last executing test programs:

3.790011481s ago: executing program 2 (id=8646):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10)
close(r2)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4008800)
recvmmsg$unix(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002680)={0xa40, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x54c}}, {0x8, 0x7, 0x40}}}]}}, {{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9c000000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff68}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5, 0x1, 0xff, 0x10}, {0xfe, 0x3, 0x9, 0xfee}, {0x8, 0x8, 0x6, 0x5}, {0x8, 0xe, 0x2, 0x7}, {0x0, 0x2, 0x3, 0x40}, {0x3ff, 0xe5, 0x9, 0x80}, {0x10, 0xf, 0x0, 0x2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x159d}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ad}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x44}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8, 0xfe, 0x4, 0x2}, {0x7, 0x80, 0x81, 0xb446}, {0x3, 0xce, 0x9}, {0x1, 0xb, 0x40, 0x8}, {0x7, 0x6, 0x5, 0xf9}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0xa40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20050804)

3.720409383s ago: executing program 2 (id=8648):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = socket$inet6(0xa, 0x80002, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xe}, @IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x26}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000300)=0x4)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x40006, 0x1, 0x400}, &(0x7f0000000100)=0x14)
shutdown(r0, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000200)={@broadcast, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000100", 0x64, 0x11, 0x0, @empty, @mcast2, {[], {0xfffe, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "75462d59cf0d72118137e1d8c01d4641aa2936006171375e0c0d70a00038f8cb", "85bf05267ec510575a1cdf03bc75bb00", {"850d58622eee203833d9c122aabe7075", "f071ffd6f854a9c51535886ee02e0af9"}}}}}}}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={<r8=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={r8, 0x40}, 0x8)

3.660685777s ago: executing program 2 (id=8650):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_AF_SPEC={0x4}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x44}}, 0x440088c4)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0xe, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x922, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}}]}, 0x50}}, 0x8044)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x40083}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xb}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r6=>0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8)
syz_open_procfs$namespace(r6, &(0x7f00000000c0)='ns/ipc\x00')

3.590079531s ago: executing program 2 (id=8653):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/95, &(0x7f0000000100)=0x5f)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000980)={0x0, 0xd0, &(0x7f0000000bc0)=[@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x38}, 0x4}, @in6={0xa, 0x4e22, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5bb0}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}]}, &(0x7f0000000cc0)=0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], <r5=>0x0, 0x1b, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xea, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES8=r3, @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES64=r5, @ANYRES64=r0, @ANYBLOB="00000000000100"/28], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0x1, <r9=>0xffffffffffffffff}, 0x4)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x7, 0x10000, 0x3, 0xffff, 0x40000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0x72b2d051, 0x10}, 0xc)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r12}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0xd, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000001c0)='syzkaller\x00', 0x4448, 0xc7, &(0x7f0000000200)=""/199, 0x40f00, 0x3, '\x00', r4, 0x25, r6, 0x8, &(0x7f0000000680)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[r8, r9, r10, r11, r12], &(0x7f0000000800)=[{0x1, 0x3, 0xb, 0x2}, {0x5, 0x2, 0x1, 0x8}], 0x10, 0x6}, 0x94)

3.290855306s ago: executing program 1 (id=8658):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111690000000000850000001a00000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[@ANYBLOB="01004b00", @ANYRES16=r3, @ANYBLOB="010000000000040000000a000000"], 0x14}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000140)=0xa, 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r7}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gretap0\x00', &(0x7f00000000c0)={'sit0\x00', <r8=>0x0, 0x40, 0x703, 0x3, 0x22682, {{0x8, 0x4, 0x1, 0x4, 0x20, 0x67, 0x0, 0xca, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x7}, {[@generic={0x82, 0xc, "f494c7a9d16ded3b70ea"}]}}}}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, r1, 0xb4, '\x00', r8, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50)

3.290547939s ago: executing program 1 (id=8659):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x8000, 0x81, 0x3, 0x8d77, {{0x3e, 0x4, 0x0, 0x3, 0xf8, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast1, @multicast2, {[@timestamp_addr={0x44, 0x24, 0xda, 0x1, 0x8, [{@rand_addr=0x64010101, 0xfffffffa}, {@loopback, 0x2}, {@private=0xa010102, 0x2}, {@loopback, 0x80}]}, @lsrr={0x83, 0xf, 0x8b, [@rand_addr=0x1, @loopback, @multicast1]}, @cipso={0x86, 0x1d, 0x0, [{0x6, 0x3, '\f'}, {0x1, 0x7, "6173eb4477"}, {0x0, 0xd, "48b771f504c62bb6b77101"}]}, @ssrr={0x89, 0x1b, 0xa7, [@multicast2, @multicast2, @rand_addr=0x64010100, @empty, @empty, @multicast2]}, @cipso={0x86, 0x4d, 0x0, [{0x1, 0x12, "0866cc5cf80cb96b428e4ca5b9e37a0d"}, {0x6, 0xe, "df5c85b6549db92e3b8334e3"}, {0x1, 0x2}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x12, "439d0254f5ce5334584cb24447a45e57"}, {0x0, 0x5, "7f0f19"}, {0x2, 0xa, "365d39ada1f4d534"}]}, @noop, @lsrr={0x83, 0x17, 0x90, [@broadcast, @dev={0xac, 0x14, 0x14, 0x3}, @empty, @empty, @loopback]}, @lsrr={0x83, 0xf, 0xcb, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200fffc09000200730008000440000000000900010073797a30000000000800140a03000000000000000000020000000900010073797a300000000008000340000000090900020073797a3100000000140000001100010000000000000000000000000a00"/146], 0x98}}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'tunl0\x00'})
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendmsg$rds(r7, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x48}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2c000000060a01040000000000000000050000070900020073797a3200d800000000000000797a310000000020000000000a01080000000000000000020000030900010073797a3100000000140000001100010000000000000000000200000a"], 0x74}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000))
ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b)
ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f00000002c0)={@default, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @default, @null, @default]})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x13, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x38b137f9a619bb39, 0x14, '\x00', 0x0, @fallback=0x2e, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESHEX=r3], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94)

3.220140825s ago: executing program 1 (id=8660):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x110, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @local, [0x0, 0xff, 0xff000000, 0xffffff00], [0x46b6aa5b327aca38, 0xff, 0xff], 'ipvlan1\x00', 'pimreg\x00', {}, {0xff}, 0xa0, 0x2, 0x2, 0x11}, 0x0, 0xa8, 0x110, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x10, 0xfff, 0x8, 'snmp\x00', 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x5, "3f323b29147966fc31060000008bc7fbfda42ece1659b512a4eabff02563"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4203}, 0x94)
unshare(0x22020600)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000340), 0x11000)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10)
write(r6, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f00000004c0)=0x5e, 0x4)

3.148034102s ago: executing program 1 (id=8661):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={<r1=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={r1, 0x8}, &(0x7f00000000c0)=0x8)

3.057707689s ago: executing program 1 (id=8662):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'dvmrp1\x00', 0xc201})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x6)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast})
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x88, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2e6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9f8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4c000}, 0x4080)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd700000000000647262675f70725f686d61635f736861333834"], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
close(0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r5 = socket$netlink(0x10, 0x3, 0xb)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0)
write(r7, &(0x7f0000000240)="94", 0x1)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf2500000000000000000000000000000000fe80000000f7ffffffffffffff0000bb00000033000000000a00603000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000007f00000000000000030000000000000000000000000000000000000000000000ffffffffffffffff0002000000000000fffffffffffffffe0300"/79], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
vmsplice(r9, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
tee(r6, r9, 0x8f5, 0x0)
write$cgroup_devices(r9, &(0x7f0000000100)={'a', ' *:* ', 'm\x00'}, 0x8)

3.056578638s ago: executing program 0 (id=8663):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x20, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff, 0x0, 0x0, 0x0, 0x169}, [@jmp={0x5, 0x1, 0x8, 0x8, 0x8, 0xffffffffffffffdd, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x3, 0x8, 0xb, 0x8, 0x8}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @call={0x85, 0x0, 0x0, 0x24}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0xa0, &(0x7f0000000500)=""/160, 0x40f00, 0x3c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0xc, 0x1, 0x1000}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000600)=[0xffffffffffffffff], &(0x7f0000000640)=[{0x4, 0x5, 0xa, 0x2}], 0x10, 0x100}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000740)=r2, 0x4) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async)
ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000780)) (async, rerun: 32)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32)
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000340)={0x62, @loopback, 0x4e20, 0x3, 'nq\x00', 0x36, 0x8, 0x1a}, 0x2c) (async)
socket$netlink(0x10, 0x3, 0x7) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x32, 0xfff})
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) (async, rerun: 32)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x8}}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x58}}, 0x8000)

2.940782501s ago: executing program 0 (id=8664):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4030000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0))

2.939966679s ago: executing program 0 (id=8665):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000001a950000000bf62d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) (async)
r1 = socket(0x1, 0x3, 0x0)
bind$unix(r1, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0) (async)
ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000002200aaaaaaaa00"/40], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0xd19d8eb16f18222f) (async)
r3 = socket(0x10, 0x2, 0x0)
sendto$inet6(r3, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet(0x2, 0x3, 0x33)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async)
getsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000300)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) (async)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x8, @void}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r5}, 0x8)

2.937768542s ago: executing program 0 (id=8666):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x300, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0xf, 0x6}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x7c}}, 0x24040084)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xffffffea)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x54, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}, @IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x54}}, 0x0)
ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f00000000c0)={0x3, @default, r6})

2.859448646s ago: executing program 0 (id=8667):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbff040000000000000000008500000036000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet6(0xa, 0xa, 0x8) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001900)={'wg1\x00', <r3=>0x0})
sendmmsg$inet6(r2, &(0x7f00000019c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x6, @private1, 0xffff}, 0x1c, &(0x7f0000001880)=[{&(0x7f00000016c0)="8d60975d20ff7b57533889ee8508ca254117828bba1ede6d0119949bb8ea07a429e322dfe670df6b0f719b464bcaa8b5cf8f83fb4533d50a62a28a72e7cc949e7f2b675ff4258b81d0a4a6aded693a8cd15f3d565a6e3c79fb65ac98197b85eafdbb8d73d089d90d83cc8d8c961631c1e577b97b83c7f72caffa105ea286e20e7478639d61c09872523349b05347d5ab421908035cf5e9757dd3c783b6f347cda5cee0568ed64455aac225e00ea1783aebcde34d9e5bd0f3db8e0ad9cbbcaa4feed526f8e89ff4c47b13e9842dd15d3cbc7260a2e83be85918f3364cf69319bbb29af897", 0xe4}, {&(0x7f00000004c0)="0acfb309dab9ef65457186bd8e0a7278baecab7051f75f9ff991754a7b31eefb44c4f3acd188fa750d2fe6c5ab2d6d8f1911113e91ad43b8ca41a43a48cfac1c1ffac5051120a401a400a1139173b5cc035616939cbaba9fce261916bc09fbe714f14041dd7e75beec517fb69ea032757a87e1fadf05334633ed2596bb6dbcf0f50867307e49890ec8e8d875b3a7ff7f1a1392a7babadc81e8", 0x99}, {&(0x7f0000000440)="82428a44e140cb47c31acaf3cf2f57bf12bb", 0x12}, {&(0x7f00000017c0)="3944ee25e1a27818d161bb76d3e05caedd822053e805b124975de2201ef802f958da3b1d46adc1fd20851e374e218df0d9aafbda68c29d0125d46701c420e572e33eca6d16a21f8efcf0eeb2f5541d33f3dbe08d17ce2c4f77493862179848b0d272b2d54171", 0x66}, {&(0x7f0000000640)="b8ba738930c09860993047", 0xb}, {&(0x7f0000001840)="e4c85556b748620bccc731f3c05a14631aeccfdbfb19c0d46a059938c932cc3a622821de5d99", 0x26}], 0x6, &(0x7f0000001940)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x1d, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x10001}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}], 0x48}}], 0x1, 0x20040008)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000006c0)='./cgroup/cgroup.procs/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000010a40)=[0x93e6], 0x0, 0x0, 0x1}}, 0x40) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
r7 = socket(0x10, 0x803, 0x0) (async)
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r8, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{0x0, 0xb}], 0x1}}], 0x2, 0x4000) (async)
sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r9, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async)
r10 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r10, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB='\t\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00B'], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xff800000, r11, 0x4}, 0x38) (async)
readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4)
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) (async)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})

2.79000909s ago: executing program 0 (id=8668):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20808}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x37, 0x19}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x20004000)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000100)=0xb, 0x4)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)
sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc7d8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5b9e}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffe00}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc647}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7dd2e5e8}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000000}, 0x40)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth1_vlan\x00', <r2=>0x0})
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000003c0)={0xf, 0x2})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'wg0\x00'})
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x170, r4, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7956}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffc00}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb9}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d36}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa050}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa31}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x24008044}, 0x4040000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x9, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20020804}, 0x41004)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000800)=0x8000000)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000840)={'dvmrp1\x00', <r8=>0x0})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_mreq(r9, 0x29, 0x1c, &(0x7f0000000880)={@rand_addr, <r10=>0x0}, &(0x7f00000008c0)=0x14)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r3)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r11, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r12, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x12b2f71b50b32ecf}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x34}}, 0x20040850)
r14 = syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b00)={'team0\x00', <r15=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b40)={'syztnl2\x00', <r16=>r10, 0x0, 0x20, 0x0, 0x80, {{0x21, 0x4, 0x0, 0x3, 0x84, 0x65, 0x0, 0x80, 0x29, 0x0, @private=0xa010100, @private=0xa010100, {[@lsrr={0x83, 0x27, 0x69, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @rand_addr=0x64010101, @remote, @local, @local, @rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x38}]}, @lsrr={0x83, 0xb, 0x6e, [@empty, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x10, "ba44d5d38faed6eb0da6919bd791"}, @cipso={0x86, 0x18, 0x2, [{0x2, 0x5, "81a87f"}, {0x6, 0x3, 'M'}, {0x1, 0xa, "4cc6689f7802386d"}]}, @generic={0x82, 0x6, "98ea93cf"}, @generic={0x94, 0x9, "e67d12a68bd246"}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000c40)={'team0\x00', <r17=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000001240)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f0000000d40)={0x4a4, r14, 0x2, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r15}, {0x90, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r16}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x1b0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff01}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r17}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff53}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x4000841}, 0x8840)

2.731078694s ago: executing program 2 (id=8669):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104000000000000c90000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="2000128008000100677470001400028008000100", @ANYRES32=r2], 0x48}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0)
recvmmsg$unix(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/172, 0xac}, {0x0}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000000000)=""/103, 0x67}, {&(0x7f0000000080)=""/128, 0x80}, {&(0x7f00000015c0)=""/133, 0x85}, {&(0x7f0000000400)=""/93, 0x5d}], 0xb}}], 0x1, 0x40010122, 0x0)
write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000080)=0x2, 0x4)

2.730572032s ago: executing program 2 (id=8670):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x78}, 0x1, 0x7}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x1b8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x470, 0xffffffff, 0xffffffff, 0x470, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1a0, 0x1c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x1, 'syz0\x00', 0x3}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000)

