last executing test programs:

1.340976405s ago: executing program 2 (id=1187):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', <r1=>0x0}) (async)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0x10}, {@rand_addr=0x64010100, 0x4e26, 0x12000, 0x3, 0x8001, 0x3}}, 0x44)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r1, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0)

1.271311068s ago: executing program 0 (id=1189):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48)
unshare(0x6a040000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
close(r2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)

1.161409018s ago: executing program 2 (id=1190):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0x300, 0x70bd28, 0x6000001, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000800)
socket$key(0xf, 0x3, 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x3, @local}, 0x67)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
vmsplice(r4, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000180)="015a3c52eb64d54e06f9eea919637b3e88b9ebd0f3009f8d8b4dcee4206375efba00cf25b23693f9700a1984", 0x2c}, {&(0x7f00000003c0)="b89cfb0c51b202735f37413c36fbdac3c3bfb01cdec6ce4f07ce10d9bf71b4acc66e25f8495e367866c50997bfc0667d2f0ebd1c042ef7c9d54d774c74ea1411339fa70258fd85ca9d497bb66adc9240d791c3a51bb70fda873e0639f104c098081bd92590afe839200a71befc4706ab26621af90758cb4a286d49adadf1ef64dfb3fe5eb97e50ec20fb61604a72c568a3d550b716a3be", 0x97}, {0x0}], 0x4, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02c61800040000d0d7ffffffffffff0080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r8=>0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r11, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r7, 0x0, 0x4)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x322, 0x1, 0x1, 0xb, 0x2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)

1.090476393s ago: executing program 0 (id=1191):
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0xffff, 0x2, [0x96fa, 0x1]}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f00000000c0)=0x5, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x7}, 0x8)

929.529096ms ago: executing program 1 (id=1194):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="39000000120003474cbb65e1c3e4ffff06000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) (async, rerun: 32)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
unshare(0x26020480)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (rerun: 32)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r6, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5bb, 0x1d}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x2006c051}, 0x80)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001a000100000000000000000066a602000000000000000000000006000600045cffff7dde9191ba77eb39f037f0ccf561a70b202c2b616aa453103986805e77d09de22b22b4fc92b686f59a037bd6b1300617c829fb6f71a101629ed3b1b0f75644e96dfc6dc92c61aefb1b2d13e5c71e25361f80791b9ab035f20926262d59715dda01b588703af9e86ba511"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x3c, r9, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0xffffffff}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}}, 0x0) (async, rerun: 64)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r7) (rerun: 64)
r11 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_int(r11, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) (async)
ioctl$sock_SIOCINQ(r11, 0x541b, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002ab97000ffdbdf25040000000800020005000000080007007f0000e0070008"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004854) (async)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x3f, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x4850) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0x14) (rerun: 32)

290.99242ms ago: executing program 2 (id=1195):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80002})
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040))

290.57974ms ago: executing program 1 (id=1196):
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)
r0 = socket(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x3f, &(0x7f0000000000)=0x1, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003b0c0000000000001b0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e6576650000100002800500090000000000040006"], 0x40}}, 0x0)

290.205515ms ago: executing program 1 (id=1197):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt(r0, 0xba, 0x8, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1}, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)="55c2990568a475acfd3ae6c1a9c0c734735f14bb9d743c7f1ae89aca5ed98a69261ff1f5ae0347fd45000000000000", 0x2f}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000004800)=ANY=[], 0x60}}, {{0x0, 0x0, &(0x7f0000004100), 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES8=r1, @ANYRES8, @ANYRES8=0x0, @ANYRESDEC, @ANYRES32=r1, @ANYRESOCT], 0x12f8}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001980)="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", 0x1b3}, {&(0x7f00000002c0)="d1649379364beaee95a24c039b8f4493a6a7b52d2f60a9b4133f3b94f1b35a2819cffa02c4f4e9ceadd7197b30c8dd3baef0e55dd297f755eb948befe83ab5dffe7786c6d29671042229a4b3845bb2e0236bf3e6f551399a2734196d7090f485707948a3838e9928df2d51b4b9cb11becab51671572d54b967503c24e505a9f7fe0e8731f88d6efa204568eabdd0da3e53cf2c476842fcc6cbee08b89153d465df744bea716c6249e7428c0d08825abfaa3c7a099e44311995880796dcf290943cd69b6bd002ee2d4c96e000"/215, 0xd7}, {&(0x7f00000003c0)="a2af1a874be18bdbd079c2cfb46dc483d7c51954876ae87ed795131fddbf6154886e68ac86a028cc3945f8c608465f3dd8cfcc5f2c241cc839ed1763c1612f2340cd3b4d62b5e6c69e0f7c0c6a623a3d0e14a1533b831553ab8afebbc769ba1e669895028b4ff427df31099fef4d17849af3935de7b21ae4392f8637201f63cbe698a8fb28f81d8f0ac921ad47b4ace807c3445698def78966328b87cae1b93c6837b6517aedecc19a8aa0d9e71c37e2c24180fe513c883cacc78c916cf733992423993ef0706e1087a99f5dde89", 0xce}, {&(0x7f0000000580)="2d5b2817121fa2a06dbe21d302c6dfa56bfc5055496d93def8e0acbaa36f7d79786ba8f3cecf28376921ac4975c0f58a07840f2605ef9a4357b75ef87a2faf22f58c5f4404f6560b8e842f22a6eda1862a61edc233eaf0ea67bc794951c4759f68b37b5ed7ca4fa233453beb04c0e666452aeeb453003d08b99ad5af34e228f8e998ee4c914199ce7f126e4f8d75dfac1d8f05aefc4a878386fd291b8e09b53d05e4d76bfc0d31dc2bc11f8bf11c7751ca257335b816ad5e6f7b7025b6c2b0ce8138ec8ece9fd2bd3929ca615af4e77df8769e7eb2adf28b2b27745577b8d2b798ff948c28ded21f6d22982ed2b1c2d2ab7b35de50b30f", 0xf7}, {0x0, 0x5f}, {&(0x7f0000000680)="8de8b3f90f07669eadd8349f4c3ad2a9488752d31f3449a42e84fc1cfc6938bc4dd1c8f7517aa21bc55a8455ef6b54507b58ec0284d81270e3cfd76c1113904ec7db14114ca5c6721670967a221c97a5dbe97de29224a6b26a7894c94777d4f2c966ea2ef4461d2a51975181509b76d33cd155d9027d0ace9aa275953ee23946942d9c9702fc1e4bb1219406587d8ae6eede10961f6b4d9b8be38050bd04280c11e646574bb6650963e8f835ec3e89b67e1df9590770f6a3a7433da3e52a1729428ea4eec49681be562ea611f29ad1acc6", 0xd1}], 0x6}}], 0x3, 0x400c404)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x308)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0800001800010000000000080000000a370000", @ANYRES32=0x0, @ANYBLOB="00000000080002000700000014000100fe8000000000000000000000000000aa080002000400000014000100fe8000000000000000000000000000bb0800020004000000"], 0x5c}}, 0x4904)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000000c0))

237.028053ms ago: executing program 2 (id=1198):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983300fc000018c6ba35000000000000000700ff020000000000000000000000eaff0100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

235.596301ms ago: executing program 1 (id=1199):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000070601010000000000000000070000060900020073797a300000000005000100070000000500010007000000050001000700000008000640000000000800064000007fff00de55e34c08b34e36bb925262dc"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

235.265714ms ago: executing program 0 (id=1200):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x7, 0x0, {0x6, 0x1, 0x0, 0x3ff, 0x0, 0x0, 0x1, 0x2}, 0x1, 0xffffffe9, 0xf6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="06002400818300000a001800030303031103000008000c006400000008090d0008000000"], 0x40}}, 0x24040890)

140.716645ms ago: executing program 0 (id=1201):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="33fe000078009106000000000000004a07"], 0xfe33)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094)

140.308889ms ago: executing program 1 (id=1202):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x3c}}, 0x0) (async)

139.730375ms ago: executing program 2 (id=1203):
syz_emit_ethernet(0xe2, &(0x7f0000000100)={@link_local, @link_local, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@ipv4={0x800, @dccp={{0x12, 0x4, 0x1, 0x3f, 0xd0, 0x67, 0x0, 0x5, 0x21, 0x0, @loopback, @remote, {[@lsrr={0x83, 0x2b, 0x57, [@remote, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @local, @multicast1, @rand_addr=0x64010101, @local]}, @noop, @rr={0x7, 0x7, 0xf4, [@empty]}, @end]}}, {{0x4e20, 0x4e22, 0x4, 0x1, 0x9, 0x0, 0x0, 0x1, 0x1, "cf3387", 0x9, "2d42ca"}, "f220921d62975ba88ac326a15b8c396c20da79edc29ad6afa34e7d4085f35da21afc2a3f391856cc8802fc37dd52de85deb464f37e3dc8b48a5a22b228b221a5361efa1eccdc5ebcedf7869af4be314bf488bcea02a2b4a12605a51ff9378b4415e7e861cc7fb0a8672334f49dd6aab70ae975c45811fb50"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x1f2, 0xce8, 0x5c6, 0xeb8]})
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2, 0x6acc}, 0x1c, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'})

89.645319ms ago: executing program 2 (id=1204):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x6, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2000000, 0x3}]}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xc, 0x1}, {0x8, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0xf}, {0xa, 0x1}, {0xd, 0x5}, {0x6, 0x2}, {0x7}]}]}, {0x0, [0x2e, 0x61, 0x0, 0x30]}}, 0x0, 0x92, 0x0, 0x400a, 0xffffffff}, 0x28)
sendmmsg$alg(r3, 0x0, 0x0, 0x40800)
recvmsg(r3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000001}]}}]}, 0x40}}, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0f040000", @ANYRES16=r1, @ANYBLOB="0b0b2bbd7000000000000b00000030000180070006007272000014000300fe80000000000000000000000000003a08000b0073697000080009002d000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000044}, 0x0)

89.442327ms ago: executing program 1 (id=1205):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x29, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x1880}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd4e9}]}, {0x4, 0x4}, {0x56}, {0xc}}}]}]}, 0x6c}}, 0x40)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000040)={0x10, 0x9}, 0x2)

88.295634ms ago: executing program 0 (id=1206):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x88}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800)
ioctl$SIOCX25SCUDMATCHLEN(r4, 0x89e7, &(0x7f0000000000)={0x64})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r6)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xfe79, &(0x7f0000000480)=[@in6={0xa, 0x4e22, 0x1, @remote, 0x7}]}, &(0x7f0000000100)=0x10)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000500)={0x1, 0x4, 0xa4, 0x8003, @vifc_lcl_addr=@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r8=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000040)={r8, 0x180}, 0x8)
setsockopt$inet_tcp_int(r6, 0x6, 0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x3, 0x45, 0x80000000, 0x410, 0xffffffffffffffff, 0x32cf, '\x00', r5, r6, 0x4, 0x4, 0x1}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e00000000000000", @ANYRES32, @ANYBLOB="00230600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r10}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x1}}}, 0x24}}, 0x10)

