last executing test programs:

1.341579208s ago: executing program 2 (id=816):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r3, r3, 0xc, 0x1, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x7c0, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'})
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)

1.339623638s ago: executing program 2 (id=817):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000000008000001000000000c000180060000008848020008000200"/40, @ANYRES32, @ANYBLOB], 0x2c}}, 0x40)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
socket$inet6_udplite(0xa, 0x2, 0x88)
listen(0xffffffffffffffff, 0x0)
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="120086dd0000120000000000000060ec97000f982900fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xfce)

1.230824395s ago: executing program 2 (id=818):
r0 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20050000}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) (async)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) (async)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r6, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="b2c5c79f07ab3d9614d5c058db4a274ad23734c22ae51ea860b7ba11a89526f3e0c83d84e43f97065e049df95ed807146bf75b9a01f43f46c3f9f2c9da76cbcf89ccb2ad441328f9b1fda9a445d98b4e5d74c3d3ef", 0x55}], 0x1}}], 0x2, 0x8008801)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x80000006, 0x1, 0x0, 0x80}]}, 0x10) (async)
sendmmsg$inet6(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000088000000040000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100000200000000000000df98b07ed6c1497842eeab8c9b9bf61024e617f7409f7380f03ebc2cce1ccc2ae0058b1cb678014564d2bb8b574975057cf20738bc7a40cc9f8f9ae1f1da417c85d671588688b7f7837eec565c4efeb0549dc25016b7127ea17c73d52300000000"], 0x44}, 0x5}, 0x0)

1.169197472s ago: executing program 2 (id=819):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0000000000000000ffffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) (async)
shutdown(r4, 0x1)
recvmmsg(r4, 0x0, 0x0, 0x60, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x6, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0}) (async)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c10000000008003000000", 0x58}], 0x1) (async)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, &(0x7f0000000780)) (async)
sendmsg$nl_generic(r9, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x274, 0x3b, 0x20, 0x70bd2b, 0x25dfdbfb, {0x1b}, [@nested={0x1a5, 0x51, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3c}}, @typed={0x8, 0xe1, 0x0, 0x0, @uid}, @typed={0xc, 0x38, 0x0, 0x0, @u64=0x80000}, @generic="f600c66ef305935340f0dcb491d24ff873ea4e5b030afb7d1db9dd537f0ce436bf029b2ce961a491836f37b11db29ca88393f915c2888edbd74ad980e15783220f6c8c66c9276c338c3d21c677f36aa826728d92eabe8d6df869185263c7b8d2881f48b6e4559f946a3ba46ee526fd944a8a00a94fa797970a6e2098643c36d4be822cdda1403515c870c32ed960ea35418d9ef667ca9153363be94f5c5d10cd912f8a8987f94c2fd29152937d4758ea79d2b1dd2545b8f8e2b9c1add81a07372a", @generic="ef55e143643999614e271821910d5806bccf265aa1f826a50951015be7a81343ecee58cc2204c8c45c0d36d0ac088211c26aa7f654d2bfb1d7e44556087c38789f27880a0d6c7b6ac950de038d052d7d7e628e71204fb9d16557c3a68ece709e7a3dc74f5b0cc46a6c6036ec0286c462ded9574f172455b799494605717056c01284053d0afc2c97a9864963f078e176535e79e182c8f919bdb3ed2185bdd470683b68e48da99348dd0c389b6302a25cab616133215fa43c69ff10b9640d339b", @nested={0x4, 0x1}]}, @generic, @generic="46dbdec4a03a252ec95ea8ed2bf0188e68d3911ed6a7266e11429fac07bf5ccf9337bdbaefb4433cb2027e8828a6984662aaba211a875d7beeae392691e2245137b519736fa2ae4b7eca58d8f15e0c042fbf2ea7e97dd6cba1f7b61109a4549fe272404c0c20f9aacf98fc491767b0886ebedd38c0e226d5fa9ebdcdf13c97bbcf315a36a46ddcbc337127526585c4e2232243adf6abd9f71296e1fe4489fd2ce2dfcdda0a2f7c37d64c4a4c8708ffe13fd86d1502e256fc"]}, 0x274}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa000000000000711010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000018}, 0x4000080)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50)
r11 = socket(0x21, 0x800, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r11) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x500}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x2000000000032, 0xffffffffffffffff, 0x0) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a00fffe000008000a0000"], 0x174}}, 0x0)

1.166736821s ago: executing program 2 (id=820):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = accept(r0, &(0x7f0000000080), &(0x7f0000000000)=0x80)
bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000300)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x24000000)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010829bd7000567960a42f2fef00", @ANYRES32=0x0, @ANYBLOB="0001000004200400080004"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884)
connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
shutdown(r0, 0x1)
r8 = gettid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c40)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}], 0x38, 0x40004}}], 0x1, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a80))
getgid()
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRESOCT], 0x38}}, 0x0)
accept4$llc(r3, &(0x7f0000000ac0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000b00)=0x10, 0x800)
socket$netlink(0x10, 0x3, 0x0)
gettid()

771.609246ms ago: executing program 1 (id=821):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$pppoe(0x18, 0x1, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'bridge_slave_1\x00'}}, 0x1e)
connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'bond0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x80, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x4d}}, {0x8}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x5)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x6, 0xa)
connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x0, 0x0, 0x2, 0x1}}, 0x26)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

550.910424ms ago: executing program 1 (id=825):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'ip6_vti0\x00', 0x10})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f00000000c0)={0x1, 0x3})
close(r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
accept(r5, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x4}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff5, 0x6, 0x7, 0x3}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240080c1}, 0x8000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r10 = socket(0x10, 0x803, 0x0)
r11 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r11, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4)
sendmsg$inet(r11, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x9, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0xd4)
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x2b4, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r12, {0x4, 0x2}, {0xffe0}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x284, 0x2, [@TCA_BASIC_EMATCHES={0x280, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x8, 0x2, 0x3}, {0x3, 0x8, 0x0, "c90ca952b1359a49"}}}, @TCF_EM_CONTAINER={0xec, 0x1, 0x0, 0x0, {{0x80, 0x0, 0x8}, "1a550a65d57c9c1ab00d37717b914e78d28a2d108827e4a654d485a42220ba8b4e6781439f370a57fc47aa318c1e5d690c0a156d2038c032f1435cacdf569d9a6e94ae0314de783432facf3fa4a4f840f4ab58974eeb7bbfcbc0f65d9d93b47ce85dfb10cd15a736956c549ee0640c558d82db9bdb9457db3ef0e95a250ae6804876514655b18a8b794f3eb1154c2109a6af76ed9616f9d39dfe1e10859d83fa118564f4a5ba76d0c9635368593010f1189b8c545c85d2e64b042ea91aaff87c0163ed5a80572975b587c3e3b1bbba7ee7a5422b276a483966750e3718"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xa74, 0x2, 0x4}, {0x0, 0x8, 0x0, "9d9bd806a3fe599a"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x2}, {0x7ff, 0xb8e2, 0x8, 0x0, 0x6, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x13c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x84, 0x3, 0x0, 0x0, {{0x8, 0x0, 0xfff7}, "2269b5a85fae99d71a4ab2e2dda0498391a9ae09d760674eb6a0b65da5ca9a380c48c99155c6ab663af2ffaa40039078e8a92d836f8ae65e53b191c82a2461a9d32a7e82610626eef0be4d997e80c1016a1d5326ef4fc5d87da739054ec161c9241e7f21b73345c8ad5982a8bbdfd29015c7dbd2e01361"}}, @TCF_EM_META={0x9c, 0x3fff, 0x0, 0x0, {{0x6, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x36, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="c8f0cf40b6af1b68", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="fe35b3b16e7d97fdcb", @TCF_META_TYPE_VAR="8dfd3b12d8", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0xc2, 0x2}, {0x1, 0x3, 0x1}}}, @TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_VAR="d7662e52", @TCF_META_TYPE_VAR="4238f2ff7524f62db18c", @TCF_META_TYPE_VAR="1e7323147245086ccb", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="dccefabd26", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="1b", @TCF_META_TYPE_VAR="351d845037adcf05", @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xe, 0x2, 0x9}, {0x8, 0x8, 0x0, "6709f6bc7586304a"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x2b4}}, 0x20000850)
connect$pppoe(r10, &(0x7f0000000000)={0x18, 0x0, {0x2, @random="314852d8de0c", 'ip6gretap0\x00'}}, 0x1e)
bind$netlink(r3, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe, 0x40}, 0xc)

481.723025ms ago: executing program 1 (id=826):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="980000005500000129bd7000fedbdf2507000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="010104000000000000000000000000000000000086dd000020000100", @ANYRES32=r2, @ANYBLOB="00c0480039fe80006f9f63f06e09e49055045f793c8409ab7020bfdc01000000001f5e20b80f65abed000000003e25b5811c09665356618bd31311a42b7ea715cc4f40081cec50ef037ad24708c77ce938054fc598446c155e28226e7c2b4a45dd584de26c9a3327dac59d349517cc84cc047b882572585b0e2a6e045f8e74c49c0c4f5a4258b1fbeb", @ANYRES32=r2, @ANYBLOB="00030100ffffffff0000000000000000000000000800000020000100", @ANYRES32=r2, @ANYBLOB="0102000000000000000000000000ffffffffffff08000000"], 0x98}, 0x1, 0x0, 0x0, 0x40040}, 0x20008055)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x48, 0x5, 0x73, 0xffe00003}, {0x6, 0x83, 0x6, 0x10400}]}, 0x10)
sendmsg$netlink(r7, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e003303"], 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0x60040800)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

391.508353ms ago: executing program 1 (id=827):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2100000000000000000000000080"], 0x50)
r2 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400})
ioctl$TUNSETTXFILTER(r2, 0x401054d5, &(0x7f0000000380)=ANY=[])
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYRES64=r1], 0x60}, 0x1, 0x0, 0x0, 0x20004084}, 0x20000010)

329.68521ms ago: executing program 1 (id=828):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getpid()
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xa}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x60000}, 0x0)

327.494145ms ago: executing program 1 (id=829):
r0 = socket(0x10, 0x80003, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095080000000000002f7e71b5618f1ee16af22a7508b5d9eaa029e273bfc7f2b2bab0ad8f84c88946ee24c18a521dcf22eeed227f18732444499c827bb71f9a8029951edeb471e9008e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
unshare(0x2a020400)
socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000feffffffffffffff0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={<r7=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14)
socket(0x1d, 0x2, 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x5, 0x2, {{0x6, 0x1, 0x3, 0x0, 0x8}, 0x7, 0x0, 0x5, 0xffffffff, 0x2, 0x1, 0x12, 0x19, 0xfd, 0x87, {0x7, 0x7, 0x2, 0x0, 0xe9ac, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)