0s ago: executing program 1 (id=8671):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000000), r0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/158, 0x9e}, {&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f00000001c0)=""/75, 0x4b}], 0x4)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmmsg(r1, &(0x7f0000003680)=[{{&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/233, 0xe9}, {&(0x7f0000000400)=""/91, 0x5b}, {&(0x7f0000000480)=""/29, 0x1d}, {&(0x7f00000004c0)=""/106, 0x6a}, {&(0x7f0000000540)=""/153, 0x99}, {&(0x7f0000000600)=""/248, 0xf8}, {&(0x7f0000000700)=""/191, 0xbf}, {&(0x7f00000007c0)=""/197, 0xc5}, {&(0x7f00000008c0)=""/163, 0xa3}, {&(0x7f0000000980)=""/95, 0x5f}], 0xa, &(0x7f0000000ac0)=""/46, 0x2e}, 0x6}, {{&(0x7f0000000b00)=@tipc=@id, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b80)=""/197, 0xc5}, {&(0x7f0000000c80)=""/95, 0x5f}], 0x2, &(0x7f0000000d40)=""/28, 0x1c}, 0x8000}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000d80)=""/200, 0xc8}, {&(0x7f0000000e80)=""/150, 0x96}, {&(0x7f0000000f40)=""/58, 0x3a}], 0x3, &(0x7f0000000fc0)=""/134, 0x86}, 0x10}, {{&(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001100)=""/225, 0xe1}, {&(0x7f0000001200)=""/99, 0x63}, {&(0x7f0000001280)=""/223, 0xdf}, {&(0x7f0000001380)=""/61, 0x3d}, {&(0x7f00000013c0)=""/86, 0x56}, {&(0x7f0000001440)=""/77, 0x4d}], 0x6, &(0x7f0000001540)=""/4096, 0x1000}, 0xf}, {{&(0x7f0000002540)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000035c0)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=""/120, 0x78}, 0x3}], 0x5, 0x1, &(0x7f00000037c0)={0x77359400})
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f00000038c0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000003940), r0)
sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000003a00)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x1c, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000003a40)=0x5, 0x4)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000003a80), 0x10)
sendmsg$rds(r2, &(0x7f0000003e40)={&(0x7f0000003ac0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000003e00)=[{&(0x7f0000003b00)=""/49, 0x31}, {&(0x7f0000003b40)=""/234, 0xea}, {&(0x7f0000003c40)=""/156, 0x9c}, {&(0x7f0000003d00)=""/240, 0xf0}], 0x4, 0x0, 0x0, 0x8050}, 0x5)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003ec0), r4)
sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000004240)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004200)={&(0x7f0000003f00)={0x300, r7, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7fc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x64f9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xea}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeda}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x82}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}]}, 0x300}, 0x1, 0x0, 0x0, 0xc000}, 0x4049000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000042c0)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r2, &(0x7f0000004380)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004340)={&(0x7f0000004300)=@RTM_GETMDB={0x18, 0x56, 0x300, 0x70bd28, 0x2, {0x7, r8}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)
r9 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f00000043c0)={r4})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000044c0)={'syztnl1\x00', &(0x7f0000004440)={'syztnl1\x00', <r10=>r8, 0x2f, 0x65, 0x6c, 0x8001, 0x0, @loopback, @private1, 0x40, 0x10, 0x8, 0x10001}})
sendmsg$nl_route(r6, &(0x7f0000004580)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004540)={&(0x7f0000004500)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x0, r10, 0x20, 0x57, 0x1}, [@NDA_DST_IPV4={0x8, 0x1, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x4)
sendmsg$nl_generic(r2, &(0x7f00000058c0)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000005880)={&(0x7f0000004600)={0x1270, 0x17, 0x8a0, 0x70bd26, 0x25dfdbfd, {0x19}, [@typed={0x8, 0xc5, 0x0, 0x0, @ipv4=@local}, @generic="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", @nested={0x17a, 0xb6, 0x0, 0x1, [@nested={0x4, 0x68}, @typed={0x8e, 0x8d, 0x0, 0x0, @binary="bbfa1a1bcd055632405f25c5862d868f749d157bb2ff90d5b0a3d6505f3bd7768710a66a85b1b5ba9f0297e3f0238b8f0251c82fa2e26385df83f41b43156f96691b7978dfeafd01c27b586965628845bd76d970d1be00d126ac9c2e643bfd9dff4e2428f5aa0f0cb16935537dfb6aaeca4abe6d1393159988ae0259e6c91f9e0e2a53e61b678cefa918"}, @generic="521b92ecdbe09092f95eb2ba6176f5f1a54e3e0fe4aca4dd1c333e1ef5029067160cf4ca4ee52e063d20ac4518957e7a3fb1040cdb039517d10ebe77f4a624fe8b4ea0469a37652be350312d20d77d8e674ee26fc95182865e0a169ead589b1371fa20f3e17efea90bf4fc7a7e2475de025945ef4412d576c6c756a2c833947a6cb7346785465a63182cd9b26b6c53017600b08ecdd43d57db6a6f862199a631ec87f00604a85af2b37937573a7856e6db583676c2f9e756f7503ddb2a5907710061c59ccc59d243d7119fa479e53dce27da21159960", @nested={0x4, 0x45}, @typed={0x8, 0x58, 0x0, 0x0, @u32=0x3}]}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0xee}, @typed={0x6, 0xbf, 0x0, 0x0, @str='[\x00'}, @nested={0xc7, 0x51, 0x0, 0x1, [@generic="b3e161fe271105460da0de6b0611e6d52ca137dd777449a857534a4d9b36f2ab7ced6706e4be3858", @typed={0x8, 0x98, 0x0, 0x0, @pid}, @generic="10a4bdcf7fdff65a7ab3fe0cc18954fc74acba74aef5e113cfcf6f5310b59ff01f4eadd1538d4b5699e5800d43b814003e4da9b0042d15768ea0889703ace954570578d1a4fb29cc4e5e8d119f6a9cfc79d80995ff02b7a229736376adce4e4666a63efff22498b4fe18515dc4e4c26b1b7c93a1228b12a3fdd725", @nested={0x4, 0x18}, @generic="6e7b5602ba9ada6c5e6c871cd535b459", @typed={0x4, 0x1a}]}]}, 0x1270}, 0x1, 0x0, 0x0, 0x1}, 0x804)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005940), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000005b40)={&(0x7f0000005900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000005b00)={&(0x7f0000005980)={0x16c, r11, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_OURS={0x150, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x78, 0x4, "5dfb299998a8019d29a060f03efaa0a3b53202c014e704d28bf450f42b29b0666b5f5a1411d92731424362a185e8e0152f1065a8bbc15f1492143736c6cfca542a5a33e3ec0be6acb3dc971c6dba8893a90eac9fa3f288ec8bd0a88c56ea50d469ea5f0ba0e184f13f50799f8302d9fc86a43f7c"}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "9989b024f4b03982fd1ee8b7aa4117bfe60c0d2a77eeb8e17cc4afcbbd81aedfaab06353b4a0a7c6d78ed57f3e4857e9c7961167ecc1990b5e643393bdbc2fdaa16d3d9a3da66712ac9089dbafaa54f30a942a9c22f64bcc3a71b6522243645a347762c496d9ed1d5b9808f282a2757899a8be2c483c4ad55b233b9edfb6a17b95a672d7132742da92aa760abd3e581cd99087e7d6a59ecd7143194c69d3a20aec9158ab9a0013bbce96708164d255860e24dc"}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)
write(0xffffffffffffffff, &(0x7f0000005b80)="f639273edd20bf84458cae253c06408fc74833060611fd32df0447463e0e5442b8939cc7a47b4f5fda0a6b7714b1a9bc63b535de177001640970039da027faff30ef23e7d4d137fc3639146f25da2a0289a0cb9a7acb847a9bd59dbdf5604be7063867dfd6b9d3ab45e6edba9f5aa462717ec65949b6e193188d168a7a60544ea0f4ec69ac34bd871070ebfd90ff3b983fbf82c09bfedc62b652c334c63b9b7392a20af2b21542a73370cec2759ca253deb24881fddd9f8f9eca9f91720ca4c01b9750feec6cc0717bd11c8533ba917912d9420e11354db5dc1d98f8a370fe29cc2a963fac3fc020d7dcd002d6f045c8", 0xf0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000005c80)={'team0\x00', <r12=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000005d40)={'ip6_vti0\x00', &(0x7f0000005cc0)={'syztnl2\x00', r12, 0x2f, 0x80, 0xfc, 0x2, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x40, 0x8, 0x4, 0x1}})

kernel console output (not intermixed with test programs):

netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  206.763858][T13993] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  206.770201][ T5855] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.772940][ T5855] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  206.779822][ T5855] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.783223][T13993] netlink: 'syz.2.3514': attribute type 10 has an invalid length.
[  206.785837][ T5855] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  206.792081][T13993] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  206.795387][T13993] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  206.800957][ T5855] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.803760][ T5855] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  207.415737][T14004] xt_policy: output policy not valid in PREROUTING and INPUT
[  207.810255][T14021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.813269][T14021] syzkaller0: entered promiscuous mode
[  207.815282][T14021] syzkaller0: entered allmulticast mode
[  207.839166][T14021] tipc: Resetting bearer <eth:syzkaller0>
[  207.842892][T14021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  207.848207][T14020] tipc: Resetting bearer <eth:syzkaller0>
[  207.858859][T14020] tipc: Disabling bearer <eth:syzkaller0>
[  208.266151][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3539'.
[  209.888084][T14130] netlink: 'syz.0.3574': attribute type 8 has an invalid length.
[  209.893457][T14130] sch_fq: defrate 0 ignored.
[  209.922534][T14133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3569'.
[  210.266652][    C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  210.362211][T14150] netlink: 'syz.0.3580': attribute type 11 has an invalid length.
[  212.335286][T14265] infiniband !yz!: set down
[  212.337063][T14265] infiniband !yz!: added team_slave_0
[  212.367473][T14265] RDS/IB: !yz!: added
[  212.368880][T14265] smc: adding ib device !yz! with port count 1
[  212.380504][T14265] smc:    ib device !yz! port 1 has no pnetid
[  212.494511][T14281] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3630'.
[  212.497899][T14281] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3630'.
[  212.514071][T14281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3630'.
[  212.651653][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'.
[  213.621765][T14365] tipc: Failed to remove unknown binding: 66,1,1/3747737879:746880338/746880340
[  213.629055][T14365] tipc: Failed to remove unknown binding: 66,1,1/3747737879:746880338/746880340
[  213.680836][T14369] xfrm0 speed is unknown, defaulting to 1000
[  213.798129][T14376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3675'.
[  214.105313][T14401] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3685'.
[  214.225694][T14412] xfrm0 speed is unknown, defaulting to 1000
[  214.660017][T14432] syzkaller0: entered promiscuous mode
[  214.662232][T14432] syzkaller0: entered allmulticast mode
[  215.506430][T14452] nbd2: detected capacity change from 0 to 63
[  215.508737][T14453] block nbd2: NBD_DISCONNECT
[  215.522944][T14453] block nbd2: Disconnected due to user request.
[  215.528274][T14453] block nbd2: shutting down sockets
[  215.546238][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  215.550117][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  215.554410][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  215.558188][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[  215.561445][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  215.565140][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[  215.568464][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  215.572110][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[  215.577389][T14128] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  215.582865][T14128] Buffer I/O error on dev nbd2, logical block 0, async page read
[  215.587310][T14128] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  215.596226][T14128] Buffer I/O error on dev nbd2, logical block 1, async page read
[  215.599541][T14128] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  215.604441][T14128] Buffer I/O error on dev nbd2, logical block 2, async page read
[  215.609609][T14128] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  215.619003][T14128] Buffer I/O error on dev nbd2, logical block 3, async page read
[  215.622092][T14128] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  215.624976][T14128] Buffer I/O error on dev nbd2, logical block 0, async page read
[  215.628662][T14128] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  215.632504][T14128] Buffer I/O error on dev nbd2, logical block 1, async page read
[  215.635400][T14128] ldm_validate_partition_table(): Disk read failed.
[  215.641479][T14128] Dev nbd2: unable to read RDB block 0
[  215.644185][T14128]  nbd2: unable to read partition table
[  215.664921][T14128] ldm_validate_partition_table(): Disk read failed.
[  215.668037][T14128] Dev nbd2: unable to read RDB block 0
[  215.670803][T14128]  nbd2: unable to read partition table
[  216.274990][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3716'.
[  216.278183][T14478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3716'.
[  216.783747][T14508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3730'.
[  216.873921][T14512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3732'.
[  217.189176][T14547] : entered promiscuous mode
[  217.267172][T14558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  217.270154][T14558] IPv6: NLM_F_CREATE should be set when creating new route
[  217.273219][T14558] IPv6: NLM_F_CREATE should be set when creating new route
[  217.327408][T14562] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.330364][T14562] syzkaller0: entered promiscuous mode
[  217.332823][T14562] syzkaller0: entered allmulticast mode
[  217.353456][T14562] tipc: Resetting bearer <eth:syzkaller0>
[  217.357998][T14561] tipc: Resetting bearer <eth:syzkaller0>
[  217.368634][T14561] tipc: Disabling bearer <eth:syzkaller0>
[  217.386621][T14564] xfrm0 speed is unknown, defaulting to 1000
[  217.838063][T14584] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  217.840614][T14584] team0: Device ipvlan4 failed to register rx_handler
[  218.010636][T14590] __nla_validate_parse: 4 callbacks suppressed
[  218.010650][T14590] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3764'.
[  218.071383][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3766'.
[  218.078806][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3767'.
[  218.291628][T14606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3773'.
[  218.342411][T14606] xfrm0 speed is unknown, defaulting to 1000
[  219.060364][T14636] xfrm0 speed is unknown, defaulting to 1000
[  219.556241][T14658] netlink: 'syz.1.3794': attribute type 12 has an invalid length.
[  220.139832][T14681] netlink: 'syz.0.3804': attribute type 58 has an invalid length.
[  220.143249][T14681] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3804'.
[  220.207503][T14684] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3806'.
[  220.954672][T14711] netlink: 'syz.0.3817': attribute type 1 has an invalid length.
[  221.159268][T14723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3823'.
[  221.290586][T14731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3827'.
[  221.332776][T14733] netlink: 'syz.0.3828': attribute type 6 has an invalid length.
[  221.335786][T14733] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3828'.
[  221.455188][T14741] netlink: 'syz.0.3832': attribute type 10 has an invalid length.
[  221.463621][T14741] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  221.913279][T14782] netlink: 'syz.2.3851': attribute type 1 has an invalid length.
[  222.059197][T14800] IPVS: Error connecting to the multicast addr
[  222.091064][T14806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3864'.
[  222.161209][T14808] xfrm0 speed is unknown, defaulting to 1000
[  222.345457][T14827] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check.
[  222.738917][T14857] netlink: 'syz.0.3886': attribute type 10 has an invalid length.
[  222.757868][T14857] team0: Failed to send options change via netlink (err -105)
[  222.760311][T14857] team0: Port device geneve0 added
[  223.042169][T14862] infiniband sy: set down
[  223.043765][T14862] infiniband sy: added bond_slave_0
[  223.108493][T14862] RDS/IB: sy: added
[  223.110169][T14862] smc: adding ib device sy with port count 1
[  223.112659][T14862] smc:    ib device sy port 1 has no pnetid
[  223.573256][T14902] __nla_validate_parse: 3 callbacks suppressed
[  223.573268][T14902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3906'.
[  224.459585][T14913] bond6 (unregistering): Released all slaves
[  224.670595][T14929] netlink: 'syz.1.3916': attribute type 29 has an invalid length.
[  224.674150][T14929] netlink: 'syz.1.3916': attribute type 29 has an invalid length.
[  224.678878][T14929] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3916'.
[  224.873759][T14949] netlink: 'syz.0.3925': attribute type 2 has an invalid length.
[  224.895201][T14949] : entered promiscuous mode
[  224.915105][T14949] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3925'.
[  224.918700][T14954] netlink: 'syz.2.3927': attribute type 1 has an invalid length.
[  224.921195][T14954] netlink: 'syz.2.3927': attribute type 2 has an invalid length.
[  224.966126][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3930'.
[  224.966444][T14957] sch_tbf: burst 0 is lower than device tunl0 mtu (1536) !
[  225.457238][T14987] ieee802154 phy0 wpan0: encryption failed: -90
[  225.720820][T15001] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  226.042093][T15025] netlink: 45 bytes leftover after parsing attributes in process `syz.1.3961'.
[  226.106264][T15031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3964'.
[  226.584547][T15066] netlink: 'syz.2.3979': attribute type 29 has an invalid length.
[  226.592475][T15066] netlink: 'syz.2.3979': attribute type 29 has an invalid length.
[  226.661371][T15070] xfrm0 speed is unknown, defaulting to 1000
[  226.716904][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3981'.
[  226.941217][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3987'.
[  227.217346][T15102] syzkaller0: entered promiscuous mode
[  227.219680][T15102] syzkaller0: entered allmulticast mode
[  227.376104][T15113] xfrm0 speed is unknown, defaulting to 1000
[  228.195726][   T25] block nbd0: Possible stuck request ffff888109ed0000: control (read@0,1024B). Runtime 150 seconds
[  228.200363][   T25] block nbd0: Possible stuck request ffff888109ed0200: control (read@1024,1024B). Runtime 150 seconds
[  228.204914][   T25] block nbd0: Possible stuck request ffff888109ed0400: control (read@2048,1024B). Runtime 150 seconds
[  228.211649][   T25] block nbd0: Possible stuck request ffff888109ed0600: control (read@3072,1024B). Runtime 150 seconds
[  228.447634][T15139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.453522][T15139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.551449][T15139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.555653][T15139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.659206][T15139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.666825][T15139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.759295][T15139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.766475][T15139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.850738][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  228.853395][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.864330][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  228.867399][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.875854][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  228.879110][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.889700][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  228.892617][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.465678][T15179] syzkaller0: entered promiscuous mode
[  229.468803][T15179] syzkaller0: entered allmulticast mode
[  229.475479][T15179] macsec3: entered promiscuous mode
[  229.636560][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4026'.
[  229.741453][T15196] netlink: zone id is out of range
[  229.742516][T15197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4030'.
[  229.743223][T15196] netlink: zone id is out of range
[  229.749941][T15196] netlink: zone id is out of range
[  229.751704][T15196] netlink: zone id is out of range
[  229.753445][T15196] netlink: zone id is out of range
[  229.755153][T15196] netlink: zone id is out of range
[  229.757491][T15196] netlink: zone id is out of range
[  229.759211][T15196] netlink: zone id is out of range
[  229.761167][T15196] netlink: zone id is out of range
[  229.762900][T15196] netlink: zone id is out of range
[  229.865983][T15207] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4036'.
[  229.996691][T15225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4043'.
[  230.256807][T15244] syzkaller0: entered promiscuous mode
[  230.258950][T15244] syzkaller0: entered allmulticast mode
[  230.804301][T15273] xfrm0 speed is unknown, defaulting to 1000
[  232.408774][ T5855] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60
[  232.759433][T15307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4075'.
[  232.763298][T15307] netlink: 'syz.0.4075': attribute type 12 has an invalid length.
[  232.769920][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  232.772664][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  232.774710][T15307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4075'.
[  232.775347][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  232.779297][T15307] netlink: 'syz.0.4075': attribute type 12 has an invalid length.
[  232.785064][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  233.270313][T15331] xfrm0 speed is unknown, defaulting to 1000
[  233.315426][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4086'.
[  234.389630][T15376] netlink: 'syz.0.4104': attribute type 1 has an invalid length.
[  234.475275][T15376] 8021q: adding VLAN 0 to HW filter on device bond5
[  234.496591][T15384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4107'.
[  234.877420][T15412] tap0: tun_chr_ioctl cmd 1074025677
[  234.879688][T15412] tap0: linktype set to 1
[  235.046701][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4126'.
[  236.096456][T15459] tipc: Failed to remove unknown binding: 66,1,1/0:3324829653/3324829655
[  236.099707][T15459] tipc: Failed to remove unknown binding: 66,1,1/0:3324829653/3324829655
[  236.120862][T15461] xt_hashlimit: overflow, try lower: 3/0
[  236.818560][T15530] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4172'.
[  236.834177][T15530] net_ratelimit: 34 callbacks suppressed
[  236.834188][T15530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  237.241625][T15569] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[  237.272778][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4192'.
[  237.458596][T15589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4198'.
[  237.792674][T15609] tun0: tun_chr_ioctl cmd 1074025675
[  237.794834][T15609] tun0: persist enabled
[  237.796840][T15609] tun0: tun_chr_ioctl cmd 1074025675
[  237.798857][T15609] tun0: persist disabled
[  238.016583][T15624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4213'.
[  238.327416][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4218'.
[  238.480413][T15648] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.567634][T15652] syzkaller0: entered promiscuous mode
[  238.570498][T15652] syzkaller0: entered allmulticast mode
[  239.378018][T15666] netlink: 'syz.0.4233': attribute type 11 has an invalid length.
[  239.576877][T15664] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  239.605574][T15670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4235'.
[  239.716852][T15681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4240'.
[  239.720551][T15681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4240'.
[  239.997946][T15713] dvmrp0: entered allmulticast mode
[  240.002985][T15708] xfrm0 speed is unknown, defaulting to 1000
[  240.591975][T15741] bridge7: entered allmulticast mode
[  240.599080][T15739] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4265'.
[  240.922231][T15767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4279'.
[  240.926583][T15767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4279'.
[  240.930256][T15767] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4279'.
[  241.042452][T15774] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4281'.
[  241.103379][T15782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4287'.
[  241.170685][T15794] netlink: 'syz.1.4292': attribute type 3 has an invalid length.
[  241.180903][T15797] netlink: 'syz.2.4293': attribute type 1 has an invalid length.
[  241.202352][T15797] bond3: (slave geneve2): making interface the new active one
[  241.205255][T15797] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  241.210941][ T5854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  241.215040][ T5854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  241.226422][ T5854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  241.233479][ T5854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  241.423605][T15818] bridge0: entered promiscuous mode
[  241.428985][T15818] bridge0: port 1(macvtap0) entered blocking state
[  241.431873][T15818] bridge0: port 1(macvtap0) entered disabled state
[  241.434698][T15818] macvtap0: entered allmulticast mode
[  241.439795][T15818] bridge0: entered allmulticast mode
[  241.456013][T15818] macvtap0: left allmulticast mode
[  241.458445][T15818] bridge0: left allmulticast mode
[  241.462979][T15818] bridge0: left promiscuous mode
[  241.597510][T15834] erspan0: left promiscuous mode
[  241.622747][T15834] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.629070][T15834] 8021q: adding VLAN 0 to HW filter on device team0
[  241.637922][T15831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4310'.
[  241.647159][T15834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  242.111886][T15871] xfrm0 speed is unknown, defaulting to 1000
[  242.266506][    C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  242.530585][T15878] netlink: 'syz.1.4328': attribute type 1 has an invalid length.
[  243.211773][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4344'.
[  243.228236][T15913] netlink: 'syz.2.4343': attribute type 21 has an invalid length.
[  243.231524][T15913] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4343'.
[  243.637594][T15953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4363'.
[  244.743295][T15980] netlink: 'syz.2.4376': attribute type 30 has an invalid length.
[  244.798778][T15986] netlink: 'syz.0.4379': attribute type 1 has an invalid length.
[  245.274167][T15999] netlink: 'syz.0.4385': attribute type 10 has an invalid length.
[  245.281257][T15999] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.285452][T15999] team0: Port device bond0 added
[  246.166230][T16040] netlink: 34 bytes leftover after parsing attributes in process `syz.2.4403'.
[  246.319722][T16060] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4413'.
[  246.408099][T16070] netlink: 'syz.2.4418': attribute type 4 has an invalid length.
[  246.658224][T16095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4430'.
[  246.662944][T16095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4430'.
[  246.748908][T16104] syzkaller0: entered promiscuous mode
[  246.750754][T16104] syzkaller0: entered allmulticast mode
[  247.032347][T16132] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.039914][T16132] syzkaller0: entered promiscuous mode
[  247.042020][T16132] syzkaller0: entered allmulticast mode
[  247.070877][T16132] tipc: Resetting bearer <eth:syzkaller0>
[  247.075805][T16131] tipc: Resetting bearer <eth:syzkaller0>
[  247.097325][T16131] tipc: Disabling bearer <eth:syzkaller0>
[  247.208091][T16148] netlink: 'syz.2.4456': attribute type 1 has an invalid length.
[  247.294297][T16152] xfrm0 speed is unknown, defaulting to 1000
[  247.523651][T16165] netlink: 'syz.2.4463': attribute type 2 has an invalid length.
[  248.817560][T16225] syzkaller0: entered promiscuous mode
[  248.819453][T16225] syzkaller0: entered allmulticast mode
[  248.912617][ T5854] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  248.926407][ T5854] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  248.939735][ T5854] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  248.943107][ T5854] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  248.949031][T16228] xfrm0 speed is unknown, defaulting to 1000
[  249.034586][T16237] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4494'.