0s ago: executing program 0 (id=1207):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000240)=0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, r5, 0x36, 0x4, 0x0, @void, @value=r5}, 0x20)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=@allocspi={0x158, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x8}, {@in=@dev, 0x0, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x7fff}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2b, 0x70bd28, 0x70bd29, 0x70bd2b, 0x36405ff2}}, @tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x3c}, 0xa, @in=@multicast1, 0x3503, 0x1, 0x2, 0x4, 0x0, 0x7, 0x7ff}]}]}, 0x158}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r7=>0x0})
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff20004001d"], 0x20}], 0x1}, 0x300)
sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x2, {0x1}, {0x1, 0xff, 0x2}, 0xfe}, {0x3, 0x0, {0x1, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0xff, 0xff}, {0x0, 0xfffffffffffffffb, {0x0, 0xf0, 0x2}, {0x1}, 0x0, 0xff}], 0x60)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r7, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8004)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:7584' (ED25519) to the list of known hosts.
syzkaller login: [   48.323360][ T5829] cgroup: Unknown subsys name 'net'
[   48.463965][ T5829] cgroup: Unknown subsys name 'cpuset'
[   48.467878][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.866667][ T5829] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.665271][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.669084][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.672333][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.676084][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.679780][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.736454][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.739921][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.744312][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.748669][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.752433][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.782465][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.785728][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.788469][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.791813][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.794685][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.932004][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   54.084970][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   54.106180][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.108860][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.111531][ T5842] bridge_slave_0: entered allmulticast mode
[   54.114305][ T5842] bridge_slave_0: entered promiscuous mode
[   54.117871][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.120300][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.123898][ T5842] bridge_slave_1: entered allmulticast mode
[   54.126682][ T5842] bridge_slave_1: entered promiscuous mode
[   54.132817][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   54.203155][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.213172][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.282674][ T5842] team0: Port device team_slave_0 added
[   54.285569][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.287974][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.290489][ T5849] bridge_slave_0: entered allmulticast mode
[   54.294274][ T5849] bridge_slave_0: entered promiscuous mode
[   54.297308][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.299708][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.302309][ T5846] bridge_slave_0: entered allmulticast mode
[   54.305073][ T5846] bridge_slave_0: entered promiscuous mode
[   54.309208][ T5842] team0: Port device team_slave_1 added
[   54.312532][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.314837][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.317207][ T5849] bridge_slave_1: entered allmulticast mode
[   54.319891][ T5849] bridge_slave_1: entered promiscuous mode
[   54.323681][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.326048][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.328305][ T5846] bridge_slave_1: entered allmulticast mode
[   54.330913][ T5846] bridge_slave_1: entered promiscuous mode
[   54.377852][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.380403][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.389199][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.394649][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.397252][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.405901][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.432799][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.438912][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.445947][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.464738][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.493212][ T5849] team0: Port device team_slave_0 added
[   54.512597][ T5842] hsr_slave_0: entered promiscuous mode
[   54.515512][ T5842] hsr_slave_1: entered promiscuous mode
[   54.520018][ T5849] team0: Port device team_slave_1 added
[   54.525370][ T5846] team0: Port device team_slave_0 added
[   54.552142][ T5846] team0: Port device team_slave_1 added
[   54.594441][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.597260][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.607749][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.629357][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.632331][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.643991][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.649048][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.651678][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.662632][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.674533][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.677405][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.687794][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.799689][ T5846] hsr_slave_0: entered promiscuous mode
[   54.802539][ T5846] hsr_slave_1: entered promiscuous mode
[   54.805110][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   54.807048][ T5846] Cannot create hsr debugfs directory
[   54.813293][ T5849] hsr_slave_0: entered promiscuous mode
[   54.815590][ T5849] hsr_slave_1: entered promiscuous mode
[   54.817658][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   54.819523][ T5849] Cannot create hsr debugfs directory
[   54.920312][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.955866][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.973687][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.995301][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.059734][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.077022][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.092891][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.103888][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.130660][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.136664][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.147458][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.158505][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.190039][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.216386][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   55.224695][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.227166][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.238751][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.240986][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.278828][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.288623][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.306369][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   55.325015][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.327871][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.334081][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.336998][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.348572][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   55.373549][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.376672][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.397595][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.400132][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.444261][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.486797][ T5842] veth0_vlan: entered promiscuous mode
[   55.503943][ T5842] veth1_vlan: entered promiscuous mode
[   55.524183][ T5842] veth0_macvtap: entered promiscuous mode
[   55.529955][ T5842] veth1_macvtap: entered promiscuous mode
[   55.553120][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.566711][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.585954][ T5853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.589874][ T5853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.602449][ T5853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.605976][ T5853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.645704][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.675990][ T3601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.678806][ T3601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.689867][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.707765][ T3601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.710617][ T3601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.713909][   T54] Bluetooth: hci0: command tx timeout
[   55.717604][ T5849] veth0_vlan: entered promiscuous mode
[   55.728983][ T5849] veth1_vlan: entered promiscuous mode
[   55.747199][ T5846] veth0_vlan: entered promiscuous mode
[   55.747763][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.758178][ T5846] veth1_vlan: entered promiscuous mode
[   55.767628][ T5849] veth0_macvtap: entered promiscuous mode
[   55.772191][ T5849] veth1_macvtap: entered promiscuous mode
[   55.784497][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.792052][   T54] Bluetooth: hci1: command tx timeout
[   55.796411][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.806400][ T5908] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   55.809270][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.813924][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.816797][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.819587][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.868845][ T5846] veth0_macvtap: entered promiscuous mode
[   55.871288][   T54] Bluetooth: hci2: command tx timeout
[   55.874552][ T5846] veth1_macvtap: entered promiscuous mode
[   55.876835][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.879768][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.911295][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.919083][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.922807][ T3601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.926167][ T5853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.929330][ T3601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.937062][ T5853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.939928][ T5853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.945055][ T5853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.010955][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.014183][ T5913] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   56.018358][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.045388][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.048373][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.051702][ T5915] syzkaller0: entered promiscuous mode
[   56.053563][ T5915] syzkaller0: entered allmulticast mode
[   56.090548][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'.
[   56.211310][ T5922] syzkaller1: entered promiscuous mode
[   56.220155][ T5922] syzkaller1: entered allmulticast mode
[   57.215326][ T5943] syzkaller0: entered promiscuous mode
[   57.217780][ T5943] syzkaller0: entered allmulticast mode
[   57.280859][ T5947] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.667885][ T5953] netlink: 'syz.0.26': attribute type 9 has an invalid length.
[   57.791787][   T54] Bluetooth: hci0: command tx timeout
[   57.826937][ T5959] netlink: 844 bytes leftover after parsing attributes in process `syz.0.21'.
[   57.838803][ T5959] Zero length message leads to an empty skb
[   57.871917][   T54] Bluetooth: hci1: command tx timeout
[   57.952118][   T54] Bluetooth: hci2: command tx timeout
[   57.994964][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'.
[   58.075539][ T5966] syzkaller1: entered promiscuous mode
[   58.077978][ T5966] syzkaller1: entered allmulticast mode
[   58.584637][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'.
[   58.933059][ T6003] netlink: 'syz.0.39': attribute type 1 has an invalid length.
[   58.986749][ T6004] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.063363][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'.
[   59.122869][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'.
[   59.126686][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'.
[   59.130417][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'.
[   59.141608][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'.
[   59.145536][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'.
[   59.149520][ T6010] syz_tun: entered allmulticast mode
[   59.250564][ T6009] syz_tun: left allmulticast mode
[   59.267561][ T6016] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[   59.267625][ T6015] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[   59.408694][ T6030] Driver unsupported XDP return value 0 on prog  (id 18) dev N/A, expect packet loss!
[   59.871272][   T54] Bluetooth: hci0: command tx timeout
[   59.951155][   T54] Bluetooth: hci1: command tx timeout
[   60.031239][   T54] Bluetooth: hci2: command tx timeout
[   60.036640][ T6045] gretap0: entered promiscuous mode
[   60.039372][ T6045] gretap0: left promiscuous mode