317.234289ms ago: executing program 2 (id=830):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = socket$inet6(0xa, 0x5, 0x0)
listen(r0, 0x10000)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r2, &(0x7f0000000280)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
vmsplice(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="388e9c3398350e0a2bab221329a84f5bbf637c23d10915758a1e2af0a3a80c47d12723152424312f0eb591fef0e8bcc5498c7a419a09", 0x36}, {&(0x7f0000000140)="47beabb7af27171b300529f81a8d6656f48e143ad7de6236e3ddf2dc7f7b50da3cd7747c2b5b2104577743384813c941e3bb819f275d1ae34056789830572f6824cd19d2aac18dfafb08b4b388ff66dbec4b8763d6d30f162e289260f785e487caf4edfd6582bae81e8dd98c", 0x6c}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="ded63a92d19051382b371c965e3e95676c03b77b3812a0ab43d33ca5031f6962dfc886851f1f2751ede77fc059cb5c4c5e06f07d419f382695e1e91609c33d0ad156c4c316af1e5985d8b8537a6a59d4a2b3d2ca781a2dc494d5223ac5d2b56d18626af125e1ac1de973233fac23a643c5be12181181eace4bfbe07a98aa7151b2a39d52584678964f1ade5817a9dfd7f983ab6cbf09be9808ecd44bf76a70bbe4310cf002d957b9b01ed2190eec7d0cfdd295693229d0e51c3a41a16e14fd1092997e85daeab51384dde1c2e310eeee338a4ccbb2d6cd23620af7001592d2f21f80f2d4a9ea22b6c84506d962e54ed59c24f46f26ea0851b5292af6f1a725b194e60c243b430e341b480c396728ee7333d40fe77ac87fe0f2b6e0c194455f805d4adc171b97e693f7f022004f1811f7630dee34148a8069e178f3e80d765c0625ead484bfbddd1884945fb3ef34be60e1168654e3b2d8a03517ece5225bc8f5b3b6b27d781cbd7e1e53cdb3bbed85c8945cff890dfbf0cec9adbb404217e3ca9704ef8d73471ed88e3c3ada6e459174a225f2b01f246ef7017653ffe840e7882878a2b6d666d284b0a69c4af1913506d8447e8c9abfd07ab80bef7a2374e4acf38f6bdabcc34bd1cf4e5f2b861e823b480c79c8513cd81a6685ac835d0eb37163c6cf338fee589d36c3088e3d18e78e9ef4f2ec3da18a83b7dede65eec3dad77733a314613e45850a83aaf1cc54de65c50f18795bde087573638aa58b121b022cd1c0859b4653f4eff425ee0a867322e2fb93fc0fe5cd21084739dc7a429d2c47e1445bf4acb31f8dd53cd2095990301ea27ee11802c8f6dba852f779a59c9c361ba958e434eb03d751ad4a24b8c335f86b32eb9018c801525bf9d1d2255064901be21ea8344ddeb6496e140c9f6341d18781302dab6eb3b97852449dac4f62cb67e8095f3d7df4d0bacace6a42148a3bfa421ad1032b675ad2e1611ca6fe4e684235a36d46dcbaeedb4b9b9ecab8aa6a06a77d5ba79297cdafc9f7d6f87034dee55ed20fc9d2283444ddc32c3de5acf40f328f3c4d86608a0b0ffff9aed3cbc0abe4f4c6955a3aa189f8ec526bcfd7aa0d9dd53e312461c04c241905ca6470fe4394f36410f28d5355266eb579014f8c799c735b6969b6fee6f53b80dd7992a3d4d03ce6319c96670e209bc1c81839503b506b45fdfd6848b7cb2e792f0a24172ac6ba252736e43ee8e1ba206719cf70450223206314debab81342908438217fd4824d8277acc0f1745b48e9e31db4727f50f6a8289e2e56a9317b8b68a5892ca50b41ee0ac4f247192b42795b0c307951bbccbc37deb30bbc9fec2a3338c841ed77ba378f8249ba27869d4fa26f93ab67cb429e5e15a668a91c8db382954fae5a931bc57a7f21d30789373d676c1359d1957df67ec1d49e8844c60314c50d2596c608f50fd23707265601902eb4ac103e377fb3970f134690041b613718c36616e75a998903f3af1f78aa378805ac7d780be52f3d2b5813ffd8837c69ea65165bac2b61b307a07a06743353676c188795c10ede71b4547445740e5f9ba08f6df450b2a98a8207ebf3a898835795cf332fa422992d9ca947c88d6ccc3c6945a031ca9e6a745704d2e0a61ec904a71a1d12d092334f98b4072a51d58a86106495b7db45a35b472b03927c3bd41b98c42bab872443b701a09a9a11a5e815f8434c22aa9f00a83bb604b907c3a5ee68303373d808d30090d4a4b3f958c29f0700af8d867477eb3dccefd6be292d16c466d7308bc0c7332e3999264c27e48cc9377a42daf5bb7472918f6957ae09189f000867b0980c20762c0ae98772a78f7d1def45e2a5c59051fdee912ca2e619e182c90e9443012b20d0a378174ea2a8bce492db4b1baf0265609cf1c305c06216df7548ebe879e71491ac89056de127332cc36b8987a339ab56dd6c31c77a2e734b9d0ac98ee4cdec4353100cae62e7c89412c82209328bbbeffe6d3642e5ce8bf6be3da42607d42a56eac81b27fb43964aefed4fb6c3cfe5ffc328c6139ea2c060a0e5222142a0c490e3cfc1f66bde3fafeff265ac4b799b40887b54320c01e569884e46ca031586f66e18fc9747de10e705b6c15a7f7fc0824900fce23ce0537980ff842e9c151a937621514991d39ff00be27179cb8b267652c568c582f0bd4289350e972d99277e4e2e5682e242e1e0ee8022e8278e6a31549086d71517232885bb888103db36b9a70b1fdf247b6990dd5d2959bd804cf4d72cb054b50fbb16b52858429970d704e8e0b8c61a866f3b753b51e0f84c1f1bb7028a969c95d3446bfbeb3d1eb24cf2e7e28793fe92f2d96184646318e7c19c62cbbb44366894450c1eae51465ee3ceefd7f1b3abd033a1526a6905d90e75a45d5ffb6e8f685b1edfb0fb2e2778235945373625af3e322d55f098cbacc5a8b0848c67444e00ad73df9314fedae823e30915e8216e7646859a53edb13f5b1959d61536c59beff92dfad548f4aa1734c8ad9ad687694c44e8305b44278ae3411d26f25d26642a97ca9b9307b431cc2cc010636a51da7b34096533d50f3f684f2c3855f2fb704a721454c788f5e8b8630fe54de949761c17d2b60b2fff6d40a7269065344df6e8e140c0681ef08decb9e61a235494e07e473558901d14b60c01666d408fc2dfb98678a326d35e016f7929053f7532261ab3c2894da0b0cd6fb03b8413856dade015bbe8f5c8668f39b76415791a5eecf34c262157395d54acbe80bfb2dcb215c2afa8ea3d53e3eded9f212e63cddc95c3941f8969379e67d3ce01c677ffb1542289cf371f7f7c999808fcc0903aca2c1694c03b019d478a95d822513f58ceeffa6d05c33e79f48569b10421f13c32083239e81a4a8c0cc39017f7f074ae742a29ade4ce527d86c74e7424ece7e8c804a3da86bd003f532ecc0cb53c64957752bfe4bc58abfed924c65fbe4434ed3ad9803277cb15220775a93bac0fe2302629ca9598d13a39cb1487d41e48e2afc62096d9ed2332e2e97cb3620bab83e9d6859ec0d16b67274badde8b4f94c3c27104c09a75f8c50ffbec6ca0cdba8b168a4a4943387d12cea48c04295846a4f3aae91670f219124f86e6db2d8f91c5cdcf6da809014e7a99d3cd2bb1a6607779f63885fd25e43c1e4c2f0c095723b8fa6a726907ff1b74a65651b3c6b5e44d0afd4346fceb549c8297645a356bc87cd57132c05ca1dee953e3a56d63c7f942f3049e239cbf702c435303fa0e0f631d60cc9a645018981678b484e7ea5d2f27995db25c5602d4661e294c70fff8b0542c36c9b217b91ad1ff193b51af15cb248604ed99457e10455c3d343e1f35d37bfa8929d2ad2c4d1409cc1fa972e847e56999736db2c6f41661c3af56a4fa10a50813f0b86174802ae713b6a974726f15d4c352b9a72504417666b4fd0bc3a587bf33bb76d5ee3c80baf7b44f7b861ba3d48da6621bf944ac113be5342ab9be7bf1ea93cb57315b3702dd72a0c248b3e55aae4db5de61926c8e50dfcf911ee7f03958b0bffda04bb89a20bba8350e9698eb2084262b914dbb2573c501ee4ac969bbb8dd5902e4e11c0211d11bbe4ae5e2dac2647ee77ef91747a79063ed237ad6f408c64ecc87fcc30f3140a31b3c7231faf68f2f84da81d0b4df8853e9b0d42ed8ed7f3c2c8e2154e3b7c2546cc089eb1e584d5e7353bab81889af1473005523f276fe5b9e09bd8a39e2a7e642412710ae02bb62bbc877da20cd5c37a1635cf55a93c320528118719c2812237b91e2f96e0db7ca3f1e74c07d15dfc35eb1d7058d27833676ffd1031a9a2d13bb50f792c298b3edeea1045e8730a1effb8b684ccafe573cfaed337d7726c3ba52729c6d4212806cb87a633d207f91d4ac6dcc9cbcdf4c0e8649c8b9b73b2f6a1f26e2a9613e194a34f5655ab3878c5c76ef9aad223569c75ea9a31b60b278ef5a35efbd13a5ce4e4c1bf731a2e9edffab5010b3b1486a6e8035f893ea14d2410a4e9bf3cd2c8dc474b0c41b0f3f3d4afa3ff56c9b6c5f962f9f4f272605934e09cdfedf2c1c347c27802aa3eb4712f7bf343c5f5d5119aa00513c0e9cbef713db6d42482891999b1a0f3501dd3dddb5f5a65e87dc48670c7b53deef8fa5b54694d18af6530cef192327e8379ae898111c2ce60f3037c0cf845aef74dab9678fd929d65d097ac0c9b586442d404fd94c488fcbf21beb6b611a3cb50d2ba6da13d84371d1e63d6b0a02ee039441277c68b56317a48132cbe1e039a54b50d72806471b83a1600e99f4338b8a3f206b393a2ec4ada1dc1db4ef397075205267d607e391936f3ac99785c0a255b55746e6a2a918b0e1a7a6702680a752fa0e1589af475e356a61fffd49d012a286e4cae46360f13ed54c7deb8a64c0695f3bcbe7735991d7e08c20938b287c5a759bec078199d336b9970a763661099d2db5bd63d142a4171621c2d00028f96984b52c21e53655433751efe0662217d245321ee0f9f168d8597d6b78ebe7fc2493cf17f89ef6690063e4d3491ca7447bcbef5d3d05d1a61805687d9633223e1208fe89cdda8f2e4dc9d408d65fd272117e10e7351b8e6f9f79f4d74e262a9117d5db88dd7c763439cb65a95dbd8b1b5fa0bc544af8f9975c86b138fd0a0055fa2360309a87b71e2110c8e4440ff3058ea5d94d7ef48a26566f3a900ba3903dcffd51f457d2934bdd5d6d92059272f420cddb1a0039144585f3f4271229a0e4e473799fe9351d14fbf14aae0d839299cc59c113350389429aa01365c82080ca1b1de6c7285d63f33efa16f6e8f134cb98bb2713dc62b788904a5f6658c251583a4016a2bc0e215257c85e8c305136208d5498886d2c33d2491164deb35417e632e2846f68da38e6d573c6dd02a78a36244b996265026bf5482c80184f719dd2e867130154fd3a0e057556812896845f4daec6f69da948d277765a6da3f06f0873eebbed9d2bc2edf77cc25ce3c97a0881a67b90ce724d012b8cd854c280e47352fa8955656724e0a78cbe71088164f0c9d5dcc7bf73b08d7c2b8b89adfa963832cff4b29ac7835618725ba6f226e0454bfaa42b072f16041dc39ad89c0780768862f45882b59c2ce90725bf09f362462f354aa2a53051a1b55bffe3a2410e1dd8edc5fb4e63c837e477bec8540190f6eb6d85bdcf0beff76379c3ae7ba9948a80ef020eb6867a686a37f1cf8cd869a45249559f52046d56bdb9c85bd50063d9a6711e7debce1d72a7958f5069181480456eae6ce3c26b0fc7629459682a24e5abc038a0e4ffd5a2aee036f64eb07a3aff9e2476d397a2512427382782518feee302dae7dbd3ff8c0ac8653ad4c608414ea60c9ce68e949a4674e83b47cbc59f9b50bd732ec5db4e650f5f21716ac55f3f4257c65a370d3ce50f0a54a42ac076f8c85eaaa24ea2fe56503361e9806da7b743b72ace293723d00d49a9cc1cb8f71b268282a77e644fd0826cf8962822e01644b63f507c4df8b39b4023c90a485d699065e5295d4f72b17e4044f396469cc3b13b43efd9891fa71f07ca6be43f60f33c61dc906356cd54d00cc840ed9db5575c090247cbcb005b5e5f03f82dbd4e17cbe83fd5701868480768d5df68993032688553817511b813bbfa5770e9e32f9d2c36d6c946b6aa0ade587c4a9cf6bca0d3d314029c8765ec0e468fb9a009b57b1641e084f4e9f91a83b46978b9711d427c8a48140fa6499d6ea7198eebac3b24d21575761e75690e0c51eae3d201eaea34b323759aba247be527af930e3cae", 0x1000}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="4512b23c9132ea29890d25bebefc54eb211a75b1bed7525889e1967330545590172e9f92692d734724399e96b751f4f57f8fdca8d72f797b9c75dba09a1ca6755cf484710d48a52efa123245572559daeacc9d3d07ee3f8acf796bb764d60a732fa19102c5f9f14c2a8b5a9868690ba6677491efa9a9cfc16425174cb58cb8e3f8b507811d69f65b73ec84626d8e6f2611cec448", 0x94}], 0x6, 0x6)

