0: entered allmulticast mode
[  263.149769][T17120] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  264.032662][T17132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3085'.
[  264.241914][T17153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3092'.
[  264.747473][T17190] netlink: 87 bytes leftover after parsing attributes in process `syz.2.3094'.
[  264.845795][T17201] team0: Port device batadv2 removed
[  264.851468][T17201] bond12: (slave bridge9): Removing an active aggregator
[  264.862621][T17201] bond12: (slave bridge9): Releasing backup interface
[  264.869313][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  264.875903][T17201] bond13: (slave veth13): Releasing backup interface
[  264.883443][T17201] bond14: (slave veth19): Releasing active interface
[  264.889143][T17201] team0: Mode changed to "broadcast"
[  264.902366][T17203] team0: Unable to change to the same mode the team is in
[  264.995253][T17215] netlink: 'syz.2.3097': attribute type 1 has an invalid length.
[  264.998495][T17215] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3097'.
[  265.113619][T17228] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  265.160183][ T5310] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  265.276071][T17233] bridge0: port 1(hsr_slave_0) entered blocking state
[  265.278401][T17233] bridge0: port 1(hsr_slave_0) entered disabled state
[  265.486637][T17252] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3108'.
[  265.567153][T17255] net_ratelimit: 13 callbacks suppressed
[  265.567166][T17255] openvswitch: netlink: Duplicate or invalid key (type 0).
[  265.589169][    C0] ------------[ cut here ]------------
[  265.591756][    C0] ODEBUG: free active (active state 0) object: ffff88802fea2890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350
[  265.597419][    C0] WARNING: CPU: 0 PID: 5845 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0
[  265.601548][    C0] Modules linked in:
[  265.603548][    C0] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  265.608263][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  265.612571][    C0] RIP: 0010:debug_print_object+0x16b/0x1e0
[  265.615131][    C0] Code: 4c 89 ff e8 c7 d1 52 fd 4d 8b 0f 48 c7 c7 a0 41 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 aa ff b2 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 d7 70 d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  265.615164][T17255] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.623450][    C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010292
[  265.623488][    C0] RAX: 24e530c507b92b00 RBX: dffffc0000000000 RCX: ffff888105eab980
[  265.623499][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  265.623507][    C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  265.623515][    C0] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffffffff8a6d2b80
[  265.623524][    C0] R13: ffffffff8be34320 R14: ffff88802fea2890 R15: ffffffff8b8cdfa0
[  265.646125][    C0] FS:  00005555812e1500(0000) GS:ffff8880b8616000(0000) knlGS:0000000000000000
[  265.650014][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  265.652810][    C0] CR2: 0000200000449000 CR3: 000000010fa6a000 CR4: 00000000000006f0
[  265.656211][    C0] Call Trace:
[  265.657672][    C0]  <IRQ>
[  265.659166][    C0]  debug_check_no_obj_freed+0x3a2/0x470
[  265.661579][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  265.663830][    C0]  kfree+0x112/0x440
[  265.665544][    C0]  rose_timer_expiry+0x4cb/0x600
[  265.667612][    C0]  call_timer_fn+0x17e/0x5f0
[  265.669337][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  265.671131][    C0]  ? call_timer_fn+0xbe/0x5f0
[  265.672830][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  265.674658][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  265.676340][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.678115][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  265.680012][    C0]  __run_timer_base+0x61a/0x860
[  265.681634][    C0]  ? ktime_get+0x3e/0x1f0