[   60.359705][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   60.419544][ T6086] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.448484][    C0] vcan0: j1939_session_tx_dat: 0xffff8880349fe000: queue data error: -100
[   60.560362][ T6093] netlink: 'syz.1.63': attribute type 1 has an invalid length.
[   60.566265][ T6093] netlink: 'syz.1.63': attribute type 3 has an invalid length.
[   60.841559][ T6107] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.419134][ T6151] __nla_validate_parse: 76 callbacks suppressed
[   61.419149][ T6151] netlink: 76 bytes leftover after parsing attributes in process `syz.2.87'.
[   61.487209][ T6153] syzkaller0: entered allmulticast mode
[   61.496049][ T6153] syzkaller0 (unregistering): left allmulticast mode
[   61.574553][ T6164] syzkaller1: entered promiscuous mode
[   61.576530][ T6164] syzkaller1: entered allmulticast mode
[   61.580777][ T6164] netlink: 'syz.2.89': attribute type 1 has an invalid length.
[   61.583511][ T6164] netlink: 'syz.2.89': attribute type 3 has an invalid length.
[   61.586462][ T6164] netlink: 224 bytes leftover after parsing attributes in process `syz.2.89'.
[   61.697249][ T6168] tipc: Started in network mode
[   61.699516][ T6168] tipc: Node identity c25c02cddecb, cluster identity 4711
[   61.703139][ T6168] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.706488][ T6168] syzkaller0: entered promiscuous mode
[   61.708880][ T6168] syzkaller0: entered allmulticast mode
[   61.737380][ T6168] tipc: Resetting bearer <eth:syzkaller0>
[   61.749653][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'.
[   61.753752][ T6167] tipc: Resetting bearer <eth:syzkaller0>
[   61.755715][ T6172] netlink: 'syz.2.93': attribute type 15 has an invalid length.
[   61.764631][ T6167] tipc: Disabling bearer <eth:syzkaller0>
[   61.775358][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'.
[   61.775381][ T5872] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   61.778803][ T6172] netlink: 'syz.2.93': attribute type 15 has an invalid length.
[   61.782693][ T5872] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   61.788679][ T5872] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   61.796246][ T5872] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   61.952328][   T54] Bluetooth: hci0: command tx timeout
[   62.031259][   T54] Bluetooth: hci1: command tx timeout
[   62.121239][   T54] Bluetooth: hci2: command tx timeout
[   62.154893][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.161765][ T6194] batadv_slave_1: entered promiscuous mode
[   62.213675][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'.
[   62.231025][ T6198] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   62.275344][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'.
[   62.349785][ T6209] tipc: Started in network mode
[   62.355736][ T6209] tipc: Node identity 3644938fc1c1, cluster identity 4711
[   62.358261][ T6209] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.360886][ T6209] syzkaller0: entered promiscuous mode
[   62.363954][ T6209] syzkaller0: entered allmulticast mode
[   62.383209][ T6209] tipc: Resetting bearer <eth:syzkaller0>
[   62.387112][ T6208] tipc: Resetting bearer <eth:syzkaller0>
[   62.399960][ T6208] tipc: Disabling bearer <eth:syzkaller0>
[   62.462086][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.110'.
[   62.465078][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.110'.
[   62.518353][ T6222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.526657][ T6226] warning: `syz.0.112' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.579471][ T6229] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.587054][ T6229] syzkaller0: entered promiscuous mode
[   62.589337][ T6229] syzkaller0: entered allmulticast mode
[   62.626416][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'.
[   62.633918][ T6229] tipc: Resetting bearer <eth:syzkaller0>
[   62.637914][ T6228] tipc: Resetting bearer <eth:syzkaller0>
[   62.645428][ T6228] tipc: Disabling bearer <eth:syzkaller0>
[   62.693877][ T6239] syzkaller1: tun_chr_ioctl cmd 1074025677
[   62.696126][ T6239] syzkaller1: linktype set to 778
[   62.698711][ T6239] netlink: 'syz.2.119': attribute type 21 has an invalid length.
[   62.703324][ T6239] netlink: 128 bytes leftover after parsing attributes in process `syz.2.119'.
[   62.706994][ T6239] veth1_to_bond: entered allmulticast mode
[   62.728075][ T6239] bond0: (slave bond_slave_1): Releasing backup interface
[   62.746698][ T6239] veth1_to_bond (unregistering): left allmulticast mode
[   63.450713][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.454002][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.656248][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.676220][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.980325][ T5853] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.002611][ T5853] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.018332][ T5853] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.026641][ T5853] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.191360][ T6300] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:0
[   64.584460][ T6314] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[   65.911719][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   65.923329][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   65.926773][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   65.931518][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   65.977700][ T6414] netlink: 'syz.2.173': attribute type 1 has an invalid length.
[   66.745669][ T6442] __nla_validate_parse: 21 callbacks suppressed
[   66.745679][ T6442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.182'.
[   66.762995][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'.
[   66.766228][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'.
[   67.061028][ T6461] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   67.156412][ T6470] "syz.0.192" (6470) uses obsolete ecb(arc4) skcipher
[   67.160510][ T6475] netlink: 52 bytes leftover after parsing attributes in process `syz.2.193'.
[   67.202575][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.205717][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.285761][ T6470] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.302811][ T6470] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.424515][ T5853] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.428544][ T5853] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.432532][ T5853] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.436426][ T5853] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.467632][ T6483] netlink: 'syz.0.195': attribute type 1 has an invalid length.
[   67.538663][ T6487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.196'.
[   67.840787][ T6507] netlink: 184 bytes leftover after parsing attributes in process `syz.2.203'.
[   67.942715][ T6512] netlink: 260 bytes leftover after parsing attributes in process `syz.1.205'.
[   67.976421][ T6514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.978835][ T6514] syzkaller0: entered promiscuous mode
[   67.980689][ T6514] syzkaller0: entered allmulticast mode
[   67.987788][ T6514] netlink: 'syz.1.206': attribute type 13 has an invalid length.
[   67.991678][ T6514] gretap0: refused to change device tx_queue_len
[   67.994417][ T6514] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   68.004661][ T6514] syzkaller0: mtu less than device minimum
[   68.009880][ T6513] tipc: Resetting bearer <eth:syzkaller0>
[   68.017825][ T6513] tipc: Disabling bearer <eth:syzkaller0>
[   68.054410][ T6517] netlink: 36 bytes leftover after parsing attributes in process `syz.2.207'.
[   68.136267][ T6518] delete_channel: no stack
[   68.170663][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.210'.
[   68.467350][ T6538] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.215'.
[   69.535197][ T6580] tipc: Started in network mode
[   69.536931][ T6580] tipc: Node identity 9a15747243dc, cluster identity 4711
[   69.539226][ T6580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.545593][ T6580] syzkaller0: entered promiscuous mode
[   69.547860][ T6580] syzkaller0: entered allmulticast mode
[   69.566708][ T6580] tipc: Resetting bearer <eth:syzkaller0>
[   69.569992][ T6579] tipc: Resetting bearer <eth:syzkaller0>
[   69.577138][ T6579] tipc: Disabling bearer <eth:syzkaller0>
[   69.607772][ T6585] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.610314][ T6586] syzkaller0: entered promiscuous mode
[   69.612491][ T6586] syzkaller0: entered allmulticast mode
[   69.627442][ T6586] tipc: Resetting bearer <eth:syzkaller0>
[   69.632502][ T6584] tipc: Resetting bearer <eth:syzkaller0>
[   69.638642][ T6584] tipc: Disabling bearer <eth:syzkaller0>
[   69.876291][ T6603] syzkaller1: entered promiscuous mode
[   69.878211][ T6603] syzkaller1: entered allmulticast mode
[   69.918171][ T6608] netlink: 'syz.1.238': attribute type 29 has an invalid length.
[   70.114515][ T6623] delete_channel: no stack
[   70.339851][ T6640] bond0: entered promiscuous mode
[   70.342320][ T6640] bond_slave_0: entered promiscuous mode
[   70.344902][ T6640] bond_slave_1: entered promiscuous mode
[   70.348446][ T6640] bond0: left promiscuous mode
[   70.350611][ T6640] bond_slave_0: left promiscuous mode
[   70.356051][ T6640] bond_slave_1: left promiscuous mode
[   70.388150][ T6641] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   70.785582][ T6652] bond0: option mode: unable to set because the bond device has slaves
[   70.995368][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.998253][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.199670][ T6674] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   71.244163][ T6677] netlink: 'syz.1.263': attribute type 5 has an invalid length.
[   71.252542][ T6674] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   71.265860][ T6677] geneve2: entered promiscuous mode
[   71.267687][ T6677] geneve2: entered allmulticast mode
[   71.274391][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[   71.277403][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[   71.282838][ T6676] netlink: 'syz.2.262': attribute type 1 has an invalid length.
[   71.308373][ T6674] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   71.312108][ T6674] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   71.350797][ T6674] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   71.355041][ T6674] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   71.437625][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   71.440645][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   71.450514][ T5853] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   71.453620][ T5853] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   71.464423][ T5853] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   71.467890][ T5853] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   71.476376][ T5853] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.479479][ T5853] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   72.024451][ T6689] netlink: 'syz.0.267': attribute type 1 has an invalid length.
[   72.027602][ T6689] __nla_validate_parse: 11 callbacks suppressed
[   72.027609][ T6689] netlink: 224 bytes leftover after parsing attributes in process `syz.0.267'.
[   72.038544][ T6689] netlink: 48 bytes leftover after parsing attributes in process `syz.0.267'.
[   72.046561][ T6689] bond0: Unable to set down delay as MII monitoring is disabled
[   72.165744][ T6698] syzkaller0: entered promiscuous mode
[   72.168207][ T6698] syzkaller0: entered allmulticast mode
[   72.176328][ T6698] Bluetooth: MGMT ver 1.23
[   72.360633][ T6720] netlink: 112 bytes leftover after parsing attributes in process `syz.2.277'.
[   72.466220][ T6729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.278'.
[   72.469607][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'.
[   72.553194][ T6733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.283'.
[   72.564205][ T6733] vlan0: entered allmulticast mode
[   72.624820][ T6735] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[   72.675541][ T6739] netlink: 'syz.2.286': attribute type 29 has an invalid length.
[   72.682798][ T6739] netlink: 'syz.2.286': attribute type 29 has an invalid length.
[   72.686662][ T6739] netlink: 500 bytes leftover after parsing attributes in process `syz.2.286'.
[   72.692026][ T6739] unsupported nla_type 58
[   72.722763][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'.
[   72.726327][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'.
[   72.765705][ T6743] sctp: [Deprecated]: syz.2.288 (pid 6743) Use of int in max_burst socket option.
[   72.765705][ T6743] Use struct sctp_assoc_value instead
[   73.077609][ T6753] 8021q: VLANs not supported on wg0
[   73.130864][ T6755] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.136158][ T6755] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   73.180636][ T6756] veth0_to_bridge: entered promiscuous mode
[   73.184186][ T6756] veth0_to_bridge: left promiscuous mode
[   73.195386][ T6755] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.198753][ T6755] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   73.255677][ T6755] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.259901][ T6755] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   73.311018][ T6755] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.316548][ T6755] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   73.328271][ T6758] netlink: 67 bytes leftover after parsing attributes in process `syz.0.293'.
[   73.391563][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.400689][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   73.420168][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.423418][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   73.442399][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.445786][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   73.462442][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.465181][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   73.507961][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   74.344299][ T6806] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.483703][ T6823] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   74.623078][ T6840] team0: No ports can be present during mode change