120.979729ms ago: executing program 0 (id=835):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5e24, 0x3, @local, 0x4000101}, 0x1c)
getsockname$packet(r0, 0x0, &(0x7f0000000240))
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000006a0011092dbd7000fddbdf25020000000000000008000a00020000b3d42a1b6c", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x20000040)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001a00010028bd7000fedbdf2481808000000008000000000008000f0001800000140001"], 0x38}, 0x1, 0x0, 0x0, 0x4004880}, 0x884)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$phonet(0x23, 0x2, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xadd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001680)={0x1b, 0x0, 0x0, 0x3389673d, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001700)={<r5=>0xffffffffffffffff})
r6 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000001740))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001780)={<r7=>0x0, <r8=>0x0}, &(0x7f00000017c0)=0xc)
r9 = getuid()
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@multicast1, 0x4e22, 0x6, 0x4e23, 0x5, 0xa, 0x80, 0x100, 0x62, 0x0, r9}, {0x9, 0x7fffffffffffffff, 0x40, 0x9, 0x7f, 0xb8b, 0x8000, 0x37fc0000000000}, {0x6, 0x5, 0x8, 0xd}, 0x3, 0x6e6bb8, 0x0, 0x1, 0x6, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4d4, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x0, 0x3, 0x2, 0x5, 0x7ff, 0x3, 0xa1c2}}, 0xe8)
r10 = getgid()
sendmsg$unix(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="34fc1f3b0f8d217247f2bc0c0f898fa927bf320d04656a52b198f93d28279b61e310be73e8199b73e6303703fe4f30979c057dfb2a8507d61a220e414cfac154315e716f7c222ff9911b81b5af59ba806b8f128a69db040a046b1dac18354e89e9cb0a56df44a9a8837b447435901551fa14bfee4e0075c9cb689531710e986a19da6965c2b54078011445806feb7953aed938e2276a2b4dde35628bcda890b870b2980f9712303f0e9da500bfed4c73b257b9b92d51df8cea138ad99d6da3bdfbc740e09514ce0051d467ecabbb771b141e01587a64e4886bbc820b365d", 0xde}, {&(0x7f0000000700)="1cb67ef27de289f25e739480c18109d51cb9e2b09932caf5878d62169cca318a0049bfe2fa05a27df8edf48f4b843399fe9bd2f3a554d4028fd99a023a196c2966a2bd61027b685df3f5c5d7b3cf1da5d9485bce02fa08da60a22748b8313498a3201082df48", 0x66}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000a7932f2182a980511c0000000000000001000000250000f8fa636b0eb151d19a0054b0b31621d2198b4535a1d01b2e96879a9886c3f08821db5e428e29c0918463e8923ac7470620c19e487b3e41829c764c466aad5ecdc726b82a", @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x4000800}, 0x4)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f00000018c0)={0x1, 'veth0_to_hsr\x00', {}, 0xc46})
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r13, 0x0, 0x5}, 0x18)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x2c, r12, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0)

120.145284ms ago: executing program 0 (id=836):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b40)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4028040)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r7, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x84)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000f80)={'caif0\x00', &(0x7f0000000540)=@ethtool_ringparam={0x11, 0x1, 0x0, 0xfffffffc, 0x3, 0x7, 0xfffffffa, 0x80000000, 0x7}})
sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r7, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x1)

61.047752ms ago: executing program 0 (id=837):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000001940))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x2b, 0xb, 0x0, 0x0, {0x6}, [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@remote}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x34}}, 0xc00)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c4"], 0x2c}}, 0x40)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002cbd5400fedbdf255300000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x50)
sendmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x2, 0x0, 0x2, {0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xb}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)="8f9b4fad0d522185c37259dcd985045fcc6e817878b4699407a6ce6cf24a3a30dcc57d944888e02869126c2e6e84da986cc0bb269af0886fcda469d9fdfb9e3a7c6a4aaaa7495afbaf06e4851acce757866e", 0x52}, {&(0x7f0000000380)="14c504281698593ef60a8770974899d4b0c7f101f317cf8b5b273b8ad5cd90d969593dedf04a5b6e4772e69c285dc3aaf399e00876333720a56c98ab60dce0b5c0d493d953240141d7c74613e5256a62d883b0cfa71dd2fe2ecd5ac0b19226931d695218c2d1341c3bd847d3133a1f3a69572c66335c", 0x76}, {&(0x7f0000000400)="76db10182bf72f353d4102e06041d439fa3ac3ab0fd2aa662fc7129ff499ecdad5f26796f06ab3df93e01689a58dd5e3f0d149fa17d824a0c1b984779274d7a9ad8e646e6f30007abd755c03c9668d43de6e802f0a28933c91e79979abd7a81d10bc6de2fbdd7f2ceffaa4bf62a7477a9a4d133a93d0d22777bc40af8ef1cf2067f2888158ab8c0c714d372fc06ff3f456492b16cceb8f47aeb2e37555e3d840e0a1e86255d176d032f1cd2dffc7380771907f66f0a08e8983774f615fe853f3fb395311", 0xc4}], 0x3, &(0x7f0000000540)=[{0x78, 0x1, 0xfffffc00, "626dce051d3deb3b77763a6aa72b6811fb81802410a3a73757d518da88b650e621bd33dc4b0b3343a76aa8281a3c4d1f1718e4e787b2c1f4a38372cec6eb38d45c23500574a014637c85439837f866fa71046d3baea74965c8b2860861e207a151507620d41597"}, {0x30, 0x10b, 0x2, "d93e3397e80afd44a64eaea5d4898e8f39f20131994e978e3450cf"}], 0xa8}}], 0x1, 0x24000800)
r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x74, r2, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xef, 0x63}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x3e}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x24}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x28}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x12}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r4)

60.733425ms ago: executing program 0 (id=838):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) (async)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000480)={0x28, 0x0, 0x1ffffcb66, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x54, r3, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x8010)

961.232µs ago: executing program 0 (id=839):
r0 = socket$unix(0x1, 0x2, 0x0)
recvmmsg$unix(r0, &(0x7f0000001c40)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/173, 0xad}, {&(0x7f0000000140)=""/188, 0xbc}], 0x2, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {<r1=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000300)=""/198, 0xc6}, {&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/84, 0x54}], 0x3, &(0x7f0000000580)}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000740)=""/210, 0xd2}, {&(0x7f0000000840)=""/147, 0x93}, {&(0x7f0000000900)=""/8, 0x8}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)}, {&(0x7f0000001980)=""/162, 0xa2}, {&(0x7f0000001a40)=""/241, 0xf1}], 0x8, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {<r5=>0x0}}}, @rights={{0x30, 0x1, 0x1, [<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff]}}], 0x50}}], 0x3, 0xae0312a2a1d63e81, &(0x7f0000001d00)={0x77359400})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001d80)={'dvmrp0\x00', &(0x7f0000001d40)=@ethtool_rxfh={0x47, 0x9, 0xc, 0x7, 0x76, "3371b3", 0x9, [0x4, 0x10]}})
r12 = ioctl$NS_GET_PARENT(r11, 0xb702, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x30, 0x1407, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r12}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x30}}, 0x4000800)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x4000010, r3, 0x2edcb000)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000001ec0), &(0x7f0000001f00)=0x4)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
r14 = accept4(r8, &(0x7f0000001f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001fc0)=0x80, 0x0)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002040), r6)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002080)={'wlan0\x00', <r16=>0x0})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r14, &(0x7f0000002180)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x70, r15, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x2, 0x10}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}]}, 0x70}, 0x1, 0x0, 0x0, 0x24040010}, 0x10)
r17 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r17, &(0x7f00000021c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r13, 0x40189429, &(0x7f0000002200)={0x0, 0x6, 0x80000001})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002240)={r6, <r18=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002640)={r3, 0x20, &(0x7f0000002600)={&(0x7f0000002480)=""/144, 0x90, <r19=>0x0, &(0x7f0000002540)=""/141, 0x8d}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000026c0)={0x14, 0x1f, &(0x7f0000002280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffeff}, [@alu={0x8, 0x1, 0xa, 0x9, 0x9, 0xffffffffffffffc0, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ee}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r18}}]}, &(0x7f0000002380)='syzkaller\x00', 0x0, 0x0, &(0x7f00000023c0), 0x40f00, 0x72, '\x00', 0x0, @lirc_mode2, r4, 0x8, &(0x7f0000002400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000002440)={0x5, 0xc, 0x2, 0x9}, 0x10, r19, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000002680)=[{0x2, 0x3, 0xb, 0x8}, {0x4, 0x4, 0x9, 0xa}, {0x4, 0x1, 0x9, 0xb}], 0x10, 0x9}, 0x94)
ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000002780)={{0x6, 0x40}, 0x100, './file0\x00'})
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r14, 0x84, 0x1e, &(0x7f00000028c0)=0x8, 0x4)
getsockname$qrtr(r9, &(0x7f0000002900), &(0x7f0000002940)=0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r11, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x1508090}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x54, 0xf, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040014}, 0x10)
setsockopt$inet_mreqsrc(r8, 0x0, 0x26, &(0x7f0000002ac0)={@rand_addr=0x64010101, @multicast2, @loopback}, 0xc)
r20 = socket$nl_generic(0x10, 0x3, 0x10)
r21 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), r8)
sendmsg$DEVLINK_CMD_RELOAD(r20, &(0x7f0000002d00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x118, r21, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r22 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002d80), r2)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r20, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x24, r22, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x874a}]}, 0x24}, 0x1, 0x0, 0x0, 0xc810}, 0x2000001)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000002e80)={0x1, 0xa})
ioctl$BTRFS_IOC_SYNC(r9, 0x9408, 0x0)

