last executing test programs:

1.719489934s ago: executing program 2 (id=2223):
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800d668f9b701002dbd70000000000000000000000000000000000000008301000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000100000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) (async)
socket$kcm(0x29, 0x0, 0x0)
setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f00000001c0)=0xff, 0x4) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="20001d801c00008005000b0000000000060005000e00000005000a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x20a, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200400d0}, 0x1)
connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4, @private0}}}, 0x3a)

1.637476172s ago: executing program 2 (id=2225):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x5, 0x200, 0x40, 0x0, 0x1}, 0x50)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500561308005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000050000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

1.498828574s ago: executing program 2 (id=2226):
unshare(0x26020480) (async)
unshare(0x26020480)
unshare(0x700)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
socket(0x10, 0x803, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@ipv4_getroute={0x1c, 0x1a, 0x2, 0x70bd2a, 0x25dfdbf9, {0x2, 0x20, 0x4, 0x7f, 0xfe, 0x0, 0x0, 0x8, 0xf99e1bf7b4bedf4a}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24044890)
sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async)
sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
getsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000280)=0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) (async)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
ioctl$FS_IOC_GETFSUUID(r8, 0x80111500, &(0x7f0000006380))
socket(0x18, 0x1, 0x1) (async)
r9 = socket(0x18, 0x1, 0x1)
getsockopt$inet_int(r9, 0x111, 0x32, 0x0, &(0x7f0000000300)=0xffffffffffffffe6) (async)
getsockopt$inet_int(r9, 0x111, 0x32, 0x0, &(0x7f0000000300)=0xffffffffffffffe6)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x50, 0x1410, 0x20, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f0000000300)=@ethtool_rx_ntuple={0x35, {0x8, @esp_ip4_spec={@empty, @remote, 0x1, 0x4}, @tcp_ip4_spec={@remote, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e23, 0x4e22, 0xb}, 0x1000, 0x8ce, 0x10000, 0x2, 0xfffffffffffffffe}}})

1.452456451s ago: executing program 2 (id=2227):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
close(0x3)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x7f00, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, r9, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x20, r9, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0)
r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r11, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r12, &(0x7f0000000080)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000000)={0x7c, 0x2, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x800)

1.303666589s ago: executing program 2 (id=2230):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e1586e8521a654fc2538faaff61c75b305f68d9e6e226e602f10e29e98c99a9db3afbe80cf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
sendto$llc(r3, &(0x7f0000000180)="ccd0b1195f16b94bb92206c5e70b0b148b7bfbf7b57bb1c57d7138d231a4ac738a2ed63659dc6899cc1e321965e3d2b442", 0x31, 0x0, &(0x7f00000001c0)={0x1a, 0x312, 0x7f, 0x1, 0x3, 0x6, @broadcast}, 0x10)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
recvmsg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2)
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3)
openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r10, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r10, &(0x7f0000000a80), &(0x7f0000000ac0)=""/68}, 0x20)

608.934535ms ago: executing program 0 (id=2239):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@private=0xa010101, 0x1, 0x0, 0x80, 0x0, [{@multicast2}, {}, {@private}, {@broadcast}, {@loopback}, {@broadcast}, {@remote}, {@broadcast}]}})
r3 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4010, r3, 0x80000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}}, 0x40800)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xefe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbe}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x66e}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4008015)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r4)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004000)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.empty_time\x00', 0x0, 0x0)
getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000500)=0x5, &(0x7f0000000540)=0x2)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r0)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x104, r7, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3717}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x99e0}]}]}, 0x104}, 0x1, 0x0, 0x0, 0xc0}, 0x4)
sendto$x25(r6, &(0x7f00000007c0)="f29794de53afe1821c7c235f3510d51297acd499b919032593d7508c6018a7c5f89b4c55869fd12072d182668def07eca88bbd2e8efb5598ff47ef9ce577ad91851c8494388ff641ead5ca742e6a47b56d85e2e9f19e6f9c16877c8e2635069f0309ad8129be4dd638831d25e9d96fa88f562281cbf77d021555e5dea86fe9e4c48cf198af2d552e897fab77718098752e56eff0e2ae428f2f2130f2f29e5634bc6fbe2b015dde85d608b39d75680011021f3ab2b19dc8", 0xb7, 0x4008810, &(0x7f0000000880), 0x12)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000008c0)=[@in6={0xa, 0x4e24, 0x5, @empty, 0x2a4}, @in={0x2, 0x4e23, @remote}], 0x2c)
sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xa4, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfe2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r8 = openat$cgroup_ro(r6, &(0x7f0000000a80)='blkio.bfq.idle_time\x00', 0x0, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, &(0x7f0000000ac0), 0x4)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x6c, r10, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "6379a334cc27392803b5961815f59cbb5801723306e4655e589105e899f343ec"}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "7ef01b7f5845908ebbc4183f6449457b947ffab941f3fa50ae577b126a2218ab"}]}, 0x6c}, 0x1, 0x0, 0x0, 0xd}, 0x4000)
ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000000c80)={0x2, 0x7fff, @status={[0x2, 0x0, 0x9, 0xc, 0x9, 0x400]}, [0xb, 0x4, 0xffff, 0x40b6, 0xfffffffffffff800, 0x8, 0x4, 0xbf, 0x1, 0x3, 0x401, 0x1, 0x9, 0xffffffffffffffff, 0x1, 0xfffffffffffffff8, 0x6e7, 0x71bd, 0x3, 0x5, 0x100000001, 0x5, 0x5c, 0x5, 0x401, 0x101, 0xfffffffffffffffa, 0xfffffffffffffffd, 0x8, 0x200, 0x5, 0x2, 0x0, 0xff, 0x7f, 0x6, 0x0, 0x1ff, 0x2d, 0x6, 0x75c911ca, 0x6, 0x2, 0x800, 0x7, 0x4, 0x6, 0x6, 0x6, 0x9a4e35d, 0x8, 0x6, 0xa, 0x6, 0x10001, 0x401, 0x9, 0x5, 0x3, 0x10001, 0x6, 0xeb, 0x5, 0x3]})
socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x68, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macsec0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2d4ad72c}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x52bcb5f0}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2719c5a}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x10)
socket$inet(0x2, 0xa, 0x80000001)
r11 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001840), r9)
sendmsg$NET_DM_CMD_STOP(r9, &(0x7f0000001900)={&(0x7f0000001800), 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x14, r11, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)

608.224902ms ago: executing program 0 (id=2241):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8602, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2})
ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1)
syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @random="4ef1adb02bd2", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6403a6", 0x0, 0x32, 0x0, @empty, @mcast2}}}}, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x34c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x25dfdbff, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0xfffffed1}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000080)={0x3, 0xe})
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r6 = accept4(r5, 0x0, 0x0, 0x0)
recvmmsg$unix(r6, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00010002"], 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r9, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
close(r9)

483.217825ms ago: executing program 1 (id=2242):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r0=>0x0}) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r3=>0x0}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xe0b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x70477d5a}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x5, 0xffe0}, {0x4, 0x6}, {0xc, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x800) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r7, 0x0) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0xd1383000) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r8, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x1000) (async)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0xfffff000) (async)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) (async)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r9, 0x0) (async)
mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x2000) (async)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) (async)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0xc49b, 0x30}, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x3e}, 0x28)

413.847864ms ago: executing program 1 (id=2243):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = accept(r0, &(0x7f0000000040)=@rc={0x1f, @none}, &(0x7f00000000c0)=0x80)
getsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000100)={@multicast2, @empty, @initdev}, &(0x7f0000000140)=0xc)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e)

412.799049ms ago: executing program 2 (id=2244):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x6b}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, r2, 0x91081000)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES32=r1], 0x80}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r9, 0x89b1, &(0x7f0000000040)={'syz_tun\x00', 0xfffffffe})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0143f77474668566bce917af3d89c8e", 0x3e)
accept4(r7, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000905000000070000000000000e0100000000000000000000000000000d02080000000000000000000d00000000000000000000000203000000000000000000005f00"], 0x0, 0x61}, 0x20)
unshare(0x20040600)
socket$l2tp6(0xa, 0x2, 0x73)

353.099359ms ago: executing program 1 (id=2245):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x5, 0x200, 0x40, 0x0, 0x1}, 0x50)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500561308005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000010080000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

352.373134ms ago: executing program 0 (id=2246):
socket$inet(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000240)=0x10000, 0x12) (async)
write$cgroup_int(r1, &(0x7f0000000240)=0x10000, 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r3) (async)
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r4], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[], 0x28}}, 0x20004030)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)

270.628758ms ago: executing program 1 (id=2247):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x10000000})
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001})
getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000000), &(0x7f0000000200)=0x4)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="250300000000000000000800000035a53a8f83d417c2f3dd9577de"], 0x14}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r11, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x148, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0xdd, 0xc, "eff2b97fe72b2bc4593f1c882223dcf6d402dee984a7e5b43fa5e6e684f3e42757b975f8a335604778c236a52d3c048e15c9aa370d51e0c28377809f1d2e8d05d21a6c8646de81a49003c6036d530892a8b3ad2e08ab656c6851262b5ac7b6687a9f471a17b22b70c131ba21b7bc09684a3fdd246fcade58f28cc642d2fbb199bfedf42677d437007cfe5fb10c89ebb92513de2bbe1a00adc9eea4db7504663f42f2368519a693f40cd5f49f2192e0be4de87bc4e96e08abd9a7c9f1d6d91e68980a6426baa2a4ae6f16e34dd1ddb0b7c9fb1d5d9a2a7b486d"}]}, 0x148}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
epoll_create1(0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x10000000}) (async)
epoll_create1(0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) (async)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) (async)
getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000000), &(0x7f0000000200)=0x4) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="250300000000000000000800000035a53a8f83d417c2f3dd9577de"], 0x14}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_MSG_GETCHAIN(r11, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x148, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0xdd, 0xc, "eff2b97fe72b2bc4593f1c882223dcf6d402dee984a7e5b43fa5e6e684f3e42757b975f8a335604778c236a52d3c048e15c9aa370d51e0c28377809f1d2e8d05d21a6c8646de81a49003c6036d530892a8b3ad2e08ab656c6851262b5ac7b6687a9f471a17b22b70c131ba21b7bc09684a3fdd246fcade58f28cc642d2fbb199bfedf42677d437007cfe5fb10c89ebb92513de2bbe1a00adc9eea4db7504663f42f2368519a693f40cd5f49f2192e0be4de87bc4e96e08abd9a7c9f1d6d91e68980a6426baa2a4ae6f16e34dd1ddb0b7c9fb1d5d9a2a7b486d"}]}, 0x148}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) (async)

184.740093ms ago: executing program 1 (id=2248):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000480)={0x7, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
socket$nl_route(0x10, 0x3, 0x0)
close(r0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})

184.322163ms ago: executing program 0 (id=2249):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r4=>0x0})
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r6)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf25410000000e0001006e1d368fc50525181f0000000f0002006e657464657673696d3000001200870001000000726f7073000000005ebe74a1cc97275bafc96d0a0740f31312c58eea824c7142f0e3ec7ccaaa74fef8ae1f02000000000000005a0cf2aa913e2f07cb11"], 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40)
recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000740)=""/73, 0x49}, {0x0}, {0x0}], 0x4}, 0x6}], 0x1, 0x2, 0x0)
connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r9, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001014010026bd7000fbdbdf250800030001000000080001000000000008004a00000000002b9471f115e8d65ddf30325369829201bb6f7ad00c53c7"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r12=>0x0})
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r12}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0)
r13 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r13, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32=r4, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000002bc0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x40, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@srh={0x2f, 0x0, 0x4, 0x0, 0xc, 0x28, 0xfe}, @hopopts={0x87}]}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r14}, 0x18)

103.768898ms ago: executing program 0 (id=2250):
r0 = socket$inet6(0xa, 0x2, 0x88)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x54593, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty=0x97ffffff, @multicast2}}}], 0x20}}], 0x1, 0x80)

102.396833ms ago: executing program 1 (id=2251):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$netlink(0x10, 0x3, 0x8)
syz_genetlink_get_family_id$ethtool(0x0, r0)
r1 = socket(0x2a, 0x2, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2800, 0x0)
pwritev(r2, 0x0, 0x0, 0xe5, 0x1)
getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=<r5=>0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYRES64=r4, @ANYBLOB="02002dbd7000fedbdf2507000000300001801400020074756e6c3000"/38, @ANYRES32=r3, @ANYBLOB="0800030001000e59000200000000000c", @ANYRESOCT=r5, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x8044005}, 0x4084)