[   74.808973][ T6860] pim6reg0: tun_chr_ioctl cmd 1074025677
[   74.810995][ T6860] pim6reg0: linktype set to 768
[   74.877831][ T6872] netlink: 'syz.2.320': attribute type 6 has an invalid length.
[   74.894725][ T6872] netlink: 'syz.2.320': attribute type 1 has an invalid length.
[   74.899872][ T6872] netlink: 'syz.2.320': attribute type 1 has an invalid length.
[   74.902877][ T6872] netlink: 'syz.2.320': attribute type 2 has an invalid length.
[   74.937436][ T6877] syzkaller1: entered promiscuous mode
[   74.939286][ T6877] syzkaller1: entered allmulticast mode
[   74.942935][ T6878] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.978780][ T6878] openvswitch: netlink: Key 19 has unexpected len 3 expected 4
[   75.097268][ T6893] netlink: 'syz.1.325': attribute type 29 has an invalid length.
[   75.100744][ T6893] netlink: 'syz.1.325': attribute type 29 has an invalid length.
[   75.106894][ T6895] netlink: 'syz.1.325': attribute type 29 has an invalid length.
[   75.225697][ T6908] openvswitch: netlink: Port -8 exceeds max allowable 65535
[   75.994116][ T6975] geneve2: entered promiscuous mode
[   75.996961][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.000627][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.004363][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.007372][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.177013][ T6992] tipc: Cannot configure node identity twice
[   76.872312][ T7055] netlink: 'syz.0.350': attribute type 3 has an invalid length.
[   76.882204][ T7055] batadv_slave_0: entered promiscuous mode
[   76.884926][ T7054] batadv_slave_0: left promiscuous mode
[   77.453229][ T7067] __nla_validate_parse: 13 callbacks suppressed
[   77.453244][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'.
[   77.586727][   T33] audit: type=1107 audit(1755585005.035:2): pid=7073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   77.625146][ T7071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.678173][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'.
[   77.767622][ T7082] vxcan2: entered promiscuous mode
[   78.807957][ T7109] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.368'.
[   79.034109][ T7123] syzkaller0: entered allmulticast mode
[   79.038388][ T7123] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.169530][ T7133] netlink: 72 bytes leftover after parsing attributes in process `syz.0.375'.
[   79.175283][ T7134] netlink: 72 bytes leftover after parsing attributes in process `syz.0.375'.
[   79.205505][ T7140] netlink: 'syz.2.377': attribute type 3 has an invalid length.
[   79.208525][ T7140] netlink: 'syz.2.377': attribute type 21 has an invalid length.
[   79.212702][ T7140] netlink: 132 bytes leftover after parsing attributes in process `syz.2.377'.
[   79.235133][ T7142] netlink: 44 bytes leftover after parsing attributes in process `syz.0.378'.
[   79.777718][ T7123] tipc: Disabling bearer <eth:syzkaller0>
[   80.013107][ T7179] batadv_slave_0: entered promiscuous mode
[   80.016654][ T7178] batadv_slave_0: left promiscuous mode
[   80.065144][ T7180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.388'.
[   80.086765][ T7184] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   80.500968][ T7201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.392'.
[   81.033161][ T7232] syz.2.405 uses old SIOCAX25GETINFO
[   81.210583][ T7243] can: request_module (can-proto-3) failed.
[   81.244076][ T7243] can: request_module (can-proto-3) failed.
[   81.249783][ T2335] cfg80211: failed to load regulatory.db
[   81.267163][ T7243] can: request_module (can-proto-3) failed.
[   81.816871][ T7270] netlink: 7 bytes leftover after parsing attributes in process `syz.1.414'.
[   82.117777][ T7291] 8021q: VLANs not supported on ip6_vti0
[   82.257678][ T7299] veth3: entered promiscuous mode
[   82.339880][ T7311] netlink: 'syz.0.429': attribute type 11 has an invalid length.
[   82.409879][ T7309] wg1 speed is unknown, defaulting to 1000
[   82.412625][ T7309] wg1 speed is unknown, defaulting to 1000
[   82.417042][ T7309] wg1 speed is unknown, defaulting to 1000
[   82.433601][ T7309] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   82.443801][ T7309] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   82.480738][ T7309] wg1 speed is unknown, defaulting to 1000
[   82.488087][ T7309] wg1 speed is unknown, defaulting to 1000
[   82.493079][ T7309] wg1 speed is unknown, defaulting to 1000
[   82.559906][ T7326] kthread_run failed with err -4
[   82.656669][ T7331] geneve2: left promiscuous mode
[   82.658662][ T7331] geneve2: left allmulticast mode
[   82.666669][ T7331] veth3: left promiscuous mode
[   82.669326][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.673172][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[   82.677190][ T7339] __nla_validate_parse: 3 callbacks suppressed
[   82.677201][ T7339] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.436'.
[   82.686869][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.690064][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[   82.696473][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.703186][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[   82.710881][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.714948][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[   82.810570][ T7339] wg1 speed is unknown, defaulting to 1000
[   82.850063][  T971] IPVS: starting estimator thread 0...
[   82.892959][ T7355] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma?
[   82.963386][ T7352] IPVS: using max 46 ests per chain, 110400 per kthread
[   83.009317][ T7359] trusted_key: syz.1.442 sent an empty control message without MSG_MORE.
[   83.068005][ T7361] nbd: must specify a device to reconfigure
[   83.145454][ T7368] wg1 speed is unknown, defaulting to 1000
[   83.294559][ T7378] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.448'.
[   83.466224][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'.
[   83.553903][ T7397] netlink: 36 bytes leftover after parsing attributes in process `syz.2.451'.
[   83.724899][ T7406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.454'.
[   83.724991][ T7408] netlink: 'syz.2.455': attribute type 5 has an invalid length.
[   83.934325][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'.
[   83.938144][ T7422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.458'.
[   83.965874][ T7426] netlink: 32 bytes leftover after parsing attributes in process `syz.2.461'.
[   84.000110][ T7434] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.462'.
[   84.031243][   T54] Bluetooth: hci2: command tx timeout
[   84.122914][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'.
[   84.169478][ T7461] bridge0: port 3(macvlan0) entered blocking state
[   84.175204][ T7461] bridge0: port 3(macvlan0) entered disabled state
[   84.178248][ T7461] macvlan0: entered allmulticast mode
[   84.180640][ T7461] bridge0: entered allmulticast mode
[   84.217727][ T7461] macvlan0: left allmulticast mode
[   84.219855][ T7461] bridge0: left allmulticast mode
[   84.266770][ T7470] netlink: 'syz.0.469': attribute type 23 has an invalid length.
[   84.277271][ T7454] bridge0: port 3(macvlan0) entered blocking state
[   84.280198][ T7454] bridge0: port 3(macvlan0) entered disabled state
[   84.287204][ T7454] macvlan0: entered allmulticast mode
[   84.289534][ T7454] bridge0: entered allmulticast mode
[   84.306382][ T7454] macvlan0: left allmulticast mode
[   84.308642][ T7454] bridge0: left allmulticast mode
[   84.348577][ T7475] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   84.354272][ T7477] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   84.678460][ T7495] bond1: (slave geneve3): Enslaving as an active interface with an up link
[   84.682518][ T5853] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   84.689756][ T5853] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   84.706324][ T5853] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   84.709993][ T5853] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   84.737251][ T7501] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   84.740224][ T7501] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   84.748493][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.989818][ T7525] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   85.035749][ T7532] netlink: 'syz.2.487': attribute type 3 has an invalid length.
[   85.319109][ T7553] netlink: 'syz.1.497': attribute type 1 has an invalid length.
[   85.346781][ T7551] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.426359][ T7551] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.436727][ T7551] batadv_slave_1: left promiscuous mode
[   85.525277][ T7551] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[   85.528165][ T7551] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[   85.534999][ T7553] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[   85.539176][ T7553] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[   85.558707][ T2335] wg1 speed is unknown, defaulting to 1000
[   85.565136][ T2335] syz0: Port: 1 Link DOWN
[   85.567610][ T7558] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.583675][ T7559] syzkaller0: entered promiscuous mode
[   85.585812][ T7559] syzkaller0: entered allmulticast mode
[   85.591127][ T5853] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.593940][ T5853] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.598735][ T5853] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.602890][ T5853] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.605753][ T5853] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.608701][ T5853] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.618248][ T5853] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.624757][ T5853] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.635640][ T7563] netlink: 'syz.1.499': attribute type 21 has an invalid length.
[   85.643075][ T7563] ipvlan0: entered promiscuous mode
[   85.652272][ T7563] bridge0: port 3(ipvlan0) entered blocking state
[   85.654745][ T7563] bridge0: port 3(ipvlan0) entered disabled state
[   85.657437][ T7563] ipvlan0: entered allmulticast mode
[   85.659246][ T7563] erspan0: entered allmulticast mode
[   85.666149][ T7563] ipvlan0: left allmulticast mode
[   85.668072][ T7563] erspan0: left allmulticast mode
[   85.688668][ T7555] Unsupported xt match
[   85.688680][ T7555] unable to load match
[   85.712466][ T7554] tipc: Resetting bearer <eth:syzkaller0>
[   85.722014][ T7554] tipc: Disabling bearer <eth:syzkaller0>
[   86.133782][ T7592] wg1 speed is unknown, defaulting to 1000
[   86.818647][ T7594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.868360][ T7597] netlink: 'syz.1.512': attribute type 12 has an invalid length.
[   86.872641][ T7597] netlink: 'syz.1.512': attribute type 6 has an invalid length.
[   86.872818][ T7598] netlink: 'syz.1.512': attribute type 12 has an invalid length.
[   86.879427][ T7598] netlink: 'syz.1.512': attribute type 6 has an invalid length.
[   87.375007][ T7626] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   87.742194][ T7656] bond0: option mode: unable to set because the bond device has slaves
[   87.819279][ T7662] validate_nla: 4 callbacks suppressed
[   87.819292][ T7662] netlink: 'syz.0.534': attribute type 6 has an invalid length.
[   88.000051][ T7668] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   88.275234][ T7678] __nla_validate_parse: 18 callbacks suppressed
[   88.275248][ T7678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.543'.
[   89.319460][ T7719] netlink: 96 bytes leftover after parsing attributes in process `syz.2.555'.
[   89.328560][ T7719] vlan0: entered allmulticast mode
[   89.330808][ T7719] erspan0: entered allmulticast mode
[   89.504318][ T7732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.557'.
[   90.058198][ T7757] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.062106][ T7757] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   90.065496][ T7757] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   90.080095][ T7757] tipc: Resetting bearer <eth:syzkaller0>
[   90.195932][ T7763] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   90.212832][   T33] audit: type=1800 audit(1755585017.665:3): pid=7766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.567" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1001 res=0 errno=0
[   90.220550][   T33] audit: type=1800 audit(1755585017.665:4): pid=7766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.567" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1001 res=0 errno=0
[   90.381804][ T7777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'.
[   90.389800][ T7777] vlan0: entered promiscuous mode
[   90.391947][ T7777] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[   90.472577][ T7781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.573'.
[   90.487865][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'.
[   90.778568][ T7806] netlink: 'syz.0.583': attribute type 1 has an invalid length.
[   90.781408][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'.
[   90.784431][ T7806] netlink: 32 bytes leftover after parsing attributes in process `syz.0.583'.
[   90.790768][ T7806] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   90.800702][ T7806] gretap1: entered promiscuous mode
[   90.818970][ T7809] bpq0: entered promiscuous mode
[   90.828035][ T7809] bpq0: entered allmulticast mode
[   90.850660][ T7809] bpq0: left promiscuous mode
[   90.860155][ T7809] bpq0: left allmulticast mode
[   90.860346][ T7814] nftables ruleset with unbound set
[   91.002618][ T7822] syz_tun: entered allmulticast mode
[   91.005035][ T7821] syz_tun: left allmulticast mode
[   91.020970][ T7824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.590'.
[   91.074572][ T6480] tipc: Node number set to 3653858418