0s ago: executing program 0 (id=840):
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9203803afffe8000000000000000000000000000bbfc02000000000000000000000000000086009078000000000008000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af030200010000c50df97ba82bcb6b82f80018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde2501005b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9781f1d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000000b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107b8a3e100908f61640000000200fec000000000000000000000008879e66485201a0015ca83747357a0274500040000000000000000000000145e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c0005d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x339)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(r2)
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010003000000000000000a00000008000300", @ANYRES32=0x0, @ANYBLOB="1c005080050000000100000008f0a9816689090014000200000000000f4b514079eb21e717ed90ea119d2074aa6e999ef7d8b0e864922debaa97b2db0057312b0d928cd8fbdaaa522f02a5360bbed9c06e360f69adedb4ae6d937587531e11a9a3566ed39f919f9175454e2b84166cd3bc215ebea13411a89aa029e9bf"], 0x38}, 0x1, 0x0, 0x0, 0x48881}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000a00)=@in6={0xa, 0x4e24, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c, 0x0}], 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0x7, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0x800, 0x70bd28, 0x7ffd, {0x0, 0x0, 0x0, r10, {0xa, 0x8}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x851)
sendmsg$FOU_CMD_DEL(r1, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x20, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0xc0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02})
close(r5)
socket$netlink(0x10, 0x3, 0x0)
preadv(r6, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000091405002cbd7000fbdbdf2508000100050000000800010001000000080001000100000008000100000100"], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:41949' (ED25519) to the list of known hosts.
syzkaller login: [   40.705993][ T5806] cgroup: Unknown subsys name 'net'
[   40.809782][ T5806] cgroup: Unknown subsys name 'cpuset'
[   40.813562][ T5806] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.951522][ T5806] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   44.478764][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   44.481659][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   44.484052][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   44.486745][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   44.489311][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   44.518083][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   44.520498][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   44.522876][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   44.525611][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   44.528233][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   44.549084][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   44.551479][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   44.553814][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   44.556281][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   44.558872][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   44.579859][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   44.643991][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.646295][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.648815][ T5842] bridge_slave_0: entered allmulticast mode
[   44.651107][ T5842] bridge_slave_0: entered promiscuous mode
[   44.653921][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.656221][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.658659][ T5842] bridge_slave_1: entered allmulticast mode
[   44.661142][ T5842] bridge_slave_1: entered promiscuous mode
[   44.691516][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   44.704759][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.717622][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.752042][ T5842] team0: Port device team_slave_0 added
[   44.754591][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   44.771637][ T5842] team0: Port device team_slave_1 added
[   44.829267][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.832157][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.843222][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.851702][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.854646][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.857637][ T5847] bridge_slave_0: entered allmulticast mode
[   44.860723][ T5847] bridge_slave_0: entered promiscuous mode
[   44.864125][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.866554][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.874757][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.887031][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.889977][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.892753][ T5847] bridge_slave_1: entered allmulticast mode
[   44.895194][ T5847] bridge_slave_1: entered promiscuous mode
[   44.902577][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.905243][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.907792][ T5850] bridge_slave_0: entered allmulticast mode
[   44.910645][ T5850] bridge_slave_0: entered promiscuous mode
[   44.926836][ T5842] hsr_slave_0: entered promiscuous mode
[   44.929841][ T5842] hsr_slave_1: entered promiscuous mode
[   44.932728][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.935733][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.939267][ T5850] bridge_slave_1: entered allmulticast mode
[   44.942480][ T5850] bridge_slave_1: entered promiscuous mode
[   44.960040][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.964853][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.968827][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.973362][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.000352][ T5850] team0: Port device team_slave_0 added
[   45.010178][ T5850] team0: Port device team_slave_1 added
[   45.021081][ T5847] team0: Port device team_slave_0 added
[   45.036564][ T5847] team0: Port device team_slave_1 added
[   45.039065][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.041802][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.052524][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.077406][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.080139][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.090293][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.101517][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.104039][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.113852][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.119263][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.121955][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.134114][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.155489][ T5850] hsr_slave_0: entered promiscuous mode
[   45.158995][ T5850] hsr_slave_1: entered promiscuous mode
[   45.161652][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   45.164023][ T5850] Cannot create hsr debugfs directory
[   45.181201][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.185590][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   45.192691][ T5847] hsr_slave_0: entered promiscuous mode
[   45.195433][ T5847] hsr_slave_1: entered promiscuous mode
[   45.197812][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   45.199950][ T5847] Cannot create hsr debugfs directory
[   45.210947][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   45.215314][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.292736][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.295181][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.297757][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.300755][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.327219][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   45.331514][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   45.336878][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   45.342717][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   45.366667][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.369680][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.372599][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.375121][ T5850] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.379810][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   45.392247][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.397834][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   45.409866][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   45.416461][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.420854][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.425763][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.429658][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.437231][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   45.440242][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   45.448057][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.450371][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.453097][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.455555][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.470740][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.483960][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   45.493597][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.495947][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.504591][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.506928][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.525335][ T5850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   45.530922][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   45.572084][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.581528][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   45.586684][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.589797][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.600749][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.603631][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.629188][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.674620][ T5842] veth0_vlan: entered promiscuous mode
[   45.679458][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.693224][ T5842] veth1_vlan: entered promiscuous mode
[   45.721908][ T5850] veth0_vlan: entered promiscuous mode
[   45.726474][ T5850] veth1_vlan: entered promiscuous mode
[   45.736973][ T5842] veth0_macvtap: entered promiscuous mode
[   45.742307][ T5842] veth1_macvtap: entered promiscuous mode
[   45.761114][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.767608][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.774751][ T5869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.782347][ T5850] veth0_macvtap: entered promiscuous mode
[   45.785456][ T5869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.789966][ T5869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.792900][ T5869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.797557][ T5850] veth1_macvtap: entered promiscuous mode
[   45.803401][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.815371][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.830998][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.832403][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.836958][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.852280][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.856281][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.861429][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.865133][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.869282][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.875764][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.897094][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   45.904626][ T5847] veth0_vlan: entered promiscuous mode
[   45.915509][ T5847] veth1_vlan: entered promiscuous mode
[   45.934953][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.940755][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.954415][ T5847] veth0_macvtap: entered promiscuous mode
[   45.960294][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.963990][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.967278][ T5847] veth1_macvtap: entered promiscuous mode
[   45.989237][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.999077][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.015433][ T5704] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.019220][ T5704] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.032900][ T5704] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.038012][ T5704] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.049512][ T5910] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2'.
[   46.070572][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.073653][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.091182][ T5908] tipc: Started in network mode
[   46.093092][ T5908] tipc: Node identity ac1414aa, cluster identity 4711
[   46.095922][ T5908] tipc: Enabled bearer <udp:syz2>, priority 10
[   46.104924][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.110124][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.119340][ T5914] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.6'.
[   46.132370][ T5916] netlink: del zone limit has 4 unknown bytes
[   46.153148][   T34] audit: type=1107 audit(1756680409.092:2): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   46.154331][ T5914] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   46.272223][ T5926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9'.
[   46.297199][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'.
[   46.315812][ T5936] netlink: 'syz.0.10': attribute type 10 has an invalid length.
[   46.324515][ T5936] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   46.328129][ T5938] Zero length message leads to an empty skb
[   46.369194][ T5943] netlink: 'syz.2.14': attribute type 1 has an invalid length.
[   46.395644][ T5946] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET)
[   46.438683][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17'.
[   46.443205][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17'.
[   46.453776][ T5954] netlink: zone id is out of range
[   46.456971][ T5954] netlink: zone id is out of range
[   46.460183][ T5954] netlink: zone id is out of range
[   46.463013][ T5954] netlink: zone id is out of range
[   46.467574][ T5954] netlink: zone id is out of range
[   46.470307][ T5954] netlink: zone id is out of range
[   46.472742][ T5954] netlink: zone id is out of range
[   46.475008][ T5954] netlink: zone id is out of range
[   46.477290][ T5954] netlink: zone id is out of range
[   46.568597][   T55] Bluetooth: hci1: command tx timeout
[   46.570951][   T55] Bluetooth: hci0: command tx timeout
[   46.572602][ T5845] Bluetooth: hci2: command tx timeout
[   46.668697][ T5980] netlink: 248 bytes leftover after parsing attributes in process `syz.1.23'.
[   46.761257][ T5990] netlink: 'syz.1.25': attribute type 10 has an invalid length.
[   46.823204][ T5997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27'.
[   46.826142][ T5997] netlink: 44 bytes leftover after parsing attributes in process `syz.1.27'.
[   46.936677][ T6008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.30'.
[   47.148983][ T6026] warning: `syz.0.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   47.161171][ T6026] bridge_slave_0: left allmulticast mode
[   47.163395][ T6026] bridge_slave_0: left promiscuous mode
[   47.165318][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.170330][ T6026] bridge_slave_1: left allmulticast mode
[   47.172163][ T6026] bridge_slave_1: left promiscuous mode
[   47.173933][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.181076][ T6026] bond0: (slave bond_slave_0): Releasing backup interface
[   47.185684][ T6026] bond0: (slave bond_slave_1): Releasing backup interface
[   47.192232][ T6026] team0: Port device team_slave_0 removed
[   47.196060][ T6026] team0: Port device team_slave_1 removed
[   47.200285][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.202827][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.208192][  T791] tipc: Node number set to 2886997162
[   47.213159][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.215993][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1
[   47.225255][ T6026] bond0: (slave wlan1): Releasing backup interface
[   47.278482][ T6026] netlink: 'syz.0.32': attribute type 10 has an invalid length.