[  265.683125][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  265.684914][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  265.687179][    C0]  run_timer_softirq+0xb7/0x180
[  265.687907][   T33] audit: type=1800 audit(1756951608.764:9): pid=17251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3110" name="memory.events" dev="tmpfs" ino=5431 res=0 errno=0
[  265.688880][    C0]  handle_softirqs+0x286/0x870
[  265.688894][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  265.699831][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  265.701972][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  265.704151][    C0]  __irq_exit_rcu+0xca/0x1f0
[  265.706080][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  265.708256][    C0]  irq_exit_rcu+0x9/0x30
[  265.710101][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  265.712114][    C0]  </IRQ>
[  265.713075][    C0]  <TASK>
[  265.714112][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  265.716574][    C0] RIP: 0010:finish_task_switch+0x26b/0x950
[  265.719105][    C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 6f b6 eb 09 e8 ba 3e 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  265.725533][    C0] RSP: 0018:ffffc900037d7938 EFLAGS: 00000282
[  265.727605][    C0] RAX: 24e530c507b92b00 RBX: 0000000000000000 RCX: 24e530c507b92b00
[  265.730299][    C0] RDX: 0000000000000000 RSI: ffffffff8d9b907c RDI: ffffffff8be33800
[  265.732843][    C0] RBP: ffffc900037d7990 R08: ffffffff8fa38a37 R09: 1ffffffff1f47146
[  265.735414][    C0] R10: dffffc0000000000 R11: fffffbfff1f47147 R12: ffff888105eab980
[  265.737998][    C0] R13: dffffc0000000000 R14: ffff88802389d640 R15: ffff88804b03ab58
[  265.740657][    C0]  ? finish_task_switch+0x266/0x950
[  265.742374][    C0]  __schedule+0x17a0/0x4cc0
[  265.743882][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  265.745974][    C0]  ? ktime_get+0x3e/0x1f0
[  265.747413][    C0]  ? __lock_acquire+0xab9/0xd20
[  265.749114][    C0]  ? __pfx___schedule+0x10/0x10
[  265.750714][    C0]  ? schedule+0x91/0x360
[  265.752077][    C0]  schedule+0x165/0x360
[  265.753387][    C0]  do_nanosleep+0x1c7/0x600
[  265.754825][    C0]  ? do_nanosleep+0x7f/0x600
[  265.756304][    C0]  ? __pfx_do_nanosleep+0x10/0x10
[  265.757900][    C0]  ? __hrtimer_setup+0x187/0x210
[  265.759577][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  265.761312][    C0]  hrtimer_nanosleep+0x169/0x360
[  265.762947][    C0]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  265.764683][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  265.766315][    C0]  ? __pfx_get_timespec64+0x10/0x10
[  265.767969][    C0]  __se_sys_clock_nanosleep+0x2f1/0x380
[  265.769773][    C0]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[  265.771738][    C0]  ? rcu_is_watching+0x15/0xb0
[  265.773710][    C0]  ? do_syscall_64+0xbe/0x3b0
[  265.775649][    C0]  do_syscall_64+0xfa/0x3b0
[  265.777565][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.779786][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.782378][    C0]  ? exc_page_fault+0x9f/0xf0
[  265.784437][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.786996][    C0] RIP: 0033:0x7fa8237c14a5
[  265.788982][    C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8
[  265.796903][    C0] RSP: 002b:00007fff4b26a6f0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  265.800496][    C0] RAX: ffffffffffffffda RBX: 0000000000000c7e RCX: 00007fa8237c14a5
[  265.803908][    C0] RDX: 00007fff4b26a730 RSI: 0000000000000000 RDI: 0000000000000000
[  265.807291][    C0] RBP: 00007fff4b26a79c R08: 0000000000000000 R09: 0000000000000000
[  265.810235][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  265.812941][    C0] R13: 00000000000927c0 R14: 0000000000040caa R15: 00007fff4b26a7f0
[  265.815677][    C0]  </TASK>
[  265.816710][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  265.819047][    C0] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  265.822131][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  265.825473][    C0] Call Trace:
[  265.826607][    C0]  <IRQ>
[  265.827586][    C0]  dump_stack_lvl+0x99/0x250
[  265.829135][    C0]  ? __asan_memcpy+0x40/0x70
[  265.830683][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  265.832449][    C0]  ? __pfx__printk+0x10/0x10
[  265.834014][    C0]  vpanic+0x281/0x750
[  265.835369][    C0]  ? __pfx__printk+0x10/0x10
[  265.836992][    C0]  ? __pfx_vpanic+0x10/0x10
[  265.838528][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  265.840345][    C0]  panic+0xb9/0xc0
[  265.841627][    C0]  ? __pfx_panic+0x10/0x10
[  265.843142][    C0]  __warn+0x31b/0x4b0
[  265.844651][    C0]  ? debug_print_object+0x16b/0x1e0
[  265.846756][    C0]  ? debug_print_object+0x16b/0x1e0
[  265.848761][    C0]  report_bug+0x2be/0x4f0
[  265.850344][    C0]  ? debug_print_object+0x16b/0x1e0
[  265.852089][    C0]  ? debug_print_object+0x16b/0x1e0
[  265.853849][    C0]  ? debug_print_object+0x16d/0x1e0
[  265.855585][    C0]  handle_bug+0x84/0x160
[  265.857033][    C0]  exc_invalid_op+0x1a/0x50
[  265.858549][    C0]  asm_exc_invalid_op+0x1a/0x20
[  265.860573][    C0] RIP: 0010:debug_print_object+0x16b/0x1e0
[  265.863015][    C0] Code: 4c 89 ff e8 c7 d1 52 fd 4d 8b 0f 48 c7 c7 a0 41 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 aa ff b2 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 d7 70 d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  265.869632][    C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010292
[  265.872202][    C0] RAX: 24e530c507b92b00 RBX: dffffc0000000000 RCX: ffff888105eab980
[  265.875232][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  265.877869][    C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  265.880598][    C0] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffffffff8a6d2b80
[  265.883232][    C0] R13: ffffffff8be34320 R14: ffff88802fea2890 R15: ffffffff8b8cdfa0
[  265.885907][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  265.887812][    C0]  debug_check_no_obj_freed+0x3a2/0x470
[  265.889594][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  265.891270][    C0]  kfree+0x112/0x440
[  265.892608][    C0]  rose_timer_expiry+0x4cb/0x600
[  265.894295][    C0]  call_timer_fn+0x17e/0x5f0
[  265.895869][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  265.897706][    C0]  ? call_timer_fn+0xbe/0x5f0
[  265.899302][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  265.901076][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  265.902797][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.904532][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  265.906364][    C0]  __run_timer_base+0x61a/0x860
[  265.908010][    C0]  ? ktime_get+0x3e/0x1f0
[  265.909466][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  265.911264][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  265.913350][    C0]  run_timer_softirq+0xb7/0x180
[  265.915009][    C0]  handle_softirqs+0x286/0x870
[  265.916627][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  265.918258][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  265.920032][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  265.921776][    C0]  __irq_exit_rcu+0xca/0x1f0
[  265.923335][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  265.925087][    C0]  irq_exit_rcu+0x9/0x30
[  265.926522][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  265.928519][    C0]  </IRQ>
[  265.929681][    C0]  <TASK>
[  265.930777][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  265.932709][    C0] RIP: 0010:finish_task_switch+0x26b/0x950
[  265.934661][    C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 6f b6 eb 09 e8 ba 3e 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  265.941066][    C0] RSP: 0018:ffffc900037d7938 EFLAGS: 00000282
[  265.943105][    C0] RAX: 24e530c507b92b00 RBX: 0000000000000000 RCX: 24e530c507b92b00
[  265.945744][    C0] RDX: 0000000000000000 RSI: ffffffff8d9b907c RDI: ffffffff8be33800
[  265.948395][    C0] RBP: ffffc900037d7990 R08: ffffffff8fa38a37 R09: 1ffffffff1f47146