[   91.095382][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'.
[   91.336864][ T7851] openvswitch: netlink: Unknown key attributes 2
[   91.794061][ T7882] syzkaller1: entered promiscuous mode
[   91.796209][ T7882] syzkaller1: entered allmulticast mode
[   91.996461][ T7896] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.000080][ T7896] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   92.054622][ T7896] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.058221][ T7896] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   92.116748][ T7896] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.120362][ T7896] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   92.189736][ T7896] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.193773][ T7896] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   92.235641][ T7912] netlink: 'syz.2.615': attribute type 10 has an invalid length.
[   92.247183][ T7914] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.253586][ T7914] tipc: Resetting bearer <eth:syzkaller0>
[   92.264780][ T5853] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   92.267661][ T5853] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   92.276385][ T7913] tipc: Resetting bearer <eth:syzkaller0>
[   92.284404][ T7913] tipc: Disabling bearer <eth:syzkaller0>
[   92.288930][ T5853] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   92.292965][ T5853] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   92.304595][ T5871] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   92.307385][ T5871] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   92.325120][ T5871] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   92.327821][ T5871] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   92.556663][ T7931] syzkaller1: entered promiscuous mode
[   92.563388][ T7931] syzkaller1: entered allmulticast mode
[   92.684291][ T7949] netlink: 'syz.1.626': attribute type 10 has an invalid length.
[   92.689481][ T7949] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.695293][ T7949] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   92.735738][ T7949] netlink: 'syz.1.626': attribute type 10 has an invalid length.
[   92.739284][ T7949] batadv0: entered promiscuous mode
[   92.743727][ T7949] batadv0: entered allmulticast mode
[   92.747300][ T7949] bond0: (slave batadv0): Releasing backup interface
[   92.755078][ T7949] bridge0: port 3(batadv0) entered blocking state
[   92.757850][ T7949] bridge0: port 3(batadv0) entered disabled state
[   93.001276][ T5871] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   93.004590][ T5871] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   93.027143][ T7969] vlan0: entered promiscuous mode
[   93.029321][ T7969] geneve0: entered promiscuous mode
[   93.202724][ T7988] vlan0: entered promiscuous mode
[   93.204460][ T7988] vlan0: entered allmulticast mode
[   93.206417][ T7988] hsr_slave_1: entered allmulticast mode
[   93.209771][ T7986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.218730][ T7989] bridge0: port 3(batadv0) entered disabled state
[   93.224248][ T7989] bridge_slave_0: left allmulticast mode
[   93.226428][ T7989] bridge_slave_0: left promiscuous mode
[   93.228857][ T7989] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.235296][ T7989] bridge_slave_1: left allmulticast mode
[   93.237172][ T7989] bridge_slave_1: left promiscuous mode
[   93.239102][ T7989] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.246247][ T7989] bond0: (slave bond_slave_0): Releasing backup interface
[   93.250771][ T7989] bond0: (slave bond_slave_1): Releasing backup interface
[   93.255017][ T7989] team0: Port device team_slave_0 removed
[   93.257709][ T7989] team0: Port device team_slave_1 removed
[   93.259775][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.265253][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.432270][ T7997] veth0_to_bridge: entered promiscuous mode
[   93.436227][ T7996] veth0_to_bridge: left promiscuous mode
[   93.692371][ T8021] netlink: 'syz.2.651': attribute type 1 has an invalid length.
[   93.695485][ T8021] __nla_validate_parse: 13 callbacks suppressed
[   93.695494][ T8021] netlink: 144 bytes leftover after parsing attributes in process `syz.2.651'.
[   93.702252][ T8017] netlink: 96 bytes leftover after parsing attributes in process `syz.0.649'.
[   93.703014][ T8021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.651'.
[   93.798691][ T8031] netlink: 24 bytes leftover after parsing attributes in process `syz.1.654'.
[   94.083748][ T8060] netlink: 36 bytes leftover after parsing attributes in process `syz.1.663'.
[   94.107002][   T33] audit: type=1800 audit(1755585021.555:5): pid=8066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.664" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1016 res=0 errno=0
[   94.146240][ T8072] syzkaller1: entered promiscuous mode
[   94.149077][ T8072] syzkaller1: entered allmulticast mode
[   94.288954][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'.
[   94.369537][ T8094] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   94.558415][ T8103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.676'.
[   95.039546][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'.
[   95.093487][ T8109] af_packet: tpacket_rcv: packet too big, clamped from 4032 to 3824. macoff=96
[   95.254724][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.680'.
[   95.262317][ T8116] pim6reg: entered allmulticast mode
[   95.265657][ T8116] netlink: 'syz.1.680': attribute type 1 has an invalid length.
[   95.289726][ T8118] netlink: 'syz.0.679': attribute type 4 has an invalid length.
[   95.663637][ T8147] netlink: 'syz.1.688': attribute type 23 has an invalid length.
[   95.963143][ T8163] wg1 speed is unknown, defaulting to 1000
[   96.000297][ T8164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.692'.
[   97.350742][ T8198] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   97.680567][ T8212] netlink: 'syz.0.707': attribute type 1 has an invalid length.
[   97.776501][ T8225] netlink: 'syz.1.710': attribute type 6 has an invalid length.
[   97.782200][ T8225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.869001][ T8232] netlink: 'syz.0.712': attribute type 10 has an invalid length.
[   97.876278][ T8232] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.879713][ T8232] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   98.532519][ T8258] netlink: 'syz.1.717': attribute type 10 has an invalid length.
[   98.893313][ T8260] __nla_validate_parse: 3 callbacks suppressed
[   98.893327][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'.
[   98.899223][ T8260] netlink: 48 bytes leftover after parsing attributes in process `syz.2.719'.
[   98.950142][ T8264] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.959404][ T8264] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   98.963397][ T8264] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   98.967913][ T8264] tipc: Resetting bearer <eth:syzkaller0>
[   98.977204][ T8260] wg1 speed is unknown, defaulting to 1000
[   98.984023][ T8264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'.
[   98.989999][ T8264] tipc: Resetting bearer <eth:syzkaller0>
[   99.045265][   T54] Bluetooth: hci2: link tx timeout
[   99.047699][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   99.058507][ T5845] Bluetooth: hci2: link tx timeout
[   99.060732][ T5845] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   99.162157][ T3017] tipc: Resetting bearer <eth:syzkaller0>
[   99.175727][ T8282] wg1 speed is unknown, defaulting to 1000
[   99.209749][ T8283] netlink: 'syz.2.730': attribute type 13 has an invalid length.
[   99.222496][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'.
[   99.330758][ T8293] vlan2: entered promiscuous mode
[   99.334147][ T8293] bond0: entered promiscuous mode
[   99.336462][ T8293] vlan2: entered allmulticast mode
[   99.338634][ T8293] bond0: entered allmulticast mode
[   99.453399][ T8301] ip6tnl1: entered promiscuous mode
[   99.455595][ T8301] ip6tnl1: entered allmulticast mode
[   99.534984][ T8309] sctp: [Deprecated]: syz.1.732 (pid 8309) Use of struct sctp_assoc_value in delayed_ack socket option.
[   99.534984][ T8309] Use struct sctp_sack_info instead
[   99.601890][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.735'.
[   99.657758][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'.
[  100.001762][ T6481] tipc: Node number set to 479658701
[  101.072153][ T5845] Bluetooth: hci2: command 0x0405 tx timeout
[  123.504347][ T8330] netlink: 32 bytes leftover after parsing attributes in process `syz.0.739'.
[  123.509499][ T8330] netlink: 32 bytes leftover after parsing attributes in process `syz.0.739'.
[  123.531956][ T8331] openvswitch: netlink: Flow actions attr not present in new flow.
[  123.682174][ T8356] tun0: tun_chr_ioctl cmd 2147767520
[  123.750733][ T8362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.750'.
[  123.757115][ T8362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.750'.
[  123.761023][ T8362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.750'.
[  123.775903][ T8362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.750'.
[  123.935472][ T8368] netlink: 'syz.0.753': attribute type 12 has an invalid length.
[  123.938935][ T8368] netlink: 'syz.0.753': attribute type 18 has an invalid length.
[  123.942836][ T8368] netlink: 'syz.0.753': attribute type 21 has an invalid length.
[  123.945887][ T8368] netlink: 'syz.0.753': attribute type 26 has an invalid length.
[  123.949091][ T8368] netlink: 'syz.0.753': attribute type 12 has an invalid length.
[  123.955740][ T8368] netlink: 'syz.0.753': attribute type 18 has an invalid length.
[  123.959414][ T8368] netlink: 'syz.0.753': attribute type 21 has an invalid length.
[  123.964871][ T8368] netlink: 'syz.0.753': attribute type 26 has an invalid length.
[  123.977129][ T8368] netlink: 'syz.0.753': attribute type 12 has an invalid length.
[  123.979996][ T8368] netlink: 'syz.0.753': attribute type 18 has an invalid length.
[  124.269890][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.761'.
[  124.296247][ T8402] netlink: 44 bytes leftover after parsing attributes in process `syz.1.762'.
[  124.388650][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'.
[  124.624832][ T8424] syzkaller1: entered promiscuous mode
[  124.628862][ T8424] syzkaller1: entered allmulticast mode
[  124.680904][ T8429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.768'.
[  124.720328][ T8432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  124.728110][ T8433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  125.169006][ T8465] bpq0: entered promiscuous mode
[  125.275680][ T8478] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.345814][ T8483] tipc: Enabled bearer <eth:gre0>, priority 10
[  125.714362][ T8520] unsupported nlmsg_type 40
[  125.809418][ T8528] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.431566][ T8576] block nbd0: server does not support multiple connections per device.
[  126.437199][ T8576] block nbd0: shutting down sockets
[  126.460879][ T8587] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  126.463850][   T51] tipc: Node number set to 4152726415
[  126.737707][ T8613] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  126.830289][ T8617] vlan0: entered allmulticast mode
[  126.849083][ T8616] vlan0: entered allmulticast mode
[  127.155324][ T8635] IPVS: Unknown mcast interface: vcan0
[  127.205305][ T8639] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  127.530930][ T8662] tipc: New replicast peer: 255.255.255.255
[  127.536208][ T8662] tipc: Enabled bearer <udp:syz2>, priority 10
[  127.553865][ T8661] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  128.067135][ T8711] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_cmd_wq": -EINTR
[  128.155394][ T8739] bond1: entered promiscuous mode
[  128.164992][ T8739] bond1: entered allmulticast mode
[  128.167429][ T8739] 8021q: adding VLAN 0 to HW filter on device bond1
[  128.271386][ T5845] Bluetooth: hci2: command 0x0405 tx timeout
[  128.586260][ T8773] __nla_validate_parse: 26 callbacks suppressed
[  128.586272][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'.
[  128.595146][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'.
[  128.622921][ T8777] netlink: 36 bytes leftover after parsing attributes in process `syz.0.863'.
[  128.657113][ T8779] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.763790][ T8796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.870'.
[  128.767318][ T8796] netlink: 64 bytes leftover after parsing attributes in process `syz.0.870'.
[  128.770734][ T8796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.870'.
[  128.799787][ T8796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.870'.
[  128.807952][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.869'.
[  129.154016][ T8837] ip6tnl2: entered promiscuous mode
[  129.190691][ T8842] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  129.200106][ T8842] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  129.207397][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'.
[  129.237933][ T8847] netlink: 9 bytes leftover after parsing attributes in process `syz.0.885'.
[  129.244440][ T8847] 0: renamed from hsr0
[  129.250170][ T8847] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  129.262775][ T8847] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  129.266607][ T8847] 0: entered allmulticast mode
[  129.268471][ T8847] hsr_slave_0: entered allmulticast mode
[  129.271016][ T8847] hsr_slave_1: entered allmulticast mode
[  129.282747][ T8847] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  129.417927][ T8858] validate_nla: 130 callbacks suppressed
[  129.417951][ T8858] netlink: 'syz.1.889': attribute type 1 has an invalid length.
[  129.533375][ T8884] delete_channel: no stack
[  129.944581][ T5853] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.947562][ T5853] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.950797][ T5853] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.953933][ T5853] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.361244][ T5845] Bluetooth: hci2: command 0x0405 tx timeout