[   47.285988][ T6026] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   47.331199][ T6046] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.106029][ T6083] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.191464][ T6088] veth0_to_bridge: entered promiscuous mode
[   48.203768][ T6087] veth0_to_bridge: left promiscuous mode
[   48.371611][ T6100] batadv_slave_1: entered promiscuous mode
[   48.383100][ T6100] batadv_slave_1: left promiscuous mode
[   48.499810][ T6117] IPVS: stopping master sync thread 6120 ...
[   48.500547][ T6120] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   48.512352][ T6117] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   48.534394][ T6127] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   48.588205][ T6129] netlink: 'syz.1.59': attribute type 11 has an invalid length.
[   48.620179][ T6132] netlink: 'syz.0.60': attribute type 2 has an invalid length.
[   48.659487][ T5974] Bluetooth: hci0: command tx timeout
[   48.661397][ T5974] Bluetooth: hci1: command tx timeout
[   48.663540][ T5974] Bluetooth: hci2: command tx timeout
[   48.677683][ T6136] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[   48.777542][ T6146] netlink: 'syz.1.62': attribute type 1 has an invalid length.
[   49.101056][ T6164] 8021q: adding VLAN 0 to HW filter on device bond1
[   49.112276][ T6164] bridge_slave_0: left allmulticast mode
[   49.114569][ T6164] bridge_slave_0: left promiscuous mode
[   49.116822][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.121340][ T6164] bridge_slave_1: left allmulticast mode
[   49.123633][ T6164] bridge_slave_1: left promiscuous mode
[   49.126011][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.130954][ T6164] bond0: (slave bond_slave_0): Releasing backup interface
[   49.134917][ T6164] bond0: (slave bond_slave_1): Releasing backup interface
[   49.140658][ T6164] team0: Port device team_slave_0 removed
[   49.144774][ T6164] team0: Port device team_slave_1 removed
[   49.147298][ T6164] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.150887][ T6164] batman_adv: batadv0: Removing interface: batadv_slave_0
[   49.154591][ T6164] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.157574][ T6164] batman_adv: batadv0: Removing interface: batadv_slave_1
[   49.621118][ T6151] Bluetooth: hci0: Opcode 0x080f failed: -4
[   49.648926][ T6170] Illegal XDP return value 4294967262 on prog  (id 25) dev N/A, expect packet loss!
[   50.569051][ T6173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   50.640864][ T6196] netlink: 'syz.1.73': attribute type 5 has an invalid length.
[   50.654584][ T6196] netlink: 'syz.1.73': attribute type 7 has an invalid length.
[   50.669569][ T6199] netlink: 'syz.0.72': attribute type 1 has an invalid length.
[   50.675453][ T6196] : entered promiscuous mode
[   50.728744][ T5974] Bluetooth: hci1: command tx timeout
[   50.729035][ T5845] Bluetooth: hci0: command tx timeout
[   50.731128][ T5244] Bluetooth: hci2: command tx timeout
[   50.744974][ T6202] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   50.749621][ T6202] gretap1: entered promiscuous mode
[   51.249801][ T6239] netlink: 'syz.0.83': attribute type 16 has an invalid length.
[   51.270107][ T6239] __nla_validate_parse: 7 callbacks suppressed
[   51.270119][ T6239] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.83'.
[   51.405658][ T6257] netlink: 165 bytes leftover after parsing attributes in process `syz.0.85'.
[   51.414094][ T6260] netem: change failed
[   51.858724][ T6198] net_ratelimit: 21 callbacks suppressed
[   51.858739][ T6198] Set syz1 is full, maxelem 65536 reached
[   52.076598][    T9] IPVS: starting estimator thread 0...
[   52.168030][ T6351] IPVS: using max 139 ests per chain, 333600 per kthread
[   52.303700][ T6379] validate_nla: 1 callbacks suppressed
[   52.303712][ T6379] netlink: 'syz.0.92': attribute type 6 has an invalid length.
[   52.318574][ T6379] netlink: 'syz.0.92': attribute type 12 has an invalid length.
[   52.322248][ T6379] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.92'.
[   52.349028][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'.
[   52.381019][ T6382] erspan0: entered promiscuous mode
[   52.809521][ T5845] Bluetooth: hci2: command tx timeout
[   52.810183][ T5974] Bluetooth: hci1: command tx timeout
[   52.818006][ T5974] Bluetooth: hci0: command 0x0419 tx timeout
[   52.943977][ T6401] infiniband syz1: set down
[   52.945568][ T6401] infiniband syz1: added ipvlan0
[   52.959019][ T6401] RDS/IB: syz1: added
[   52.960490][ T6401] smc: adding ib device syz1 with port count 1
[   52.962623][ T6401] smc:    ib device syz1 port 1 has pnetid 
[   52.962951][ T6403] netlink: 'syz.2.97': attribute type 1 has an invalid length.
[   53.087616][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'.
[   53.132243][ T6409] netlink: 76 bytes leftover after parsing attributes in process `syz.1.100'.
[   53.135234][ T6409] nbd: illegal input index 65508
[   53.175337][ T6418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.103'.
[   53.220366][ T6420] netlink: 'syz.0.104': attribute type 3 has an invalid length.
[   53.233938][ T6421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   53.263390][ T6427] netlink: 32 bytes leftover after parsing attributes in process `syz.2.107'.
[   53.334413][ T6441] netlink: 256 bytes leftover after parsing attributes in process `syz.0.110'.
[   53.341387][ T6442] netlink: 256 bytes leftover after parsing attributes in process `syz.0.110'.
[   53.709796][ T6478] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.763169][ T6478] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.813315][ T6478] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.904161][ T6478] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.994125][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.997662][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.002307][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.005910][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.113559][ T6494] netlink: 'syz.2.126': attribute type 7 has an invalid length.
[   54.116782][ T6494] netlink: 'syz.2.126': attribute type 8 has an invalid length.
[   54.121405][ T6494] netlink: 'syz.2.126': attribute type 15 has an invalid length.
[   54.127127][ T6494] netlink: 'syz.2.126': attribute type 1 has an invalid length.
[   54.324706][ T6518] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   54.429041][ T6472] Set syz1 is full, maxelem 65536 reached
[   54.530050][ T5876] IPVS: starting estimator thread 0...
[   54.627977][ T6537] IPVS: using max 137 ests per chain, 328800 per kthread
[   54.644732][ T6555] IPVS: persistence engine module ip_vs_pe_ not found
[   54.689895][ T6561] netlink: 'syz.2.143': attribute type 10 has an invalid length.
[   54.695905][ T6561] 8021q: adding VLAN 0 to HW filter on device team0
[   54.701131][ T6561] bond0: (slave team0): Enslaving as an active interface with an up link
[   54.888238][ T5974] Bluetooth: hci0: command 0x0419 tx timeout
[   54.898047][ T5974] Bluetooth: hci2: command 0x0405 tx timeout
[   54.910567][ T6600] bond0: (slave team0): Releasing backup interface
[   54.939560][ T6600] team0: Mode changed to "activebackup"
[   54.953441][ T6601] 8021q: adding VLAN 0 to HW filter on device bond1
[   55.015349][   T10] cfg80211: failed to load regulatory.db
[   55.116294][ T6626] netlink: 'syz.2.161': attribute type 1 has an invalid length.
[   55.164599][ T6633] tipc: Started in network mode
[   55.168679][ T6633] tipc: Node identity ac14140f, cluster identity 4711
[   55.171793][ T6633] tipc: New replicast peer: 255.255.255.255
[   55.174741][ T6633] tipc: Enabled bearer <udp:syz2>, priority 10
[   55.536126][ T6686] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   55.541749][ T6686] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   55.586573][ T6695] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   55.594981][ T6695] veth3: entered promiscuous mode
[   55.597521][ T6695] bond2: (slave veth3): Enslaving as a backup interface with a down link
[   55.603187][ T5704] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   55.603495][ T6695] 8021q: adding VLAN 0 to HW filter on device bond2
[   55.718671][ T5704] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   56.288046][   T52] tipc: Node number set to 2886997007
[   56.378596][ T6718] __nla_validate_parse: 16 callbacks suppressed
[   56.378606][ T6718] netlink: 44 bytes leftover after parsing attributes in process `syz.0.179'.
[   56.384493][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'.
[   56.384498][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'.
[   56.384773][ T6713] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.392809][ T6713] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.495834][ T6734] netlink: 108 bytes leftover after parsing attributes in process `syz.2.183'.
[   56.511212][ T6739] netlink: 44 bytes leftover after parsing attributes in process `syz.2.183'.
[   56.591804][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'.
[   56.968381][ T5244] Bluetooth: hci2: command 0x0405 tx timeout
[   56.976850][ T6772] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.023334][ T6772] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.081469][ T6772] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.125147][ T6772] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.179146][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.184790][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.191626][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.196914][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.474664][ T6775] netlink: zone id is out of range
[   57.476920][ T6775] netlink: zone id is out of range
[   57.479511][ T6775] netlink: zone id is out of range
[   57.481259][ T6775] netlink: zone id is out of range
[   57.482998][ T6775] netlink: zone id is out of range
[   57.484680][ T6775] netlink: zone id is out of range
[   57.486346][ T6775] netlink: zone id is out of range
[   57.488146][ T6775] netlink: zone id is out of range
[   57.490056][ T6775] netlink: zone id is out of range
[   57.492171][ T6775] netlink: zone id is out of range
[   57.819331][ T6787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.196'.
[   57.882479][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'.
[   57.929539][ T6801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.201'.
[   58.034759][ T6811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'.
[   58.434177][ T6837] veth1_macvtap: left promiscuous mode
[   58.441199][ T6835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.445567][ T6835] syzkaller0: entered promiscuous mode
[   58.447787][ T6835] syzkaller0: entered allmulticast mode
[   58.453235][ T6835] tipc: Resetting bearer <eth:syzkaller0>
[   58.457563][ T6834] tipc: Resetting bearer <eth:syzkaller0>
[   58.462756][ T6834] tipc: Disabling bearer <eth:syzkaller0>
[   58.548244][ T6839] validate_nla: 6 callbacks suppressed
[   58.548258][ T6839] netlink: 'syz.1.215': attribute type 23 has an invalid length.
[   59.075021][ T6852] syz_tun: entered allmulticast mode
[   59.080258][ T6852] dvmrp8: entered allmulticast mode
[   59.142249][ T6852] netlink: 'syz.2.218': attribute type 23 has an invalid length.
[   59.153071][ T6851] syz_tun: left allmulticast mode
[   59.155304][ T6851] dvmrp8: left allmulticast mode
[   59.292246][ T6857] bond0: (slave wlan1): Releasing backup interface
[   59.329944][ T6862] netlink: 'syz.0.221': attribute type 83 has an invalid length.
[   59.453083][ T6874] tipc: Failed to remove unknown binding: 66,1,1/0:2869836166/2869836168
[   59.456210][ T6875] tipc: Failed to remove unknown binding: 66,1,1/0:2869836166/2869836168
[   59.461985][  T791] IPVS: starting estimator thread 0...
[   59.485426][ T6880] IPVS: set_ctl: invalid protocol: 23 172.20.20.170:20000
[   59.545473][ T6886] netlink: 'syz.1.226': attribute type 10 has an invalid length.
[   59.560973][ T6886] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   59.588205][ T6876] IPVS: using max 139 ests per chain, 333600 per kthread
[   59.691988][ T6888] rdma_op ffff88811916f1f0 conn xmit_rdma 0000000000000000
[   59.728315][ T6892] netlink: 'syz.0.231': attribute type 9 has an invalid length.
[   59.943299][ T6908] netlink: 'syz.0.236': attribute type 21 has an invalid length.
[   59.946730][ T6908] netlink: 'syz.0.236': attribute type 22 has an invalid length.
[   59.951044][ T6908] netlink: 'syz.0.236': attribute type 23 has an invalid length.
[   59.954464][ T6908] netlink: 'syz.0.236': attribute type 25 has an invalid length.
[   60.023299][ T6913] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   60.127631][ T6932] vlan0: entered promiscuous mode
[   60.132184][ T6926] netlink: 'syz.2.242': attribute type 1 has an invalid length.
[   60.141998][ T6926] 8021q: adding VLAN 0 to HW filter on device bond3
[   60.148628][ T6926] bond3: (slave geneve2): making interface the new active one
[   60.151783][ T6926] bond3: (slave geneve2): Enslaving as an active interface with an up link
[   60.170907][ T6926] syz.2.242 (6926) used greatest stack depth: 18216 bytes left
[   60.183845][ T6939] netlink: 'syz.2.244': attribute type 11 has an invalid length.
[   60.286068][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.293915][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.373355][ T6962] tipc: Can't add remote ip to TIPC UDP multicast bearer
[   60.517494][ T6984] team0: No ports can be present during mode change
[   60.544350][ T6987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.549280][ T6987] syzkaller0: entered promiscuous mode
[   60.552168][ T6987] syzkaller0: entered allmulticast mode
[   60.559424][ T6987] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   60.570306][ T6987] tipc: Resetting bearer <eth:syzkaller0>
[   60.573379][ T6986] tipc: Resetting bearer <eth:syzkaller0>
[   60.578865][ T6986] tipc: Disabling bearer <eth:syzkaller0>
[   60.655471][ T6996] veth1_to_bond: entered allmulticast mode
[   60.664999][ T6997] bond0: (slave bond_slave_1): Releasing backup interface
[   60.670771][ T6997] veth1_to_bond (unregistering): left allmulticast mode
[   60.678349][ T6994] nbd: socks must be embedded in a SOCK_ITEM attr
[   60.680413][ T6994] block nbd0: shutting down sockets
[   60.942873][ T7027] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   61.087995][ T7031] block nbd0: server does not support multiple connections per device.
[   61.090852][ T7031] block nbd0: shutting down sockets
[   61.180733][ T7051] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.185726][ T7051] IPv6: NLM_F_CREATE should be specified when creating new route
[   61.189742][ T7051] syzkaller0: entered promiscuous mode
[   61.192175][ T7051] syzkaller0: entered allmulticast mode
[   61.202122][ T7051] tipc: Resetting bearer <eth:syzkaller0>
[   61.205714][ T7050] tipc: Resetting bearer <eth:syzkaller0>
[   61.209982][ T7050] tipc: Disabling bearer <eth:syzkaller0>
[   61.274319][ T7060] xt_socket: unknown flags 0xfc
[   61.403256][ T7077] __nla_validate_parse: 24 callbacks suppressed
[   61.403266][ T7077] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.285'.
[   61.460615][ T7082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.287'.
[   61.463609][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'.
[   61.467256][ T7082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.287'.
[   61.470257][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'.
[   61.486104][ T7086] netlink: 60 bytes leftover after parsing attributes in process `syz.1.288'.
[   61.513598][ T7088] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.289'.
[   61.832606][ T7110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.297'.
[   62.164947][ T7143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.564974][ T7146] netlink: 40 bytes leftover after parsing attributes in process `syz.2.307'.
[   62.585240][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'.
[   62.704434][ T7157] team0: Port device dummy0 added
[   62.709530][ T7157] team0: Port device dummy0 removed
[   62.717255][ T7157] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   62.775723][ T7171] net_ratelimit: 21 callbacks suppressed
[   62.775733][ T7171] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.963674][ T7188] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.000843][ T7188] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.062464][ T7188] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.101577][ T7194] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   63.111674][ T7188] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.190629][ T5869] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.224135][ T5869] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.235831][ T5869] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.247453][ T5869] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.524435][ T7210] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.534139][ T7210] bond0: (slave rose0): Enslaving as an active interface with an up link