[  249.062973][T16240] xt_connbytes: Forcing CT accounting to be enabled
[  249.696833][ T5854] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  249.699916][ T5854] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  249.716614][ T9883] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  249.804457][T16287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4516'.
[  249.839299][T16287] 8021q: adding VLAN 0 to HW filter on device bond4
[  249.891136][T16287] xfrm0 speed is unknown, defaulting to 1000
[  250.126806][ T9884] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  250.259340][T16309] netlink: 'syz.0.4526': attribute type 10 has an invalid length.
[  250.262663][T16309] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4526'.
[  250.347950][ T9883] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  250.495759][T16317] xfrm0 speed is unknown, defaulting to 1000
[  251.031524][T16355] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4545'.
[  251.539266][T16376] bridge8: entered promiscuous mode
[  252.025311][T16396] syzkaller0: entered promiscuous mode
[  252.027741][T16396] syzkaller0: entered allmulticast mode
[  252.350012][T16409] IPv4: Oversized IP packet from 127.202.26.0
[  252.528411][T16426] netlink: 'syz.2.4575': attribute type 3 has an invalid length.
[  252.534489][T16426] dvmrp0: left allmulticast mode
[  252.590251][T16428] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  252.600752][T16428] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  252.642948][T16426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  252.720719][T16439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4581'.
[  252.761398][T16439] bond7: (slave geneve7): Enslaving as an active interface with an up link
[  252.764261][   T13] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  252.767607][   T13] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  252.770464][   T13] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  252.773730][   T13] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  252.777793][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4581'.
[  252.786831][T16439] bond7 (unregistering): (slave geneve7): Releasing backup interface
[  252.797223][T16439] bond7 (unregistering): Released all slaves
[  252.805639][   T13] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 20000 - 0
[  252.813531][   T13] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 20000 - 0
[  252.819001][   T13] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 20000 - 0
[  252.822788][   T13] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 20000 - 0
[  252.827536][T16444] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.836056][T16443] tipc: Disabling bearer <eth:syzkaller0>
[  252.883943][T16446] x_tables: duplicate underflow at hook 2
[  252.929126][T16448] netlink: 'syz.2.4585': attribute type 12 has an invalid length.
[  252.959540][T16451] netlink: 'syz.0.4584': attribute type 21 has an invalid length.
[  252.962840][T16451] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4584'.
[  253.172823][T16459] xfrm0 speed is unknown, defaulting to 1000
[  253.786931][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  253.961787][T16471] geneve3: entered promiscuous mode
[  253.964018][   T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  253.970205][   T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  253.972886][   T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  253.975627][   T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  254.178211][T16491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4601'.
[  254.202264][T16489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4600'.
[  254.328320][T16495] xfrm0 speed is unknown, defaulting to 1000
[  254.570802][T16511] netlink: 'syz.0.4610': attribute type 83 has an invalid length.
[  254.839442][T16533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4620'.
[  254.892464][T16541] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4622'.
[  255.015156][T16554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4628'.
[  255.824046][T16597] xfrm0 speed is unknown, defaulting to 1000
[  256.254605][T16622] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.257665][T16622] syzkaller0: entered promiscuous mode
[  256.260989][T16622] syzkaller0: entered allmulticast mode
[  256.288269][T16622] tipc: Resetting bearer <eth:syzkaller0>
[  256.328309][T16622] tipc: Disabling bearer <eth:syzkaller0>
[  256.333515][T16626] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  256.365915][T16630] xfrm0 speed is unknown, defaulting to 1000
[  256.417944][T16632] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.424151][T16632] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.432037][T16632] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  256.461417][T16634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4662'.
[  256.514109][T16632] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.518713][T16632] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.522667][T16632] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  256.630435][T16632] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.665155][T16632] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.686842][T16632] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  256.815260][T16632] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.826590][T16632] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.829876][T16632] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  256.927812][ T9010] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  256.932506][ T9010] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.939531][ T9010] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  256.961523][ T9010] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  256.965999][ T9010] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.973156][T16649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4668'.
[  256.976629][ T9010] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  256.989284][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  256.992439][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.995568][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  257.010568][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  257.013154][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.015667][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  257.869343][T16661] __nla_validate_parse: 2 callbacks suppressed
[  257.869354][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4673'.
[  257.993032][T16669] netlink: 'syz.2.4677': attribute type 10 has an invalid length.
[  257.996243][T16669] bridge0: port 1(macsec0) entered blocking state
[  258.000824][T16669] bridge0: port 1(macsec0) entered disabled state
[  258.005320][T16669] macsec0: entered allmulticast mode
[  258.007107][T16669] veth1_macvtap: entered allmulticast mode
[  258.009793][T16669] macsec0: entered promiscuous mode
[  258.057549][   T34] audit: type=1800 audit(1766019665.761:3): pid=16677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4681" name="blkio.bfq.time_recursive" dev="tmpfs" ino=7851 res=0 errno=0
[  258.271830][   T25] block nbd0: Possible stuck request ffff888109ed0000: control (read@0,1024B). Runtime 180 seconds
[  258.278333][   T25] block nbd0: Possible stuck request ffff888109ed0200: control (read@1024,1024B). Runtime 180 seconds
[  258.282687][   T25] block nbd0: Possible stuck request ffff888109ed0400: control (read@2048,1024B). Runtime 180 seconds
[  258.287394][   T25] block nbd0: Possible stuck request ffff888109ed0600: control (read@3072,1024B). Runtime 180 seconds
[  259.245056][T16717] openvswitch: netlink: Message has -2 unknown bytes.
[  259.249421][T16717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.360961][T16732] IPVS: Scheduler module ip_vs_sip not found
[  259.391241][T16739] netlink: 'syz.1.4707': attribute type 21 has an invalid length.
[  259.438829][T16745] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.4711'.
[  259.502976][T16751] xfrm0 speed is unknown, defaulting to 1000
[  259.606577][T16755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4714'.
[  259.950226][T16778] netlink: 'syz.2.4725': attribute type 30 has an invalid length.
[  260.210441][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4732'.
[  260.738521][T16809] xfrm0 speed is unknown, defaulting to 1000
[  260.842202][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  260.844972][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  261.079006][ T5831] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  261.095127][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  261.095150][ T5831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  261.095158][ T5831] Call Trace:
[  261.095164][ T5831]  <TASK>
[  261.095170][ T5831]  dump_stack_lvl+0x189/0x250
[  261.095192][ T5831]  ? __pfx_dump_stack_lvl+0x10/0x10
[  261.095207][ T5831]  ? __pfx__printk+0x10/0x10
[  261.095235][ T5831]  dump_header+0xd4/0x4c0
[  261.095250][ T5831]  oom_kill_process+0x263/0x800
[  261.095266][ T5831]  out_of_memory+0xf0c/0x12b0
[  261.095293][ T5831]  ? __pfx_out_of_memory+0x10/0x10
[  261.095320][ T5831]  mem_cgroup_out_of_memory+0x145/0x240
[  261.095338][ T5831]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  261.095363][ T5831]  ? _raw_spin_unlock+0x28/0x50
[  261.095379][ T5831]  ? memcg1_oom_prepare+0x37f/0x450
[  261.095394][ T5831]  try_charge_memcg+0xde4/0x1280
[  261.095420][ T5831]  ? __pfx_try_charge_memcg+0x10/0x10
[  261.095447][ T5831]  charge_memcg+0x9f/0x180
[  261.095462][ T5831]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  261.095474][ T5831]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  261.095491][ T5831]  __read_swap_cache_async+0x212/0x480
[  261.095514][ T5831]  swap_cluster_readahead+0x500/0x630
[  261.095536][ T5831]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  261.095563][ T5831]  ? get_vma_policy+0x27c/0x3c0
[  261.095579][ T5831]  swapin_readahead+0x189/0xc60
[  261.095606][ T5831]  ? __pfx_swapin_readahead+0x10/0x10
[  261.095624][ T5831]  ? swap_table_get+0x1e/0x260
[  261.095639][ T5831]  ? swap_table_get+0x1e/0x260
[  261.095654][ T5831]  ? swap_table_get+0x1e/0x260
[  261.095670][ T5831]  ? swap_table_get+0x216/0x260
[  261.095686][ T5831]  ? swap_cache_get_folio+0x51c/0x530
[  261.095706][ T5831]  do_swap_page+0x837/0x5c70
[  261.095721][ T5831]  ? __lock_acquire+0x6b6/0x2cf0
[  261.095737][ T5831]  ? __lock_acquire+0x6b6/0x2cf0
[  261.095759][ T5831]  ? do_swap_page+0x17d/0x5c70
[  261.095774][ T5831]  ? __pfx_do_swap_page+0x10/0x10
[  261.095789][ T5831]  ? __lock_acquire+0x6b6/0x2cf0
[  261.095803][ T5831]  ? __pfx_default_wake_function+0x10/0x10
[  261.095816][ T5831]  ? ___pte_offset_map+0x1ae/0x240
[  261.095836][ T5831]  ? pte_offset_map_rw_nolock+0xea/0x160
[  261.095855][ T5831]  handle_mm_fault+0x1277/0x32b0
[  261.095882][ T5831]  ? handle_mm_fault+0xdb/0x32b0
[  261.095906][ T5831]  ? __pfx_handle_mm_fault+0x10/0x10
[  261.095921][ T5831]  ? lock_vma_under_rcu+0x42c/0x4a0
[  261.095947][ T5831]  ? do_user_addr_fault+0x1a8/0x1380
[  261.095971][ T5831]  do_user_addr_fault+0xa7c/0x1380
[  261.095989][ T5831]  ? rcu_is_watching+0x15/0xb0
[  261.096005][ T5831]  ? trace_page_fault_user+0x84/0x1c0
[  261.096018][ T5831]  exc_page_fault+0x82/0x100
[  261.096038][ T5831]  asm_exc_page_fault+0x26/0x30
[  261.096049][ T5831] RIP: 0033:0x7f0b87dc2088
[  261.096060][ T5831] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[  261.096071][ T5831] RSP: 002b:00007ffdfd52c490 EFLAGS: 00010293
[  261.096083][ T5831] RAX: 0000000000000000 RBX: 0000000000000d3a RCX: 00007f0b87dc2085
[  261.096092][ T5831] RDX: 00007ffdfd52c4d0 RSI: 0000000000000000 RDI: 0000000000000000
[  261.096142][ T5831] RBP: 00007ffdfd52c53c R08: 0000000000000000 R09: 0000000000000000
[  261.096149][ T5831] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  261.096156][ T5831] R13: 00000000000927c0 R14: 000000000003f93c R15: 00007ffdfd52c590
[  261.096179][ T5831]  </TASK>
[  261.186562][ T5831] memory: usage 307200kB, limit 307200kB, failcnt 992
[  261.223270][ T5831] memory+swap: usage 307824kB, limit 9007199254740988kB, failcnt 0
[  261.225775][ T5831] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[  261.228629][ T5831] Memory cgroup stats for /syz2:
[  261.228721][ T5831] cache 0
[  261.251434][ T5831] rss 0
[  261.252680][ T5831] rss_huge 0
[  261.254082][ T5831] shmem 0
[  261.255239][ T5831] mapped_file 0
[  261.276536][ T5831] dirty 0
[  261.277810][ T5831] writeback 0
[  261.279203][ T5831] workingset_refault_anon 39
[  261.281033][ T5831] workingset_refault_file 69
[  261.282939][ T5831] swap 638976
[  261.284462][ T5831] swapcached 8192
[  261.285988][ T5831] pgpgin 135593
[  261.287645][ T5831] pgpgout 135591
[  261.289181][ T5831] pgfault 310814
[  261.290676][ T5831] pgmajfault 49
[  261.292138][ T5831] inactive_anon 0
[  261.293683][ T5831] active_anon 8192
[  261.295244][ T5831] inactive_file 0
[  261.309096][ T5831] active_file 0
[  261.311876][ T5831] unevictable 0
[  261.316482][ T5831] hierarchical_memory_limit 314572800
[  261.318245][ T5831] hierarchical_memsw_limit 9223372036854771712
[  261.320187][ T5831] total_cache 0
[  261.321340][ T5831] total_rss 0
[  261.322490][ T5831] total_rss_huge 0
[  261.323861][ T5831] total_shmem 0
[  261.325155][ T5831] total_mapped_file 0
[  261.334417][ T5831] total_dirty 0
[  261.335590][ T5831] total_writeback 0
[  261.337020][ T5831] total_workingset_refault_anon 39
[  261.338869][ T5831] total_workingset_refault_file 69
[  261.340874][ T5831] total_swap 638976
[  261.342347][ T5831] total_swapcached 8192
[  261.343942][ T5831] total_pgpgin 135593
[  261.345986][ T5831] total_pgpgout 135591
[  261.348174][ T5831] total_pgfault 310814
[  261.350321][ T5831] total_pgmajfault 49
[  261.351567][ T5831] total_inactive_anon 0
[  261.353006][ T5831] total_active_anon 8192
[  261.360758][ T5831] total_inactive_file 0
[  261.362082][ T5831] total_active_file 0
[  261.363319][ T5831] total_unevictable 0
[  261.364534][ T5831] anon_cost 0
[  261.365575][ T5831] file_cost 0
[  261.369949][ T5831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4736,pid=16802,uid=0
[  261.376765][ T5831] Memory cgroup out of memory: Killed process 16802 (syz.2.4736) total-vm:101960kB, anon-rss:1116kB, file-rss:21552kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
[  261.532796][T16829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4747'.
[  261.548381][T16829] vlan3: entered promiscuous mode
[  261.549981][T16829] syz_tun: entered promiscuous mode
[  262.106549][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  262.632314][T16869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4765'.
[  262.635420][T16869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4765'.
[  263.001147][T16890] netlink: set zone limit has 4 unknown bytes
[  263.087305][T16904] xt_CT: You must specify a L4 protocol and not use inversions on it
[  263.286131][T16916] bridge: RTM_NEWNEIGH with invalid ether address
[  263.567352][T16913] netlink: 'syz.2.4784': attribute type 10 has an invalid length.
[  263.573190][T16913] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.580614][T16913] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  263.910527][T16939] netlink: 464 bytes leftover after parsing attributes in process `syz.1.4797'.
[  263.950033][T16943] pim6reg: entered allmulticast mode
[  264.158801][T16968] syzkaller0: left promiscuous mode
[  264.160626][T16968] syzkaller0: left allmulticast mode
[  264.251434][T16977] netlink: 'syz.2.4816': attribute type 39 has an invalid length.
[  264.298430][T16981] xfrm0 speed is unknown, defaulting to 1000
[  264.440627][T16988] xfrm0 speed is unknown, defaulting to 1000
[  265.756857][T17068] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4858'.
[  265.861713][T17075] xfrm0 speed is unknown, defaulting to 1000
[  265.977665][T17088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  266.446125][T17119] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4879'.
[  266.684747][T17125] xfrm0 speed is unknown, defaulting to 1000
[  267.155866][T17146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4890'.
[  267.160312][T17146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4890'.
[  267.309014][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4892'.
[  267.441481][T17157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  267.483141][T17161] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4897'.
[  267.738906][T17183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4907'.
[  268.330970][T17210] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.334505][T17210] syzkaller0: entered promiscuous mode
[  268.338984][T17210] syzkaller0: entered allmulticast mode
[  268.365150][T17210] tipc: Resetting bearer <eth:syzkaller0>
[  268.370337][T17209] tipc: Resetting bearer <eth:syzkaller0>
[  268.385867][T17209] tipc: Disabling bearer <eth:syzkaller0>
[  268.586022][   T34] audit: type=1800 audit(1766019676.281:4): pid=17214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4919" name="blkio.bfq.time_recursive" dev="tmpfs" ino=8356 res=0 errno=0
[  268.805025][T17240] SET target dimension over the limit!
[  269.408572][T17279] netlink: 'syz.1.4949': attribute type 1 has an invalid length.
[  269.417221][T17279] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.4949'.
[  269.436294][T17285] netlink: 'syz.2.4952': attribute type 29 has an invalid length.
[  269.445938][T17285] netlink: 'syz.2.4952': attribute type 29 has an invalid length.
[  269.457592][T17285] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4952'.
[  269.467734][T17289] netlink: 'syz.1.4953': attribute type 1 has an invalid length.
[  269.499712][T17292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4956'.
[  269.873120][T17336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4975'.
[  269.878539][T17336] macsec0: left allmulticast mode
[  269.880717][T17336] veth1_macvtap: left allmulticast mode
[  269.883165][T17336] macsec0: left promiscuous mode
[  269.885777][T17336] bridge0: port 1(macsec0) entered disabled state
[  270.050804][T17347] syzkaller0: entered promiscuous mode
[  270.052702][T17347] syzkaller0: entered allmulticast mode
[  271.067424][T17365] bridge_slave_0: default FDB implementation only supports local addresses
[  271.162992][T17376] netlink: 'syz.1.4995': attribute type 4 has an invalid length.
[  271.170989][T17376] netlink: 'syz.1.4995': attribute type 4 has an invalid length.
[  271.412197][T17398] xfrm0 speed is unknown, defaulting to 1000
[  271.771790][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5013'.
[  272.157468][ T9890] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  272.340937][T17444] netlink: 'syz.0.5025': attribute type 29 has an invalid length.
[  272.675543][T17462] Bluetooth: MGMT ver 1.23
[  272.739424][T17467] syzkaller0: entered promiscuous mode
[  272.746495][T17467] syzkaller0: entered allmulticast mode
[  272.929692][T17482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.932330][T17482] syzkaller0: entered promiscuous mode
[  272.934205][T17482] syzkaller0: entered allmulticast mode
[  272.954570][T17482] tipc: Resetting bearer <eth:syzkaller0>
[  272.961279][T17481] tipc: Resetting bearer <eth:syzkaller0>
[  272.978374][T17481] tipc: Disabling bearer <eth:syzkaller0>
[  272.987713][ T9886] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  273.050150][T17490] xfrm0 speed is unknown, defaulting to 1000
[  273.061419][T17493] syzkaller0: entered promiscuous mode
[  273.063172][T17493] syzkaller0: entered allmulticast mode
[  273.075493][T17493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.079185][T17492] tipc: Resetting bearer <eth:syzkaller0>
[  273.122279][T17492] tipc: Disabling bearer <eth:syzkaller0>
[  273.210769][T17498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  273.344991][T17513] netlink: 292 bytes leftover after parsing attributes in process `syz.2.5056'.
[  273.376877][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5057'.
[  274.210934][T17560] netlink: 1315 bytes leftover after parsing attributes in process `syz.0.5078'.
[  274.392501][T17578] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.396095][T17578] syzkaller0: entered promiscuous mode
[  274.399122][T17578] syzkaller0: entered allmulticast mode
[  274.402664][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5087'.
[  274.429915][T17578] tipc: Resetting bearer <eth:syzkaller0>
[  274.437697][T17577] tipc: Resetting bearer <eth:syzkaller0>
[  274.453437][T17577] tipc: Disabling bearer <eth:syzkaller0>
[  274.775459][T17619] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.783429][T17619] syzkaller0: entered promiscuous mode
[  274.785275][T17619] syzkaller0: entered allmulticast mode