[  130.450001][ T8974] unknown channel width for channel at 909000KHz?
[  130.735942][ T8994] tun0: tun_chr_ioctl cmd 2147767520
[  131.638561][ T9016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.662670][ T9016] tipc: Disabling bearer <eth:syzkaller0>
[  131.677446][ T9022] veth0_to_bond: entered allmulticast mode
[  131.737418][ T9031] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.742592][ T9032] tipc: Resetting bearer <eth:syzkaller0>
[  131.744806][ T9031] syzkaller0: entered promiscuous mode
[  131.750063][ T9030] tipc: Resetting bearer <eth:syzkaller0>
[  131.759191][ T9030] tipc: Disabling bearer <eth:syzkaller0>
[  131.934675][ T9045] netlink: 'syz.1.934': attribute type 1 has an invalid length.
[  131.959955][ T9045] 8021q: adding VLAN 0 to HW filter on device bond1
[  131.972403][ T9045] bond1: (slave gretap1): making interface the new active one
[  131.976971][ T9045] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  132.194233][ T9063] wg1 speed is unknown, defaulting to 1000
[  132.289563][ T9067] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  132.444803][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.448959][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.766126][ T9083] team0: Port device gtp1 added
[  133.025489][ T9102] netlink: 'syz.2.963': attribute type 10 has an invalid length.
[  133.061459][ T9102] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  133.145905][ T9106] rdma_rxe: rxe_newlink: failed to add lo
[  133.153156][ T9105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.598319][ T9134] __nla_validate_parse: 22 callbacks suppressed
[  133.598337][ T9134] netlink: 92 bytes leftover after parsing attributes in process `syz.0.974'.
[  133.629388][ T9138] netlink: 'syz.0.975': attribute type 1 has an invalid length.
[  133.658697][ T9138] 8021q: adding VLAN 0 to HW filter on device bond2
[  133.938309][ T9157] netlink: 'syz.0.981': attribute type 2 has an invalid length.
[  133.941814][ T9157] netlink: 244 bytes leftover after parsing attributes in process `syz.0.981'.
[  134.019295][ T9161] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  134.026570][ T9164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.983'.
[  134.055634][ T9168] team0: Device gtp0 is of different type
[  134.180829][ T9180] wg1 speed is unknown, defaulting to 1000
[  134.287912][ T9192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.991'.
[  134.357136][ T9200] netlink: 52 bytes leftover after parsing attributes in process `syz.1.993'.
[  134.360558][ T9199] netlink: 52 bytes leftover after parsing attributes in process `syz.1.993'.
[  134.365894][ T9199] netlink: 'syz.1.993': attribute type 4 has an invalid length.
[  134.370108][ T9200] netlink: 'syz.1.993': attribute type 4 has an invalid length.
[  134.420844][ T9205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.994'.
[  134.424928][ T9205] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  134.475667][ T9207] netlink: 'syz.1.995': attribute type 22 has an invalid length.
[  134.479086][ T9207] netlink: 168 bytes leftover after parsing attributes in process `syz.1.995'.
[  134.737979][ T9221] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1001'.
[  134.747349][ T9221] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1001'.
[  135.128357][ T9233] wg1 speed is unknown, defaulting to 1000
[  135.273714][ T9254] netlink: 'syz.0.1013': attribute type 11 has an invalid length.
[  135.584220][ T9292] sctp: [Deprecated]: syz.2.1026 (pid 9292) Use of struct sctp_assoc_value in delayed_ack socket option.
[  135.584220][ T9292] Use struct sctp_sack_info instead
[  135.844065][ T9318] bond2: entered promiscuous mode
[  135.846296][ T9318] bond2: entered allmulticast mode
[  135.848763][ T9318] 8021q: adding VLAN 0 to HW filter on device bond2
[  136.769348][ T9339] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  136.773986][ T9339] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  137.023866][ T9363] netlink: 'syz.0.1046': attribute type 1 has an invalid length.
[  137.053755][ T9363] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  137.058114][ T9363] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  137.097229][ T9372] netlink: 'syz.1.1048': attribute type 9 has an invalid length.
[  137.158781][ T9370] wg1 speed is unknown, defaulting to 1000
[  137.301202][ T9381] bridge0: port 1(syz_tun) entered blocking state
[  137.304159][ T9381] bridge0: port 1(syz_tun) entered disabled state
[  137.311824][ T9381] syz_tun: entered allmulticast mode
[  137.324350][ T9381] syz_tun: entered promiscuous mode
[  137.654808][ T9400] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  137.906558][ T9417] netlink: 'syz.2.1062': attribute type 1 has an invalid length.
[  137.909498][ T9417] netlink: 'syz.2.1062': attribute type 11 has an invalid length.
[  138.197347][ T9439] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.319736][ T9453] IPVS: length: 163 != 8
[  138.330758][ T9447] netlink: 'syz.2.1073': attribute type 6 has an invalid length.
[  138.345229][ T9447] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  138.350391][ T9447] CPU: 1 UID: 0 PID: 9447 Comm: syz.2.1073 Not tainted syzkaller #0 PREEMPT(full) 
[  138.350409][ T9447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.350417][ T9447] Call Trace:
[  138.350423][ T9447]  <TASK>
[  138.350430][ T9447]  dump_stack_lvl+0x189/0x250
[  138.350457][ T9447]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.350502][ T9447]  ? __pfx__printk+0x10/0x10
[  138.350527][ T9447]  ? kernfs_path_from_node+0x2f/0x290
[  138.350542][ T9447]  ? kernfs_path_from_node+0x250/0x290
[  138.350554][ T9447]  ? kernfs_path_from_node+0x2f/0x290
[  138.350571][ T9447]  sysfs_warn_dup+0x8e/0xa0
[  138.350585][ T9447]  sysfs_do_create_link_sd+0xc0/0x110
[  138.350601][ T9447]  device_add_class_symlinks+0x1cf/0x240
[  138.350620][ T9447]  device_add+0x475/0xb50
[  138.350636][ T9447]  wiphy_register+0x1ba6/0x28d0
[  138.350678][ T9447]  ? __pfx_wiphy_register+0x10/0x10
[  138.350696][ T9447]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  138.350717][ T9447]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  138.350743][ T9447]  ieee80211_register_hw+0x3425/0x4080
[  138.350770][ T9447]  ? ieee80211_register_hw+0x13f1/0x4080
[  138.350789][ T9447]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  138.350805][ T9447]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  138.350828][ T9447]  ? __hrtimer_setup+0x187/0x210
[  138.350841][ T9447]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  138.350863][ T9447]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  138.350902][ T9447]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  138.350916][ T9447]  ? trace_kmalloc+0x1f/0xd0
[  138.350931][ T9447]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  138.350948][ T9447]  ? kstrndup+0xbf/0x160
[  138.350970][ T9447]  hwsim_new_radio_nl+0xea4/0x1b10
[  138.350988][ T9447]  ? __pfx___nla_validate_parse+0x10/0x10
[  138.351019][ T9447]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  138.351066][ T9447]  ? __nla_parse+0x40/0x60
[  138.351090][ T9447]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  138.351114][ T9447]  genl_family_rcv_msg_doit+0x215/0x300
[  138.351136][ T9447]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  138.351162][ T9447]  ? bpf_lsm_capable+0x9/0x20
[  138.351179][ T9447]  ? security_capable+0x7e/0x2e0
[  138.351203][ T9447]  genl_rcv_msg+0x60e/0x790
[  138.351223][ T9447]  ? __pfx_genl_rcv_msg+0x10/0x10
[  138.351237][ T9447]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  138.351267][ T9447]  netlink_rcv_skb+0x208/0x470
[  138.351283][ T9447]  ? __lock_acquire+0xab9/0xd20
[  138.351302][ T9447]  ? __pfx_genl_rcv_msg+0x10/0x10
[  138.351316][ T9447]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  138.351348][ T9447]  ? down_read+0x1ad/0x2e0
[  138.351370][ T9447]  genl_rcv+0x28/0x40
[  138.351382][ T9447]  netlink_unicast+0x82f/0x9e0
[  138.351406][ T9447]  ? __pfx_netlink_unicast+0x10/0x10
[  138.351424][ T9447]  ? netlink_sendmsg+0x642/0xb30
[  138.351441][ T9447]  ? skb_put+0x11b/0x210
[  138.351456][ T9447]  netlink_sendmsg+0x805/0xb30
[  138.351513][ T9447]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.351535][ T9447]  ? aa_sock_msg_perm+0xf1/0x1d0
[  138.351557][ T9447]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  138.351571][ T9447]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.351592][ T9447]  __sock_sendmsg+0x21c/0x270
[  138.351615][ T9447]  ____sys_sendmsg+0x505/0x830
[  138.351633][ T9447]  ? __pfx_____sys_sendmsg+0x10/0x10
[  138.351654][ T9447]  ? import_iovec+0x74/0xa0
[  138.351680][ T9447]  ___sys_sendmsg+0x21f/0x2a0
[  138.351697][ T9447]  ? __pfx____sys_sendmsg+0x10/0x10
[  138.351742][ T9447]  ? __fget_files+0x2a/0x420
[  138.351762][ T9447]  ? __fget_files+0x3a0/0x420
[  138.351789][ T9447]  __x64_sys_sendmsg+0x19b/0x260
[  138.351805][ T9447]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  138.351825][ T9447]  ? rcu_is_watching+0x15/0xb0
[  138.351843][ T9447]  ? do_syscall_64+0xbe/0x3b0
[  138.351865][ T9447]  do_syscall_64+0xfa/0x3b0
[  138.351881][ T9447]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.351919][ T9447]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.351932][ T9447]  ? exc_page_fault+0x9f/0xf0
[  138.351952][ T9447]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.351965][ T9447] RIP: 0033:0x7f011d18ebe9
[  138.351978][ T9447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.351989][ T9447] RSP: 002b:00007f011e050038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  138.352004][ T9447] RAX: ffffffffffffffda RBX: 00007f011d3b5fa0 RCX: 00007f011d18ebe9
[  138.352014][ T9447] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b
[  138.352023][ T9447] RBP: 00007f011d211e19 R08: 0000000000000000 R09: 0000000000000000
[  138.352031][ T9447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.352039][ T9447] R13: 00007f011d3b6038 R14: 00007f011d3b5fa0 R15: 00007ffe4c357da8
[  138.352062][ T9447]  </TASK>
[  138.558010][ T9456] netlink: 'syz.0.1076': attribute type 1 has an invalid length.
[  138.589137][ T9456] 8021q: adding VLAN 0 to HW filter on device bond4
[  138.604717][ T9455] 8021q: adding VLAN 0 to HW filter on device bond4
[  138.607846][ T9455] bond4: (slave ipip0): The slave device specified does not support setting the MAC address
[  138.613006][ T9455] bond4: (slave ipip0): Error -95 calling set_mac_address
[  138.652028][ T9456] macvlan0: entered promiscuous mode
[  138.655443][ T9456] macvlan0: entered allmulticast mode
[  138.658506][ T9456] bond4: entered promiscuous mode
[  138.660899][ T9456] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  138.667209][ T9456] bond4: left promiscuous mode
[  138.867628][ T9475] __nla_validate_parse: 21 callbacks suppressed
[  138.867646][ T9475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1080'.
[  138.944801][ T9482] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  138.967102][ T9482] syzkaller1: entered promiscuous mode
[  138.969691][ T9482] syzkaller1: entered allmulticast mode
[  139.183554][ T9507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1092'.
[  139.189653][ T9507] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1092'.
[  139.505329][ T9533] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.528207][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'.
[  139.535053][ T9533] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1101'.
[  139.538629][ T9533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1101'.
[  139.559256][ T9532] tipc: Resetting bearer <eth:syzkaller0>
[  139.587735][ T9532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1100'.
[  139.683666][ T9543] sctp: [Deprecated]: syz.2.1103 (pid 9543) Use of struct sctp_assoc_value in delayed_ack socket option.
[  139.683666][ T9543] Use struct sctp_sack_info instead
[  139.719356][ T9546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1105'.
[  139.793548][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'.
[  139.801802][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1106'.
[  140.160520][ T9568] 8021q: adding VLAN 0 to HW filter on device bond5
[  140.164963][ T9568] bond0: (slave bond5): Enslaving as an active interface with an up link
[  140.207037][ T9573] netlink: 'syz.0.1114': attribute type 4 has an invalid length.
[  140.246268][ T9576] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  140.255771][ T9576] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  140.445653][ T9578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.623434][ T9585] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20002
[  140.627132][ T9587] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20002
[  140.747855][ T9595] bpq0: entered allmulticast mode
[  140.756468][ T5872] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.759862][ T5872] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.763544][ T9595] bpq0: left promiscuous mode
[  140.765288][ T9595] bpq0: left allmulticast mode
[  140.767531][ T5872] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.770364][ T5872] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.993578][ T9618] netlink: 'syz.0.1130': attribute type 33 has an invalid length.
[  141.023417][ T9620] netlink: 'syz.1.1131': attribute type 16 has an invalid length.
[  141.056249][ T9620] team1: entered promiscuous mode
[  141.058673][ T9620] team1: entered allmulticast mode
[  141.103903][ T9626] vlan1: entered promiscuous mode
[  141.108001][ T9626] syz_tun: entered promiscuous mode
[  141.323336][ T9651] batadv_slave_1: entered promiscuous mode
[  141.388291][ T9651] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  141.392614][   T51] IPVS: starting estimator thread 0...
[  141.395802][ T9650] batadv_slave_1: left promiscuous mode
[  141.491924][ T9654] IPVS: using max 78 ests per chain, 187200 per kthread
[  141.821992][ T9683] netlink: 'syz.2.1148': attribute type 21 has an invalid length.
[  141.839463][ T9683] unknown channel width for channel at 909000KHz?