0s ago: executing program 0 (id=2252):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0xfffffffe}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0xe, [@ext_channel_switch={0x1c, 0x4}]}]}, 0x34}}, 0x20000000)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="b42d5567db16")

kernel console output (not intermixed with test programs):

rface batadv_slave_1 (retrying later): interface not active
[   55.837163][ T5853] hsr_slave_0: entered promiscuous mode
[   55.839516][ T5853] hsr_slave_1: entered promiscuous mode
[   55.842164][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   55.844098][ T5853] Cannot create hsr debugfs directory
[   55.909624][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.942581][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.949277][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.966518][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.036362][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.041367][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.056054][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.063206][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.099871][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.106826][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.112848][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.118475][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.204162][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.232046][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.240237][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   56.255664][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.258513][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.273400][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   56.283948][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.289169][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.292126][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.308355][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.310744][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.336204][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   56.347460][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.350260][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.381634][ T5853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.385836][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.395056][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.397858][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.415592][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.418685][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.484886][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.537102][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.583661][ T5849] veth0_vlan: entered promiscuous mode
[   56.594492][ T5849] veth1_vlan: entered promiscuous mode
[   56.635971][ T5849] veth0_macvtap: entered promiscuous mode
[   56.653628][ T5849] veth1_macvtap: entered promiscuous mode
[   56.684418][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.694744][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.706751][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.734074][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.740028][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.745780][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.754805][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.764520][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.805746][ T5853] veth0_vlan: entered promiscuous mode
[   56.822395][ T5235] Bluetooth: hci2: command tx timeout
[   56.825195][ T5235] Bluetooth: hci0: command tx timeout
[   56.827637][ T5235] Bluetooth: hci1: command tx timeout
[   56.828864][ T5853] veth1_vlan: entered promiscuous mode
[   56.863161][ T5858] veth0_vlan: entered promiscuous mode
[   56.871693][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.879243][ T5858] veth1_vlan: entered promiscuous mode
[   56.883176][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.895100][ T5853] veth0_macvtap: entered promiscuous mode
[   56.912883][ T5853] veth1_macvtap: entered promiscuous mode
[   56.925766][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.928443][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.953019][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.957216][ T5858] veth0_macvtap: entered promiscuous mode
[   56.965038][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.979058][ T5858] veth1_macvtap: entered promiscuous mode
[   56.990565][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.003447][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.011343][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.017131][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.025854][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.031042][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.070615][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.099366][ T5865] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.107654][ T5865] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.124217][ T5919] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[   57.138548][ T5865] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.147528][ T5865] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.169482][ T3644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.175967][ T3644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.202777][ T4582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.205717][ T4582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.246881][ T5919] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   57.278702][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.296677][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.350849][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.354562][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.725195][ T5948] Zero length message leads to an empty skb
[   58.278907][ T5997] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17'.
[   58.288822][ T5997] netlink: 43 bytes leftover after parsing attributes in process `syz.0.17'.
[   58.292933][ T5997] netlink: 'syz.0.17': attribute type 5 has an invalid length.
[   58.296111][ T5997] netlink: 43 bytes leftover after parsing attributes in process `syz.0.17'.
[   58.305354][ T5997] bridge_slave_0: left allmulticast mode
[   58.307423][ T5997] bridge_slave_0: left promiscuous mode
[   58.309932][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.316712][ T5997] bridge_slave_1: left allmulticast mode
[   58.319502][ T5997] bridge_slave_1: left promiscuous mode
[   58.325054][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.330827][ T5997] bond0: (slave bond_slave_0): Releasing backup interface
[   58.354584][ T5997] bond0: (slave bond_slave_1): Releasing backup interface
[   58.358132][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'.
[   58.366207][ T5997] team0: Port device team_slave_0 removed
[   58.374519][ T5997] team0: Port device team_slave_1 removed
[   58.376946][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.379321][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.392125][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.394620][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.609202][ T6017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21'.
[   58.613107][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'.
[   58.784386][ T6021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.897330][ T6025] netlink: 'syz.0.24': attribute type 5 has an invalid length.
[   58.902521][   T55] Bluetooth: hci1: command tx timeout
[   58.904351][   T55] Bluetooth: hci0: command tx timeout
[   58.905747][ T5235] Bluetooth: hci2: command tx timeout
[   59.234372][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'.
[   59.662974][ T6086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.39'.
[   59.680709][ T6086] batman_adv: batadv0: Adding interface: dummy0
[   59.685898][ T6086] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.694968][ T6086] batman_adv: batadv0: Interface activated: dummy0
[   59.704771][ T6086] batadv0: mtu less than device minimum
[   59.707783][ T6086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.712680][ T6086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.717521][ T6086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.722422][ T6086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.726729][ T6086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.730676][ T6086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.734741][ T6086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.738848][ T6086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.743028][ T6086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.758781][ T6087] batman_adv: batadv0: Adding interface: ip6gretap1
[   59.781788][ T6087] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.794221][ T6087] batman_adv: batadv0: Interface activated: ip6gretap1
[   59.866937][ T6089] ieee802154 phy0 wpan0: encryption failed: -22
[   60.268320][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.47'.
[   60.285536][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'.
[   60.325583][ T6109] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   60.982140][ T5235] Bluetooth: hci0: command tx timeout
[   60.984474][ T5235] Bluetooth: hci2: command tx timeout
[   60.986701][ T5235] Bluetooth: hci1: command tx timeout
[   61.040591][ T6149] netlink: 'syz.2.55': attribute type 15 has an invalid length.
[   61.225170][    C1] Illegal XDP return value 16128 on prog  (id 10) dev lo, expect packet loss!
[   61.456546][ T6171] bridge_slave_0: left allmulticast mode
[   61.459076][ T6171] bridge_slave_0: left promiscuous mode
[   61.463125][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.469323][ T6171] bridge_slave_1: left allmulticast mode
[   61.473456][ T6171] bridge_slave_1: left promiscuous mode
[   61.476002][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.489795][ T6171] bond0: (slave bond_slave_0): Releasing backup interface
[   61.493086][ T6160] nbd0: detected capacity change from 0 to 127
[   61.508096][ T6171] bond0: (slave bond_slave_1): Releasing backup interface
[   61.523502][ T6171] team0: Port device team_slave_0 removed
[   61.534532][ T6171] team0: Port device team_slave_1 removed
[   61.537700][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.540860][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.552328][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.555533][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.622571][   T56] block nbd0: Receive control failed (result -104)
[   61.909739][ T6192] netlink: 'syz.0.70': attribute type 8 has an invalid length.
[   62.171975][ T6213] warning: `syz.0.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.552749][ T6243] batman_adv: batadv0: Adding interface: ip6gretap1
[   62.555382][ T6243] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.577958][ T6243] batman_adv: batadv0: Interface activated: ip6gretap1
[   62.997650][ T6275] batman_adv: batadv0: Adding interface: dummy0
[   62.999740][ T6275] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.009486][ T6275] batman_adv: batadv0: Interface activated: dummy0
[   63.063418][ T5235] Bluetooth: hci0: command tx timeout
[   63.063652][   T55] Bluetooth: hci1: command tx timeout
[   63.065452][ T5852] Bluetooth: hci2: command tx timeout
[   63.101667][ T6284] raw_sendmsg: syz.0.99 forgot to set AF_INET. Fix it!
[   63.200673][ T6295] netlink: 'syz.1.105': attribute type 1 has an invalid length.
[   63.262199][ T6301] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   63.398140][ T6321] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.837416][ T6349] netlink: 'syz.2.121': attribute type 4 has an invalid length.
[   63.873145][ T6349] __nla_validate_parse: 43 callbacks suppressed
[   63.873161][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.121'.
[   64.089467][ T6355] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.155302][ T6358] netlink: 16 bytes leftover after parsing attributes in process `syz.2.123'.
[   64.345512][ T6373] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   64.348520][ T6373] batman_adv: batadv0: Removing interface: ip6gretap1
[   64.577602][ T6396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.135'.
[   64.622796][ T6398] batman_adv: batadv0: Adding interface: ip6gretap1
[   64.630767][ T6398] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.652834][ T6398] batman_adv: batadv0: Interface activated: ip6gretap1
[   64.831052][ T1114] block nbd0: Connection timed out, retrying (0/1 alive)
[   64.834236][ T1114] block nbd0: Connection timed out, retrying (0/1 alive)
[   64.836595][ T1114] block nbd0: Connection timed out, retrying (0/1 alive)
[   64.838931][ T1114] block nbd0: Connection timed out, retrying (0/1 alive)
[   64.842217][ T1114] block nbd0: Dead connection, failed to find a fallback
[   64.845304][ T1114] block nbd0: shutting down sockets
[   64.847456][ T1114] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.851260][ T1114] Buffer I/O error on dev nbd0, logical block 3, async page read
[   64.854039][ T1114] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.858475][ T1114] Buffer I/O error on dev nbd0, logical block 2, async page read
[   64.861205][ T1114] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.866865][ T1114] Buffer I/O error on dev nbd0, logical block 1, async page read
[   64.870026][ T1114] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.873429][ T1114] Buffer I/O error on dev nbd0, logical block 0, async page read
[   64.877423][ T5920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.881555][ T5920] Buffer I/O error on dev nbd0, logical block 0, async page read
[   64.886838][ T5920] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.889790][ T5920] Buffer I/O error on dev nbd0, logical block 1, async page read
[   64.892555][ T5920] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.895493][ T5920] Buffer I/O error on dev nbd0, logical block 2, async page read
[   64.898098][ T5920] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.901276][ T5920] Buffer I/O error on dev nbd0, logical block 3, async page read
[   64.903992][ T5920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.907153][ T5920] Buffer I/O error on dev nbd0, logical block 0, async page read
[   64.910356][ T5920] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.913432][ T5920] Buffer I/O error on dev nbd0, logical block 1, async page read
[   64.917235][ T5920] ldm_validate_partition_table(): Disk read failed.
[   64.920713][ T5920] Dev nbd0: unable to read RDB block 0
[   64.923902][ T5920]  nbd0: unable to read partition table
[   64.929359][ T5920] ldm_validate_partition_table(): Disk read failed.
[   64.932858][ T5920] Dev nbd0: unable to read RDB block 0
[   64.936247][ T5920]  nbd0: unable to read partition table
[   65.024803][ T6416] netlink: 'syz.1.138': attribute type 1 has an invalid length.
[   65.119515][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.138'.
[   65.245005][ T6433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.144'.
[   65.250803][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.144'.
[   65.584038][ T6463] batman_adv: batadv0: Interface deactivated: dummy0
[   65.586965][ T6463] batman_adv: batadv0: Removing interface: dummy0
[   65.614892][ T6463] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   65.617850][ T6463] batman_adv: batadv0: Removing interface: ip6gretap1
[   65.647938][ T6463] net_ratelimit: 82 callbacks suppressed
[   65.647954][ T6463] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   65.784429][ T6472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.157'.
[   65.788417][ T6472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.157'.
[   65.796865][ T6472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.157'.
[   65.802006][ T6472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.157'.
[   65.812711][ T6472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   66.709860][ T6522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   66.862918][ T6531] netlink: 'syz.2.176': attribute type 4 has an invalid length.
[   67.275794][ T6543] syzkaller0: entered promiscuous mode
[   67.278342][ T6543] syzkaller0: entered allmulticast mode
[   67.798662][ T6571] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   67.812278][ T6568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.234030][ T6590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   68.239079][ T6594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   69.245081][ T6626] sctp: [Deprecated]: syz.0.206 (pid 6626) Use of int in max_burst socket option.
[   69.245081][ T6626] Use struct sctp_assoc_value instead