[  274.802670][T17619] tipc: Resetting bearer <eth:syzkaller0>
[  274.806543][T17617] tipc: Resetting bearer <eth:syzkaller0>
[  274.816950][T17617] tipc: Disabling bearer <eth:syzkaller0>
[  274.883276][T17627] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5109'.
[  275.245071][T17663] netlink: 'syz.2.5128': attribute type 2 has an invalid length.
[  275.255945][T17663] netlink: 'syz.2.5128': attribute type 1 has an invalid length.
[  275.504910][T17675] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5134'.
[  275.754863][T17711] geneve4: entered promiscuous mode
[  275.780266][T17711] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.784465][T17711] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  275.791270][T17711] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  275.862702][T17711] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.867220][T17711] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  275.871382][T17711] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  275.938320][T17711] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.942003][T17711] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  275.946073][T17711] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  275.990019][T17711] batman_adv: batadv0: Removing interface: netdevsim0
[  275.993726][T17711] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.997521][T17711] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  276.001023][T17711] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  276.066599][ T5855] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  276.070216][ T5855] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.073756][ T5855] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  276.088496][ T5855] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  276.091939][ T5855] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.095411][ T5855] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  276.107754][ T5855] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  276.111227][ T5855] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.114511][ T5855] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  276.127637][ T5855] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  276.131198][ T5855] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.134555][ T5855] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  276.381359][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5154'.
[  276.425238][T17731] sctp: [Deprecated]: syz.0.5156 (pid 17731) Use of int in maxseg socket option.
[  276.425238][T17731] Use struct sctp_assoc_value instead
[  276.822013][T17772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5175'.
[  277.251247][T17805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5190'.
[  277.325977][T17811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5193'.
[  277.444708][T17821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5198'.
[  277.452776][T17821] netlink: 'syz.0.5198': attribute type 1 has an invalid length.
[  277.861964][T17844] netlink: 'syz.0.5207': attribute type 64 has an invalid length.
[  277.868916][T17844] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5207'.
[  278.656959][T17881] syzkaller0: entered promiscuous mode
[  278.659265][T17881] syzkaller0: entered allmulticast mode
[  278.746512][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  278.854060][T17896] syz_tun: entered allmulticast mode
[  278.943090][T17902] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  278.970715][T17895] syz_tun: left allmulticast mode
[  279.058737][T17909] bond6: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  279.062790][T17909] bond6: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  279.085757][T17912] xt_bpf: check failed: parse error
[  279.494603][T17943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5239'.
[  279.908305][ T5281] udevd[5281]: worker [5833] /devices/virtual/block/nbd0 timeout; kill it
[  279.911497][ T5281] udevd[5281]: seq 10850 '/devices/virtual/block/nbd0' killed
[  280.218843][T18003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5271'.
[  280.251938][T18005] netlink: 'syz.0.5272': attribute type 10 has an invalid length.
[  280.364828][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5278'.
[  280.378513][T18017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5278'.
[  280.402953][T18017] geneve5: entered promiscuous mode
[  280.405147][T18017] geneve5: entered allmulticast mode
[  280.537362][T18033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5286'.
[  280.878903][T18056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5297'.
[  281.829826][T18080] xfrm0 speed is unknown, defaulting to 1000
[  281.928977][T18084] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  282.123303][T18092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5307'.
[  282.487944][T18102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5311'.
[  282.490875][T18102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  282.493255][T18102] IPv6: NLM_F_CREATE should be set when creating new route
[  282.550118][T18105] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5313'.
[  282.785832][T18120] netlink: 'syz.2.5318': attribute type 13 has an invalid length.
[  283.134201][ T9089] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  283.137186][ T9089] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.146099][ T9089] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  283.155637][ T9089] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  283.166481][ T9089] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.169275][ T9089] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  283.171863][ T9089] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  283.174402][ T9089] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.179550][ T9089] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  283.190037][ T9089] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  283.192615][ T9089] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.195754][ T9089] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  283.249714][T18139] netlink: 'syz.0.5327': attribute type 29 has an invalid length.
[  283.259807][T18139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5327'.
[  283.346689][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5328'.
[  283.350717][T18141] block nbd1: shutting down sockets
[  283.591020][T18163] netlink: 'syz.2.5337': attribute type 1 has an invalid length.
[  283.617980][T18163] 8021q: adding VLAN 0 to HW filter on device bond7
[  283.643300][T18163] bond7: (slave gretap2): making interface the new active one
[  283.647943][T18163] bond7: (slave gretap2): Enslaving as an active interface with an up link
[  284.253384][T18221] netlink: 'syz.0.5363': attribute type 4 has an invalid length.
[  284.259676][T18221] netlink: 'syz.0.5363': attribute type 4 has an invalid length.
[  284.870648][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  285.237732][T18277] netlink: 'syz.0.5390': attribute type 10 has an invalid length.
[  285.315645][T18285] veth0_to_batadv: left promiscuous mode
[  285.318176][T18285] veth0_to_batadv: left allmulticast mode
[  285.383561][T18291] __nla_validate_parse: 2 callbacks suppressed
[  285.383573][T18291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5397'.
[  285.393084][T18291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5397'.
[  285.421493][T18291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5397'.
[  285.425231][T18291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5397'.
[  285.500622][T18291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5397'.
[  285.504391][T18291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5397'.
[  285.611469][T18313] wireguard0: entered promiscuous mode
[  285.613804][T18313] wireguard0: entered allmulticast mode
[  285.626548][T18313] team0: Port device wireguard0 added
[  285.789361][T18337] bridge_slave_0: default FDB implementation only supports local addresses
[  286.308469][T18382] Cannot find add_set index 4 as target
[  286.640450][T18415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5448'.
[  286.657197][T18415] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5448'.
[  286.680920][T18415] bond7 (unregistering): Released all slaves
[  287.176481][T18428] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5452'.
[  287.631568][T18444] xfrm0 speed is unknown, defaulting to 1000
[  288.351536][   T25] block nbd0: Possible stuck request ffff888109ed0000: control (read@0,1024B). Runtime 210 seconds
[  288.355928][   T25] block nbd0: Possible stuck request ffff888109ed0200: control (read@1024,1024B). Runtime 210 seconds
[  288.359883][   T25] block nbd0: Possible stuck request ffff888109ed0400: control (read@2048,1024B). Runtime 210 seconds
[  288.363279][   T25] block nbd0: Possible stuck request ffff888109ed0600: control (read@3072,1024B). Runtime 210 seconds
[  291.349245][T18466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  291.665865][T18486] netlink: 'syz.2.5476': attribute type 21 has an invalid length.
[  291.669632][T18486] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5476'.
[  291.678664][T18486] netlink: 'syz.2.5476': attribute type 1 has an invalid length.
[  291.835670][T18496] xfrm0 speed is unknown, defaulting to 1000
[  292.303603][T18514] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5488'.
[  292.306771][T18514] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5488'.
[  292.693127][T18532] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  292.904630][   T34] audit: type=1800 audit(1766019700.601:5): pid=18539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5499" name="memory.events" dev="tmpfs" ino=9306 res=0 errno=0
[  293.103057][T18549] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  293.150862][T18551] geneve1: entered promiscuous mode
[  293.456455][T18577] xt_CT: You must specify a L4 protocol and not use inversions on it
[  293.490934][T18581] netlink: 'syz.2.5518': attribute type 1 has an invalid length.
[  293.505530][T18581] 8021q: adding VLAN 0 to HW filter on device bond8
[  293.514905][T18581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5518'.
[  293.518690][T18581] bond8: entered promiscuous mode
[  293.555007][T18585] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5521'.
[  293.562774][T18585] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5521'.
[  293.566973][T18585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5521'.
[  293.616080][T18591] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5523'.
[  293.617034][T18588] syzkaller1: entered promiscuous mode
[  293.622289][T18588] syzkaller1: entered allmulticast mode
[  293.644297][T18593] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5524'.
[  293.648018][T18593] unsupported nlmsg_type 40
[  293.653996][T18588] xfrm0 speed is unknown, defaulting to 1000
[  293.863282][T18609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5530'.
[  293.962238][T18624] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  294.430755][T18651] x_tables: ip_tables: osf match: only valid for protocol 6
[  294.535562][T18657] xfrm0 speed is unknown, defaulting to 1000
[  294.859871][T18680] ieee802154 phy0 wpan0: encryption failed: -22
[  295.792247][T18721] netlink: 'syz.1.5575': attribute type 23 has an invalid length.
[  295.999020][T18713] xfrm0 speed is unknown, defaulting to 1000
[  296.641345][T18752] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.645074][T18752] 8021q: adding VLAN 0 to HW filter on device team0
[  296.648707][T18752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  296.770395][T18758] xfrm0 speed is unknown, defaulting to 1000
[  297.131150][T18762] xfrm0 speed is unknown, defaulting to 1000
[  297.362654][T18767] xfrm0 speed is unknown, defaulting to 1000
[  298.278782][T18799] __nla_validate_parse: 3 callbacks suppressed
[  298.278799][T18799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5605'.
[  298.372644][T18801] ip6gretap1: entered promiscuous mode
[  298.468835][T18807] netlink: 'syz.2.5609': attribute type 10 has an invalid length.
[  299.041287][T18842] delete_channel: no stack
[  299.132728][T18853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5631'.
[  299.135872][T18853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5631'.
[  299.151690][T18855] syzkaller1: tun_chr_ioctl cmd 1074025677
[  299.156656][T18855] syzkaller1: linktype set to 825
[  299.215605][T18865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5636'.
[  299.651450][T18901] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5648'.
[  299.678784][T18903] netlink: 'syz.1.5652': attribute type 1 has an invalid length.
[  299.693546][T18903] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5652'.
[  300.020244][T18927] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  300.024168][T18927] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  300.074963][T18932] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.079215][T18932] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.123972][T18932] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.128378][T18932] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.174810][T18932] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.179755][T18932] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.232134][T18932] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.236508][T18932] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.329385][ T5854] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  300.332866][ T5854] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  300.358159][T18944] No such timeout policy "syz0"
[  300.368118][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  300.371894][T18944] netlink: 'syz.2.5672': attribute type 1 has an invalid length.
[  300.374392][T18944] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5672'.
[  300.377867][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  300.397534][ T5854] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  300.400855][ T5854] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  300.420890][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  300.424389][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.550539][T18959] netlink: 'syz.2.5678': attribute type 10 has an invalid length.
[  300.582602][T18956] xfrm0 speed is unknown, defaulting to 1000
[  301.074897][T18981] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5686'.
[  301.078647][T18981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5686'.
[  301.081527][T18981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5686'.
[  301.642980][T19008] netlink: 'syz.2.5698': attribute type 1 has an invalid length.
[  301.646239][T19008] netlink: 'syz.2.5698': attribute type 7 has an invalid length.
[  301.651759][T19008] netlink: 'syz.2.5698': attribute type 8 has an invalid length.
[  302.348814][T19045] xt_CT: No such helper "snmp"
[  302.452046][T19049] xfrm0 speed is unknown, defaulting to 1000
[  302.500400][T19057] sch_fq: defrate 4294967293 ignored.
[  303.209699][T19096] syzkaller0: entered promiscuous mode
[  303.211487][T19096] syzkaller0: entered allmulticast mode
[  304.599679][T19138] __nla_validate_parse: 5 callbacks suppressed
[  304.599689][T19138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5750'.
[  304.986081][T19186] netlink: 'syz.1.5773': attribute type 2 has an invalid length.
[  304.992829][T19186] netlink: 'syz.1.5773': attribute type 1 has an invalid length.
[  304.995177][T19186] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5773'.
[  305.091923][T19202] netlink: 'syz.1.5782': attribute type 12 has an invalid length.
[  305.168077][T19209] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.179821][T19209] syzkaller0: entered promiscuous mode
[  305.182096][T19209] syzkaller0: entered allmulticast mode
[  305.215301][T19209] tipc: Resetting bearer <eth:syzkaller0>
[  305.218157][T19205] tipc: Resetting bearer <eth:syzkaller0>
[  305.228701][T19205] tipc: Disabling bearer <eth:syzkaller0>
[  305.538646][T19252] netlink: 'syz.0.5804': attribute type 1 has an invalid length.
[  306.359259][T19320] netlink: 'syz.1.5834': attribute type 1 has an invalid length.
[  306.916592][    C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  307.193220][T19388] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  307.440230][T19409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5873'.
[  307.604739][T19418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5877'.
[  307.869119][T19438] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  308.162790][T19458] xt_TCPMSS: Only works on TCP SYN packets
[  308.166825][T19459] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  308.204295][T19461] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5897'.
[  308.245425][T19466] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5898'.
[  308.446739][T19461] xfrm0 speed is unknown, defaulting to 1000
[  308.744566][T19482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5905'.
[  308.921135][T19495] netlink: 'syz.0.5911': attribute type 21 has an invalid length.
[  308.959203][T19495] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5911'.
[  308.988752][T19497] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5912'.
[  309.074974][T19504] sock: sock_set_timeout: `syz.1.5915' (pid 19504) tries to set negative timeout
[  309.244520][T19515] netlink: 'syz.1.5921': attribute type 1 has an invalid length.
[  309.295059][T19515] 8021q: adding VLAN 0 to HW filter on device bond7
[  309.398129][T19522] 8021q: adding VLAN 0 to HW filter on device bond7
[  309.401203][T19522] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  309.406135][T19522] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  309.441522][T19515] veth9: entered promiscuous mode
[  309.446997][T19515] bond7: (slave veth9): Enslaving as an active interface with a down link
[  309.467691][T19521] syzkaller0: entered promiscuous mode
[  309.469924][T19521] syzkaller0: entered allmulticast mode
[  309.764714][T19543] xfrm0 speed is unknown, defaulting to 1000
[  310.225124][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5940'.
[  311.055413][T19621] netlink: 'syz.0.5965': attribute type 10 has an invalid length.
[  311.058949][T19621] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5965'.
[  311.088436][T19623] veth0_to_bridge: entered promiscuous mode
[  311.095103][T19622] veth0_to_bridge: left promiscuous mode
[  311.135099][T19630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5968'.
[  311.138030][T19630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5968'.
[  311.556897][T19650] xfrm0 speed is unknown, defaulting to 1000
[  311.674304][T19663] TCP: TCP_TX_DELAY enabled
[  311.925296][T19675] syzkaller0: entered promiscuous mode
[  311.931759][T19675] syzkaller0: entered allmulticast mode
[  311.939840][T19675] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.943195][T19674] tipc: Resetting bearer <eth:syzkaller0>
[  311.967543][T19674] tipc: Disabling bearer <eth:syzkaller0>
[  312.093661][T19687] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  312.172354][T19687] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  312.298358][T19700] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6002'.
[  312.313580][T19703] netlink: 'syz.1.5997': attribute type 10 has an invalid length.
[  312.324266][T19703] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  312.348061][T19703] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.350625][T19703] bond0: (slave wlan1): Opening slave failed
[  312.384084][T19687] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  312.396567][T19687] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  313.683531][T19751] xfrm0 speed is unknown, defaulting to 1000
[  314.258602][T19772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6032'.
[  314.455381][T19784] xfrm0 speed is unknown, defaulting to 1000
[  314.750015][T19810] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6045'.
[  314.809867][T19816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  316.310638][T19911] siw: device registration error -23
[  316.423621][T19911] xt_TCPMSS: Only works on TCP SYN packets
[  316.625764][T19926] netlink: 'syz.0.6091': attribute type 10 has an invalid length.
[  316.628856][T19926] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6091'.
[  316.631793][T19926] bond0: entered promiscuous mode
[  316.633563][T19926] syz_tun: entered promiscuous mode
[  317.156633][T19926] team0: Port device bond0 removed
[  317.332245][T19944] netlink: 'syz.2.6100': attribute type 2 has an invalid length.
[  317.429468][T19957] tap0: tun_chr_ioctl cmd 2148553947
[  317.439572][T19957] tap0: tun_chr_ioctl cmd 2147767521
[  317.507414][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6105'.
[  317.577552][T19970] syzkaller0: entered promiscuous mode