[  141.890105][ T9695] 0{X: renamed from gretap0
[  141.896741][ T9695] 0{X: entered allmulticast mode
[  141.900622][ T9695] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  141.918020][ T9690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  142.005162][ T9703] syzkaller1: entered promiscuous mode
[  142.010316][ T9703] syzkaller1: entered allmulticast mode
[  142.389901][ T9736] bridge0: port 2(macvlan0) entered blocking state
[  142.393632][ T9736] bridge0: port 2(macvlan0) entered disabled state
[  142.397642][ T9736] macvlan0: entered allmulticast mode
[  142.403177][ T9736] bridge0: entered allmulticast mode
[  142.408867][ T9736] macvlan0: left allmulticast mode
[  142.411706][ T9736] bridge0: left allmulticast mode
[  143.141377][ T9774] ip6tnl1: entered promiscuous mode
[  143.390514][ T9784] netlink: 'syz.1.1182': attribute type 1 has an invalid length.
[  143.501366][ T9793] pim6reg1: entered promiscuous mode
[  143.503451][ T9793] pim6reg1: entered allmulticast mode
[  143.648173][ T9800] sit2: entered promiscuous mode
[  143.657162][ T9800] syzkaller1: entered promiscuous mode
[  143.659342][ T9800] syzkaller1: entered allmulticast mode
[  143.663512][ T9800] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  143.666522][ T9800] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  143.669501][ T9800] tipc: Resetting bearer <eth:syzkaller0>
[  143.709263][ T9802] wg1 speed is unknown, defaulting to 1000
[  144.688371][ T9854] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  144.692550][ T9854] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  144.696952][ T9854] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  144.700349][ T9854] tipc: Resetting bearer <eth:syzkaller0>
[  144.703850][ T9856] __nla_validate_parse: 26 callbacks suppressed
[  144.703858][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'.
[  144.809841][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'.
[  144.835716][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1206'.
[  144.859078][ T9869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1205'.
[  144.862208][ T9869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1205'.
[  144.908285][ T9872] ==================================================================
[  144.911316][ T9872] BUG: KASAN: use-after-free in xfrm_alloc_spi+0x570/0xf30
[  144.914231][ T9872] Read of size 4 at addr ffff88811dba76c4 by task syz.0.1207/9872
[  144.918044][ T9872] 
[  144.918971][ T9872] CPU: 1 UID: 0 PID: 9872 Comm: syz.0.1207 Not tainted syzkaller #0 PREEMPT(full) 
[  144.918983][ T9872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.918991][ T9872] Call Trace:
[  144.918998][ T9872]  <TASK>
[  144.919003][ T9872]  dump_stack_lvl+0x189/0x250
[  144.919021][ T9872]  ? __kasan_check_byte+0x12/0x40
[  144.919039][ T9872]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.919053][ T9872]  ? lock_release+0x4b/0x3e0
[  144.919073][ T9872]  ? __virt_addr_valid+0x4a5/0x5c0
[  144.919090][ T9872]  print_report+0xca/0x240
[  144.919102][ T9872]  ? xfrm_alloc_spi+0x570/0xf30
[  144.919115][ T9872]  kasan_report+0x118/0x150
[  144.919131][ T9872]  ? xfrm_alloc_spi+0x570/0xf30
[  144.919144][ T9872]  xfrm_alloc_spi+0x570/0xf30
[  144.919155][ T9872]  ? xfrm_alloc_spi+0x2a0/0xf30
[  144.919169][ T9872]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  144.919179][ T9872]  ? xfrm_find_acq+0x87/0xa0
[  144.919191][ T9872]  xfrm_alloc_userspi+0x70b/0xc90
[  144.919207][ T9872]  ? apparmor_capable+0x137/0x1b0
[  144.919222][ T9872]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  144.919234][ T9872]  ? __nla_parse+0x40/0x60
[  144.919250][ T9872]  xfrm_user_rcv_msg+0x7a3/0xab0
[  144.919264][ T9872]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  144.919284][ T9872]  ? __pfx___mutex_trylock_common+0x10/0x10
[  144.919296][ T9872]  ? rcu_is_watching+0x15/0xb0
[  144.919307][ T9872]  ? trace_contention_end+0x39/0x120
[  144.919317][ T9872]  ? __mutex_lock+0x335/0x1360
[  144.919337][ T9872]  netlink_rcv_skb+0x208/0x470
[  144.919353][ T9872]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  144.919364][ T9872]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  144.919381][ T9872]  ? netlink_deliver_tap+0x2e/0x1b0
[  144.919395][ T9872]  ? netlink_deliver_tap+0x2e/0x1b0
[  144.919438][ T9872]  xfrm_netlink_rcv+0x79/0x90
[  144.919452][ T9872]  netlink_unicast+0x82f/0x9e0
[  144.919468][ T9872]  ? __pfx_netlink_unicast+0x10/0x10
[  144.919484][ T9872]  ? netlink_sendmsg+0x642/0xb30
[  144.919500][ T9872]  ? skb_put+0x11b/0x210
[  144.919512][ T9872]  netlink_sendmsg+0x805/0xb30
[  144.919531][ T9872]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.919549][ T9872]  ? aa_sock_msg_perm+0xf1/0x1d0
[  144.919567][ T9872]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  144.919581][ T9872]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.919598][ T9872]  __sock_sendmsg+0x21c/0x270
[  144.919613][ T9872]  ____sys_sendmsg+0x505/0x830
[  144.919624][ T9872]  ? __pfx_____sys_sendmsg+0x10/0x10
[  144.919637][ T9872]  ? import_iovec+0x74/0xa0
[  144.919649][ T9872]  ___sys_sendmsg+0x21f/0x2a0
[  144.919660][ T9872]  ? __pfx____sys_sendmsg+0x10/0x10
[  144.919678][ T9872]  ? __fget_files+0x2a/0x420
[  144.919693][ T9872]  ? __fget_files+0x3a0/0x420
[  144.919711][ T9872]  __x64_sys_sendmsg+0x19b/0x260
[  144.919722][ T9872]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  144.919734][ T9872]  ? rcu_is_watching+0x15/0xb0
[  144.919745][ T9872]  ? do_syscall_64+0xbe/0x3b0
[  144.919761][ T9872]  do_syscall_64+0xfa/0x3b0
[  144.919774][ T9872]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.919787][ T9872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.919798][ T9872]  ? exc_page_fault+0x9f/0xf0
[  144.919811][ T9872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.919821][ T9872] RIP: 0033:0x7f0725f8ebe9
[  144.919832][ T9872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.919841][ T9872] RSP: 002b:00007f0726e79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  144.919854][ T9872] RAX: ffffffffffffffda RBX: 00007f07261b5fa0 RCX: 00007f0725f8ebe9
[  144.919862][ T9872] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007
[  144.919868][ T9872] RBP: 00007f0726011e19 R08: 0000000000000000 R09: 0000000000000000
[  144.919875][ T9872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.919881][ T9872] R13: 00007f07261b6038 R14: 00007f07261b5fa0 R15: 00007fff1f0d3f08
[  144.919892][ T9872]  </TASK>
[  144.919896][ T9872] 
[  144.972201][ T9880] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1209'.
[  144.972942][ T9872] The buggy address belongs to the physical page:
[  144.972959][ T9872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x11dba7
[  144.975056][ T9880] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1209'.
[  144.976866][ T9872] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  144.979095][ T9880] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1209'.
[  144.981187][ T9872] raw: 057ff00000000000 ffffea000476e988 ffffea00044b5e08 0000000000000000
[  144.981198][ T9872] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000
[  144.981204][ T9872] page dumped because: kasan: bad access detected
[  144.981210][ T9872] page_owner tracks the page as freed
[  144.981215][ T9872] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), pid 9646, tgid 9645 (syz.0.1138), ts 141306597657, free_ts 141372357544
[  144.981235][ T9872]  post_alloc_hook+0x240/0x2a0
[  144.981257][ T9872]  get_page_from_freelist+0x21e4/0x22c0
[  144.981269][ T9872]  __alloc_frozen_pages_noprof+0x181/0x370
[  145.113066][ T9872]  alloc_pages_mpol+0x232/0x4a0
[  145.115038][ T9872]  alloc_pages_noprof+0xa9/0x190
[  145.116968][ T9872]  __vmalloc_node_range_noprof+0x97d/0x12f0
[  145.119314][ T9872]  vmalloc_noprof+0xb2/0xf0
[  145.121140][ T9872]  ip_set_sockfn_get+0x13a/0xc30
[  145.123101][ T9872]  nf_getsockopt+0x26e/0x290
[  145.124890][ T9872]  ip_getsockopt+0x1c4/0x220
[  145.126750][ T9872]  do_sock_getsockopt+0x372/0x450
[  145.128729][ T9872]  __x64_sys_getsockopt+0x1a5/0x250
[  145.130754][ T9872]  do_syscall_64+0xfa/0x3b0
[  145.132574][ T9872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.134935][ T9872] page last free pid 9646 tgid 9645 stack trace:
[  145.137432][ T9872]  __free_frozen_pages+0xbc4/0xd30
[  145.139429][ T9872]  vfree+0x25a/0x400
[  145.140998][ T9872]  ip_set_sockfn_get+0x8fe/0xc30
[  145.142970][ T9872]  nf_getsockopt+0x26e/0x290
[  145.144726][ T9872]  ip_getsockopt+0x1c4/0x220
[  145.146564][ T9872]  do_sock_getsockopt+0x372/0x450
[  145.148560][ T9872]  __x64_sys_getsockopt+0x1a5/0x250
[  145.150563][ T9872]  do_syscall_64+0xfa/0x3b0
[  145.152292][ T9872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.154593][ T9872] 
[  145.155512][ T9872] Memory state around the buggy address:
[  145.157657][ T9872]  ffff88811dba7580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  145.160712][ T9872]  ffff88811dba7600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  145.163738][ T9872] >ffff88811dba7680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  145.166895][ T9872]                                            ^
[  145.169334][ T9872]  ffff88811dba7700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  145.172519][ T9872]  ffff88811dba7780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  145.175644][ T9872] ==================================================================
[  145.179215][ T9872] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  145.182061][ T9872] CPU: 1 UID: 0 PID: 9872 Comm: syz.0.1207 Not tainted syzkaller #0 PREEMPT(full) 
[  145.185661][ T9872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.189604][ T9872] Call Trace:
[  145.190931][ T9872]  <TASK>
[  145.192117][ T9872]  dump_stack_lvl+0x99/0x250
[  145.193968][ T9872]  ? __asan_memcpy+0x40/0x70
[  145.195839][ T9872]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.197899][ T9872]  ? __pfx__printk+0x10/0x10
[  145.199751][ T9872]  vpanic+0x281/0x750
[  145.201339][ T9872]  ? __pfx_vpanic+0x10/0x10
[  145.203154][ T9872]  ? irqentry_exit+0x74/0x90
[  145.204999][ T9872]  panic+0xb9/0xc0
[  145.206485][ T9872]  ? __pfx_panic+0x10/0x10
[  145.208193][ T9872]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  145.210510][ T9872]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  145.212767][ T9872]  ? xfrm_alloc_spi+0x570/0xf30
[  145.214700][ T9872]  check_panic_on_warn+0x89/0xb0
[  145.216643][ T9872]  ? xfrm_alloc_spi+0x570/0xf30
[  145.218582][ T9872]  end_report+0x78/0x160
[  145.220273][ T9872]  kasan_report+0x129/0x150
[  145.222082][ T9872]  ? xfrm_alloc_spi+0x570/0xf30
[  145.224012][ T9872]  xfrm_alloc_spi+0x570/0xf30
[  145.225883][ T9872]  ? xfrm_alloc_spi+0x2a0/0xf30
[  145.227834][ T9872]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  145.229850][ T9872]  ? xfrm_find_acq+0x87/0xa0
[  145.231627][ T9872]  xfrm_alloc_userspi+0x70b/0xc90
[  145.233610][ T9872]  ? apparmor_capable+0x137/0x1b0
[  145.235634][ T9872]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  145.237820][ T9872]  ? __nla_parse+0x40/0x60
[  145.239625][ T9872]  xfrm_user_rcv_msg+0x7a3/0xab0
[  145.241604][ T9872]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  145.243761][ T9872]  ? __pfx___mutex_trylock_common+0x10/0x10
[  145.246084][ T9872]  ? rcu_is_watching+0x15/0xb0
[  145.247889][ T9872]  ? trace_contention_end+0x39/0x120
[  145.249650][ T9872]  ? __mutex_lock+0x335/0x1360
[  145.251258][ T9872]  netlink_rcv_skb+0x208/0x470
[  145.252887][ T9872]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  145.254705][ T9872]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  145.256495][ T9872]  ? netlink_deliver_tap+0x2e/0x1b0
[  145.258216][ T9872]  ? netlink_deliver_tap+0x2e/0x1b0
[  145.259945][ T9872]  xfrm_netlink_rcv+0x79/0x90
[  145.261628][ T9872]  netlink_unicast+0x82f/0x9e0
[  145.263661][ T9872]  ? __pfx_netlink_unicast+0x10/0x10
[  145.265866][ T9872]  ? netlink_sendmsg+0x642/0xb30
[  145.268147][ T9872]  ? skb_put+0x11b/0x210
[  145.269930][ T9872]  netlink_sendmsg+0x805/0xb30
[  145.271943][ T9872]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.274162][ T9872]  ? aa_sock_msg_perm+0xf1/0x1d0
[  145.276245][ T9872]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  145.278457][ T9872]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.280655][ T9872]  __sock_sendmsg+0x21c/0x270
[  145.282632][ T9872]  ____sys_sendmsg+0x505/0x830
[  145.284264][ T9872]  ? __pfx_____sys_sendmsg+0x10/0x10
[  145.286051][ T9872]  ? import_iovec+0x74/0xa0
[  145.287598][ T9872]  ___sys_sendmsg+0x21f/0x2a0
[  145.289191][ T9872]  ? __pfx____sys_sendmsg+0x10/0x10
[  145.290938][ T9872]  ? __fget_files+0x2a/0x420
[  145.292518][ T9872]  ? __fget_files+0x3a0/0x420
[  145.294107][ T9872]  __x64_sys_sendmsg+0x19b/0x260
[  145.295783][ T9872]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  145.297611][ T9872]  ? rcu_is_watching+0x15/0xb0
[  145.299218][ T9872]  ? do_syscall_64+0xbe/0x3b0
[  145.300812][ T9872]  do_syscall_64+0xfa/0x3b0
[  145.302349][ T9872]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.304298][ T9872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.306842][ T9872]  ? exc_page_fault+0x9f/0xf0
[  145.308810][ T9872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.311260][ T9872] RIP: 0033:0x7f0725f8ebe9
[  145.313137][ T9872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.321059][ T9872] RSP: 002b:00007f0726e79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  145.324511][ T9872] RAX: ffffffffffffffda RBX: 00007f07261b5fa0 RCX: 00007f0725f8ebe9
[  145.327787][ T9872] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007
[  145.330780][ T9872] RBP: 00007f0726011e19 R08: 0000000000000000 R09: 0000000000000000
[  145.333678][ T9872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.336482][ T9872] R13: 00007f07261b6038 R14: 00007f07261b5fa0 R15: 00007fff1f0d3f08
[  145.339096][ T9872]  </TASK>
[  145.340879][ T9872] Kernel Offset: disabled
[  145.342315][ T9872] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:31:12  Registers:
info registers vcpu 0