[   69.308624][ T6631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.443297][ T6633] can: request_module (can-proto-5) failed.
[   69.473061][ T6636] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   69.476387][ T6636] veth1_vlan: entered allmulticast mode
[   69.737457][   T33] audit: type=1804 audit(1756232859.228:2): pid=6651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.213" name="/newroot/56/cgroup.controllers" dev="tmpfs" ino=312 res=1 errno=0
[   69.746463][ T6651] 8021q: VLANs not supported on wg1
[   69.762263][   T33] audit: type=1800 audit(1756232859.228:3): pid=6651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.213" name="cgroup.controllers" dev="tmpfs" ino=312 res=0 errno=0
[   69.803459][ T6656] __nla_validate_parse: 20 callbacks suppressed
[   69.803469][ T6656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.216'.
[   69.806117][ T6654] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   69.826228][ T6656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.867068][ T6658] netlink: 'syz.0.217': attribute type 5 has an invalid length.
[   69.869639][ T6658] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.217'.
[   69.880840][ T6658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.217'.
[   69.885710][ T6658] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   69.889415][ T6658] bond_slave_0: mtu greater than device maximum
[   69.911371][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'.
[   69.918455][ T6660] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   69.981723][ T6664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.220'.
[   70.090460][ T6670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.222'.
[   70.409927][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'.
[   70.554673][ T6699] netlink: 'syz.0.230': attribute type 4 has an invalid length.
[   70.609342][ T6699] netlink: 14 bytes leftover after parsing attributes in process `syz.0.230'.
[   70.635629][ T6699] bond0 (unregistering): Released all slaves
[   70.716357][   T47] IPVS: starting estimator thread 0...
[   70.812615][ T6708] IPVS: using max 78 ests per chain, 187200 per kthread
[   70.905160][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.907329][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   70.921116][ T6727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.238'.
[   70.994676][ T6736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.239'.
[   71.270839][ T6747] netlink: del zone limit has 4 unknown bytes
[   72.057025][ T6778] netlink: 'syz.2.251': attribute type 4 has an invalid length.
[   72.395922][ T6796] batman_adv: batadv0: Interface deactivated: dummy0
[   72.398306][ T6796] batman_adv: batadv0: Removing interface: dummy0
[   72.402939][ T6796] bridge_slave_0: left allmulticast mode
[   72.404824][ T6796] bridge_slave_0: left promiscuous mode
[   72.407061][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.414370][ T6796] bridge_slave_1: left allmulticast mode
[   72.418683][ T6796] bridge_slave_1: left promiscuous mode
[   72.424669][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.434347][ T6796] bond0: (slave bond_slave_0): Releasing backup interface
[   72.445502][ T6796] bond0: (slave bond_slave_1): Releasing backup interface
[   72.465659][ T6796] team0: Port device team_slave_0 removed
[   72.475684][ T6796] team0: Port device team_slave_1 removed
[   72.484340][ T6796] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.491954][ T6796] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.499081][ T6796] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.505590][ T6796] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.520575][ T6796] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   72.532860][ T6796] batman_adv: batadv0: Removing interface: ip6gretap1
[   73.116034][ T5888] hid-generic 0005:0B57:0000.0001: collection stack underflow
[   73.123433][ T5888] hid-generic 0005:0B57:0000.0001: item 0 0 0 12 parsing failed
[   73.126367][ T5888] hid-generic 0005:0B57:0000.0001: probe with driver hid-generic failed with error -22
[   73.164671][ T6828] tipc: Started in network mode
[   73.166412][ T6828] tipc: Node identity 7ab69187d676, cluster identity 4711
[   73.168878][ T6828] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.172853][ T6827] tipc: Resetting bearer <eth:syzkaller0>
[   73.179711][ T6826] tipc: Disabling bearer <eth:syzkaller0>
[   73.437676][ T6855] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   73.466492][ T6858] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   73.483873][ T6855] ip6tnl1: entered promiscuous mode
[   73.617440][ T6868] veth0_to_batadv: mtu less than device minimum
[   73.794575][ T6892] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   74.845907][ T6952] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   74.938982][ T6957] __nla_validate_parse: 14 callbacks suppressed
[   74.938992][ T6957] netlink: 72 bytes leftover after parsing attributes in process `syz.0.302'.
[   74.947356][ T6962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.303'.
[   74.993799][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'.
[   75.094197][ T6979] netlink: 'syz.0.308': attribute type 83 has an invalid length.
[   75.209039][ T6987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.314532][ T6991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.313'.
[   75.504982][ T7007] netlink: 'syz.0.318': attribute type 4 has an invalid length.
[   75.509264][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'.
[   75.742834][ T7027] sctp: [Deprecated]: syz.2.324 (pid 7027) Use of struct sctp_assoc_value in delayed_ack socket option.
[   75.742834][ T7027] Use struct sctp_sack_info instead
[   75.748260][ T7027] sctp: [Deprecated]: syz.2.324 (pid 7027) Use of struct sctp_assoc_value in delayed_ack socket option.
[   75.748260][ T7027] Use struct sctp_sack_info instead
[   75.780723][ T7033] netlink: 'syz.2.325': attribute type 15 has an invalid length.
[   75.843154][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'.
[   76.024254][ T7051] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   76.184222][ T7057] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   76.215003][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'.
[   76.566858][ T7085] netlink: 'syz.2.341': attribute type 4 has an invalid length.
[   76.669830][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'.
[   76.677128][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'.
[   76.777294][ T7090] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   76.810784][ T7094] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   76.862347][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'.
[   77.039246][ T7117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.191095][ T7123] syzkaller1: entered promiscuous mode
[   77.192983][ T7123] syzkaller1: entered allmulticast mode
[   77.313464][ T7134] 8021q: VLANs not supported on sit0
[   77.372050][ T7137] batadv_slave_1: entered promiscuous mode
[   77.376274][ T7137] batadv_slave_1: left promiscuous mode
[   77.713510][ T7145] netlink: 'syz.0.362': attribute type 2 has an invalid length.
[   78.043658][ T7156] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   78.203499][ T7171] netlink: 'syz.2.369': attribute type 4 has an invalid length.
[   79.688027][ T7223] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   79.703399][ T7223] caif0: entered allmulticast mode
[   80.030009][ T7247] __nla_validate_parse: 80 callbacks suppressed
[   80.030019][ T7247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.391'.
[   80.154451][ T7263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.396'.
[   80.216611][ T7266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.397'.
[   80.222783][ T7266] netlink: 32 bytes leftover after parsing attributes in process `syz.2.397'.
[   80.303310][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'.
[   80.409347][ T7281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.400'.
[   80.420050][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'.
[   80.663509][ T7294] netlink: 256 bytes leftover after parsing attributes in process `syz.2.403'.
[   80.720650][ T7301] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.018592][ T7322] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.024326][ T7322] bond0: (slave bond1): Enslaving as an active interface with an up link
[   81.104473][ T7333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.413'.
[   81.112000][ T7324] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   81.113090][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.413'.
[   81.155545][    T9] cfg80211: failed to load regulatory.db
[   81.367057][ T7346] bond0: (slave bond1): Releasing backup interface
[   81.605743][ T7353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.686312][ T7359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.828368][ T7377] tipc: Started in network mode
[   81.830078][ T7377] tipc: Node identity 02724e9b69d6, cluster identity 4711
[   81.834302][ T7377] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.836827][ T7377] syzkaller0: entered promiscuous mode
[   81.838671][ T7377] syzkaller0: entered allmulticast mode
[   81.847456][ T7377] !: renamed from dummy0 (while UP)
[   81.945966][ T7386] netlink: 'syz.0.429': attribute type 10 has an invalid length.
[   82.434897][ T7427] caif0: left allmulticast mode
[   82.436681][ T7427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.658977][ T7376] tipc: Resetting bearer <eth:syzkaller0>
[   82.670168][ T7376] tipc: Disabling bearer <eth:syzkaller0>
[   83.164387][ T7490] Bluetooth: MGMT ver 1.23
[   83.857651][ T7516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.996524][ T7525] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[   84.000038][ T7525] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   85.044575][ T7576] __nla_validate_parse: 6 callbacks suppressed
[   85.044585][ T7576] netlink: 212264 bytes leftover after parsing attributes in process `syz.2.459'.
[   85.144449][ T7581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.463'.
[   85.322931][ T7594] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.327401][ T7594] syzkaller0: entered promiscuous mode
[   85.329752][ T7594] syzkaller0: entered allmulticast mode
[   85.347162][ T7594] tipc: Resetting bearer <eth:syzkaller0>
[   85.358424][ T7593] tipc: Resetting bearer <eth:syzkaller0>
[   85.367300][ T7593] tipc: Disabling bearer <eth:syzkaller0>
[   85.444229][ T7602] netlink: 16 bytes leftover after parsing attributes in process `syz.2.470'.
[   85.535043][ T7609] netlink: 72 bytes leftover after parsing attributes in process `syz.0.472'.
[   85.538342][ T7609] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   85.606049][ T7615] netlink: ct family unspecified
[   85.608046][ T7615] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.668303][ T7621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.477'.
[   85.818745][ T7633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.481'.
[   85.949863][ T7640] netlink: zone id is out of range
[   85.954776][ T7640] netlink: zone id is out of range
[   85.958316][ T7640] netlink: zone id is out of range
[   85.983875][ T7640] netlink: set zone limit has 4 unknown bytes
[   86.359360][ T7668] vlan2: entered promiscuous mode
[   86.362472][ T7668] bridge0: entered promiscuous mode
[   86.365574][ T7668] bridge0: port 1(vlan2) entered blocking state
[   86.368509][ T7668] bridge0: port 1(vlan2) entered disabled state
[   86.373494][ T7668] vlan2: entered allmulticast mode
[   86.375755][ T7668] bridge0: entered allmulticast mode
[   86.380043][ T7668] vlan2: left allmulticast mode
[   86.394406][ T7668] bridge0: left allmulticast mode
[   87.621954][ T7708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.626527][    T9] IPVS: starting estimator thread 0...
[   87.645406][ T7709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.504'.
[   87.683201][ T7714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.506'.
[   87.732785][ T7710] IPVS: using max 78 ests per chain, 187200 per kthread
[   87.735285][ T7721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.744492][ T7719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.964425][ T7733] netlink: 'syz.1.511': attribute type 4 has an invalid length.
[   88.079536][ T7737] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   88.285055][ T7755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.521'.
[   88.349845][ T7763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.523'.
[   88.504260][ T7768] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   88.649884][ T7792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.199414][ T7835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.803349][ T7903] netlink: 'syz.1.566': attribute type 4 has an invalid length.
[   90.878524][ T7900] netlink: ct family unspecified
[   90.880203][ T7900] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.895102][ T7908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.177145][ T7923] __nla_validate_parse: 5 callbacks suppressed
[   91.177159][ T7923] netlink: 60 bytes leftover after parsing attributes in process `syz.1.574'.
[   91.184636][ T7923] unsupported nlmsg_type 40
[   91.219266][ T7925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.575'.
[   91.335815][ T7931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.515946][ T7938] netlink: 40 bytes leftover after parsing attributes in process `syz.1.579'.
[   91.896000][ T7975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.589'.
[   92.690525][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.594'.
[   92.999660][ T8006] netlink: 'syz.1.597': attribute type 1 has an invalid length.
[   93.019628][ T8006] 8021q: adding VLAN 0 to HW filter on device bond2
[   93.041426][ T8006] bond2: (slave geneve2): making interface the new active one
[   93.046079][ T8006] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   93.063155][ T8013] netlink: 'syz.0.598': attribute type 4 has an invalid length.
[   93.067575][ T8006] bond2: (slave geneve2): Releasing active interface
[   93.177787][ T8006] syz.1.597 (8006) used greatest stack depth: 18664 bytes left
[   93.220466][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'.
[   93.347675][   T33] audit: type=1107 audit(1756232882.838:4): pid=8031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   93.492544][ T8043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.606'.
[   93.532907][ T8052] wg1: entered promiscuous mode
[   93.535476][ T8052] wg1: entered allmulticast mode
[   93.538579][ T8053] netlink: 44 bytes leftover after parsing attributes in process `syz.2.609'.
[   93.540244][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'.
[   93.561453][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'.
[   93.636391][ T8053] netlink: 'syz.2.609': attribute type 11 has an invalid length.
[   93.758945][ T8073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.566092][ T8163] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   94.568739][ T8163] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   94.887094][ T8194] tipc: Can't bind to reserved service type 2
[   94.987239][ T8206] wg1: entered promiscuous mode
[   94.989393][ T8206] wg1: entered allmulticast mode
[   95.238748][ T8227] netlink: 'syz.0.659': attribute type 10 has an invalid length.
[   95.339662][ T8233] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   95.586309][ T8271] netlink: 'syz.2.670': attribute type 5 has an invalid length.
[   96.444316][ T8286] netlink: 'syz.0.675': attribute type 10 has an invalid length.
[   96.531589][ T8295] __nla_validate_parse: 27 callbacks suppressed
[   96.531600][ T8295] netlink: 88 bytes leftover after parsing attributes in process `syz.2.678'.
[   96.538580][ T8295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.678'.
[   96.561466][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'.
[   96.589870][ T8300] netlink: 'syz.1.680': attribute type 16 has an invalid length.
[   96.601982][ T8300] netlink: 'syz.1.680': attribute type 3 has an invalid length.
[   96.607805][ T8300] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.680'.
[   96.695764][ T8316] netlink: 132 bytes leftover after parsing attributes in process `syz.2.687'.
[   96.888488][ T8341] netlink: 32 bytes leftover after parsing attributes in process `syz.0.697'.
[   96.897220][ T8342] netlink: 'syz.1.695': attribute type 3 has an invalid length.
[   96.905425][ T8342] netlink: 'syz.1.695': attribute type 3 has an invalid length.
[   97.057843][ T8365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.703'.
[   97.309841][ T8381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.538492][ T8391] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   98.082838][ T8442] netlink: 'syz.1.722': attribute type 1 has an invalid length.