[  317.586541][T19970] syzkaller0: entered allmulticast mode
[  318.310531][T20034] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6138'.
[  318.427982][   T25] block nbd0: Possible stuck request ffff888109ed0000: control (read@0,1024B). Runtime 240 seconds
[  318.431692][   T25] block nbd0: Possible stuck request ffff888109ed0200: control (read@1024,1024B). Runtime 240 seconds
[  318.435177][   T25] block nbd0: Possible stuck request ffff888109ed0400: control (read@2048,1024B). Runtime 240 seconds
[  318.439213][   T25] block nbd0: Possible stuck request ffff888109ed0600: control (read@3072,1024B). Runtime 240 seconds
[  319.490718][T20118] openvswitch: netlink: Missing key (keys=40, expected=80)
[  319.547473][T20124] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  319.645365][T20138] netlink: 'syz.2.6183': attribute type 1 has an invalid length.
[  319.880963][T20140] nbd1: detected capacity change from 0 to 63
[  319.884098][T20153] block nbd1: NBD_DISCONNECT
[  319.885906][T20153] block nbd1: Disconnected due to user request.
[  319.895236][T20153] block nbd1: shutting down sockets
[  319.900933][    C0] blk_print_req_error: 138 callbacks suppressed
[  319.900943][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  319.906009][    C0] buffer_io_error: 138 callbacks suppressed
[  319.906016][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  319.910904][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  319.914233][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[  319.916917][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  319.919959][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  319.922550][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  319.925591][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[  319.929227][T14128] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  319.936488][T14128] Buffer I/O error on dev nbd1, logical block 0, async page read
[  319.942721][T14128] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  319.949211][T14128] Buffer I/O error on dev nbd1, logical block 1, async page read
[  319.951845][T14128] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  319.955407][T14128] Buffer I/O error on dev nbd1, logical block 2, async page read
[  319.959110][T14128] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  319.962175][T14128] Buffer I/O error on dev nbd1, logical block 3, async page read
[  319.964650][T14128] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  319.971239][T14128] Buffer I/O error on dev nbd1, logical block 0, async page read
[  319.974232][T14128] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  319.981053][T14128] Buffer I/O error on dev nbd1, logical block 1, async page read
[  319.984195][T14128] ldm_validate_partition_table(): Disk read failed.
[  319.986962][T14128] Dev nbd1: unable to read RDB block 0
[  319.992077][T14128]  nbd1: unable to read partition table
[  319.997712][T14128] ldm_validate_partition_table(): Disk read failed.
[  319.999984][T14128] Dev nbd1: unable to read RDB block 0
[  320.001955][T14128]  nbd1: unable to read partition table
[  320.819436][T20219] netlink: 'syz.1.6218': attribute type 1 has an invalid length.
[  320.854241][T20219] bond8: entered promiscuous mode
[  320.857100][T20219] 8021q: adding VLAN 0 to HW filter on device bond8
[  320.902392][T20219] 8021q: adding VLAN 0 to HW filter on device bond9
[  320.905661][T20219] bond8: (slave bond9): making interface the new active one
[  320.908355][T20219] bond9: entered promiscuous mode
[  320.910383][T20219] bond8: (slave bond9): Enslaving as an active interface with an up link
[  321.057146][T20238] xt_connbytes: Forcing CT accounting to be enabled
[  321.070391][T20235] tipc: Enabling of bearer <eth:rose0> rejected, failed to enable media
[  321.238338][T20250] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6232'.
[  321.280070][T20255] ip6erspan0: entered allmulticast mode
[  321.480897][T20284] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.486853][T20284] syzkaller0: entered promiscuous mode
[  321.489006][T20284] syzkaller0: entered allmulticast mode
[  321.516707][T20284] tipc: Resetting bearer <eth:syzkaller0>
[  321.520633][T20280] tipc: Resetting bearer <eth:syzkaller0>
[  321.537531][T20280] tipc: Disabling bearer <eth:syzkaller0>
[  321.670710][T20298] netlink: 'syz.0.6253': attribute type 1 has an invalid length.
[  321.884344][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6257'.
[  321.889170][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6257'.
[  322.280501][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  322.282670][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  322.325644][T20332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.345765][T20334] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6270'.
[  322.653093][T20364] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.656275][T20364] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.700161][T20364] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.704678][T20364] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.753004][T20364] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.757427][T20364] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.812308][T20364] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.815533][T20364] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.889594][ T5855] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  322.892584][ T5855] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.903481][ T5855] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  322.911890][ T5855] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.921682][ T5855] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  322.925124][ T5855] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.933629][ T5855] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  322.937150][ T5855] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.066127][T20371] syzkaller0: entered promiscuous mode
[  323.069028][T20371] syzkaller0: entered allmulticast mode
[  324.213488][T20377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6288'.
[  324.261025][T20393] netlink: 'syz.2.6294': attribute type 8 has an invalid length.
[  325.694084][T20493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6339'.
[  325.706112][T20493] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  325.804236][T20501] xfrm0 speed is unknown, defaulting to 1000
[  325.966270][T20502] xfrm0 speed is unknown, defaulting to 1000
[  326.275216][T20526] netlink: 'syz.1.6353': attribute type 10 has an invalid length.
[  326.278668][T20526] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6353'.
[  326.301515][T20526] geneve0: entered promiscuous mode
[  326.309591][T20526] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  326.315583][T20526] team0: Failed to send options change via netlink (err -105)
[  326.319093][T20526] team0: Port device geneve0 added
[  326.472658][T20531] IPVS: Scheduler module ip_vs_sip not found
[  326.801447][T20561] syzkaller0: entered promiscuous mode
[  326.804223][T20561] syzkaller0: entered allmulticast mode
[  326.864143][T20567] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6370'.
[  327.455094][T20607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6386'.
[  327.459554][T20607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6386'.
[  327.462558][T20607] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6386'.
[  327.800212][T20632] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6397'.
[  327.988021][T20652] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  328.072956][T20662] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6410'.
[  328.142547][T20670] bond10 (unregistering): Released all slaves
[  329.026132][T20682] netlink: 'syz.0.6419': attribute type 29 has an invalid length.
[  329.047251][T20682] netlink: 'syz.0.6419': attribute type 29 has an invalid length.
[  329.260602][T20708] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6431'.
[  329.314180][T20713] xfrm0 speed is unknown, defaulting to 1000
[  329.536758][T20729] xfrm0 speed is unknown, defaulting to 1000
[  330.073304][T20749] netlink: 'syz.0.6446': attribute type 1 has an invalid length.
[  330.575116][T20781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6460'.
[  330.588238][T20781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6460'.
[  330.592251][T20783] netlink: 'syz.0.6461': attribute type 29 has an invalid length.
[  330.671760][T20783] netlink: 'syz.0.6461': attribute type 29 has an invalid length.
[  330.998396][T20809] netlink: 'syz.1.6471': attribute type 3 has an invalid length.
[  331.062178][T20813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6473'.
[  331.234342][T20829] netlink: 'syz.0.6481': attribute type 2 has an invalid length.
[  331.250811][T20829] !: entered promiscuous mode
[  331.424163][T20843] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6487'.
[  332.012220][T20885] netlink: 'syz.0.6505': attribute type 298 has an invalid length.
[  333.217907][T20916] __nla_validate_parse: 1 callbacks suppressed
[  333.217917][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6518'.
[  333.222834][T20916] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6518'.
[  333.792946][T20869] Set syz1 is full, maxelem 65536 reached
[  333.928661][T20927] netlink: 87 bytes leftover after parsing attributes in process `syz.1.6523'.
[  334.562096][T20970] xfrm0 speed is unknown, defaulting to 1000
[  335.125509][T20981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6543'.
[  335.507030][T20994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6548'.
[  336.597803][T21056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6575'.
[  337.900858][T21127] netlink: 'syz.0.6608': attribute type 1 has an invalid length.
[  337.903356][T21127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6608'.
[  337.906109][T21127] netlink: 364 bytes leftover after parsing attributes in process `syz.0.6608'.
[  337.916454][T21127] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6608'.
[  337.919305][T21127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6608'.
[  338.224798][T21140] syzkaller0: entered promiscuous mode
[  338.228705][T21140] syzkaller0: entered allmulticast mode
[  339.414003][T21164] bond10: option mode: invalid value (254)
[  339.418600][T21164] bond10 (unregistering): Released all slaves
[  339.673632][T21177] geneve0: left promiscuous mode
[  339.758634][T21177] tipc: Resetting bearer <eth:batadv0>
[  340.267539][T18824] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  340.280574][T18824] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.283218][T18824] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  340.295573][T18824] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.298489][T18824] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  340.307380][T18824] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.310690][T18824] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  340.326703][T18824] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.467389][T21203] netlink: 'syz.0.6640': attribute type 1 has an invalid length.
[  340.470501][T21203] netlink: 'syz.0.6640': attribute type 1 has an invalid length.
[  340.926233][T21241] xfrm0 speed is unknown, defaulting to 1000
[  341.150195][T21257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.166222][T21257] tipc: Resetting bearer <eth:syzkaller0>
[  341.212062][T21263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6664'.
[  341.256671][T21267] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  342.167092][ T5876] tipc: Node number set to 3354083777
[  342.245031][T21307] bond10: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  342.250446][T21307] bond10 (unregistering): Released all slaves
[  342.411929][T21323] vxcan3: entered allmulticast mode
[  342.531704][T21325] Cannot find set identified by id 1 to match
[  342.846050][T21343] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.850483][T21343] syzkaller0: entered promiscuous mode
[  342.852922][T21343] syzkaller0: entered allmulticast mode
[  342.872328][T21343] tipc: Resetting bearer <eth:syzkaller0>
[  342.878545][T21342] tipc: Resetting bearer <eth:syzkaller0>
[  342.890463][T21342] tipc: Disabling bearer <eth:syzkaller0>
[  343.066097][T21353] tun0: tun_chr_ioctl cmd 1074025675
[  343.067993][T21353] tun0: persist enabled
[  343.069492][T21353] tun0: tun_chr_ioctl cmd 1074025675
[  343.071280][T21353] tun0: persist disabled
[  343.316520][T21369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6708'.
[  343.322239][T21369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6708'.
[  343.488988][T21383] xfrm0 speed is unknown, defaulting to 1000
[  343.964390][T21402] netlink: 'syz.2.6723': attribute type 3 has an invalid length.
[  344.319102][T21428] netlink: 'syz.2.6734': attribute type 3 has an invalid length.
[  344.321643][T21428] netlink: 'syz.2.6734': attribute type 7 has an invalid length.
[  344.324801][T21428] netlink: 'syz.2.6734': attribute type 8 has an invalid length.
[  344.328014][T21428] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6734'.
[  345.043965][T21454] xfrm0 speed is unknown, defaulting to 1000
[  345.110724][T21468] geneve7: entered promiscuous mode
[  345.112446][T21468] geneve7: entered allmulticast mode
[  345.114986][ T9010] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  345.117911][ T9010] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  345.121248][ T9010] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  345.124609][ T9010] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  345.185325][T21460] xfrm0 speed is unknown, defaulting to 1000
[  345.791591][T21489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6759'.
[  345.851010][T21495] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6760'.
[  345.861358][T21495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6760'.
[  345.873476][T21495] netlink: 'syz.2.6760': attribute type 1 has an invalid length.
[  345.992302][T21505] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6764'.
[  346.086477][T21511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6768'.
[  346.968474][T21564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6792'.
[  346.971861][T21564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6792'.
[  346.975021][T21564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6792'.
[  347.062594][T21568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6794'.
[  347.425673][T21601] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.6805'.
[  347.631181][T21611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6812'.
[  347.732551][T21617] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6815'.
[  348.520967][   T25] block nbd0: Possible stuck request ffff888109ed0000: control (read@0,1024B). Runtime 270 seconds
[  348.524147][   T25] block nbd0: Possible stuck request ffff888109ed0200: control (read@1024,1024B). Runtime 270 seconds
[  348.530082][   T25] block nbd0: Possible stuck request ffff888109ed0400: control (read@2048,1024B). Runtime 270 seconds
[  348.533452][   T25] block nbd0: Possible stuck request ffff888109ed0600: control (read@3072,1024B). Runtime 270 seconds
[  350.945573][T21647] netlink: 'syz.1.6825': attribute type 13 has an invalid length.
[  350.953468][T21647] netlink: 'syz.1.6825': attribute type 17 has an invalid length.
[  350.984833][T21647] sit0: left promiscuous mode
[  351.030398][T21647] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.034942][T21647] 8021q: adding VLAN 0 to HW filter on device team0
[  351.040281][T21647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  351.068368][T21647] xfrm0 speed is unknown, defaulting to 1000
[  352.128403][T21736] dummy0: mtu less than device minimum
[  352.500747][T21778] delete_channel: no stack
[  354.543761][T21805] veth11: entered promiscuous mode
[  354.665096][T21828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6906'.
[  355.337332][T21854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6915'.
[  355.341050][T21854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6915'.
[  355.538948][T21863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6919'.
[  355.788704][T21883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6930'.
[  356.032296][T21905] netlink: 'syz.0.6939': attribute type 10 has an invalid length.
[  356.035448][T21905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6939'.
[  356.553216][T21972] netlink: 'syz.1.6971': attribute type 1 has an invalid length.
[  356.594261][T21972] 8021q: adding VLAN 0 to HW filter on device bond10
[  356.608148][T21972] bond10: (slave ip6gretap3): making interface the new active one
[  356.618585][T21972] bond10: (slave ip6gretap3): Enslaving as an active interface with an up link
[  356.625063][T21979] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  356.650750][T21972] veth13: entered promiscuous mode
[  356.669415][T21972] bond10: (slave veth13): Enslaving as an active interface with a down link
[  356.681341][T21972] erspan0: entered allmulticast mode
[  356.696019][T21972] bond10: (slave erspan0): Enslaving as an active interface with an up link
[  356.715141][T21972] bond10: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  356.741347][T21985] xfrm0 speed is unknown, defaulting to 1000
[  356.835668][T21989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6977'.
[  356.962816][T22009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6985'.
[  357.048469][T22017] netlink: 'syz.1.6989': attribute type 1 has an invalid length.
[  357.051051][T22017] netlink: 'syz.1.6989': attribute type 3 has an invalid length.
[  357.056232][T22017] netlink: 'syz.1.6989': attribute type 7 has an invalid length.
[  357.063698][T22017] netlink: 'syz.1.6989': attribute type 8 has an invalid length.
[  357.066513][T22017] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6989'.
[  357.069929][T22017] NCSI netlink: No device for ifindex 131092
[  357.198679][T22027] xfrm0 speed is unknown, defaulting to 1000
[  358.059731][T22067] ieee802154 phy0 wpan0: encryption failed: -22
[  358.061756][T22067] ieee802154 phy0 wpan0: encryption failed: -22
[  358.163376][T22084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7018'.
[  358.324356][T22100] syzkaller0: entered promiscuous mode
[  358.330087][T22100] syzkaller0: entered allmulticast mode
[  358.477509][T22107] netlink: 'syz.1.7029': attribute type 21 has an invalid length.
[  358.780294][T22128] netlink: 'syz.0.7037': attribute type 3 has an invalid length.
[  358.782736][T22128] netlink: 'syz.0.7037': attribute type 1 has an invalid length.
[  358.785101][T22128] NCSI netlink: No device for ifindex 23016
[  358.986720][T22144] pim6reg1: entered promiscuous mode
[  358.988449][T22144] pim6reg1: entered allmulticast mode
[  359.067338][T22152] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  359.074413][T22152] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.080616][T22152] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  359.137816][T22152] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  359.140847][T22152] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.143866][T22152] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  359.213524][T22152] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  359.219066][T22152] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.222852][T22152] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  359.288405][T22152] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  359.291412][T22152] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.294290][T22152] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  359.405644][T18824] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  359.408443][T18824] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  359.411301][T18824] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  359.432412][T18824] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  359.435810][T18824] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  359.439903][T18824] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  359.450475][T18824] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  359.454438][T18824] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  359.457493][T18824] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  359.471477][T18824] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  359.474341][T18824] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  359.478294][T22177] netlink: 'syz.1.7058': attribute type 1 has an invalid length.
[  359.481448][T18824] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  359.745286][T22195] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  359.879032][T22201] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  360.179013][T22219] __nla_validate_parse: 4 callbacks suppressed