CPU#0
RAX=0000000080000000 RBX=ffffffff99cd2d08 RCX=ffffffff99ab9303 RDX=0000000000000000
RSI=ffffffff8be332e0 RDI=0000000000000001 RBP=ffffc900071275d8 RSP=ffffc90007127520
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=dffffc0000000000 R13=ffff8880282f8d40 R14=0000000000000a02 R15=dffffc0000000000
RIP=ffffffff818ffbdb RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f011e00e6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000100 CR3=000000001bb92000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f011d212e53
XMM06=0000000000000000 00007f011d212e4d XMM07=0000000000000000 00007f011d212e61
XMM08=0000000000000000 00007f011d212ee7 XMM09=0000000000000000 00007f011d212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bdc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=00000000000010b0 RDI=00000000000010b1 RBP=ffffffff99dee630 RSP=ffffc9000303e990
R8 =ffff888020870237 R9 =1ffff1100410e046 R10=dffffc0000000000 R11=ffffffff854efea0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff17 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0726e796c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3211aff8 CR3=000000010a020000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffff000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f0726ced100 00007f0726187460 XMM05=00007f0726187478 00007f07261874c0
XMM06=00007f07261874b8 00007f07261874b0 XMM07=00007f07261874a8 00007f07261874a0
XMM08=0000000000000000 00007f0726012ee7 XMM09=0000000000000000 00007f0726012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