[   98.085425][ T8442] netlink: 208 bytes leftover after parsing attributes in process `syz.1.722'.
[   98.089411][ T8442] netlink: 'syz.1.722': attribute type 1 has an invalid length.
[   98.096861][ T8442] netlink: 'syz.1.722': attribute type 2 has an invalid length.
[   98.139609][ T8451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.725'.
[   98.190492][ T8451] netlink: 52 bytes leftover after parsing attributes in process `syz.1.725'.
[   99.138043][ T8498] netlink: 'syz.2.737': attribute type 1 has an invalid length.
[   99.342026][   T33] audit: type=1107 audit(1756232888.828:5): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   99.431766][ T8525] veth1_macvtap: left promiscuous mode
[   99.433707][ T8525] macsec0: entered allmulticast mode
[   99.441425][ T8525] syzkaller1: entered promiscuous mode
[   99.443279][ T8525] syzkaller1: entered allmulticast mode
[   99.453287][ T8525] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.457712][ T8522] tipc: Disabling bearer <eth:syzkaller0>
[   99.636710][ T8537] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   99.718264][   T33] audit: type=1107 audit(1756232889.208:6): pid=8542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  100.617713][ T8579] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  101.129105][ T8628] netlink: 'syz.2.776': attribute type 13 has an invalid length.
[  101.135405][   T33] audit: type=1107 audit(1756232890.628:7): pid=8626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  101.324196][ T8642] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  101.450830][ T8655] tipc: Enabled bearer <udp:syz2>, priority 10
[  101.545722][ T8663] __nla_validate_parse: 20 callbacks suppressed
[  101.545737][ T8663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.789'.
[  101.686175][   T33] audit: type=1107 audit(1756232891.178:8): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  101.703852][ T8679] netlink: 'syz.1.795': attribute type 11 has an invalid length.
[  101.869508][   T33] audit: type=1107 audit(1756232891.358:9): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  101.975049][ T8713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.805'.
[  101.997237][ T8717] netlink: 16 bytes leftover after parsing attributes in process `syz.2.807'.
[  102.039203][ T8720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.808'.
[  102.127680][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'.
[  102.132417][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'.
[  102.195561][   T33] audit: type=1107 audit(1756232891.688:10): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  102.292764][ T8740] netlink: 'syz.1.814': attribute type 1 has an invalid length.
[  102.295526][ T8740] netlink: 600 bytes leftover after parsing attributes in process `syz.1.814'.
[  102.301632][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'.
[  102.471836][ T5916] tipc: Node number set to 2898301319
[  102.555240][ T8765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.819'.
[  103.041978][ T8794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.828'.
[  103.694786][ T8861] netlink: 'syz.0.851': attribute type 1 has an invalid length.
[  104.218333][ T8895] netlink: 'syz.1.861': attribute type 13 has an invalid length.
[  104.225644][ T8895] netlink: 'syz.1.861': attribute type 17 has an invalid length.
[  104.351896][ T8895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.198531][ T8959] netlink: 'syz.2.874': attribute type 83 has an invalid length.
[  106.341740][ T9020] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  106.480325][ T9037] netlink: 'syz.1.885': attribute type 1 has an invalid length.
[  106.487900][ T9035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.546725][ T9037] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  120.827100][ T9048] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  120.843492][ T9048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  121.228319][ T9056] __nla_validate_parse: 10 callbacks suppressed
[  121.228334][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'.
[  121.239467][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'.
[  121.431967][ T9065] netlink: zone id is out of range
[  121.435385][ T9065] netlink: zone id is out of range
[  121.437580][ T9065] netlink: zone id is out of range
[  121.439531][ T9065] netlink: zone id is out of range
[  121.447340][ T9065] netlink: zone id is out of range
[  121.449248][ T9065] netlink: zone id is out of range
[  121.454259][ T9065] netlink: zone id is out of range
[  121.456141][ T9065] netlink: zone id is out of range
[  121.458039][ T9065] netlink: zone id is out of range
[  121.666886][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'.
[  121.977487][ T9121] netlink: 'syz.0.910': attribute type 1 has an invalid length.
[  121.986736][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'.
[  122.054653][ T9128] netlink: 'syz.1.911': attribute type 3 has an invalid length.
[  122.057330][ T9128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.911'.
[  122.228066][ T9144] netlink: 52 bytes leftover after parsing attributes in process `syz.0.917'.
[  122.236694][ T9141] netlink: 256 bytes leftover after parsing attributes in process `syz.1.916'.
[  122.435630][ T9151] netlink: 72 bytes leftover after parsing attributes in process `syz.1.919'.
[  122.579773][   T13] nci: nci_rx_work: unknown MT 0x1
[  123.441413][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'.
[  123.508740][ T9195] netlink: 'syz.2.930': attribute type 1 has an invalid length.
[  123.684888][ T9204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.933'.
[  124.082522][ T9220] netlink: 'syz.1.937': attribute type 3 has an invalid length.
[  124.219931][ T9231] netlink: 'syz.1.941': attribute type 3 has an invalid length.
[  124.224191][ T9231] netlink: 'syz.1.941': attribute type 4 has an invalid length.
[  124.367387][    T9] IPVS: starting estimator thread 0...
[  124.462511][ T9243] IPVS: using max 77 ests per chain, 184800 per kthread
[  124.879620][   T13] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  124.882621][ T9272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  125.165615][ T9303] veth0_to_bond: entered allmulticast mode
[  125.746283][ T9335] netlink: 'syz.1.971': attribute type 1 has an invalid length.
[  126.013445][ T9361] netlink: 'syz.2.980': attribute type 4 has an invalid length.
[  126.255704][ T9386] net_ratelimit: 23 callbacks suppressed
[  126.255714][ T9386] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  126.807801][ T9425] __nla_validate_parse: 29 callbacks suppressed
[  126.808361][ T9425] netlink: 148 bytes leftover after parsing attributes in process `syz.2.996'.
[  126.816521][ T9425] netlink: 148 bytes leftover after parsing attributes in process `syz.2.996'.
[  126.903406][ T9430] netlink: 44 bytes leftover after parsing attributes in process `syz.2.997'.
[  126.924409][ T9430] team0: Mode changed to "broadcast"
[  126.963211][ T9434] netlink: 'syz.1.998': attribute type 6 has an invalid length.
[  126.979095][ T9434] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  127.085410][ T9444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1001'.
[  127.170420][ T9453] openvswitch: netlink: Unknown key attributes 2
[  127.482665][ T9478] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  127.926300][ T9500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  127.929543][ T9500] IPv6: NLM_F_CREATE should be set when creating new route
[  127.933086][ T9500] IPv6: NLM_F_CREATE should be set when creating new route
[  127.938441][ T9500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  128.276249][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'.
[  128.286391][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'.
[  128.293631][ T9532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  128.380264][ T9544] netlink: 'syz.2.1027': attribute type 4 has an invalid length.
[  128.555589][ T9575] 8021q: VLANs not supported on caif0
[  128.685965][ T9602] netlink: 'syz.2.1043': attribute type 4 has an invalid length.
[  128.726565][ T9606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1045'.
[  128.782115][ T9614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.849925][ T9621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  128.868325][ T9621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.088709][ T9638] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  129.247609][ T9656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  129.255285][ T9655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  129.261770][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'.
[  129.265518][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1060'.
[  129.279195][ T9658] netlink: 'syz.2.1060': attribute type 14 has an invalid length.
[  129.461444][ T9673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1063'.
[  129.558556][ T9681] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  129.619093][ T9686] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  129.919125][ T9719] sctp: [Deprecated]: syz.1.1079 (pid 9719) Use of int in max_burst socket option deprecated.
[  129.919125][ T9719] Use struct sctp_assoc_value instead
[  129.921602][ T9721] delete_channel: no stack
[  129.930713][ T9721] netlink: 'syz.0.1080': attribute type 1 has an invalid length.
[  130.179782][ T5917] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  130.182846][ T5917] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  130.189339][ T5917] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  130.195020][ T5917] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.403921][ T9784] netlink: 'syz.1.1099': attribute type 1 has an invalid length.
[  130.771795][ T9819] nbd1: detected capacity change from 0 to 127
[  130.782416][   T57] block nbd1: Receive control failed (result -104)
[  130.951187][ T9836] dvmrp1: tun_chr_ioctl cmd 1074025677
[  130.953765][ T9836] dvmrp1: linktype set to 769
[  131.178901][ T9845] netlink: 'syz.2.1117': attribute type 21 has an invalid length.
[  131.183624][ T9845] netlink: 'syz.2.1117': attribute type 4 has an invalid length.
[  131.188123][ T9845] netlink: 'syz.2.1117': attribute type 3 has an invalid length.
[  131.767182][ T9881] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  131.990298][ T9891] net_ratelimit: 6 callbacks suppressed
[  131.990306][ T9891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.046458][ T9898] netlink: 'syz.1.1133': attribute type 2 has an invalid length.
[  132.049283][ T9897] netlink: 'syz.1.1133': attribute type 2 has an invalid length.
[  132.207024][ T9918] __nla_validate_parse: 83 callbacks suppressed
[  132.207039][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'.
[  132.344459][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.347272][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.431798][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1145'.
[  132.534297][ T9940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.598880][ T9948] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1149'.
[  132.604417][ T9950] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1149'.
[  132.705102][ T9963] xt_time: invalid argument - start or stop time greater than 23:59:59
[  132.769939][ T9972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1155'.
[  132.791511][ T9972] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1155'.
[  133.036564][ T9980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1158'.
[  133.325809][ T9992] atomic_op ffff888109d20198 conn xmit_atomic 0000000000000000
[  133.569854][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1166'.
[  133.601105][T10002] validate_nla: 1 callbacks suppressed
[  133.601120][T10002] netlink: 'syz.2.1167': attribute type 10 has an invalid length.
[  133.610038][T10002] bond0: (slave wlan1): Opening slave failed
[  133.810983][T10019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1173'.
[  133.938426][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'.
[  150.596885][T10081] netlink: 'syz.1.1187': attribute type 83 has an invalid length.
[  150.630124][T10083] __nla_validate_parse: 2 callbacks suppressed
[  150.630134][T10083] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1188'.
[  150.839654][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'.
[  151.129609][T10097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1193'.
[  151.460683][T10110] netlink: 'syz.2.1196': attribute type 6 has an invalid length.
[  151.548322][T10112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1196'.
[  151.756932][T10119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1198'.
[  151.815863][T10121] syzkaller0: entered promiscuous mode
[  151.817897][T10121] syzkaller0: entered allmulticast mode
[  152.628389][T10124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  152.639200][T10125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  152.700614][T10131] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004
[  152.900576][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'.
[  152.975729][T10149] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1207'.
[  153.123112][T10151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.497301][T10174] syzkaller0: entered promiscuous mode
[  153.499863][T10174] syzkaller0: entered allmulticast mode
[  153.565275][T10181] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1215'.
[  153.637648][T10184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1216'.
[  153.965532][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'.
[  155.189564][T10245] netlink: 'syz.0.1231': attribute type 4 has an invalid length.
[  156.312212][T10322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  156.359167][T10328] veth0_to_bond: entered allmulticast mode
[  156.597627][T10340] __nla_validate_parse: 3 callbacks suppressed
[  156.597637][T10340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1262'.
[  156.777782][T10358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  156.955695][T10368] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  157.016775][T10377] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  157.024490][T10379] netlink: 'syz.2.1272': attribute type 62 has an invalid length.
[  157.153723][T10385] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  157.261875][T10393] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  157.336143][T10402] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1277'.
[  157.343461][T10402] batadv1: entered promiscuous mode
[  157.345464][T10402] batadv1: entered allmulticast mode
[  157.408668][T10404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1278'.
[  157.447121][T10409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1279'.
[  157.480760][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'.
[  157.501940][T10414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1280'.
[  157.545334][T10414] syzkaller1: entered promiscuous mode
[  157.547296][T10414] syzkaller1: entered allmulticast mode
[  157.970383][T10460] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  158.463936][T10518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.506317][T10525] netlink: 'syz.0.1305': attribute type 4 has an invalid length.
[  158.517460][T10525] netlink: 4460 bytes leftover after parsing attributes in process `syz.0.1305'.
[  158.523665][T10525] batadv_slave_1: entered promiscuous mode
[  158.549242][T10524] batadv_slave_1: left promiscuous mode
[  158.835033][T10556] veth1_vlan: mtu less than device minimum
[  159.097765][T10568] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  159.107523][T10570] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  159.124350][T10568] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1315'.
[  159.340837][T10603] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1325'.
[  159.359986][T10600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1324'.
[  159.383649][T10603] ip6erspan0: entered allmulticast mode
[  159.662820][T10620] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  159.739107][T10641] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  160.063781][T10667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.243074][T10682] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  160.321368][T10691] netlink: 'syz.1.1345': attribute type 4 has an invalid length.
[  160.535574][T10711] Unsupported ieee802154 address type: 0
[  160.749204][T10736] macvlan0: entered allmulticast mode
[  160.751875][T10736] veth1_vlan: entered allmulticast mode
[  160.755327][T10736] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  160.845219][ T5917] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  160.887925][T10749] bond0: (slave macvlan0): Releasing backup interface