[  360.179023][T22219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7078'.
[  360.691703][   T34] audit: type=1800 audit(1766019768.391:6): pid=22251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7089" name="3" dev="tmpfs" ino=11681 res=0 errno=0
[  361.399524][   T55] Bluetooth: hci1: link tx timeout
[  361.401188][   T55] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  361.467238][T22293] netlink: 'syz.1.7110': attribute type 12 has an invalid length.
[  361.705282][T22314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7118'.
[  361.709231][T22314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7118'.
[  363.110276][T22365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7134'.
[  363.114042][T22365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7134'.
[  363.118527][T22365] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7134'.
[  363.122164][T22365] netlink: 540 bytes leftover after parsing attributes in process `syz.2.7134'.
[  363.467133][ T6106] Bluetooth: hci1: command 0x0406 tx timeout
[  363.721083][T22402] xfrm0 speed is unknown, defaulting to 1000
[  363.769598][T22407] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7150'.
[  366.521784][T22544] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7208'.
[  366.563265][T22544] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7208'.
[  366.573780][T22544] nbd: device at index 64 is going down
[  366.763209][T22571] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.7220'.
[  366.768573][T22571] openvswitch: netlink: Message has 6 unknown bytes.
[  366.794960][T22573] bond11: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  366.800998][T22573] bond11 (unregistering): Released all slaves
[  366.871906][T22582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7225'.
[  366.879242][T22583] netlink: 'syz.0.7224': attribute type 3 has an invalid length.
[  366.899176][T22582] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  366.903050][T22582] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  367.031097][T22598] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7231'.
[  367.059216][T22600] netlink: 'syz.1.7232': attribute type 7 has an invalid length.
[  367.120700][T22602] xfrm0 speed is unknown, defaulting to 1000
[  367.200828][T22610] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.203783][T22610] syzkaller0: entered promiscuous mode
[  367.205563][T22610] syzkaller0: entered allmulticast mode
[  367.242843][T22610] tipc: Resetting bearer <eth:syzkaller0>
[  367.247085][T22609] tipc: Resetting bearer <eth:syzkaller0>
[  367.258914][T22609] tipc: Disabling bearer <eth:syzkaller0>
[  368.501141][T22640] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  368.507741][T22640] bond11 (unregistering): Released all slaves
[  368.763647][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7258'.
[  368.859908][T22670] tipc: Can't bind to reserved service type 2
[  368.862708][T22672] openvswitch: netlink: Message has 4 unknown bytes.
[  368.866557][T22672] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.892510][T22670] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  368.910837][T22676] netlink: 6 bytes leftover after parsing attributes in process `syz.1.7265'.
[  368.913872][T22676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  369.336704][T22718] dummy0: entered promiscuous mode
[  369.339474][T22718] vlan4: entered promiscuous mode
[  370.369713][T22744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7295'.
[  370.993340][T20156] block nbd1: Receive control failed (result -32)
[  371.042381][T22785] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7311'.
[  371.155908][T22791] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7315'.
[  371.244513][T22796] netlink: 'syz.1.7317': attribute type 1 has an invalid length.
[  371.811812][T22849] tipc: Failed to remove unknown binding: 66,1,1/3747737879:3009600056/3009600058
[  371.818012][T22849] tipc: Failed to remove unknown binding: 66,1,1/3747737879:3009600056/3009600058
[  371.822242][T22849] tipc: Failed to remove unknown binding: 66,1,1/3747737879:3009600056/3009600058
[  371.857234][T22853] can: request_module (can-proto-5) failed.
[  372.048225][T22865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  372.091184][T22867] syzkaller0: entered promiscuous mode
[  372.093667][T22867] syzkaller0: entered allmulticast mode
[  372.689037][T22911] __nla_validate_parse: 2 callbacks suppressed
[  372.689048][T22911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7369'.
[  372.954412][T22927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7376'.
[  373.424818][T22963] xfrm0 speed is unknown, defaulting to 1000
[  373.747293][T22976] team0: entered promiscuous mode
[  373.749580][T22976] geneve0: entered promiscuous mode
[  373.751316][T22976] team0: entered allmulticast mode
[  373.752959][T22976] geneve0: entered allmulticast mode
[  373.770002][T22976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7398'.
[  373.773682][T22976] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  373.837759][T22978] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7399'.
[  373.971418][T22985] xfrm0 speed is unknown, defaulting to 1000
[  375.986177][T23049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7428'.
[  377.173123][T23112] netlink: 'syz.0.7455': attribute type 10 has an invalid length.
[  378.493667][T23164] ieee802154 phy0 wpan0: encryption failed: -22
[  378.586979][   T25] block nbd0: Possible stuck request ffff888109ed0000: control (read@0,1024B). Runtime 300 seconds
[  378.590435][   T25] block nbd0: Possible stuck request ffff888109ed0200: control (read@1024,1024B). Runtime 300 seconds
[  378.593842][   T25] block nbd0: Possible stuck request ffff888109ed0400: control (read@2048,1024B). Runtime 300 seconds
[  378.597611][   T25] block nbd0: Possible stuck request ffff888109ed0600: control (read@3072,1024B). Runtime 300 seconds
[  380.092364][T23246] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7513'.
[  381.501233][T23354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7561'.
[  382.877350][T23416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  382.879719][T23416] IPv6: NLM_F_CREATE should be set when creating new route
[  382.882182][T23416] IPv6: NLM_F_CREATE should be set when creating new route
[  382.934076][T23425] veth10: entered allmulticast mode
[  383.031497][T23433] ip6gre2: entered promiscuous mode
[  383.034078][T23433] ip6gre2: entered allmulticast mode
[  383.047762][ T9010] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  383.051033][ T9010] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  383.058078][T23433] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  383.076712][  T114] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  383.134623][T23444] netlink: 276 bytes leftover after parsing attributes in process `syz.0.7600'.
[  383.220801][T23453] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  383.279028][ T5876] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  383.386456][T23467] xfrm0 speed is unknown, defaulting to 1000
[  383.584214][ T5876] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  383.708930][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  383.711071][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  384.024450][T23496] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7620'.
[  384.248184][T23501] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7623'.
[  384.306077][T23507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.321963][T23507] syzkaller0: entered promiscuous mode
[  384.324673][T23507] syzkaller0: entered allmulticast mode
[  384.352156][T23507] tipc: Resetting bearer <eth:syzkaller0>
[  384.360057][T23505] tipc: Resetting bearer <eth:syzkaller0>
[  384.366885][T23512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7628'.
[  384.381030][T23505] tipc: Disabling bearer <eth:syzkaller0>
[  384.561230][T23534] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7639'.
[  384.929495][T23560] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7652'.
[  385.545982][T23610] atomic_op ffff88817415a998 conn xmit_atomic 0000000000000000
[  385.665518][T23617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7679'.
[  385.770026][T23639] netlink: 'syz.1.7686': attribute type 1 has an invalid length.
[  385.773843][T23639] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7686'.
[  386.986656][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  387.060643][T23683] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7705'.
[  387.353779][T23708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7715'.
[  387.678301][T23723] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  388.135322][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  388.148067][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  388.151526][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  388.154962][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  388.932318][T23818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7760'.
[  388.939987][T23820] netlink: 'syz.2.7762': attribute type 3 has an invalid length.
[  389.220153][T23848] bond8: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  389.223987][T23848] bond8: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  389.626172][T23877] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING
[  389.851128][T23893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7795'.
[  389.854739][T23893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7795'.
[  390.285009][T23915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7800'.
[  390.397058][T23918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7805'.
[  390.595454][T23924] pimreg3: entered allmulticast mode
[  390.664259][T23926] xfrm0 speed is unknown, defaulting to 1000
[  390.940690][T23932] xfrm0 speed is unknown, defaulting to 1000
[  391.372261][T23940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7814'.
[  392.332201][T23963] xfrm0 speed is unknown, defaulting to 1000
[  392.878414][T23971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7826'.
[  393.252606][T24002] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  393.300219][T24005] netlink: 'syz.2.7837': attribute type 12 has an invalid length.
[  393.314357][T24005] netlink: 'syz.2.7837': attribute type 4 has an invalid length.
[  393.333853][T24008] geneve8: entered promiscuous mode
[  393.560608][T24016] gretap4: entered promiscuous mode
[  394.244679][T24046] veth15: entered promiscuous mode
[  394.384932][T24056] netlink: 'syz.2.7865': attribute type 1 has an invalid length.
[  394.388273][T24056] netlink: 'syz.2.7865': attribute type 2 has an invalid length.
[  394.434506][T24060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7866'.
[  394.649316][T24083] syzkaller0: entered promiscuous mode
[  394.651242][T24083] syzkaller0: entered allmulticast mode
[  394.923132][T24098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7883'.
[  394.971732][T24111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7888'.
[  394.977608][T24111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7888'.
[  395.226596][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  395.382943][T24148] xfrm0 speed is unknown, defaulting to 1000
[  395.680559][T24157] netlink: 'syz.0.7908': attribute type 29 has an invalid length.
[  395.693878][T24157] netlink: 'syz.0.7908': attribute type 29 has an invalid length.
[  396.004607][T24182] netlink: 'syz.0.7918': attribute type 1 has an invalid length.
[  396.249814][T24201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7926'.
[  396.833900][T24245] netlink: 'syz.2.7946': attribute type 3 has an invalid length.
[  396.904439][T24245] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.913928][T24245] 8021q: adding VLAN 0 to HW filter on device team0
[  396.920839][T24245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  396.943558][T24249] xfrm0 speed is unknown, defaulting to 1000
[  397.078039][T24254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7949'.
[  397.125700][T24254] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7949'.
[  397.171302][T24254] bond9 (unregistering): Released all slaves
[  397.202832][T24263] netlink: 'syz.1.7952': attribute type 1 has an invalid length.
[  397.244074][T24263] bond11: entered promiscuous mode
[  397.257508][T24263] 8021q: adding VLAN 0 to HW filter on device bond11
[  397.322922][T24263] 8021q: adding VLAN 0 to HW filter on device bond11
[  397.325328][T24263] bond11: (slave wireguard0): The slave device specified does not support setting the MAC address
[  397.331998][T24263] bond11: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  397.344063][T24263] bond11: (slave wireguard0): making interface the new active one
[  397.348855][T24268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  397.351934][T24268] IPv6: NLM_F_CREATE should be set when creating new route
[  397.354911][T24268] IPv6: NLM_F_CREATE should be set when creating new route
[  397.358890][T24263] wireguard0: entered promiscuous mode
[  397.362385][T24263] bond11: (slave wireguard0): Enslaving as an active interface with an up link
[  397.371521][T24268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  397.387766][T24268] bond11: (slave wireguard1): The slave device specified does not support setting the MAC address
[  397.392814][T24268] bond11: (slave wireguard1): Enslaving as a backup interface with an up link
[  397.540026][T24277] bridge_slave_0: default FDB implementation only supports local addresses
[  397.557501][T24279] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7957'.
[  398.614842][T24331] tap0: tun_chr_ioctl cmd 2147767521
[  398.644249][T24333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7981'.
[  398.666424][T24333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7981'.
[  399.133118][T24377] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000
[  399.341736][T24396] xfrm0 speed is unknown, defaulting to 1000
[  399.397498][T24401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8008'.
[  399.401213][T24401] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8008'.
[  399.405275][T24401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8008'.
[  403.582775][T24485] xfrm0 speed is unknown, defaulting to 1000
[  404.251512][T24516] xfrm0 speed is unknown, defaulting to 1000
[  404.436902][T24526] syzkaller0: entered promiscuous mode
[  404.438838][T24526] syzkaller0: entered allmulticast mode
[  404.457785][T24526] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  404.460533][T24521] xfrm0 speed is unknown, defaulting to 1000
[  404.463037][T24525] tipc: Resetting bearer <eth:syzkaller0>
[  404.483032][T24525] tipc: Disabling bearer <eth:syzkaller0>
[  404.600467][T24531] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8064'.
[  404.653327][T24533] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8065'.
[  405.054172][T24550] ieee802154 phy0 wpan0: encryption failed: -22
[  405.288140][T24558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8076'.
[  406.569981][T24599] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8095'.
[  406.576669][T24599] 8021q: VLANs not supported on team0
[  406.662637][T24610] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8101'.
[  406.665520][T24610] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8101'.
[  406.674099][T24613] ieee802154 phy0 wpan0: encryption failed: -90
[  406.709356][T24608] macsec0: entered promiscuous mode
[  406.711468][T24608] macsec0: entered allmulticast mode
[  406.769455][T24622] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8105'.
[  406.841521][T24629] x_tables: duplicate underflow at hook 1
[  406.851982][T24629] Timeout policy `syz1' can only be used by L3 protocol number 513
[  406.886621][T24629] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8108'.
[  406.889478][T24629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8108'.
[  406.892279][T24629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8108'.
[  407.581128][T24698] netlink: 'syz.0.8137': attribute type 10 has an invalid length.
[  407.662995][T24706] xfrm0 speed is unknown, defaulting to 1000
[  407.971607][T24729] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  407.984377][T24729] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  407.989973][T24729] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  408.054982][T24731] : renamed from bond_slave_0
[  408.402143][T24741] netlink: 'syz.0.8154': attribute type 4 has an invalid length.
[  408.420827][T24741] netlink: 'syz.0.8154': attribute type 4 has an invalid length.
[  408.679856][   T25] block nbd0: Possible stuck request ffff888109ed0000: control (read@0,1024B). Runtime 330 seconds
[  408.683331][   T25] block nbd0: Possible stuck request ffff888109ed0200: control (read@1024,1024B). Runtime 330 seconds
[  408.687604][   T25] block nbd0: Possible stuck request ffff888109ed0400: control (read@2048,1024B). Runtime 330 seconds
[  408.691125][   T25] block nbd0: Possible stuck request ffff888109ed0600: control (read@3072,1024B). Runtime 330 seconds
[  408.739434][T24750] netlink: 'syz.2.8158': attribute type 1 has an invalid length.
[  408.908260][T24768] openvswitch: netlink: Missing valid actions attribute.
[  408.911143][T24768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  409.009763][T24776] syzkaller0: entered promiscuous mode
[  409.011954][T24776] syzkaller0: entered allmulticast mode
[  409.045966][T24778] netlink: 'syz.2.8172': attribute type 10 has an invalid length.
[  409.320132][T24804] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  409.323885][T24804] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  409.825577][T24846] 8021q: adding VLAN 0 to HW filter on device bond9
[  410.316274][T24862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  410.540078][T24872] bond9: Unable to set down delay as MII monitoring is disabled
[  410.557164][T24872] bond9 (unregistering): Released all slaves
[  410.729476][T24883] __nla_validate_parse: 11 callbacks suppressed
[  410.729488][T24883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8211'.
[  410.752169][T24883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8211'.
[  411.362833][T24920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8229'.
[  412.506472][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  413.145348][T24946] sctp: [Deprecated]: syz.1.8241 (pid 24946) Use of struct sctp_assoc_value in delayed_ack socket option.
[  413.145348][T24946] Use struct sctp_sack_info instead
[  413.238126][T24951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8244'.
[  413.423746][T24960] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  413.429036][T24960] syzkaller0: entered promiscuous mode
[  413.431312][T24960] syzkaller0: entered allmulticast mode
[  413.443601][T24960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8247'.
[  413.456873][T24960] tipc: Resetting bearer <eth:syzkaller0>
[  413.460597][T24959] tipc: Resetting bearer <eth:syzkaller0>
[  413.472407][T24959] tipc: Disabling bearer <eth:syzkaller0>
[  413.725963][T24965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8249'.
[  413.819500][T24967] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8250'.
[  413.859681][T24969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8251'.
[  414.866005][T25036] netlink: 'syz.0.8278': attribute type 15 has an invalid length.
[  415.431666][T25071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8293'.
[  415.810420][T25107] bond9 (unregistering): Released all slaves
[  416.002151][T25130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8321'.
[  416.012320][T25130] "syz.0.8321" (25130) uses obsolete ecb(arc4) skcipher
[  416.257993][T25148] netlink: 248 bytes leftover after parsing attributes in process `syz.2.8328'.
[  416.322437][T25159] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  416.324292][T25160] xt_TCPMSS: Only works on TCP SYN packets
[  416.447557][T25172] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8340'.
[  416.514391][T25179] geneve8: entered promiscuous mode
[  417.547574][ T6106] Bluetooth: hci1: command 0x0406 tx timeout
[  417.714399][T25231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8364'.
[  417.902833][T25242] netlink: 'syz.1.8368': attribute type 1 has an invalid length.
[  417.906156][T25242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8368'.
[  418.010456][T25247] : entered promiscuous mode
[  418.094915][T25251] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8372'.
[  418.655235][T25289] netlink: 'syz.0.8391': attribute type 10 has an invalid length.
[  418.659286][T25289] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8391'.
[  418.739269][T25296] openvswitch: netlink: Flow key attr not present in new flow.