[  265.951035][    C0] R10: dffffc0000000000 R11: fffffbfff1f47147 R12: ffff888105eab980
[  265.953665][    C0] R13: dffffc0000000000 R14: ffff88802389d640 R15: ffff88804b03ab58
[  265.956279][    C0]  ? finish_task_switch+0x266/0x950
[  265.958043][    C0]  __schedule+0x17a0/0x4cc0
[  265.959618][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  265.961748][    C0]  ? ktime_get+0x3e/0x1f0
[  265.963206][    C0]  ? __lock_acquire+0xab9/0xd20
[  265.964818][    C0]  ? __pfx___schedule+0x10/0x10
[  265.966505][    C0]  ? schedule+0x91/0x360
[  265.967961][    C0]  schedule+0x165/0x360
[  265.969391][    C0]  do_nanosleep+0x1c7/0x600
[  265.971098][    C0]  ? do_nanosleep+0x7f/0x600
[  265.972729][    C0]  ? __pfx_do_nanosleep+0x10/0x10
[  265.974425][    C0]  ? __hrtimer_setup+0x187/0x210
[  265.976377][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  265.978492][    C0]  hrtimer_nanosleep+0x169/0x360
[  265.980587][    C0]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  265.982584][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  265.984337][    C0]  ? __pfx_get_timespec64+0x10/0x10
[  265.986096][    C0]  __se_sys_clock_nanosleep+0x2f1/0x380
[  265.987984][    C0]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[  265.990029][    C0]  ? rcu_is_watching+0x15/0xb0
[  265.991987][    C0]  ? do_syscall_64+0xbe/0x3b0
[  265.993899][    C0]  do_syscall_64+0xfa/0x3b0
[  265.995455][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.997271][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.999339][    C0]  ? exc_page_fault+0x9f/0xf0
[  266.000937][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.002931][    C0] RIP: 0033:0x7fa8237c14a5
[  266.004451][    C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8
[  266.010890][    C0] RSP: 002b:00007fff4b26a6f0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  266.013667][    C0] RAX: ffffffffffffffda RBX: 0000000000000c7e RCX: 00007fa8237c14a5
[  266.016322][    C0] RDX: 00007fff4b26a730 RSI: 0000000000000000 RDI: 0000000000000000
[  266.018991][    C0] RBP: 00007fff4b26a79c R08: 0000000000000000 R09: 0000000000000000
[  266.021661][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  266.024326][    C0] R13: 00000000000927c0 R14: 0000000000040caa R15: 00007fff4b26a7f0
[  266.026989][    C0]  </TASK>
[  266.028732][    C0] Kernel Offset: disabled
[  266.030208][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:06:48  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000043 RBX=0000000000000043 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000071b0
R8 =ffff888020cc8237 R9 =1ffff11004199046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99aff8d4 R14=ffffffff99df4420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555812e1500 ffffffff 00c00000
GS =0000 ffff8880b8616000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000449000 CR3=000000010fa6a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f1b12812e53
XMM06=0000000000000000 00007f1b12812e4d XMM07=0000000000000000 00007f1b12812e61
XMM08=0000000000000000 00007f1b12812ee7 XMM09=0000000000000000 00007f1b12812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000505fe RBX=0000000000000001 RCX=0000000000000003 RDX=0000000000000004
RSI=0000000000000005 RDI=ffff88802389d640 RBP=0000000000000000 RSP=ffffc9000775f1b0
R8 =0000000000000000 R9 =ffffffff822c871a R10=ffff88802389df00 R11=ffffffff81ac3820
R12=0000000000000004 R13=0000000000000001 R14=ffff88802389e1a8 R15=ffff88802389e178
RIP=ffffffff819d636f RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f143d8306c0 ffffffff 00c00000
GS =0000 ffff8881a3c16000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000004e3000 CR3=0000000037b7c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f143cb97498 00007f143cb97470 XMM03=00007f143cb974a8 00007f143cb974a0
XMM04=00007f143d6fd100 00007f143cb97460 XMM05=00007f143cb97478 00007f143cb974c0
XMM06=00007f143cb974b8 00007f143cb974b0 XMM07=00007f143cb974a8 00007f143cb974a0
XMM08=0000000000000000 000080fe00040014 XMM09=0000000000000000 00007f143ca12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