[  160.892924][T10749] veth1_vlan: left allmulticast mode
[  160.913078][T10749] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  160.987042][T10753] netlink: 'syz.1.1359': attribute type 4 has an invalid length.
[  161.151455][   T61] block nbd1: Possible stuck request ffff888022680000: control (read@0,1024B). Runtime 30 seconds
[  161.155807][   T61] block nbd1: Possible stuck request ffff888022680200: control (read@1024,1024B). Runtime 30 seconds
[  161.160217][   T61] block nbd1: Possible stuck request ffff888022680400: control (read@2048,1024B). Runtime 30 seconds
[  161.166050][   T61] block nbd1: Possible stuck request ffff888022680600: control (read@3072,1024B). Runtime 30 seconds
[  161.624419][T10765] __nla_validate_parse: 7 callbacks suppressed
[  161.624435][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1363'.
[  162.419804][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1366'.
[  162.423976][T10784] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1366'.
[  162.573189][T10790] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1368'.
[  162.624766][T10800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1368'.
[  162.704855][T10808] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1372'.
[  162.705822][T10811] netlink: 'syz.1.1373': attribute type 1 has an invalid length.
[  162.711510][T10811] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.723063][T10808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1372'.
[  162.794849][T10821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1376'.
[  162.935692][T10831] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  162.944803][T10832] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1380'.
[  162.947777][T10832] netem: unknown loss type 12
[  162.949538][T10832] netem: change failed
[  163.127510][T10853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1387'.
[  163.217473][T10859] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  163.221731][T10859] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  164.140656][T10897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  164.143090][T10897] IPv6: NLM_F_CREATE should be set when creating new route
[  164.145840][T10897] IPv6: NLM_F_CREATE should be set when creating new route
[  164.176047][T10893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  165.024818][T10958] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  165.136412][T10961] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  165.143500][T10961] CPU: 1 UID: 0 PID: 10961 Comm: syz.2.1418 Not tainted syzkaller #0 PREEMPT(full) 
[  165.143512][T10961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.143517][T10961] Call Trace:
[  165.143521][T10961]  <TASK>
[  165.143525][T10961]  dump_stack_lvl+0x189/0x250
[  165.143542][T10961]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.143551][T10961]  ? __pfx__printk+0x10/0x10
[  165.143565][T10961]  ? kernfs_path_from_node+0x2f/0x290
[  165.143574][T10961]  ? kernfs_path_from_node+0x250/0x290
[  165.143582][T10961]  ? kernfs_path_from_node+0x2f/0x290
[  165.143592][T10961]  sysfs_warn_dup+0x8e/0xa0
[  165.143601][T10961]  sysfs_do_create_link_sd+0xc0/0x110
[  165.143610][T10961]  device_add_class_symlinks+0x1cf/0x240
[  165.143643][T10961]  device_add+0x475/0xb50
[  165.143654][T10961]  wiphy_register+0x1ba6/0x28d0
[  165.143674][T10961]  ? __pfx_wiphy_register+0x10/0x10
[  165.143684][T10961]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  165.143696][T10961]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  165.143711][T10961]  ieee80211_register_hw+0x3425/0x4080
[  165.143728][T10961]  ? ieee80211_register_hw+0x1471/0x4080
[  165.143741][T10961]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  165.143751][T10961]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  165.143766][T10961]  ? __hrtimer_setup+0x187/0x210
[  165.143773][T10961]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  165.143785][T10961]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  165.143808][T10961]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  165.143816][T10961]  ? trace_kmalloc+0x1f/0xd0
[  165.143824][T10961]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  165.143834][T10961]  ? kstrndup+0xbf/0x160
[  165.143847][T10961]  hwsim_new_radio_nl+0xea4/0x1b10
[  165.143858][T10961]  ? __pfx___nla_validate_parse+0x10/0x10
[  165.143876][T10961]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  165.143891][T10961]  ? __nla_parse+0x40/0x60
[  165.143903][T10961]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  165.143915][T10961]  genl_family_rcv_msg_doit+0x215/0x300
[  165.143927][T10961]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  165.143942][T10961]  ? bpf_lsm_capable+0x9/0x20
[  165.143952][T10961]  ? security_capable+0x7e/0x2e0
[  165.143966][T10961]  genl_rcv_msg+0x60e/0x790
[  165.143977][T10961]  ? __pfx_genl_rcv_msg+0x10/0x10
[  165.143986][T10961]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  165.144002][T10961]  netlink_rcv_skb+0x208/0x470
[  165.144013][T10961]  ? __lock_acquire+0xab9/0xd20
[  165.144024][T10961]  ? __pfx_genl_rcv_msg+0x10/0x10
[  165.144033][T10961]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  165.144052][T10961]  ? down_read+0x1ad/0x2e0
[  165.144064][T10961]  genl_rcv+0x28/0x40
[  165.144071][T10961]  netlink_unicast+0x82f/0x9e0
[  165.144085][T10961]  ? __pfx_netlink_unicast+0x10/0x10
[  165.144095][T10961]  ? netlink_sendmsg+0x642/0xb30
[  165.144105][T10961]  ? skb_put+0x11b/0x210
[  165.144118][T10961]  netlink_sendmsg+0x805/0xb30
[  165.144132][T10961]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.144151][T10961]  ? aa_sock_msg_perm+0xf1/0x1d0
[  165.144164][T10961]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  165.144195][T10961]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.144209][T10961]  __sock_sendmsg+0x21c/0x270
[  165.144221][T10961]  ____sys_sendmsg+0x505/0x830
[  165.144232][T10961]  ? __pfx_____sys_sendmsg+0x10/0x10
[  165.144244][T10961]  ? import_iovec+0x74/0xa0
[  165.144255][T10961]  ___sys_sendmsg+0x21f/0x2a0
[  165.144264][T10961]  ? __pfx____sys_sendmsg+0x10/0x10
[  165.144290][T10961]  ? __fget_files+0x2a/0x420
[  165.144301][T10961]  ? __fget_files+0x3a0/0x420
[  165.144317][T10961]  __x64_sys_sendmsg+0x19b/0x260
[  165.144327][T10961]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  165.144340][T10961]  ? rcu_is_watching+0x15/0xb0
[  165.144350][T10961]  ? do_syscall_64+0xbe/0x3b0
[  165.144363][T10961]  do_syscall_64+0xfa/0x3b0
[  165.144373][T10961]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.144382][T10961]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.144389][T10961]  ? exc_page_fault+0x9f/0xf0
[  165.144399][T10961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.144406][T10961] RIP: 0033:0x7f976658ebe9
[  165.144414][T10961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.144421][T10961] RSP: 002b:00007f9767374038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  165.144430][T10961] RAX: ffffffffffffffda RBX: 00007f97667b6090 RCX: 00007f976658ebe9
[  165.144436][T10961] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000e
[  165.144440][T10961] RBP: 00007f9766611e19 R08: 0000000000000000 R09: 0000000000000000
[  165.144445][T10961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.144449][T10961] R13: 00007f97667b6128 R14: 00007f97667b6090 R15: 00007ffc1862fda8
[  165.144462][T10961]  </TASK>
[  166.146525][T11018] pim6reg1: entered promiscuous mode
[  166.148428][T11018] pim6reg1: entered allmulticast mode
[  166.691989][T11054] bridge0: mtu less than device minimum
[  167.145678][T11076] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  167.293340][T11091] __nla_validate_parse: 8 callbacks suppressed
[  167.293354][T11091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1457'.
[  168.349332][T11141] team0: entered allmulticast mode
[  168.427995][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1468'.
[  168.568945][T11153] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.709920][T11192] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1479'.
[  170.101192][T11205] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.146254][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1484'.
[  170.395988][T11225] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1491'.
[  170.670215][T11237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1494'.
[  170.673913][T11236] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1494'.
[  170.729227][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'.
[  170.733710][T11239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1495'.
[  170.826513][T11244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1496'.
[  171.014585][T11248] geneve2: entered promiscuous mode
[  171.016882][T11248] geneve2: entered allmulticast mode
[  171.300135][T11259] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  172.290409][T11296] netlink: 'syz.2.1511': attribute type 1 has an invalid length.
[  172.607409][T11302] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = 3, id = 0
[  172.619658][T11300] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  172.844867][T11311] __nla_validate_parse: 5 callbacks suppressed
[  172.844879][T11311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1517'.
[  172.976314][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1518'.
[  173.052409][T11324] netlink: 'syz.1.1520': attribute type 83 has an invalid length.
[  173.082618][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'.
[  173.158244][T11336] netdevsim netdevsim0: Direct firmware load for  failed with error -2
[  173.181154][T11336] netdevsim netdevsim0: Falling back to sysfs fallback for: 
[  173.216046][T11341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1524'.
[  173.366163][T11355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1528'.
[  173.438785][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'.
[  173.506070][T11372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1533'.
[  173.609556][T11387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1537'.
[  173.615970][T11387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1537'.
[  173.666324][T11394] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1538'.
[  173.838677][T11401] netlink: 'syz.1.1539': attribute type 1 has an invalid length.
[  174.075777][T11419] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  174.080240][T11416] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  174.244353][T11430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.800356][T11434] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[  174.803940][T11434] netdevsim netdevsim2: Falling back to sysfs fallback for: 
[  174.992022][T11436] syzkaller1: entered promiscuous mode
[  174.995116][T11436] syzkaller1: entered allmulticast mode
[  175.321153][T11449] lo: MTU too low for tipc bearer
[  175.323333][T11449] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  175.434976][T11455] syz.1.1558: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  175.442136][T11455] CPU: 1 UID: 0 PID: 11455 Comm: syz.1.1558 Not tainted syzkaller #0 PREEMPT(full) 
[  175.442146][T11455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.442150][T11455] Call Trace:
[  175.442154][T11455]  <TASK>
[  175.442157][T11455]  dump_stack_lvl+0x189/0x250
[  175.442171][T11455]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.442180][T11455]  ? __pfx__printk+0x10/0x10
[  175.442190][T11455]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  175.442199][T11455]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  175.442207][T11455]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  175.442216][T11455]  warn_alloc+0x214/0x310
[  175.442229][T11455]  ? __pfx_warn_alloc+0x10/0x10
[  175.442243][T11455]  ? __get_vm_area_node+0x28f/0x300
[  175.442254][T11455]  ? nf_tables_newset+0x132b/0x2530
[  175.442263][T11455]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  175.442283][T11455]  ? alloc_pages_mpol+0x3cd/0x4a0
[  175.442294][T11455]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  175.442305][T11455]  ? rcu_is_watching+0x15/0xb0
[  175.442314][T11455]  ? nf_tables_newset+0x132b/0x2530
[  175.442320][T11455]  ? nf_tables_newset+0x132b/0x2530
[  175.442327][T11455]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  175.442337][T11455]  ? nf_tables_newset+0x132b/0x2530
[  175.442344][T11455]  ? nft_table_lookup+0x211/0x230
[  175.442351][T11455]  ? nft_set_lookup+0x128/0x150
[  175.442359][T11455]  ? nft_hash_privsize+0xaf/0xf0
[  175.442370][T11455]  nf_tables_newset+0x132b/0x2530
[  175.442383][T11455]  ? __pfx_nf_tables_newset+0x10/0x10
[  175.442399][T11455]  ? __nla_parse+0x40/0x60
[  175.442411][T11455]  nfnetlink_rcv+0x1132/0x2520
[  175.442433][T11455]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  175.442447][T11455]  ? ref_tracker_free+0x63a/0x7d0
[  175.442468][T11455]  ? __netlink_deliver_tap+0x807/0x850
[  175.442479][T11455]  ? netlink_deliver_tap+0x2e/0x1b0
[  175.442495][T11455]  netlink_unicast+0x82f/0x9e0
[  175.442508][T11455]  ? __pfx_netlink_unicast+0x10/0x10
[  175.442517][T11455]  ? netlink_sendmsg+0x642/0xb30
[  175.442526][T11455]  ? skb_put+0x11b/0x210
[  175.442539][T11455]  netlink_sendmsg+0x805/0xb30
[  175.442552][T11455]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.442564][T11455]  ? aa_sock_msg_perm+0xf1/0x1d0
[  175.442576][T11455]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  175.442584][T11455]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.442594][T11455]  __sock_sendmsg+0x21c/0x270
[  175.442604][T11455]  ____sys_sendmsg+0x505/0x830
[  175.442614][T11455]  ? __pfx_____sys_sendmsg+0x10/0x10
[  175.442625][T11455]  ? import_iovec+0x74/0xa0
[  175.442634][T11455]  ___sys_sendmsg+0x21f/0x2a0
[  175.442643][T11455]  ? __pfx____sys_sendmsg+0x10/0x10
[  175.442664][T11455]  ? __fget_files+0x2a/0x420
[  175.442674][T11455]  ? __fget_files+0x3a0/0x420
[  175.442689][T11455]  __x64_sys_sendmsg+0x19b/0x260
[  175.442697][T11455]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  175.442708][T11455]  ? rcu_is_watching+0x15/0xb0
[  175.442717][T11455]  ? do_syscall_64+0xbe/0x3b0
[  175.442729][T11455]  do_syscall_64+0xfa/0x3b0
[  175.442738][T11455]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.442747][T11455]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.442754][T11455]  ? exc_page_fault+0x9f/0xf0
[  175.442764][T11455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.442770][T11455] RIP: 0033:0x7f0c9e78ebe9
[  175.442779][T11455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.442785][T11455] RSP: 002b:00007f0c9f53e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.442793][T11455] RAX: ffffffffffffffda RBX: 00007f0c9e9b6090 RCX: 00007f0c9e78ebe9
[  175.442798][T11455] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  175.442802][T11455] RBP: 00007f0c9e811e19 R08: 0000000000000000 R09: 0000000000000000
[  175.442806][T11455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.442811][T11455] R13: 00007f0c9e9b6128 R14: 00007f0c9e9b6090 R15: 00007ffd237c6de8
[  175.442822][T11455]  </TASK>
[  175.442825][T11455] Mem-Info:
[  175.573331][T11455] active_anon:5766 inactive_anon:0 isolated_anon:0
[  175.573331][T11455]  active_file:1561 inactive_file:38254 isolated_file:0
[  175.573331][T11455]  unevictable:1768 dirty:139 writeback:0
[  175.573331][T11455]  slab_reclaimable:9828 slab_unreclaimable:117320
[  175.573331][T11455]  mapped:18412 shmem:2412 pagetables:1054
[  175.573331][T11455]  sec_pagetables:0 bounce:0
[  175.573331][T11455]  kernel_misc_reclaimable:0
[  175.573331][T11455]  free:229676 free_pcp:17155 free_cma:0
[  175.587727][T11455] Node 0 active_anon:14380kB inactive_anon:0kB active_file:4208kB inactive_file:147952kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41964kB dirty:224kB writeback:0kB shmem:4916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5316kB pagetables:2204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  175.597872][T11455] Node 1 active_anon:8684kB inactive_anon:0kB active_file:2036kB inactive_file:5064kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31684kB dirty:332kB writeback:0kB shmem:4732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6908kB pagetables:2012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  175.608953][T11455] Node 0 DMA free:7168kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  175.629711][T11455] lowmem_reserve[]: 0 811 811 811 811
[  175.632132][T11455] Node 0 DMA32 free:103432kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14176kB inactive_anon:0kB active_file:4208kB inactive_file:147952kB unevictable:3536kB writepending:224kB present:1556484kB managed:830948kB mlocked:0kB bounce:0kB free_pcp:36792kB local_pcp:15704kB free_cma:0kB