[   63.661707][ T7218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.727637][ T7252] dvmrp8: entered allmulticast mode
[   63.738452][ T7251] dvmrp8: left allmulticast mode
[   63.857684][ T7263] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.891517][ T7263] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.942084][ T7263] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.991068][ T7263] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.045676][ T5869] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.050798][ T5869] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.056613][ T5869] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.062608][ T5869] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.173417][ T7277] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.189030][ T7279] validate_nla: 14 callbacks suppressed
[   64.189040][ T7279] netlink: 'syz.2.336': attribute type 6 has an invalid length.
[   64.201476][ T7279] netlink: 'syz.2.336': attribute type 12 has an invalid length.
[   64.252617][ T7282] openvswitch: netlink: Flow key attr not present in new flow.
[   64.299799][ T7290] netlink: 'syz.1.341': attribute type 10 has an invalid length.
[   64.323057][ T7293] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   64.343700][ T7301] netlink: 'syz.1.343': attribute type 1 has an invalid length.
[   64.460671][ T7305] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.465047][ T7305] bond1 (unregistering): Released all slaves
[   64.547519][ T7318] netlink: 'syz.1.348': attribute type 3 has an invalid length.
[   64.550985][ T7318] syz_tun: entered allmulticast mode
[   64.605793][ T7325] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   64.610847][ T7325] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   65.380083][ T7317] syz_tun: left allmulticast mode
[   65.556977][ T7353] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2903088175/2903088177
[   65.567495][ T7353] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2903088175/2903088177
[   65.574981][ T7353] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2903088175/2903088177
[   65.606238][ T7357] dvmrp8: entered allmulticast mode
[   65.694378][ T7368] netem: change failed
[   65.702233][ T7369] bridge_slave_0: left allmulticast mode
[   65.704123][ T7369] bridge_slave_0: left promiscuous mode
[   65.710464][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.717704][ T7369] bridge_slave_1: left allmulticast mode
[   65.720975][ T7369] bridge_slave_1: left promiscuous mode
[   65.722840][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.727019][ T7369] bond0: (slave bond_slave_0): Releasing backup interface
[   65.733435][ T7369] team0: Port device team_slave_0 removed
[   65.735427][ T7378] netlink: 'syz.2.362': attribute type 11 has an invalid length.
[   65.739403][ T7369] team0: Port device team_slave_1 removed
[   65.741612][ T7369] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.744404][ T7369] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.749993][ T7369] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.752312][ T7369] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.757364][ T7369] bond0: (slave wlan1): Releasing backup interface
[   65.763483][ T5734] syz0: Port: 1 Link DOWN
[   65.781892][ T7382] netlink: 'syz.2.363': attribute type 1 has an invalid length.
[   65.788855][ T7382] 8021q: adding VLAN 0 to HW filter on device bond4
[   66.889039][ T7411] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   66.996389][ T7429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.062641][ T7438] netlink: 'syz.1.378': attribute type 1 has an invalid length.
[   67.065155][ T7438] __nla_validate_parse: 15 callbacks suppressed
[   67.065161][ T7438] netlink: 224 bytes leftover after parsing attributes in process `syz.1.378'.
[   67.091004][ T7442] openvswitch: netlink: Missing valid actions attribute.
[   67.093294][ T7442] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.099980][ T7442] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.131916][ T7442] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.137065][ T7449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.141291][ T7449] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2144799839/2144799841
[   67.145424][ T7449] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2144799839/2144799841
[   67.148617][ T7449] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2144799839/2144799841
[   67.180066][ T7442] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.203694][ T7450] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   67.232018][ T7442] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.593601][ T7471] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.388'.
[   67.605194][ T7471] netlink: 'syz.0.388': attribute type 12 has an invalid length.
[   67.659939][ T7473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'.
[   67.663781][ T7473] smc: net device bond0 applied user defined pnetid SYZ
[   67.705651][ T5869] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.711399][ T5869] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.716470][ T5869] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.721689][ T7072] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.750442][ T7479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.390'.
[   67.763380][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'.
[   67.766889][ T7479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.390'.
[   67.770301][ T7479] netlink: 40 bytes leftover after parsing attributes in process `syz.1.390'.
[   67.773281][ T7479] netlink: 540 bytes leftover after parsing attributes in process `syz.1.390'.
[   67.776564][ T7479] netlink: 'syz.1.390': attribute type 10 has an invalid length.
[   67.800819][ T7481] team0: Port device dummy0 added
[   67.805195][ T7481] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   67.809345][ T7481] team0: Failed to send options change via netlink (err -105)
[   67.811899][ T7481] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   67.814963][ T7481] team0: Port device dummy0 removed
[   67.820253][ T7481] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   67.884467][ T7485] netlink: 212 bytes leftover after parsing attributes in process `syz.1.393'.
[   67.927982][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   67.956623][ T7490] openvswitch: netlink: Message has 24 unknown bytes.
[   67.959868][ T7491] openvswitch: netlink: Message has 24 unknown bytes.
[   67.962773][ T7491] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.966815][ T7490] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.020488][ T7500] syzkaller1: entered promiscuous mode
[   68.023283][ T7500] syzkaller1: entered allmulticast mode
[   68.032535][ T7500] bond0: (slave wlan1): Opening slave failed
[   68.035254][ T7501] bond0: (slave wlan1): Opening slave failed
[   68.065253][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'.
[   68.240146][ T7511] 8021q: adding VLAN 0 to HW filter on device bond6
[   68.242836][ T7511] bond5: (slave bond6): Enslaving as an active interface with an up link
[   68.250397][ T7511] bond5 (unregistering): (slave bond6): Releasing backup interface
[   68.254723][ T7511] bond5 (unregistering): Released all slaves
[   68.612643][   T13] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[   68.635094][ T7541] Bluetooth: MGMT ver 1.23
[   68.667670][ T7544] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[   68.673824][ T7544] bond5: (slave vxcan3): Error -95 calling set_mac_address
[   68.705380][ T7543] gretap1: entered promiscuous mode
[   68.712175][ T7543] bond5: (slave gretap1): making interface the new active one
[   68.715484][ T7543] bond5: (slave gretap1): Enslaving as an active interface with an up link
[   68.775064][ T7568] netlink: zone id is out of range
[   68.776838][ T7568] netlink: zone id is out of range
[   68.779194][ T7568] netlink: get zone limit has 8 unknown bytes
[   68.850014][ T7579] nbd: must specify at least one socket
[   68.859465][ T7577] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   68.936502][ T7592] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   68.945189][ T7596] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   68.978040][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   69.027051][ T7612] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[   69.100245][ T7622] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   69.103705][ T7622] team0: Device ipvlan2 is already an upper device of the team interface
[   69.205422][ T7640] IPv6: NLM_F_CREATE should be specified when creating new route
[   69.345913][ T7668] validate_nla: 12 callbacks suppressed
[   69.345921][ T7668] netlink: 'syz.2.442': attribute type 7 has an invalid length.
[   69.355152][ T7668] netlink: 'syz.2.442': attribute type 8 has an invalid length.
[   69.371539][ T7668] bridge0: entered promiscuous mode
[   69.373864][ T7668] bridge0: left promiscuous mode
[   69.627940][ T7685] block nbd0: server does not support multiple connections per device.
[   69.630685][ T7685] block nbd0: shutting down sockets
[   69.633360][ T7687] netlink: 'syz.2.446': attribute type 1 has an invalid length.
[   69.713954][ T7697] netlink: 'syz.0.449': attribute type 1 has an invalid length.
[   69.716659][ T7697] netlink: 'syz.0.449': attribute type 2 has an invalid length.
[   69.722677][ T7697] netlink: 'syz.0.449': attribute type 8 has an invalid length.
[   69.773433][ T7711] netlink: 'syz.0.452': attribute type 2 has an invalid length.
[   69.780025][ T7691] netlink: 'syz.2.448': attribute type 13 has an invalid length.
[   69.783834][ T7711] nbd: device at index 0 is going down
[   69.784677][ T7691] netlink: 'syz.2.448': attribute type 17 has an invalid length.
[   69.816333][ T7691] 8021q: adding VLAN 0 to HW filter on device team0
[   69.902082][ T7691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.957123][ T7691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.012589][ T7691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.537542][ T7720] netlink: 'syz.2.454': attribute type 5 has an invalid length.
[   70.541846][ T7720] geneve3: entered promiscuous mode
[   70.543765][ T7720] geneve3: entered allmulticast mode
[   70.546556][ T5869] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[   70.550600][ T5869] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[   70.553512][ T5869] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[   70.556801][ T5869] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[   70.898290][ T5974] Bluetooth: hci2: command 0x0405 tx timeout
[   71.201211][ T7795] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   71.207585][ T7797] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   71.350909][ T7807] sctp: [Deprecated]: syz.0.478 (pid 7807) Use of struct sctp_assoc_value in delayed_ack socket option.
[   71.350909][ T7807] Use struct sctp_sack_info instead
[   71.637813][ T7837] IPv6: sit2: Disabled Multicast RS
[   71.712612][ T7851] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   71.720219][ T7851] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   71.724362][ T7851] tipc: Enabled bearer <udp:syz0>, priority 10
[   71.734385][ T7854] tipc: Can't bind to reserved service type 2
[   71.737791][ T7854] ksmbd: Unknown IPC event: 3, ignore.
[   71.839323][ T7865] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   71.842174][ T7865] macvtap1: entered allmulticast mode
[   71.844446][ T7865] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   71.849257][ T7865] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   71.851578][ T7865] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   71.906500][ T7872] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   72.149358][ T7889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.228583][ T7881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.649362][ T7935] __nla_validate_parse: 32 callbacks suppressed
[   72.649375][ T7935] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.516'.
[   72.727419][ T7940] bond1: option mode: unable to set because the bond device is up
[   72.732791][ T7940] bond0: (slave dummy0): Releasing backup interface
[   72.840110][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'.
[   72.869169][ T7950] netlink: 48 bytes leftover after parsing attributes in process `syz.1.521'.
[   72.901588][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'.
[   72.968063][ T5974] Bluetooth: hci2: command 0x0405 tx timeout
[   72.993777][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'.
[   73.127938][    C1] net_ratelimit: 9 callbacks suppressed
[   73.127948][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   73.189613][ T7977] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.206972][ T7983] can: request_module (can-proto-0) failed.
[   73.285233][ T7990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.530'.
[   73.547484][ T7995] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode 802.3ad(4)
[   73.553400][ T7995] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   73.556813][ T7995] bond1: (slave macvlan2): Enslaving as a backup interface with a down link
[   73.635879][ T7997] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.645975][ T7997] veth3: entered promiscuous mode
[   73.648868][ T7997] bond2: (slave veth3): Enslaving as an active interface with an up link
[   74.083504][ T8022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.539'.
[   74.142494][ T8024] netlink: 236 bytes leftover after parsing attributes in process `syz.1.540'.
[   74.168007][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   74.183237][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'.
[   74.220745][    T9] syz0: Port: 1 Link ACTIVE
[   74.287629][ T8047] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   74.336177][ T8049] netlink: 40 bytes leftover after parsing attributes in process `syz.1.548'.
[   74.387180][ T8058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.399259][ T8058] veth0_to_team: entered promiscuous mode
[   74.401288][ T8058] veth0_to_team: entered allmulticast mode
[   74.406054][    T9] syz0: Port: 1 Link DOWN
[   74.562178][ T8072] validate_nla: 12 callbacks suppressed
[   74.562226][ T8072] netlink: 'syz.2.557': attribute type 10 has an invalid length.
[   74.570231][ T8072] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   74.599164][ T8076] netlink: 'syz.1.558': attribute type 13 has an invalid length.
[   74.603770][ T8076] netlink: 'syz.1.558': attribute type 17 has an invalid length.
[   74.610848][ T8076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.611769][ T8078] netlink: 'syz.2.559': attribute type 1 has an invalid length.
[   74.687837][ T8085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.693570][ T8083] openvswitch: netlink: VXLAN extension 2 out of range max 1
[   74.765456][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.804000][ T8112] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   74.833788][ T8122] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   74.860452][ T8130] team0: Port device vlan0 added
[   74.937156][ T8140] netlink: 'syz.0.572': attribute type 10 has an invalid length.
[   74.940318][ T8140] bond0: (slave wlan1): refused to change device type
[   74.999611][ T8154] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   75.000501][ T8153] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   75.035614][ T8160] netlink: 'syz.0.580': attribute type 4 has an invalid length.
[   75.208025][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   75.298787][ T8194] erspan0: entered promiscuous mode
[   75.301228][ T8194] erspan0: left promiscuous mode
[   75.355708][ T8199] netlink: 'syz.1.589': attribute type 13 has an invalid length.
[   75.358511][ T8199] netlink: 'syz.1.589': attribute type 17 has an invalid length.
[   75.363970][ T8199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.640122][ T8210] syz_tun: entered allmulticast mode
[   75.644237][ T8209] syz_tun: left allmulticast mode
[   75.988097][ T8226] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.991051][ T8226] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   75.993607][ T8226] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   75.999730][ T8226] tipc: Resetting bearer <eth:syzkaller0>
[   76.105715][ T8230] netlink: 'syz.2.598': attribute type 10 has an invalid length.
[   76.110282][ T8230] batadv0: entered promiscuous mode