[  418.743118][T25295] veth0_to_bridge: entered promiscuous mode
[  418.745933][T25294] veth0_to_bridge: left promiscuous mode
[  418.957942][T25313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8400'.
[  418.979778][T25313] nbd: couldn't find a device at index 65546
[  419.059857][T25318] pimreg: entered allmulticast mode
[  419.064680][T25318] pimreg: left allmulticast mode
[  419.440167][T25344] syzkaller0: entered promiscuous mode
[  419.443264][T25344] syzkaller0: entered allmulticast mode
[  419.835069][T25369] rdma_op ffff8881753fd9f0 conn xmit_rdma 0000000000000000
[  419.989055][T25377] xfrm0 speed is unknown, defaulting to 1000
[  421.368322][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8439'.
[  421.372174][T25416] netlink: 312 bytes leftover after parsing attributes in process `syz.1.8439'.
[  421.375860][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8439'.
[  421.551361][T25422] xfrm0 speed is unknown, defaulting to 1000
[  422.795838][T25448] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  423.227812][T25459] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8454'.
[  423.231026][T25459] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8454'.
[  423.330071][T25474] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8458'.
[  423.349731][T25476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8459'.
[  423.362854][T25476] bond9: option ad_actor_sys_prio: invalid value (0)
[  423.365179][T25476] bond9: option ad_actor_sys_prio: allowed values 1 - 65535
[  423.372049][T25476] bond9 (unregistering): Released all slaves
[  423.457843][T25476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8459'.
[  423.531066][T25495] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8466'.
[  423.539359][T25493] delete_channel: no stack
[  423.599911][T25505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8470'.
[  423.604805][T25506] xt_cgroup: path and classid specified
[  423.685401][T25518] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  423.978723][T25541] netlink: 'syz.0.8479': attribute type 2 has an invalid length.
[  424.893415][T25580] netlink: 'syz.2.8492': attribute type 2 has an invalid length.
[  425.036743][T25591] netlink: 'syz.1.8494': attribute type 11 has an invalid length.
[  425.039336][T25591] netlink: 'syz.1.8494': attribute type 11 has an invalid length.
[  425.045105][T25583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  425.112593][T25602] netlink: 'syz.1.8499': attribute type 1 has an invalid length.
[  425.172876][T25602] macvlan3: entered promiscuous mode
[  425.174709][T25602] macvlan3: entered allmulticast mode
[  425.177240][T25602] bond12: entered promiscuous mode
[  425.179269][T25602] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  425.182915][T25602] bond12: left promiscuous mode
[  425.218150][T25610] netlink: 'syz.0.8503': attribute type 1 has an invalid length.
[  425.221559][T25610] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  425.460720][T25644] xfrm0 speed is unknown, defaulting to 1000
[  425.654939][T25662] sch_tbf: burst 2976 is lower than device lo mtu (61420) !
[  426.420139][T25672] 8021q: adding VLAN 0 to HW filter on device bond9
[  426.486882][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  426.490696][   T10] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  426.527351][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  426.693753][T25690] __nla_validate_parse: 14 callbacks suppressed
[  426.693769][T25690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8525'.
[  426.748265][T25690] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  426.753356][T25692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8526'.
[  426.762666][T25690] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8525'.
[  426.848743][T25695] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993
[  426.863596][T25698] netlink: 'syz.0.8528': attribute type 8 has an invalid length.
[  426.932252][T25702] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  426.947896][T25703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8530'.
[  426.952031][T25703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8530'.
[  427.041517][T25706] 8021q: VLANs not supported on vxcan0
[  427.060183][T25716] netlink: 140 bytes leftover after parsing attributes in process `syz.2.8534'.
[  427.124471][T25720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8537'.
[  427.225994][T25732] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8541'.
[  427.250759][T25730] netlink: 'syz.0.8539': attribute type 21 has an invalid length.
[  427.253268][T25730] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8539'.
[  427.466736][ T9883] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  428.165255][T25760] dummy0: left allmulticast mode
[  428.177131][T25760] pim6reg: left allmulticast mode
[  428.364369][T25778] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8553'.
[  428.374263][T25780] netlink: 'syz.0.8554': attribute type 2 has an invalid length.
[  428.378092][T25780] netlink: 'syz.0.8554': attribute type 1 has an invalid length.
[  428.611636][T25805] sctp: [Deprecated]: syz.2.8559 (pid 25805) Use of struct sctp_assoc_value in delayed_ack socket option.
[  428.611636][T25805] Use struct sctp_sack_info instead
[  428.863565][T25824] syzkaller0: entered promiscuous mode
[  428.865932][T25824] syzkaller0: entered allmulticast mode
[  428.881462][T25824] bpq0: entered promiscuous mode
[  429.891726][T25939] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.062669][T25954] netlink: 'syz.2.8575': attribute type 12 has an invalid length.
[  430.123413][T25959] syzkaller0: entered promiscuous mode
[  430.125203][T25959] syzkaller0: entered allmulticast mode
[  430.615178][T25989] syzkaller0: entered promiscuous mode
[  430.618011][T25989] syzkaller0: entered allmulticast mode
[  430.642059][T25989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  430.648265][T25988] tipc: Resetting bearer <eth:syzkaller0>
[  430.668634][T25988] tipc: Disabling bearer <eth:syzkaller0>
[  431.205048][T26013] xfrm0 speed is unknown, defaulting to 1000
[  431.859703][T26024] __nla_validate_parse: 11 callbacks suppressed
[  431.859717][T26024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8596'.
[  433.225626][T26040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8602'.
[  433.278827][T26049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8604'.
[  433.308629][T26049] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8604'.
[  433.313338][T26049] netlink: 540 bytes leftover after parsing attributes in process `syz.2.8604'.
[  433.324438][T26049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8604'.
[  433.331559][T26049] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8604'.
[  433.336574][T26049] netlink: 540 bytes leftover after parsing attributes in process `syz.2.8604'.
[  433.340847][T26057] netlink: 136 bytes leftover after parsing attributes in process `syz.0.8608'.
[  433.346419][T26057] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  433.404025][T26063] pim6reg0: tun_chr_ioctl cmd 1074025675
[  433.407820][T26063] pim6reg0: persist disabled
[  434.155962][T26105] ipvlan0: entered promiscuous mode
[  434.159038][T26105] ipvlan0: entered allmulticast mode
[  434.161139][T26105] geneve1: entered allmulticast mode
[  434.357505][T26067] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  434.416120][T26124] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8631'.
[  434.573819][T26137] xfrm0 speed is unknown, defaulting to 1000
[  434.633694][T26148] bond11: entered promiscuous mode
[  434.635504][T26148] bond11: entered allmulticast mode
[  434.690601][T26146] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  434.906614][    C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  435.494184][T26169] syzkaller0: Caught tx_queue_len zero misconfig
[  435.525834][T26171] netlink: 'syz.1.8643': attribute type 15 has an invalid length.
[  435.680892][T26189] netlink: 'syz.1.8649': attribute type 2 has an invalid length.
[  435.722032][T26194] netlink: 'syz.1.8651': attribute type 2 has an invalid length.
[  435.725926][T26194] netlink: 'syz.1.8651': attribute type 1 has an invalid length.
[  436.085803][T26212] bpq0: left promiscuous mode
[  436.139192][T26214] xt_CT: No such helper "snmp"
[  436.329846][T26220] netlink: 'syz.1.8662': attribute type 1 has an invalid length.
[  436.341080][T26224] netlink: 'syz.0.8663': attribute type 1 has an invalid length.
[  436.365745][T26224] 8021q: adding VLAN 0 to HW filter on device bond12
[  436.461083][T26238] bond13: entered promiscuous mode
[  436.463023][T26238] 8021q: adding VLAN 0 to HW filter on device bond13
[  436.649045][T26257] netlink: 'syz.2.8670': attribute type 3 has an invalid length.
[  438.746668][   T25] block nbd0: Possible stuck request ffff888109ed0000: control (read@0,1024B). Runtime 360 seconds
[  438.751297][   T25] block nbd0: Possible stuck request ffff888109ed0200: control (read@1024,1024B). Runtime 360 seconds
[  438.755620][   T25] block nbd0: Possible stuck request ffff888109ed0400: control (read@2048,1024B). Runtime 360 seconds
[  438.759617][   T25] block nbd0: Possible stuck request ffff888109ed0600: control (read@3072,1024B). Runtime 360 seconds
[  440.026876][   T35] INFO: task udevd:5833 blocked for more than 143 seconds.
[  440.029824][   T35]       Not tainted syzkaller #0
[  440.032767][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  440.036282][   T35] task:udevd           state:D stack:21832 pid:5833  tgid:5833  ppid:5281   task_flags:0x400140 flags:0x00080002
[  440.041783][   T35] Call Trace:
[  440.043141][   T35]  <TASK>
[  440.044359][   T35]  __schedule+0x14bc/0x5000
[  440.046181][   T35]  ? lockdep_hardirqs_on+0x98/0x140
[  440.048831][   T35]  ? __pfx___schedule+0x10/0x10
[  440.050825][   T35]  ? schedule+0x91/0x360
[  440.052647][   T35]  schedule+0x165/0x360
[  440.054421][   T35]  io_schedule+0x80/0xd0
[  440.055962][   T35]  folio_wait_bit_common+0x6b0/0xb80
[  440.058052][   T35]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  440.059970][   T35]  ? __pfx_wake_page_function+0x10/0x10
[  440.061897][   T35]  ? __filemap_get_folio_mpol+0x7a9/0xb00
[  440.063748][   T35]  do_read_cache_folio+0x1ad/0x590
[  440.065436][   T35]  ? __pfx_blkdev_read_folio+0x10/0x10
[  440.067284][   T35]  read_part_sector+0xb6/0x2b0
[  440.068839][   T35]  adfspart_check_POWERTEC+0x8c/0xf30
[  440.070758][   T35]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  440.072984][   T35]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  440.075368][   T35]  bdev_disk_changed+0x75f/0x14b0
[  440.077597][   T35]  ? __pfx_bdev_disk_changed+0x10/0x10
[  440.079744][   T35]  blkdev_get_whole+0x380/0x510
[  440.081689][   T35]  bdev_open+0x31e/0xd30
[  440.083428][   T35]  blkdev_open+0x457/0x600
[  440.085263][   T35]  ? __pfx_blkdev_open+0x10/0x10
[  440.087460][   T35]  do_dentry_open+0x7ce/0x1420
[  440.089440][   T35]  vfs_open+0x3b/0x340
[  440.091184][   T35]  ? path_openat+0x33f3/0x3dd0
[  440.093199][   T35]  path_openat+0x340e/0x3dd0
[  440.094757][   T35]  ? __pfx_stack_trace_save+0x10/0x10
[  440.096973][   T35]  ? stack_depot_save_flags+0x40/0x850
[  440.099170][   T35]  ? kmem_cache_alloc_noprof+0x37d/0x710
[  440.101531][   T35]  ? getname_flags+0xb8/0x540
[  440.103493][   T35]  ? __pfx_path_openat+0x10/0x10
[  440.105592][   T35]  ? __lock_acquire+0x6b6/0x2cf0
[  440.107842][   T35]  do_filp_open+0x1fa/0x410
[  440.109670][   T35]  ? __pfx_do_filp_open+0x10/0x10
[  440.111693][   T35]  ? _raw_spin_unlock+0x28/0x50
[  440.113226][   T35]  ? alloc_fd+0x64c/0x6c0
[  440.114645][   T35]  do_sys_openat2+0x121/0x200
[  440.116148][   T35]  ? __pfx_do_sys_openat2+0x10/0x10
[  440.118297][   T35]  __x64_sys_openat+0x138/0x170
[  440.120114][   T35]  do_syscall_64+0xfa/0xf80
[  440.122012][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.124539][   T35]  ? exc_page_fault+0xab/0x100
[  440.126642][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.129121][   T35] RIP: 0033:0x7feb363169a4
[  440.130966][   T35] RSP: 002b:00007fff3485a350 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  440.134402][   T35] RAX: ffffffffffffffda RBX: 0000559ec74faf80 RCX: 00007feb363169a4
[  440.137844][   T35] RDX: 00000000000a0800 RSI: 0000559ec74e75b0 RDI: 00000000ffffff9c
[  440.140920][   T35] RBP: 0000559ec74e75b0 R08: 0000000000000001 R09: 3fffffffffffffff
[  440.144213][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  440.147769][   T35] R13: 0000559ec74f7aa0 R14: 0000000000000001 R15: 0000559ec74e6910
[  440.151086][   T35]  </TASK>
[  440.152505][   T35] 
[  440.152505][   T35] Showing all locks held in the system:
[  440.155613][   T35] 1 lock held by khungtaskd/35:
[  440.158283][   T35]  #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  440.162303][   T35] 2 locks held by kworker/u10:17/4525:
[  440.164595][   T35]  #0: ffff888100089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  440.169603][   T35]  #1: ffffc9000b6dfb80 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  440.174650][   T35] 2 locks held by getty/5657:
[  440.176970][   T35]  #0: ffff888113ab40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  440.180624][   T35]  #1: ffffc9000356e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460
[  440.183936][   T35] 1 lock held by udevd/5833:
[  440.185469][   T35]  #0: ffff888108fc6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  440.189405][   T35] 2 locks held by syz.0.8668/26250:
[  440.191529][   T35]  #0: ffffffff8f3775b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  440.194746][   T35]  #1: ffffffff8f3773c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  440.198564][   T35] 2 locks held by syz.0.8668/26259:
[  440.200718][   T35]  #0: ffffffff8f3775b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  440.203592][   T35]  #1: ffffffff8f3773c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  440.206557][   T35] 2 locks held by syz.0.8668/26262:
[  440.208222][   T35]  #0: ffffffff8f3775b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  440.211002][   T35]  #1: ffffffff8f3773c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  440.214181][   T35] 6 locks held by syz.2.8670/26257:
[  440.216224][   T35]  #0: ffffffff8f3775b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  440.219690][   T35]  #1: ffffffff8f3773c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  440.223269][   T35]  #2: ffff88816ab98278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50
[  440.227708][   T35]  #3: ffff888109e65c88 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0
[  440.231521][   T35]  #4: ffff888109e65628 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x56/0xd0
[  440.235949][   T35]  #5: ffff888109e65660 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x56/0xd0
[  440.240205][   T35] 2 locks held by syz.1.8671/26265:
[  440.242342][   T35]  #0: ffffffff8f3775b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  440.245611][   T35]  #1: ffffffff8f3773c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  440.249352][   T35] 2 locks held by syz.1.8671/26267:
[  440.251483][   T35]  #0: ffffffff8f3775b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  440.254836][   T35]  #1: ffffffff8f3773c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  440.258805][   T35] 2 locks held by syz.1.8671/26268:
[  440.260952][   T35]  #0: ffffffff8f3775b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  440.264327][   T35]  #1: ffffffff8f3773c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  440.268154][   T35] 2 locks held by syz.1.8671/26269:
[  440.270003][   T35]  #0: ffffffff8f3775b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  440.273110][   T35]  #1: ffffffff8f3773c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  440.276134][   T35] 
[  440.277050][   T35] =============================================
[  440.277050][   T35] 
[  440.279703][   T35] NMI backtrace for cpu 0
[  440.279711][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  440.279720][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  440.279725][   T35] Call Trace:
[  440.279729][   T35]  <TASK>
[  440.279733][   T35]  dump_stack_lvl+0x189/0x250
[  440.279745][   T35]  ? __pfx_dump_stack_lvl+0x10/0x10
[  440.279754][   T35]  ? __pfx__printk+0x10/0x10
[  440.279768][   T35]  nmi_cpu_backtrace+0x39e/0x3d0
[  440.279779][   T35]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  440.279789][   T35]  ? __pfx__printk+0x10/0x10
[  440.279800][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  440.279813][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  440.279823][   T35]  sys_info+0x135/0x170
[  440.279829][   T35]  watchdog+0xf95/0xfe0
[  440.279841][   T35]  ? watchdog+0x20a/0xfe0
[  440.279853][   T35]  kthread+0x711/0x8a0
[  440.279863][   T35]  ? __pfx_watchdog+0x10/0x10
[  440.279873][   T35]  ? __pfx_kthread+0x10/0x10
[  440.279882][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  440.279892][   T35]  ? lockdep_hardirqs_on+0x98/0x140
[  440.279901][   T35]  ? __pfx_kthread+0x10/0x10
[  440.279910][   T35]  ret_from_fork+0x599/0xb30
[  440.279918][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  440.279929][   T35]  ? __switch_to_asm+0x39/0x70
[  440.279937][   T35]  ? __switch_to_asm+0x33/0x70
[  440.279946][   T35]  ? __pfx_kthread+0x10/0x10
[  440.279955][   T35]  ret_from_fork_asm+0x1a/0x30
[  440.279969][   T35]  </TASK>
[  440.279972][   T35] Sending NMI from CPU 0 to CPUs 1:
[  440.330889][    C1] NMI backtrace for cpu 1
[  440.330903][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  440.330917][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  440.330924][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  440.330942][    C1] Code: 13 ee 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 50 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  440.330952][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 00000286
[  440.330962][    C1] RAX: cd14edce7bebb100 RBX: ffffffff81978eba RCX: cd14edce7bebb100
[  440.330971][    C1] RDX: 0000000000000001 RSI: ffffffff8d78ff92 RDI: ffffffff8bc07960
[  440.330978][    C1] RBP: ffffc90000197f10 R08: ffff88823c6336db R09: 1ffff110478c66db
[  440.330987][    C1] R10: dffffc0000000000 R11: ffffed10478c66dc R12: ffffffff8f81f870
[  440.330995][    C1] R13: 1ffff1102c155000 R14: 0000000000000001 R15: 0000000000000001
[  440.331002][    C1] FS:  0000000000000000(0000) GS:ffff8882a9e3a000(0000) knlGS:0000000000000000
[  440.331011][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  440.331019][    C1] CR2: 0000563a96fdd5a0 CR3: 00000001151e4000 CR4: 00000000000006f0
[  440.331057][    C1] Call Trace:
[  440.331065][    C1]  <TASK>
[  440.331070][    C1]  default_idle+0x13/0x20
[  440.331082][    C1]  default_idle_call+0x73/0xb0
[  440.331095][    C1]  do_idle+0x1ea/0x520
[  440.331108][    C1]  ? irqentry_exit+0x5ba/0x660
[  440.331125][    C1]  ? __pfx_do_idle+0x10/0x10
[  440.331144][    C1]  cpu_startup_entry+0x44/0x60
[  440.331156][    C1]  start_secondary+0x101/0x110
[  440.331179][    C1]  common_startup_64+0x13e/0x147
[  440.331200][    C1]  </TASK>
[  440.388964][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  440.391205][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  440.394195][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  440.397743][   T35] Call Trace:
[  440.398926][   T35]  <TASK>
[  440.399932][   T35]  dump_stack_lvl+0x99/0x250
[  440.401483][   T35]  ? __asan_memcpy+0x40/0x70
[  440.403155][   T35]  ? __pfx_dump_stack_lvl+0x10/0x10
[  440.404896][   T35]  ? __pfx__printk+0x10/0x10
[  440.406397][   T35]  vpanic+0x237/0x6d0
[  440.407765][   T35]  ? __pfx_vpanic+0x10/0x10
[  440.409212][   T35]  ? preempt_schedule_common+0x83/0xd0
[  440.410951][   T35]  panic+0xb9/0xc0
[  440.412158][   T35]  ? __pfx_panic+0x10/0x10
[  440.413592][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  440.415298][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  440.417262][   T35]  watchdog+0xfdf/0xfe0
[  440.418580][   T35]  ? watchdog+0x20a/0xfe0
[  440.419954][   T35]  kthread+0x711/0x8a0
[  440.421293][   T35]  ? __pfx_watchdog+0x10/0x10
[  440.422934][   T35]  ? __pfx_kthread+0x10/0x10
[  440.424685][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  440.426674][   T35]  ? lockdep_hardirqs_on+0x98/0x140
[  440.428663][   T35]  ? __pfx_kthread+0x10/0x10
[  440.430298][   T35]  ret_from_fork+0x599/0xb30
[  440.432039][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  440.433878][   T35]  ? __switch_to_asm+0x39/0x70
[  440.435708][   T35]  ? __switch_to_asm+0x33/0x70
[  440.437573][   T35]  ? __pfx_kthread+0x10/0x10
[  440.439438][   T35]  ret_from_fork_asm+0x1a/0x30
[  440.441150][   T35]  </TASK>
[  440.443202][   T35] Kernel Offset: disabled
[  440.444943][   T35] Rebooting in 86400 seconds..