[  175.642839][T11455] lowmem_reserve[]: 0 0 0 0 0
[  175.644620][T11455] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  175.663497][T11455] lowmem_reserve[]: 0 0 854 854 854
[  175.666360][T11455] Node 1 Normal free:349612kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8548kB inactive_anon:0kB active_file:2036kB inactive_file:5064kB unevictable:3536kB writepending:332kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:31888kB local_pcp:10816kB free_cma:0kB
[  175.676915][T11455] lowmem_reserve[]: 0 0 0 0 0
[  175.678536][T11455] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 1*4096kB (M) = 7168kB
[  175.683013][T11455] Node 0 DMA32: 144*4kB (UM) 335*8kB (M) 187*16kB (UME) 417*32kB (UME) 86*64kB (UME) 52*128kB (UME) 38*256kB (U) 29*512kB (UM) 24*1024kB (UM) 5*2048kB (U) 3*4096kB (U) = 103432kB
[  175.688971][T11455] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  175.694737][T11455] Node 1 Normal: 83*4kB (ME) 133*8kB (ME) 123*16kB (ME) 118*32kB (UME) 137*64kB (UM) 89*128kB (UME) 43*256kB (UM) 16*512kB (UM) 14*1024kB (UM) 7*2048kB (UME) 67*4096kB (M) = 349604kB
[  175.709208][T11455] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  175.715010][T11455] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  175.719610][T11455] 42227 total pagecache pages
[  175.721711][T11455] 0 pages in swap cache
[  175.724839][T11455] Free swap  = 124996kB
[  175.726697][T11455] Total swap = 124996kB
[  175.732811][T11455] 786301 pages RAM
[  175.734041][T11455] 0 pages HighMem/MovableOnly
[  175.735566][T11455] 241332 pages reserved
[  175.737035][T11455] 0 pages cma reserved
[  175.883261][T11469] netlink: 'syz.0.1564': attribute type 27 has an invalid length.
[  176.046924][T11493] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  176.137879][T11500] netlink: 'syz.0.1575': attribute type 2 has an invalid length.
[  176.418738][ T5852] Bluetooth: hci2: link tx timeout
[  176.422657][ T5852] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  176.886212][T11515] delete_channel: no stack
[  177.189689][   T55] Bluetooth: hci2: link tx timeout
[  177.191663][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.195973][   T55] Bluetooth: hci2: link tx timeout
[  177.197886][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.415858][T11541] vxcan1: entered allmulticast mode
[  177.480086][T11547] netlink: 'syz.0.1592': attribute type 1 has an invalid length.
[  177.486302][T11547] netlink: 'syz.0.1592': attribute type 2 has an invalid length.
[  177.766374][T11569] delete_channel: no stack
[  177.940405][T11577] netlink: 'syz.1.1599': attribute type 66 has an invalid length.
[  178.087291][T11588] sctp: [Deprecated]: syz.0.1604 (pid 11588) Use of int in max_burst socket option.
[  178.087291][T11588] Use struct sctp_assoc_value instead
[  178.134665][T11595] netlink: 'syz.1.1605': attribute type 1 has an invalid length.
[  178.137272][T11595] __nla_validate_parse: 12 callbacks suppressed
[  178.137279][T11595] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1605'.
[  178.150180][T11588] netlink: 'syz.0.1604': attribute type 3 has an invalid length.
[  178.238668][T11601] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.256381][T11601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1607'.
[  178.511061][ T5235] Bluetooth: hci2: command 0x0406 tx timeout
[  178.517961][T11614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1609'.
[  178.603076][T11619] openvswitch: netlink: IP tunnel dst address not specified
[  178.933727][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'.
[  178.963728][T11640] lo: entered promiscuous mode
[  178.969506][T11640] tunl0: entered promiscuous mode
[  178.973331][T11640] gre0: entered promiscuous mode
[  178.975967][T11640] gretap0: entered promiscuous mode
[  178.978556][T11640] erspan0: entered promiscuous mode
[  178.981406][T11640] ip_vti0: entered promiscuous mode
[  178.984341][T11640] ip6_vti0: entered promiscuous mode
[  178.986925][T11640] sit0: entered promiscuous mode
[  178.989427][T11640] ip6tnl0: entered promiscuous mode
[  178.992338][T11640] ip6gre0: entered promiscuous mode
[  178.995011][T11640] syz_tun: entered promiscuous mode
[  178.997310][T11640] ip6gretap0: entered promiscuous mode
[  178.999420][T11640] bridge0: entered promiscuous mode
[  179.002374][T11640] bond0: entered promiscuous mode
[  179.004415][T11640] team0: entered promiscuous mode
[  179.006595][T11640] dummy0: entered promiscuous mode
[  179.008796][T11640] nlmon0: entered promiscuous mode
[  179.012911][T11640] caif0: entered promiscuous mode
[  179.014823][T11640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  179.020033][T11642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1614'.
[  179.093851][T11644] syzkaller0: entered promiscuous mode
[  179.095701][T11644] syzkaller0: entered allmulticast mode
[  179.186079][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1618'.
[  179.189352][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1618'.
[  179.190522][T11656] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  179.195887][T11654] netlink: 'syz.0.1618': attribute type 15 has an invalid length.
[  179.254459][T11662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1621'.
[  179.259190][T11662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1621'.
[  179.292779][T11665] lo: MTU too low for tipc bearer
[  179.294541][T11665] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  179.394211][T11671] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  179.958192][T11703] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[  179.963625][T11703] netdevsim netdevsim2: Falling back to sysfs fallback for: 
[  180.501094][ T5235] Bluetooth: hci1: command 0x0406 tx timeout
[  180.758095][T11709] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1636'.
[  180.764783][T11709] netlink: zone id is out of range
[  180.767159][T11709] netlink: zone id is out of range
[  180.769165][T11709] netlink: zone id is out of range
[  180.771733][T11709] netlink: zone id is out of range
[  180.773882][T11709] netlink: zone id is out of range
[  180.776046][T11709] netlink: zone id is out of range
[  180.872897][T11717] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  180.987514][T11727] bridge2: entered promiscuous mode
[  180.990948][T11727] bridge2: entered allmulticast mode
[  181.201543][T11738] netlink: 'syz.1.1642': attribute type 1 has an invalid length.
[  181.204274][T11738] netlink: 'syz.1.1642': attribute type 1 has an invalid length.
[  181.968638][T11752] lo: left promiscuous mode
[  181.977372][T11752] tunl0: left promiscuous mode
[  181.979280][T11752] gre0: left promiscuous mode
[  181.981769][T11752] gretap0: left promiscuous mode
[  181.983697][T11752] erspan0: left promiscuous mode
[  181.985594][T11752] ip_vti0: left promiscuous mode
[  181.987743][T11752] ip6_vti0: left promiscuous mode
[  181.989696][T11752] sit0: left promiscuous mode
[  181.992559][T11752] ip6tnl0: left promiscuous mode
[  181.994453][T11752] ip6gre0: left promiscuous mode
[  181.996395][T11752] syz_tun: left promiscuous mode
[  181.998305][T11752] ip6gretap0: left promiscuous mode
[  182.000309][T11752] bridge0: left promiscuous mode
[  182.002587][T11752] bond0: left promiscuous mode
[  182.021528][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  182.991296][T11809] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  183.170615][T11835] netlink: 'syz.1.1673': attribute type 4 has an invalid length.
[  183.278096][T11849] __nla_validate_parse: 43 callbacks suppressed
[  183.278110][T11849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1675'.
[  183.366811][T11854] net_ratelimit: 36 callbacks suppressed
[  183.366829][T11854] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  183.435749][T11873] lo: MTU too low for tipc bearer
[  183.437587][T11873] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  183.538498][T11883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1686'.
[  183.643308][T11891] sctp: [Deprecated]: syz.2.1689 (pid 11891) Use of struct sctp_assoc_value in delayed_ack socket option.
[  183.643308][T11891] Use struct sctp_sack_info instead
[  183.670398][T11891] sctp: [Deprecated]: syz.2.1689 (pid 11891) Use of struct sctp_assoc_value in delayed_ack socket option.
[  183.670398][T11891] Use struct sctp_sack_info instead
[  183.687550][T11891] netlink: 'syz.2.1689': attribute type 3 has an invalid length.
[  183.691472][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1689'.
[  183.702021][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1689'.
[  183.778231][T11895] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  183.792694][T11897] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  183.796708][T11897] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  184.028398][T11918] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  184.176686][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'.
[  184.526024][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1705'.
[  184.530076][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1705'.
[  184.535743][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1705'.
[  184.540516][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1705'.
[  184.544344][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1705'.
[  184.551541][T11949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.668324][T11956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  185.098631][T11997] netlink: 'syz.1.1719': attribute type 21 has an invalid length.
[  185.102567][T11997] netlink: 'syz.1.1719': attribute type 22 has an invalid length.
[  185.105242][T11997] netlink: 'syz.1.1719': attribute type 23 has an invalid length.
[  185.108738][T11997] netlink: 'syz.1.1719': attribute type 25 has an invalid length.
[  185.112667][T11997] netlink: 'syz.1.1719': attribute type 26 has an invalid length.
[  185.246835][T12005] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  185.268138][T12007] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20000
[  185.270960][T12007] sctp: [Deprecated]: syz.0.1722 (pid 12007) Use of int in max_burst socket option.
[  185.270960][T12007] Use struct sctp_assoc_value instead
[  185.326313][T12015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  185.711551][T12049] lo: MTU too low for tipc bearer
[  185.713375][T12049] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  185.982976][T12069] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  186.191974][T12091] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  186.196898][T12091] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  186.889025][ T5917] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  187.063712][T12136] syzkaller0: entered promiscuous mode
[  187.066188][T12136] syzkaller0: entered allmulticast mode
[  187.085075][T12138] netdevsim0: mtu greater than device maximum
[  187.087412][T12139] netdevsim0: mtu greater than device maximum
[  188.047985][T12173] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  188.149865][T12179] IPVS: set_ctl: invalid protocol: 137 172.20.20.39:20004
[  188.218221][T12181] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  188.354743][T12193] __nla_validate_parse: 25 callbacks suppressed
[  188.354753][T12193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1774'.
[  188.796586][T12201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1778'.
[  188.800279][T12201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1778'.
[  189.083496][T12208] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1780'.
[  189.236692][T12222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1786'.
[  189.330471][T12229] netlink: 'syz.0.1785': attribute type 10 has an invalid length.
[  189.410143][T12233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1789'.
[  189.898629][T12252] syzkaller1: entered promiscuous mode
[  189.900587][T12252] syzkaller1: entered allmulticast mode
[  189.908334][T12252] openvswitch: netlink: Multiple metadata blocks provided
[  190.150509][T12261] netlink: 'syz.1.1798': attribute type 6 has an invalid length.
[  190.948064][T12306] batadv_slave_1: entered promiscuous mode
[  191.068110][T12315] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1811'.
[  191.192534][T12305] batadv_slave_1: left promiscuous mode
[  191.221864][   T61] block nbd1: Possible stuck request ffff888022680000: control (read@0,1024B). Runtime 60 seconds
[  191.225904][   T61] block nbd1: Possible stuck request ffff888022680200: control (read@1024,1024B). Runtime 60 seconds
[  191.229850][   T61] block nbd1: Possible stuck request ffff888022680400: control (read@2048,1024B). Runtime 60 seconds
[  191.236527][   T61] block nbd1: Possible stuck request ffff888022680600: control (read@3072,1024B). Runtime 60 seconds
[  191.596084][T12352] netlink: 'syz.1.1823': attribute type 1 has an invalid length.
[  191.610167][T12351] netlink: 'syz.1.1823': attribute type 1 has an invalid length.
[  191.621472][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1822'.
[  191.752716][T12356] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  191.931780][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1830'.
[  192.009052][T12375] netlink: 'syz.0.1830': attribute type 10 has an invalid length.
[  192.018509][T12375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1830'.
[  192.090582][T12386] batadv_slave_1: entered promiscuous mode
[  192.161456][T12385] batadv_slave_1: left promiscuous mode
[  192.434649][T12404] netlink: 'syz.1.1837': attribute type 3 has an invalid length.
[  193.132265][T12447] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  193.136589][T12447] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  193.164339][T12451] lo: MTU too low for tipc bearer
[  193.171498][T12451] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  193.274715][T12456] netlink: 'syz.0.1856': attribute type 1 has an invalid length.
[  193.320610][T12461] netlink: 'syz.0.1857': attribute type 10 has an invalid length.
[  193.579665][T12480] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  193.592093][T12480] netlink: 'syz.1.1861': attribute type 1 has an invalid length.
[  193.786113][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.895494][T12500] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[  193.992774][T12509] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  194.032689][T12513] __nla_validate_parse: 8 callbacks suppressed
[  194.032698][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1872'.
[  194.042211][T12513] macvlan2: entered promiscuous mode
[  194.044002][T12513] bond0: entered promiscuous mode
[  194.047524][T12513] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  194.058378][T12516] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1873'.
[  194.148350][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1875'.
[  194.152989][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1875'.
[  194.309265][T12533] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  194.320221][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1878'.
[  194.372766][T12545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1881'.
[  194.377240][T12546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1883'.
[  194.384950][T12545] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1881'.
[  194.428988][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'.
[  194.439620][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'.
[  195.193251][T12547] pim6reg1: entered promiscuous mode
[  195.195670][T12547] pim6reg1: entered allmulticast mode
[  195.218640][T12550] netlink: 'syz.1.1884': attribute type 1 has an invalid length.
[  195.237822][T12550] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  195.308027][T12560] netlink: 'syz.1.1887': attribute type 1 has an invalid length.
[  195.378528][T12569] ieee802154 phy0 wpan0: encryption failed: -22
[  196.496074][T12612] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  196.543114][T12617] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  196.588608][T12624] netlink: 'syz.0.1905': attribute type 2 has an invalid length.
[  196.612118][T12624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  196.650856][ T5917] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  197.393793][T12656] netlink: 'syz.2.1912': attribute type 14 has an invalid length.
[  197.434192][T12660] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0
[  197.524633][T12669] vxcan1 speed is unknown, defaulting to 1000
[  197.528537][T12669] vxcan1 speed is unknown, defaulting to 1000
[  197.532998][T12669] vxcan1 speed is unknown, defaulting to 1000
[  197.606572][T12677] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  197.669748][ T5916] vxcan1 speed is unknown, defaulting to 1000