[   76.112438][ T8230] batadv0: entered allmulticast mode
[   76.114473][ T8230] bridge0: port 1(batadv0) entered blocking state
[   76.117129][ T8230] bridge0: port 1(batadv0) entered disabled state
[   76.121121][ T8230] bridge0: port 1(batadv0) entered blocking state
[   76.123229][ T8230] bridge0: port 1(batadv0) entered forwarding state
[   76.181048][ T8241] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   76.251298][ T8241] batadv_slave_0: entered promiscuous mode
[   76.294506][ T8250] netlink: 'syz.0.606': attribute type 1 has an invalid length.
[   76.318750][ T5869] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   76.322279][ T5869] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   76.347283][ T8257] bridge0: entered allmulticast mode
[   76.412467][ T8269] tipc: Started in network mode
[   76.414095][ T8269] tipc: Node identity 080211, cluster identity 4711
[   76.416312][ T8269] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.420101][ T8269] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   76.422504][ T8269] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   76.426932][ T8269] tipc: Resetting bearer <eth:syzkaller0>
[   76.451320][ T8271] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.490650][ T8271] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.540701][ T8271] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.589671][ T8271] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.648986][ T8225] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.652790][ T8225] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.658791][ T8225] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.664411][ T8225] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.762649][ T8296] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.790853][ T8296] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.859939][ T8296] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.890434][ T8296] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.921735][ T8304] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20003
[   76.986560][ T7072] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.993804][ T7072] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.043488][ T7072] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.059727][ T7072] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.064976][ T8295] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.121451][ T8295] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.160029][ T8295] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.189325][ T8295] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.428058][ T7390] tipc: Node number set to 134353152
[   78.166689][ T8337] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   78.171417][ T8337] __nla_validate_parse: 22 callbacks suppressed
[   78.171428][ T8337] netlink: 14 bytes leftover after parsing attributes in process `syz.2.626'.
[   78.185626][ T8337] bond0 (unregistering): (slave dummy0): Releasing backup interface
[   78.191610][ T8337] bond0 (unregistering): Released all slaves
[   78.328138][    C1] net_ratelimit: 2 callbacks suppressed
[   78.328156][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   78.471810][ T8341] netlink: 248 bytes leftover after parsing attributes in process `syz.2.627'.
[   78.586314][ T8363] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   78.643218][ T8366] batadv_slave_0: left promiscuous mode
[   78.897399][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.634'.
[   78.902512][ T8385] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   78.920997][ T8389] tipc: New replicast peer: 255.255.255.255
[   78.923255][ T8389] tipc: Enabled bearer <udp:s>, priority 10
[   79.368094][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   80.399472][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.407289][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.410238][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   80.416947][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.424053][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.837463][ T8430] bridge0: left allmulticast mode
[   80.909888][ T8434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.644'.
[   80.943264][ T8440] validate_nla: 4 callbacks suppressed
[   80.943277][ T8440] netlink: 'syz.2.646': attribute type 1 has an invalid length.
[   80.947839][ T8440] netlink: 224 bytes leftover after parsing attributes in process `syz.2.646'.
[   80.996924][ T8447] tipc: MTU too low for tipc bearer
[   81.007247][ T8447] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.648'.
[   81.015886][ T8449] netlink: 'syz.0.649': attribute type 10 has an invalid length.
[   81.020545][ T8449] netlink: 40 bytes leftover after parsing attributes in process `syz.0.649'.
[   81.027464][ T8449] team0: Port device geneve0 added
[   81.036719][ T8452] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   81.075628][ T8461] netlink: 'syz.0.653': attribute type 10 has an invalid length.
[   81.082758][ T8461] bond0: (slave wlan1): refused to change device type
[   81.086052][ T8461] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[   81.089115][ T8461] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[   81.115400][ T8463] batadv_slave_1: entered promiscuous mode
[   81.123605][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.654'.
[   81.129086][ T8462] batadv_slave_1: left promiscuous mode
[   81.249764][ T8476] netlink: 248 bytes leftover after parsing attributes in process `syz.0.658'.
[   81.322027][ T8479] netlink: 248 bytes leftover after parsing attributes in process `syz.1.659'.
[   81.404564][ T8492] netlink: 'syz.1.662': attribute type 30 has an invalid length.
[   81.447990][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   81.459094][ T8499] netlink: 'syz.0.663': attribute type 1 has an invalid length.
[   81.580465][ T8501] veth9: entered promiscuous mode
[   81.608381][ T8501] team0: Port device vlan0 removed
[   81.615133][ T8501] team0: Port device geneve0 removed
[   81.619729][ T8501] bond1: (slave macvlan2): Releasing backup interface
[   81.624947][ T8501] bond2: (slave veth3): Releasing backup interface
[   81.666558][ T8511] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[   81.848004][ T8523] nbd1: detected capacity change from 0 to 127
[   81.852096][   T56] block nbd1: Receive control failed (result -104)
[   82.387776][ T8561] nbd: illegal input index -1
[   82.406855][ T8563] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   82.488001][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   82.543418][ T5869] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   82.650342][ T8585] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   82.801825][ T8603] netlink: zone id is out of range
[   82.959900][ T8614] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.963159][ T8614] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   83.032030][ T8614] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.036279][ T8614] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   83.050725][ T8621] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.063110][ T8614] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.066946][ T8614] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   83.112513][ T8621] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.141891][ T8614] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.145353][ T8614] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   83.180755][ T8621] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.217701][ T8225] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   83.220387][ T8225] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   83.225764][ T8225] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   83.229653][ T8225] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   83.236265][ T8225] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   83.240753][ T8225] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   83.247724][ T8225] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   83.251154][ T8225] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   83.261644][ T8621] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.331993][ T8225] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.341423][ T8225] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.352120][ T8225] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.358746][ T5869] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.436096][ T8636] __nla_validate_parse: 7 callbacks suppressed
[   83.436110][ T8636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.692'.
[   83.465011][ T8638] netlink: 'syz.0.693': attribute type 10 has an invalid length.
[   83.469321][ T8638] dummy0: entered promiscuous mode
[   83.472059][ T8638] dummy0: entered allmulticast mode
[   83.476455][ T8638] team0: Port device dummy0 added
[   83.479983][ T8638] netlink: 'syz.0.693': attribute type 10 has an invalid length.
[   83.483325][ T8638] dummy0: left promiscuous mode
[   83.485468][ T8638] dummy0: left allmulticast mode
[   83.490680][ T8638] team0: Port device dummy0 removed
[   83.494271][ T8638] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   83.528090][    C1] net_ratelimit: 5 callbacks suppressed
[   83.528105][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   83.689676][ T8649] netlink: 'syz.1.696': attribute type 13 has an invalid length.
[   83.693259][ T8649] netlink: 'syz.1.696': attribute type 17 has an invalid length.
[   83.696754][ T8649] netlink: 'syz.1.696': attribute type 27 has an invalid length.
[   83.704824][ T8649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.796947][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.125813][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'.
[   84.129421][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'.
[   84.154401][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'.
[   84.158925][ T8657] netlink: 48 bytes leftover after parsing attributes in process `syz.2.698'.
[   84.187112][ T8662] netlink: 36 bytes leftover after parsing attributes in process `syz.2.699'.
[   84.206806][ T8665] netlink: 3 bytes leftover after parsing attributes in process `syz.2.700'.
[   84.259846][ T8667] netlink: 164 bytes leftover after parsing attributes in process `syz.2.701'.
[   84.264204][ T8667] netlink: 108 bytes leftover after parsing attributes in process `syz.2.701'.
[   84.268284][ T8667] netlink: 108 bytes leftover after parsing attributes in process `syz.2.701'.
[   84.556217][ T8700] tun0: tun_chr_ioctl cmd 2147767520
[   84.568024][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   84.918053][ T8715] block nbd2: server does not support multiple connections per device.
[   84.921656][ T8715] block nbd2: shutting down sockets
[   85.129673][ T8736] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   85.132693][ T8736] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   85.135185][ T8736] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   85.218655][   T61] block nbd1: Connection timed out, retrying (0/1 alive)
[   85.226637][   T61] block nbd1: Connection timed out, retrying (0/1 alive)
[   85.229398][   T61] block nbd1: Connection timed out, retrying (0/1 alive)
[   85.231605][   T61] block nbd1: Connection timed out, retrying (0/1 alive)
[   85.234093][   T61] block nbd1: Dead connection, failed to find a fallback
[   85.236541][   T61] block nbd1: shutting down sockets
[   85.238336][   T61] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.241919][   T61] Buffer I/O error on dev nbd1, logical block 3, async page read
[   85.244985][   T61] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.248370][   T61] Buffer I/O error on dev nbd1, logical block 2, async page read
[   85.250835][   T61] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.253982][   T61] Buffer I/O error on dev nbd1, logical block 1, async page read
[   85.256486][   T61] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.259990][   T61] Buffer I/O error on dev nbd1, logical block 0, async page read
[   85.263304][ T5844] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.267012][ T5844] Buffer I/O error on dev nbd1, logical block 0, async page read
[   85.271362][ T5844] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.274444][ T5844] Buffer I/O error on dev nbd1, logical block 1, async page read
[   85.277536][ T5844] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.281351][ T5844] Buffer I/O error on dev nbd1, logical block 2, async page read
[   85.284524][ T5844] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.288312][ T5844] Buffer I/O error on dev nbd1, logical block 3, async page read
[   85.291204][ T5844] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.294387][ T5844] Buffer I/O error on dev nbd1, logical block 0, async page read
[   85.297263][ T5844] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.300363][ T5844] Buffer I/O error on dev nbd1, logical block 1, async page read
[   85.303668][ T5844] ldm_validate_partition_table(): Disk read failed.
[   85.307129][ T5844] Dev nbd1: unable to read RDB block 0
[   85.310407][ T5844]  nbd1: unable to read partition table
[   85.314745][ T5844] ldm_validate_partition_table(): Disk read failed.
[   85.318397][ T5844] Dev nbd1: unable to read RDB block 0
[   85.321090][ T5844]  nbd1: unable to read partition table
[   85.590688][ T8764] nbd: must specify at least one socket
[   85.608063][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   85.664118][ T8779] k*]: entered promiscuous mode
[   85.706413][ T8786] bond0: (slave wlan1): Opening slave failed
[   85.748597][ T8794] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   85.881933][ T8811] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   85.885095][ T8811] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   86.657995][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   86.789652][ T8813] infiniband syz2: set down
[   86.791676][ T8813] infiniband syz2: added bond_slave_0
[   86.807503][ T8813] RDS/IB: syz2: added
[   86.811675][ T8813] smc: adding ib device syz2 with port count 1
[   86.813807][ T8813] smc:    ib device syz2 port 1 has pnetid 
[   87.035018][ T8844] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.144427][ T8855] !: renamed from dummy0 (while UP)
[   87.154275][ T8855] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   87.177560][ T8853] validate_nla: 9 callbacks suppressed
[   87.177573][ T8853] netlink: 'syz.2.756': attribute type 32 has an invalid length.
[   87.367307][ T8870] tipc: Resetting bearer <eth:syzkaller0>
[   87.687992][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   87.715757][ T8910] netlink: 'syz.0.764': attribute type 6 has an invalid length.
[   87.799024][ T8938] netlink: 'syz.0.770': attribute type 1 has an invalid length.
[   87.806559][ T8940] netlink: 'syz.2.771': attribute type 101 has an invalid length.
[   87.811253][ T8940] netlink: 'syz.2.771': attribute type 7 has an invalid length.
[   87.866727][ T8953] netlink: 'syz.2.774': attribute type 1 has an invalid length.
[   87.936757][ T8964] netlink: 'syz.0.777': attribute type 13 has an invalid length.
[   87.946364][ T8964] netlink: 'syz.0.777': attribute type 17 has an invalid length.
[   87.990495][ T8964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.064087][ T8982] netlink: 'syz.2.779': attribute type 10 has an invalid length.
[   88.292637][ T9003] netlink: 'syz.0.783': attribute type 1 has an invalid length.
[   88.316883][ T9003] 8021q: adding VLAN 0 to HW filter on device bond4
[   88.327556][ T9003] 8021q: adding VLAN 0 to HW filter on device bond4
[   88.331570][ T9003] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address
[   88.335833][ T9003] bond4: (slave vxcan5): Error -95 calling set_mac_address
[   88.340159][   T34] audit: type=1800 audit(1756680451.282:3): pid=9010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.784" name=CB dev="tmpfs" ino=1119 res=0 errno=0
[   88.402089][ T9003] veth11: entered promiscuous mode
[   88.437420][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.440374][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.490999][ T9022] __nla_validate_parse: 32 callbacks suppressed
[   88.491009][ T9022] netlink: 32 bytes leftover after parsing attributes in process `syz.0.786'.
[   88.543826][ T9026] 8021q: adding VLAN 0 to HW filter on device bond5
[   88.557452][ T9026] veth13: entered promiscuous mode
[   88.563919][ T9026] bond5: (slave veth13): Enslaving as an active interface with an up link
[   88.728080][    C1] net_ratelimit: 8 callbacks suppressed
[   88.728094][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   89.456997][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'.