[  197.674592][T12669] infiniband syz2: set active
[  197.676793][T12669] infiniband syz2: added vxcan1
[  197.680651][T12669] syz2: rxe_create_cq: returned err = -12
[  197.683861][T12669] infiniband syz2: Couldn't create ib_mad CQ
[  197.686356][T12669] infiniband syz2: Couldn't open port 1
[  197.716187][T12669] RDS/IB: syz2: added
[  197.719048][T12669] smc: adding ib device syz2 with port count 1
[  197.726316][T12669] smc:    ib device syz2 port 1 has pnetid 
[  197.729876][ T5916] vxcan1 speed is unknown, defaulting to 1000
[  197.780145][T12669] vxcan1 speed is unknown, defaulting to 1000
[  197.952179][T12669] vxcan1 speed is unknown, defaulting to 1000
[  198.045490][T12669] vxcan1 speed is unknown, defaulting to 1000
[  198.786743][T12735] netlink: 'syz.0.1930': attribute type 1 has an invalid length.
[  198.826305][T12729] vxcan1 speed is unknown, defaulting to 1000
[  198.853251][T12739] netlink: 'syz.0.1932': attribute type 4 has an invalid length.
[  198.856604][T12740] netlink: 'syz.0.1932': attribute type 4 has an invalid length.
[  198.962633][T12737] vxcan1 speed is unknown, defaulting to 1000
[  199.069053][T12745] vxcan1 speed is unknown, defaulting to 1000
[  199.538206][T12769] netlink: 'syz.1.1941': attribute type 10 has an invalid length.
[  199.557196][T12769] team0: Port device 0! added
[  199.566337][T12769] __nla_validate_parse: 8 callbacks suppressed
[  199.566351][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'.
[  199.757050][T12779] macsec0: entered allmulticast mode
[  199.761999][T12779] veth1_macvtap: entered allmulticast mode
[  199.769915][T12779] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  199.838428][T12787] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1946'.
[  199.928092][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1948'.
[  199.969895][T12789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  200.206467][T12803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1952'.
[  200.250122][T12803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1952'.
[  200.521466][T12811] netlink: 'syz.2.1956': attribute type 1 has an invalid length.
[  200.572389][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1955'.
[  200.650470][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1957'.
[  200.835949][T12841] wlan1: mtu greater than device maximum
[  201.235139][T12871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1966'.
[  201.367639][T12882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  201.560165][T12900] netlink: 'syz.2.1972': attribute type 10 has an invalid length.
[  201.566080][T12900] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1972'.
[  201.570160][T12900] veth0_vlan: entered allmulticast mode
[  201.575050][T12900] bridge0: port 1(veth0_vlan) entered blocking state
[  201.578822][T12900] bridge0: port 1(veth0_vlan) entered disabled state
[  201.584865][T12900] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  201.605130][T12903] vxcan1 speed is unknown, defaulting to 1000
[  201.895870][T12929] ieee802154 phy0 wpan0: encryption failed: -22
[  201.922329][T12930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1979'.
[  202.018869][T12937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  202.148983][T12950] vxcan1 speed is unknown, defaulting to 1000
[  202.306878][T12970] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  202.358880][T12977] vxcan1 speed is unknown, defaulting to 1000
[  202.375841][T12979] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  202.582996][T12996] vxcan1 speed is unknown, defaulting to 1000
[  202.907484][T13010] vxcan1 speed is unknown, defaulting to 1000
[  202.979538][T13018] team0: Port device 0! removed
[  203.012243][ T5256] vxcan1 speed is unknown, defaulting to 1000
[  203.228052][T13034] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  203.236304][T13034] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  203.338236][T13039] vxcan1 speed is unknown, defaulting to 1000
[  203.870030][T13083] lo: MTU too low for tipc bearer
[  203.873688][T13083] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  204.227349][T13116] ip6gretap0: mtu less than device minimum
[  204.349556][T13128] vxcan1 speed is unknown, defaulting to 1000
[  204.767242][T13144] __nla_validate_parse: 8 callbacks suppressed
[  204.767258][T13144] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2036'.
[  204.792957][T13144] vxcan1 speed is unknown, defaulting to 1000
[  205.014749][T13149] netlink: 'syz.1.2037': attribute type 9 has an invalid length.
[  205.017938][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2037'.
[  205.104318][T13153] bond_slave_0: mtu less than device minimum
[  205.257526][T13155] team0: Refused to change device type
[  205.397011][T13159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2040'.
[  205.407397][T13159] sctp: [Deprecated]: syz.0.2040 (pid 13159) Use of struct sctp_assoc_value in delayed_ack socket option.
[  205.407397][T13159] Use struct sctp_sack_info instead
[  205.742430][T13166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  205.909385][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2045'.
[  205.926429][T13172] vxcan1 speed is unknown, defaulting to 1000
[  206.719561][T13182] syzkaller0: entered promiscuous mode
[  206.725224][T13182] syzkaller0: entered allmulticast mode
[  206.748952][T13182] tipc: Started in network mode
[  206.752596][T13182] tipc: Node identity , cluster identity 4711
[  206.755387][T13182] tipc: Failed to obtain node identity
[  206.757802][T13182] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  206.765347][T13186] vxcan1 speed is unknown, defaulting to 1000
[  206.777214][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2047'.
[  206.790718][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2047'.
[  206.812458][T13190] netlink: 'syz.1.2048': attribute type 16 has an invalid length.
[  207.827639][T13195] netlink: 'syz.1.2051': attribute type 10 has an invalid length.
[  207.966719][T13200] vxcan1 speed is unknown, defaulting to 1000
[  208.074059][T13205] syzkaller1: entered allmulticast mode
[  208.256089][T13204] vxcan1 speed is unknown, defaulting to 1000
[  208.533307][T13222] vxcan1 speed is unknown, defaulting to 1000
[  208.616569][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2058'.
[  208.988597][T13239] vxcan1 speed is unknown, defaulting to 1000
[  209.053762][T13237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.087095][T13237] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2062'.
[  209.297135][T13241] vxcan1 speed is unknown, defaulting to 1000
[  209.356925][T13252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2065'.
[  209.914000][T13268] ip6_vti0: mtu less than device minimum
[  209.936089][T13270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  209.999728][T13272] vxcan1 speed is unknown, defaulting to 1000
[  210.077498][T13280] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  210.236955][T13294] veth0_vlan: left promiscuous mode
[  210.240076][T13294] veth0_vlan: entered promiscuous mode
[  210.321114][T13296] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  210.480533][T13308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2082'.
[  210.578243][T13314] gretap0: mtu less than device minimum
[  210.624239][T13310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.638041][T13309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.747462][T13325] vxcan1 speed is unknown, defaulting to 1000
[  211.153142][T13334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2092'.
[  211.209123][T13336] netlink: 'syz.2.2095': attribute type 1 has an invalid length.
[  211.212235][T13336] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2095'.
[  211.215359][T13336] netlink: 'syz.2.2095': attribute type 2 has an invalid length.
[  211.218446][T13336] netlink: 'syz.2.2095': attribute type 1 has an invalid length.
[  211.241181][T13336] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2095'.
[  211.277389][T13340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2093'.
[  211.280540][T13340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2093'.
[  211.309527][T13336] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  211.317768][T13345] netlink: 'syz.0.2096': attribute type 9 has an invalid length.
[  211.321679][T13345] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.2096'.
[  211.335982][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2094'.
[  211.346203][T13339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2094'.
[  211.349242][T13345] vxcan1 speed is unknown, defaulting to 1000
[  211.420914][T13349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2098'.
[  211.596530][T13356] vxcan1 speed is unknown, defaulting to 1000
[  211.983286][T13378] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.999128][T13381] netlink: 'syz.0.2107': attribute type 21 has an invalid length.
[  212.000346][T13378] syzkaller0: entered promiscuous mode
[  212.004029][T13382] netlink: 'syz.0.2107': attribute type 21 has an invalid length.
[  212.005839][T13378] syzkaller0: entered allmulticast mode
[  212.044678][T13381] netlink: 'syz.0.2107': attribute type 4 has an invalid length.
[  212.048505][T13382] netlink: 'syz.0.2107': attribute type 4 has an invalid length.
[  212.427960][T13397] vxcan1 speed is unknown, defaulting to 1000
[  212.708846][T13413] netlink: 'syz.1.2116': attribute type 1 has an invalid length.
[  212.739990][T13368] tipc: Resetting bearer <eth:syzkaller0>
[  213.701768][T13368] tipc: Disabling bearer <eth:syzkaller0>
[  213.722405][T13417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  213.763176][T13420] vxcan1 speed is unknown, defaulting to 1000
[  213.930000][T13427] vxcan1 speed is unknown, defaulting to 1000
[  214.197325][T13446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  214.253111][T13449] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  214.255976][T13449] openvswitch: netlink: Duplicate key (type 0).
[  214.322829][T13453] netlink: 'syz.2.2127': attribute type 29 has an invalid length.
[  214.330704][T13453] netlink: 'syz.2.2127': attribute type 29 has an invalid length.
[  214.342184][T13453] netlink: 'syz.2.2127': attribute type 29 has an invalid length.
[  214.344964][T13453] netlink: 'syz.2.2127': attribute type 29 has an invalid length.
[  214.357435][T13453] netlink: 'syz.2.2127': attribute type 29 has an invalid length.
[  214.585023][T13483] vxcan1 speed is unknown, defaulting to 1000
[  215.319009][T13507] IPVS: length: 227 != 8
[  215.475863][T13525] vxcan1 speed is unknown, defaulting to 1000
[  215.499854][T13530] __nla_validate_parse: 16 callbacks suppressed
[  215.499864][T13530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2148'.
[  215.510938][T13530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2148'.
[  215.713454][T13540] vxcan1 speed is unknown, defaulting to 1000
[  215.745324][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'.
[  216.014990][T13572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2159'.
[  216.124441][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2160'.
[  216.197307][T13585] vxcan1 speed is unknown, defaulting to 1000
[  216.688341][T13615] team0: left promiscuous mode
[  216.695704][T13615] dummy0: left promiscuous mode
[  216.698126][T13615] nlmon0: left promiscuous mode
[  216.707214][T13615] caif0: left promiscuous mode
[  216.709340][T13615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  216.779748][T13625] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  216.785606][T13625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  216.817195][T13623] vxcan1 speed is unknown, defaulting to 1000
[  217.403902][T13642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  217.516134][T13646] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  217.656321][T13651] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  217.812205][T13671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2189'.
[  217.851091][T13674] vxcan1 speed is unknown, defaulting to 1000
[  217.912840][T13679] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2191'.
[  217.915988][T13679] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2191'.
[  218.337206][T13693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  218.345414][T13689] vxcan1 speed is unknown, defaulting to 1000
[  218.558054][T13704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2196'.
[  218.590460][T13706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  218.663642][T13715] vxcan1 speed is unknown, defaulting to 1000
[  218.684084][T13714] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2199'.
[  218.696022][T13714] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  218.977093][T13739] validate_nla: 28 callbacks suppressed
[  218.977105][T13739] netlink: 'syz.1.2206': attribute type 3 has an invalid length.
[  218.983089][T13739] netlink: 'syz.1.2206': attribute type 1 has an invalid length.
[  218.986634][T13739] NCSI netlink: No device for ifindex 0
[  219.068050][T13747] IPv6: NLM_F_REPLACE set, but no existing node found!
[  219.186317][T13748] vxcan1 speed is unknown, defaulting to 1000
[  219.666339][T13783] netdevsim netdevsim1: Direct firmware load for /. failed with error -2
[  219.670105][T13783] netdevsim netdevsim1: Falling back to sysfs fallback for: /.
[  219.952611][T13795] nbd2: detected capacity change from 0 to 127
[  219.956931][T13798] netlink: 'syz.2.2227': attribute type 4 has an invalid length.
[  219.960098][T13799] netlink: 'syz.0.2228': attribute type 21 has an invalid length.
[  219.964346][T13799] netlink: 'syz.0.2228': attribute type 22 has an invalid length.
[  219.967477][T13799] netlink: 'syz.0.2228': attribute type 23 has an invalid length.
[  219.970643][T13799] netlink: 'syz.0.2228': attribute type 25 has an invalid length.
[  219.975898][   T57] block nbd2: Receive control failed (result -104)
[  220.019386][T13801] vxcan1 speed is unknown, defaulting to 1000
[  220.196404][T13813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  220.460683][T13831] vxcan1 speed is unknown, defaulting to 1000
[  220.786236][T13844] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  220.796065][T13846] tap0: tun_chr_ioctl cmd 1074025675
[  220.798405][T13846] tap0: persist disabled
[  220.815290][T13846] __nla_validate_parse: 27 callbacks suppressed
[  220.815300][T13846] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2241'.
[  220.851663][T13846] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2241'.
[  220.864720][T13846] Bluetooth: MGMT ver 1.23
[  221.113671][T13861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  221.172030][T13874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2249'.
[  221.177448][T13874] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2249'.
[  221.317215][T13883] vxcan1 speed is unknown, defaulting to 1000
[  221.327281][   T61] block nbd1: Possible stuck request ffff888022680000: control (read@0,1024B). Runtime 90 seconds
[  221.334282][   T61] block nbd1: Possible stuck request ffff888022680200: control (read@1024,1024B). Runtime 90 seconds
[  221.338365][   T61] block nbd1: Possible stuck request ffff888022680400: control (read@2048,1024B). Runtime 90 seconds
[  221.342347][   T61] block nbd1: Possible stuck request ffff888022680600: control (read@3072,1024B). Runtime 90 seconds
[  221.433177][T13888] syzkaller1: entered promiscuous mode
[  221.436312][T13888] syzkaller1: entered allmulticast mode
[  221.600693][T13900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2257'.
[  221.608454][T13898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2258'.
[  221.621274][T13898] vxcan1 speed is unknown, defaulting to 1000
[  225.186633][ T5295] udevd[5295]: worker [9095] /devices/virtual/block/nbd1 is taking a long time
[  250.102582][ T1114] block nbd2: Possible stuck request ffff888022708000: control (read@0,1024B). Runtime 30 seconds
[  250.106629][ T1114] block nbd2: Possible stuck request ffff888022708200: control (read@1024,1024B). Runtime 30 seconds
[  250.110796][ T1114] block nbd2: Possible stuck request ffff888022708400: control (read@2048,1024B). Runtime 30 seconds
[  250.115154][ T1114] block nbd2: Possible stuck request ffff888022708600: control (read@3072,1024B). Runtime 30 seconds
[  251.383847][ T1114] block nbd1: Possible stuck request ffff888022680000: control (read@0,1024B). Runtime 120 seconds
[  251.388390][ T1114] block nbd1: Possible stuck request ffff888022680200: control (read@1024,1024B). Runtime 120 seconds
[  251.393218][ T1114] block nbd1: Possible stuck request ffff888022680400: control (read@2048,1024B). Runtime 120 seconds
[  251.397774][ T1114] block nbd1: Possible stuck request ffff888022680600: control (read@3072,1024B). Runtime 120 seconds
[  255.223631][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  280.192651][ T1114] block nbd2: Possible stuck request ffff888022708000: control (read@0,1024B). Runtime 60 seconds
[  280.196935][ T1114] block nbd2: Possible stuck request ffff888022708200: control (read@1024,1024B). Runtime 60 seconds
[  280.203066][ T1114] block nbd2: Possible stuck request ffff888022708400: control (read@2048,1024B). Runtime 60 seconds
[  280.207238][ T1114] block nbd2: Possible stuck request ffff888022708600: control (read@3072,1024B). Runtime 60 seconds
[  280.441269][ T5295] udevd[5295]: worker [10737] /devices/virtual/block/nbd2 is taking a long time
[  281.461366][ T1114] block nbd1: Possible stuck request ffff888022680000: control (read@0,1024B). Runtime 150 seconds
[  281.465981][ T1114] block nbd1: Possible stuck request ffff888022680200: control (read@1024,1024B). Runtime 150 seconds
[  281.470609][ T1114] block nbd1: Possible stuck request ffff888022680400: control (read@2048,1024B). Runtime 150 seconds
[  281.475424][ T1114] block nbd1: Possible stuck request ffff888022680600: control (read@3072,1024B). Runtime 150 seconds
[  310.273281][ T1114] block nbd2: Possible stuck request ffff888022708000: control (read@0,1024B). Runtime 90 seconds
[  310.277411][ T1114] block nbd2: Possible stuck request ffff888022708200: control (read@1024,1024B). Runtime 90 seconds
[  310.281707][ T1114] block nbd2: Possible stuck request ffff888022708400: control (read@2048,1024B). Runtime 90 seconds
[  310.285893][ T1114] block nbd2: Possible stuck request ffff888022708600: control (read@3072,1024B). Runtime 90 seconds
[  311.545139][   T61] block nbd1: Possible stuck request ffff888022680000: control (read@0,1024B). Runtime 180 seconds
[  311.548697][   T61] block nbd1: Possible stuck request ffff888022680200: control (read@1024,1024B). Runtime 180 seconds
[  311.552531][   T61] block nbd1: Possible stuck request ffff888022680400: control (read@2048,1024B). Runtime 180 seconds
[  311.556123][   T61] block nbd1: Possible stuck request ffff888022680600: control (read@3072,1024B). Runtime 180 seconds
[  313.491728][ T5295] udevd[5295]: worker [9095] /devices/virtual/block/nbd1 timeout; kill it
[  313.495827][ T5295] udevd[5295]: seq 14966 '/devices/virtual/block/nbd1' killed
[  316.663763][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  334.101127][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  340.344719][ T1114] block nbd2: Possible stuck request ffff888022708000: control (read@0,1024B). Runtime 120 seconds
[  340.348613][ T1114] block nbd2: Possible stuck request ffff888022708200: control (read@1024,1024B). Runtime 120 seconds
[  340.353919][ T1114] block nbd2: Possible stuck request ffff888022708400: control (read@2048,1024B). Runtime 120 seconds
[  340.358069][ T1114] block nbd2: Possible stuck request ffff888022708600: control (read@3072,1024B). Runtime 120 seconds
[  341.631128][   T61] block nbd1: Possible stuck request ffff888022680000: control (read@0,1024B). Runtime 210 seconds
[  341.635303][   T61] block nbd1: Possible stuck request ffff888022680200: control (read@1024,1024B). Runtime 210 seconds
[  341.639402][   T61] block nbd1: Possible stuck request ffff888022680400: control (read@2048,1024B). Runtime 210 seconds
[  341.643572][   T61] block nbd1: Possible stuck request ffff888022680600: control (read@3072,1024B). Runtime 210 seconds
[  370.421960][ T1114] block nbd2: Possible stuck request ffff888022708000: control (read@0,1024B). Runtime 150 seconds
[  370.426396][ T1114] block nbd2: Possible stuck request ffff888022708200: control (read@1024,1024B). Runtime 150 seconds
[  370.431078][ T1114] block nbd2: Possible stuck request ffff888022708400: control (read@2048,1024B). Runtime 150 seconds
[  370.435615][ T1114] block nbd2: Possible stuck request ffff888022708600: control (read@3072,1024B). Runtime 150 seconds
[  371.702471][   T61] block nbd1: Possible stuck request ffff888022680000: control (read@0,1024B). Runtime 240 seconds
[  371.705984][   T61] block nbd1: Possible stuck request ffff888022680200: control (read@1024,1024B). Runtime 240 seconds
[  371.709990][   T61] block nbd1: Possible stuck request ffff888022680400: control (read@2048,1024B). Runtime 240 seconds
[  371.714373][   T61] block nbd1: Possible stuck request ffff888022680600: control (read@3072,1024B). Runtime 240 seconds
[  378.103542][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  400.205568][ T5295] udevd[5295]: worker [10737] /devices/virtual/block/nbd2 timeout; kill it
[  400.209055][ T5295] udevd[5295]: seq 20180 '/devices/virtual/block/nbd2' killed
[  400.503119][ T1114] block nbd2: Possible stuck request ffff888022708000: control (read@0,1024B). Runtime 180 seconds
[  400.507272][ T1114] block nbd2: Possible stuck request ffff888022708200: control (read@1024,1024B). Runtime 180 seconds
[  400.511564][ T1114] block nbd2: Possible stuck request ffff888022708400: control (read@2048,1024B). Runtime 180 seconds
[  400.515697][ T1114] block nbd2: Possible stuck request ffff888022708600: control (read@3072,1024B). Runtime 180 seconds
[  401.781251][   T61] block nbd1: Possible stuck request ffff888022680000: control (read@0,1024B). Runtime 270 seconds
[  401.785504][   T61] block nbd1: Possible stuck request ffff888022680200: control (read@1024,1024B). Runtime 270 seconds
[  401.789071][   T61] block nbd1: Possible stuck request ffff888022680400: control (read@2048,1024B). Runtime 270 seconds
[  401.793408][   T61] block nbd1: Possible stuck request ffff888022680600: control (read@3072,1024B). Runtime 270 seconds
[  430.582691][ T1114] block nbd2: Possible stuck request ffff888022708000: control (read@0,1024B). Runtime 210 seconds
[  430.587046][ T1114] block nbd2: Possible stuck request ffff888022708200: control (read@1024,1024B). Runtime 210 seconds
[  430.591621][ T1114] block nbd2: Possible stuck request ffff888022708400: control (read@2048,1024B). Runtime 210 seconds
[  430.596407][ T1114] block nbd2: Possible stuck request ffff888022708600: control (read@3072,1024B). Runtime 210 seconds
[  431.871070][   T61] block nbd1: Possible stuck request ffff888022680000: control (read@0,1024B). Runtime 300 seconds
[  431.875647][   T61] block nbd1: Possible stuck request ffff888022680200: control (read@1024,1024B). Runtime 300 seconds
[  431.880241][   T61] block nbd1: Possible stuck request ffff888022680400: control (read@2048,1024B). Runtime 300 seconds
[  431.884907][   T61] block nbd1: Possible stuck request ffff888022680600: control (read@3072,1024B). Runtime 300 seconds
[  439.543526][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  458.741112][   T34] INFO: task udevd:9095 blocked for more than 143 seconds.
[  458.743741][   T34]       Not tainted syzkaller #0
[  458.745553][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  458.749414][   T34] task:udevd           state:D stack:22568 pid:9095  tgid:9095  ppid:5295   task_flags:0x400140 flags:0x00004006
[  458.753439][   T34] Call Trace:
[  458.754592][   T34]  <TASK>
[  458.755601][   T34]  __schedule+0x1798/0x4cc0
[  458.757128][   T34]  ? __pfx___schedule+0x10/0x10
[  458.758753][   T34]  ? schedule+0x91/0x360
[  458.760171][   T34]  schedule+0x165/0x360
[  458.761754][   T34]  io_schedule+0x80/0xd0
[  458.763204][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  458.764981][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  458.766918][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  458.768785][   T34]  ? __filemap_get_folio+0x760/0xaf0
[  458.770548][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  458.772446][   T34]  do_read_cache_folio+0x1aa/0x590
[  458.774271][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  458.776095][   T34]  read_part_sector+0xb6/0x2b0
[  458.777700][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  458.779478][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  458.781452][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  458.783457][   T34]  bdev_disk_changed+0x75f/0x14b0
[  458.785151][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  458.786960][   T34]  ? wait_on_inode+0xc0/0x230
[  458.788523][   T34]  blkdev_get_whole+0x380/0x510
[  458.790155][   T34]  bdev_open+0x31e/0xd30
[  458.791657][   T34]  blkdev_open+0x3a8/0x510
[  458.793160][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  458.794817][   T34]  do_dentry_open+0x953/0x13f0
[  458.796421][   T34]  vfs_open+0x3b/0x340
[  458.797778][   T34]  ? path_openat+0x2ecd/0x3830
[  458.799382][   T34]  path_openat+0x2ee5/0x3830
[  458.801769][   T34]  ? arch_stack_walk+0xfc/0x150
[  458.803738][   T34]  ? stack_depot_save_flags+0x40/0x860
[  458.805742][   T34]  ? __pfx_path_openat+0x10/0x10
[  458.807588][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.809609][   T34]  do_filp_open+0x1fa/0x410
[  458.811258][   T34]  ? __lock_acquire+0xab9/0xd20
[  458.813184][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  458.815017][   T34]  ? _raw_spin_unlock+0x28/0x50
[  458.816760][   T34]  ? alloc_fd+0x64c/0x6c0
[  458.818213][   T34]  do_sys_openat2+0x121/0x1c0
[  458.819775][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  458.821835][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  458.823695][   T34]  ? rcu_is_watching+0x15/0xb0
[  458.825294][   T34]  __x64_sys_openat+0x138/0x170
[  458.826945][   T34]  do_syscall_64+0xfa/0x3b0
[  458.828466][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.830218][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.833209][   T34]  ? exc_page_fault+0x9f/0xf0
[  458.835155][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.837601][   T34] RIP: 0033:0x7f0bf73169a4
[  458.839440][   T34] RSP: 002b:00007ffd55d54180 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  458.842764][   T34] RAX: ffffffffffffffda RBX: 000055be4f388330 RCX: 00007f0bf73169a4
[  458.845690][   T34] RDX: 00000000000a0800 RSI: 000055be4f385710 RDI: 00000000ffffff9c
[  458.848323][   T34] RBP: 000055be4f385710 R08: 0000000000000001 R09: 7fffffffffffffff
[  458.851064][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  458.853700][   T34] R13: 000055be4f375aa0 R14: 0000000000000001 R15: 000055be4f364910
[  458.856371][   T34]  </TASK>
[  458.858239][   T34] 
[  458.858239][   T34] Showing all locks held in the system:
[  458.861042][   T34] 1 lock held by khungtaskd/34:
[  458.862673][   T34]  #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  458.865936][   T34] 2 locks held by getty/5674:
[  458.867491][   T34]  #0: ffff888104e010a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  458.870653][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  458.874090][   T34] 1 lock held by udevd/9095:
[  458.875573][   T34]  #0: ffff888022613358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  458.878549][   T34] 1 lock held by udevd/10737:
[  458.880067][   T34]  #0: ffff888022617358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  458.883183][   T34] 
[  458.884169][   T34] =============================================
[  458.884169][   T34] 
[  458.886983][   T34] NMI backtrace for cpu 0
[  458.886992][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  458.887000][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  458.887005][   T34] Call Trace:
[  458.887009][   T34]  <TASK>
[  458.887013][   T34]  dump_stack_lvl+0x189/0x250
[  458.887026][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  458.887035][   T34]  ? __pfx__printk+0x10/0x10
[  458.887049][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  458.887059][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  458.887068][   T34]  ? __pfx__printk+0x10/0x10
[  458.887079][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  458.887092][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  458.887101][   T34]  watchdog+0xf93/0xfe0
[  458.887114][   T34]  ? watchdog+0x1de/0xfe0
[  458.887125][   T34]  kthread+0x711/0x8a0
[  458.887135][   T34]  ? __pfx_watchdog+0x10/0x10
[  458.887144][   T34]  ? __pfx_kthread+0x10/0x10
[  458.887154][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  458.887163][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.887172][   T34]  ? __pfx_kthread+0x10/0x10
[  458.887181][   T34]  ret_from_fork+0x3fc/0x770
[  458.887190][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  458.887199][   T34]  ? __switch_to_asm+0x39/0x70
[  458.887207][   T34]  ? __switch_to_asm+0x33/0x70
[  458.887216][   T34]  ? __pfx_kthread+0x10/0x10
[  458.887224][   T34]  ret_from_fork_asm+0x1a/0x30
[  458.887239][   T34]  </TASK>
[  458.887242][   T34] Sending NMI from CPU 0 to CPUs 1:
[  458.937431][    C1] NMI backtrace for cpu 1
[  458.937445][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  458.937456][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  458.937463][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  458.937481][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 c6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  458.937490][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  458.937500][    C1] RAX: 4c2dcfddc1004b00 RBX: ffffffff819683a8 RCX: 4c2dcfddc1004b00
[  458.937508][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b6a47 RDI: ffffffff8be33300
[  458.937514][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  458.937521][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa37e30
[  458.937528][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d4000
[  458.937534][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  458.937542][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  458.937548][    C1] CR2: 0000563590bd8000 CR3: 000000010e542000 CR4: 00000000000006f0
[  458.937580][    C1] Call Trace:
[  458.937585][    C1]  <TASK>
[  458.937589][    C1]  default_idle+0x13/0x20
[  458.937598][    C1]  default_idle_call+0x74/0xb0
[  458.937608][    C1]  do_idle+0x1e8/0x510
[  458.937620][    C1]  ? __pfx_do_idle+0x10/0x10
[  458.937634][    C1]  cpu_startup_entry+0x44/0x60
[  458.937643][    C1]  start_secondary+0x101/0x110
[  458.937658][    C1]  common_startup_64+0x13e/0x147
[  458.937674][    C1]  </TASK>
[  458.938452][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  458.996996][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  458.999961][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  459.003591][   T34] Call Trace:
[  459.004720][   T34]  <TASK>
[  459.005717][   T34]  dump_stack_lvl+0x99/0x250
[  459.007237][   T34]  ? __asan_memcpy+0x40/0x70
[  459.008775][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  459.010498][   T34]  ? __pfx__printk+0x10/0x10
[  459.012051][   T34]  vpanic+0x281/0x750
[  459.013425][   T34]  ? __pfx_vpanic+0x10/0x10
[  459.014943][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  459.016750][   T34]  ? preempt_schedule+0xae/0xc0
[  459.018297][   T34]  ? preempt_schedule_common+0x83/0xd0
[  459.020044][   T34]  panic+0xb9/0xc0
[  459.021253][   T34]  ? __pfx_panic+0x10/0x10
[  459.022844][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  459.024726][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  459.026690][   T34]  watchdog+0xfd2/0xfe0
[  459.028156][   T34]  ? watchdog+0x1de/0xfe0
[  459.029755][   T34]  kthread+0x711/0x8a0
[  459.031221][   T34]  ? __pfx_watchdog+0x10/0x10
[  459.032812][   T34]  ? __pfx_kthread+0x10/0x10
[  459.034339][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  459.036063][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  459.037773][   T34]  ? __pfx_kthread+0x10/0x10
[  459.039222][   T34]  ret_from_fork+0x3fc/0x770
[  459.040913][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  459.042777][   T34]  ? __switch_to_asm+0x39/0x70
[  459.044572][   T34]  ? __switch_to_asm+0x33/0x70
[  459.046161][   T34]  ? __pfx_kthread+0x10/0x10
[  459.047845][   T34]  ret_from_fork_asm+0x1a/0x30
[  459.049816][   T34]  </TASK>
[  459.051881][   T34] Kernel Offset: disabled
[  459.053622][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:34:08  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888021390237 R9 =1ffff11004272046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af98de R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005615255e73a1 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f3c8d987d20
XMM02=ffffffffff040ea0 032008000e900300 XMM03=ffffffff040ec003 0010000eb0030fff
XMM04=ee0008000ee00300 10000ed0030fffff XMM05=010ce08082801000 020177840010000e
XMM06=8004010000040806 060168ee0008000e XMM07=e0030010000ed003 0fffffffffffff04
XMM08=0ec0030010000eb0 030fffffffffffff XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=4c2dcfddc1004b00 RBX=ffffffff819683a8 RCX=4c2dcfddc1004b00 RDX=0000000000000001
RSI=ffffffff8d9b6a47 RDI=ffffffff8be33300 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b7963f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000563590bd8000 CR3=000000002746a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