[   89.460213][ T9098] _Z`Ԁ@S: entered promiscuous mode
[   89.502467][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'.
[   89.516348][ T9115] trusted_key: syz.1.795 sent an empty control message without MSG_MORE.
[   89.524015][ T9113] netlink: 32 bytes leftover after parsing attributes in process `syz.0.796'.
[   89.564648][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'.
[   89.589586][ T5293] udevd[5293]: worker [6521] terminated by signal 33 (Unknown signal 33)
[   89.657783][ T9123] : entered promiscuous mode
[   89.778045][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   89.829909][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.805'.
[   89.838543][ T9141] netlink: 60 bytes leftover after parsing attributes in process `syz.0.801'.
[   89.848865][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.806'.
[   89.935018][ T9156] netlink: 224 bytes leftover after parsing attributes in process `syz.0.807'.
[   89.939393][ T9151] netlink: 256 bytes leftover after parsing attributes in process `syz.2.809'.
[   90.025824][ T9163] bridge0: port 2(erspan0) entered blocking state
[   90.028692][ T9163] bridge0: port 2(erspan0) entered disabled state
[   90.031490][ T9163] erspan0: entered allmulticast mode
[   90.034247][ T9163] erspan0: entered promiscuous mode
[   90.036477][ T9163] bridge0: port 2(erspan0) entered blocking state
[   90.038962][ T9163] bridge0: port 2(erspan0) entered forwarding state
[   90.042739][ T9163] erspan0: left allmulticast mode
[   90.044352][ T9163] erspan0: left promiscuous mode
[   90.045945][ T9163] bridge0: port 2(erspan0) entered disabled state
[   90.283365][   T10] hid-generic 0005:07C0:0009.0001: unknown main item tag 0x0
[   90.287079][   T10] hid-generic 0005:07C0:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[   90.808015][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   90.831066][ T9196] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.872660][ T9196] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.885955][ T9201] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   90.913871][ T9204] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[   90.916834][ T9204] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[   90.923381][ T9196] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.938381][ T9204] bond0 (unregistering): (slave dummy0): Releasing backup interface
[   90.942787][ T9204] bond0 (unregistering): Released all slaves
[   90.972649][ T9196] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.040446][ T5869] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.043995][ T5869] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.051663][ T7072] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.063162][ T9206] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.068575][ T7072] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.094771][ T9208] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   91.103011][ T9206] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.109622][ T9209] openvswitch: netlink: Missing valid actions attribute.
[   91.112057][ T9209] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.144628][ T9206] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.200784][ T9211] bond0: (slave wlan1): Releasing backup interface
[   91.252449][ T9206] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.312103][ T5869] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.325617][ T5869] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.328907][ T5869] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.336873][ T5869] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.384716][ T9226] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.528201][ T9241] nbd: device at index 0 is going down
[   91.632284][ T9251] pim6reg1: entered promiscuous mode
[   91.634428][ T9251] pim6reg1: entered allmulticast mode
[   91.858059][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   92.150653][ T9220] ==================================================================
[   92.153656][ T9220] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[   92.156626][ T9220] Read of size 1 at addr ffff88810e0c9c32 by task syz.2.830/9220
[   92.160408][ T9220] 
[   92.161340][ T9220] CPU: 0 UID: 0 PID: 9220 Comm: syz.2.830 Not tainted syzkaller #0 PREEMPT(full) 
[   92.161354][ T9220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.161361][ T9220] Call Trace:
[   92.161365][ T9220]  <TASK>
[   92.161370][ T9220]  dump_stack_lvl+0x189/0x250
[   92.161385][ T9220]  ? __virt_addr_valid+0x1c8/0x5c0
[   92.161399][ T9220]  ? rcu_is_watching+0x15/0xb0
[   92.161411][ T9220]  ? __pfx_dump_stack_lvl+0x10/0x10
[   92.161423][ T9220]  ? rcu_is_watching+0x15/0xb0
[   92.161433][ T9220]  ? lock_release+0x4b/0x3e0
[   92.161449][ T9220]  ? __virt_addr_valid+0x1c8/0x5c0
[   92.161461][ T9220]  ? __virt_addr_valid+0x4a5/0x5c0
[   92.161475][ T9220]  print_report+0xca/0x240
[   92.161485][ T9220]  ? rose_transmit_link+0x5c3/0x740
[   92.161496][ T9220]  kasan_report+0x118/0x150
[   92.161510][ T9220]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   92.161524][ T9220]  ? rose_transmit_link+0x5c3/0x740
[   92.161537][ T9220]  rose_transmit_link+0x5c3/0x740
[   92.161547][ T9220]  ? skb_put+0x11b/0x210
[   92.161558][ T9220]  rose_write_internal+0x11dc/0x1ac0
[   92.161575][ T9220]  ? __pfx_rose_write_internal+0x10/0x10
[   92.161588][ T9220]  ? __timer_delete+0x5d/0x390
[   92.161601][ T9220]  rose_release+0x24e/0x520
[   92.161617][ T9220]  sock_close+0xc3/0x240
[   92.161629][ T9220]  ? __pfx_sock_close+0x10/0x10
[   92.161641][ T9220]  __fput+0x44c/0xa70
[   92.161654][ T9220]  task_work_run+0x1d4/0x260
[   92.161670][ T9220]  ? __pfx_task_work_run+0x10/0x10
[   92.161683][ T9220]  ? task_work_add+0x377/0x420
[   92.161696][ T9220]  ? __pfx_task_work_add+0x10/0x10
[   92.161709][ T9220]  get_signal+0x11ed/0x1340
[   92.161721][ T9220]  ? __might_fault+0xb0/0x130
[   92.161735][ T9220]  arch_do_signal_or_restart+0x9a/0x750
[   92.161752][ T9220]  ? __pfx___sys_connect+0x10/0x10
[   92.161766][ T9220]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   92.161783][ T9220]  ? rcu_is_watching+0x15/0xb0
[   92.161792][ T9220]  ? rcu_is_watching+0x15/0xb0
[   92.161802][ T9220]  exit_to_user_mode_loop+0x75/0x110
[   92.161816][ T9220]  do_syscall_64+0x2bd/0x3b0
[   92.161831][ T9220]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.161842][ T9220]  ? exc_page_fault+0x9f/0xf0
[   92.161855][ T9220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.161865][ T9220] RIP: 0033:0x7fd0b598ebe9
[   92.161875][ T9220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.161884][ T9220] RSP: 002b:00007fd0b6722038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   92.161898][ T9220] RAX: fffffffffffffe00 RBX: 00007fd0b5bc5fa0 RCX: 00007fd0b598ebe9
[   92.161906][ T9220] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000009
[   92.161913][ T9220] RBP: 00007fd0b5a11e19 R08: 0000000000000000 R09: 0000000000000000
[   92.161920][ T9220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.161926][ T9220] R13: 00007fd0b5bc6038 R14: 00007fd0b5bc5fa0 R15: 00007ffe4c939298
[   92.161938][ T9220]  </TASK>
[   92.161943][ T9220] 
[   92.167210][ T9254] bond0: (slave 0!): Enslaving as an active interface with an up link
[   92.169052][ T9220] Allocated by task 7989:
[   92.169061][ T9220]  kasan_save_track+0x3e/0x80
[   92.169074][ T9220]  __kasan_kmalloc+0x93/0xb0
[   92.169086][ T9220]  __kmalloc_cache_noprof+0x230/0x3d0
[   92.280737][ T9220]  rose_add_node+0x23a/0xde0
[   92.282498][ T9220]  rose_rt_ioctl+0xa48/0xfb0
[   92.284229][ T9220]  rose_ioctl+0x3ce/0x8b0
[   92.285842][ T9220]  sock_do_ioctl+0xdc/0x300
[   92.287532][ T9220]  sock_ioctl+0x576/0x790
[   92.289148][ T9220]  __se_sys_ioctl+0xfc/0x170
[   92.290858][ T9220]  do_syscall_64+0xfa/0x3b0
[   92.292555][ T9220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.294766][ T9220] 
[   92.295691][ T9220] Freed by task 9228:
[   92.297206][ T9220]  kasan_save_track+0x3e/0x80
[   92.298962][ T9220]  kasan_save_free_info+0x46/0x50
[   92.300849][ T9220]  __kasan_slab_free+0x5b/0x80
[   92.302639][ T9220]  kfree+0x18e/0x440
[   92.304144][ T9220]  rose_rt_device_down+0x473/0x4c0
[   92.306017][ T9220]  rose_device_event+0x603/0x6a0
[   92.307903][ T9220]  notifier_call_chain+0x1b6/0x3e0
[   92.309786][ T9220]  __dev_notify_flags+0x18d/0x2e0
[   92.311670][ T9220]  netif_change_flags+0xe8/0x1a0
[   92.313561][ T9220]  dev_change_flags+0x130/0x260
[   92.315430][ T9220]  dev_ioctl+0x7b4/0x1150
[   92.317057][ T9220]  sock_do_ioctl+0x22c/0x300
[   92.318815][ T9220]  sock_ioctl+0x576/0x790
[   92.320441][ T9220]  __se_sys_ioctl+0xfc/0x170
[   92.322202][ T9220]  do_syscall_64+0xfa/0x3b0
[   92.323911][ T9220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.326125][ T9220] 
[   92.327036][ T9220] The buggy address belongs to the object at ffff88810e0c9c00
[   92.327036][ T9220]  which belongs to the cache kmalloc-512 of size 512
[   92.332115][ T9220] The buggy address is located 50 bytes inside of
[   92.332115][ T9220]  freed 512-byte region [ffff88810e0c9c00, ffff88810e0c9e00)
[   92.337044][ T9220] 
[   92.337971][ T9220] The buggy address belongs to the physical page:
[   92.340370][ T9220] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10e0c8
[   92.343590][ T9220] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   92.346669][ T9220] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[   92.349488][ T9220] page_type: f5(slab)
[   92.351026][ T9220] raw: 057ff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[   92.354251][ T9220] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   92.357540][ T9220] head: 057ff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[   92.360832][ T9220] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   92.363995][ T9220] head: 057ff00000000002 ffffea0004383201 00000000ffffffff 00000000ffffffff
[   92.367226][ T9220] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   92.370463][ T9220] page dumped because: kasan: bad access detected
[   92.372816][ T9220] page_owner tracks the page as allocated
[   92.374899][ T9220] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6472, tgid 6469 (syz.0.119), ts 54292846880, free_ts 45860834010
[   92.381794][ T9220]  post_alloc_hook+0x240/0x2a0
[   92.383579][ T9220]  get_page_from_freelist+0x21e4/0x22c0
[   92.385614][ T9220]  __alloc_frozen_pages_noprof+0x181/0x370
[   92.387734][ T9220]  alloc_pages_mpol+0x232/0x4a0
[   92.389554][ T9220]  allocate_slab+0x8a/0x370
[   92.391226][ T9220]  ___slab_alloc+0xbeb/0x1410
[   92.392980][ T9220]  __kmalloc_noprof+0x305/0x4f0
[   92.394788][ T9220]  hash_ip4_add+0x18ba/0x1ec0
[   92.396591][ T9220]  hash_ip4_uadt+0x640/0x850
[   92.398356][ T9220]  call_ad+0x383/0xb00
[   92.399874][ T9220]  ip_set_ad+0x791/0x930
[   92.401497][ T9220]  nfnetlink_rcv_msg+0xb4d/0x1130
[   92.403389][ T9220]  netlink_rcv_skb+0x208/0x470
[   92.405225][ T9220]  nfnetlink_rcv+0x26a/0x2520
[   92.407040][ T9220]  netlink_unicast+0x82f/0x9e0
[   92.408835][ T9220]  netlink_sendmsg+0x805/0xb30
[   92.410625][ T9220] page last free pid 5847 tgid 5847 stack trace:
[   92.412958][ T9220]  __free_frozen_pages+0xbc4/0xd30
[   92.414881][ T9220]  __slab_free+0x303/0x3c0
[   92.416596][ T9220]  qlist_free_all+0x97/0x140
[   92.418400][ T9220]  kasan_quarantine_reduce+0x148/0x160
[   92.420467][ T9220]  __kasan_slab_alloc+0x22/0x80
[   92.422310][ T9220]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[   92.424498][ T9220]  __alloc_skb+0x112/0x2d0
[   92.426221][ T9220]  netlink_sendmsg+0x5c6/0xb30
[   92.428000][ T9220]  __sock_sendmsg+0x21c/0x270
[   92.429773][ T9220]  __sys_sendto+0x3bd/0x520
[   92.431472][ T9220]  __x64_sys_sendto+0xde/0x100
[   92.433307][ T9220]  do_syscall_64+0xfa/0x3b0
[   92.434998][ T9220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.437202][ T9220] 
[   92.438118][ T9220] Memory state around the buggy address:
[   92.440234][ T9220]  ffff88810e0c9b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   92.443150][ T9220]  ffff88810e0c9b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   92.446048][ T9220] >ffff88810e0c9c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   92.448947][ T9220]                                      ^
[   92.450740][ T9220]  ffff88810e0c9c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   92.453243][ T9220]  ffff88810e0c9d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   92.455700][ T9220] ==================================================================
[   92.460574][ T9220] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   92.463399][ T9220] CPU: 0 UID: 0 PID: 9220 Comm: syz.2.830 Not tainted syzkaller #0 PREEMPT(full) 
[   92.466888][ T9220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.470788][ T9220] Call Trace:
[   92.472128][ T9220]  <TASK>
[   92.473325][ T9220]  dump_stack_lvl+0x99/0x250
[   92.475240][ T9220]  ? __asan_memcpy+0x40/0x70
[   92.477179][ T9220]  ? __pfx_dump_stack_lvl+0x10/0x10
[   92.479264][ T9220]  ? __pfx__printk+0x10/0x10
[   92.481120][ T9220]  vpanic+0x281/0x750
[   92.482749][ T9220]  ? __pfx_print_hex_dump+0x10/0x10
[   92.484828][ T9220]  ? __pfx_vpanic+0x10/0x10
[   92.486667][ T9220]  ? preempt_schedule_common+0x83/0xd0
[   92.488843][ T9220]  ? preempt_schedule+0xae/0xc0
[   92.490792][ T9220]  panic+0xb9/0xc0
[   92.492293][ T9220]  ? __pfx_panic+0x10/0x10
[   92.494079][ T9220]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   92.496625][ T9220]  ? rose_transmit_link+0x5c3/0x740
[   92.498721][ T9220]  check_panic_on_warn+0x89/0xb0
[   92.500493][ T9220]  ? rose_transmit_link+0x5c3/0x740
[   92.502486][ T9220]  end_report+0x78/0x160
[   92.504167][ T9220]  kasan_report+0x129/0x150
[   92.505871][ T9220]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   92.507985][ T9220]  ? rose_transmit_link+0x5c3/0x740
[   92.510067][ T9220]  rose_transmit_link+0x5c3/0x740
[   92.511963][ T9220]  ? skb_put+0x11b/0x210
[   92.513549][ T9220]  rose_write_internal+0x11dc/0x1ac0
[   92.515469][ T9220]  ? __pfx_rose_write_internal+0x10/0x10
[   92.517399][ T9220]  ? __timer_delete+0x5d/0x390
[   92.519333][ T9220]  rose_release+0x24e/0x520
[   92.521115][ T9220]  sock_close+0xc3/0x240
[   92.522771][ T9220]  ? __pfx_sock_close+0x10/0x10
[   92.524634][ T9220]  __fput+0x44c/0xa70
[   92.526055][ T9220]  task_work_run+0x1d4/0x260
[   92.527629][ T9220]  ? __pfx_task_work_run+0x10/0x10
[   92.529637][ T9220]  ? task_work_add+0x377/0x420
[   92.531263][ T9220]  ? __pfx_task_work_add+0x10/0x10
[   92.532983][ T9220]  get_signal+0x11ed/0x1340
[   92.534577][ T9220]  ? __might_fault+0xb0/0x130
[   92.536288][ T9220]  arch_do_signal_or_restart+0x9a/0x750
[   92.538464][ T9220]  ? __pfx___sys_connect+0x10/0x10
[   92.540325][ T9220]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   92.542686][ T9220]  ? rcu_is_watching+0x15/0xb0
[   92.544488][ T9220]  ? rcu_is_watching+0x15/0xb0
[   92.546202][ T9220]  exit_to_user_mode_loop+0x75/0x110
[   92.548145][ T9220]  do_syscall_64+0x2bd/0x3b0
[   92.549909][ T9220]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.552288][ T9220]  ? exc_page_fault+0x9f/0xf0
[   92.554018][ T9220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.556281][ T9220] RIP: 0033:0x7fd0b598ebe9
[   92.558012][ T9220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.564951][ T9220] RSP: 002b:00007fd0b6722038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   92.567966][ T9220] RAX: fffffffffffffe00 RBX: 00007fd0b5bc5fa0 RCX: 00007fd0b598ebe9
[   92.570740][ T9220] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000009
[   92.573744][ T9220] RBP: 00007fd0b5a11e19 R08: 0000000000000000 R09: 0000000000000000
[   92.576836][ T9220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.579599][ T9220] R13: 00007fd0b5bc6038 R14: 00007fd0b5bc5fa0 R15: 00007ffe4c939298
[   92.582410][ T9220]  </TASK>
[   92.584420][ T9220] Kernel Offset: disabled
[   92.586150][ T9220] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:47:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001012 RDI=0000000000001013 RBP=00000000000003f8 RSP=ffffc900091d7210
R8 =ffff888108bb0237 R9 =1ffff11021176046 R10=dffffc0000000000 R11=ffffffff854f1e80
R12=dffffc0000000000 R13=ffffffff99afa8f1 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1efc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd0b67226c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f54f632dfc8 CR3=0000000033d0e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd0b5b97498 00007fd0b5b97470 XMM03=00007fd0b5b974a8 00007fd0b5b974a0
XMM04=00007fd0b66fd100 00007fd0b5b97460 XMM05=00007fd0b5b97478 00007fd0b5b974c0
XMM06=00007fd0b5b974b8 00007fd0b5b974b0 XMM07=00007fd0b5b974a8 00007fd0b5b974a0
XMM08=0291a12f730ad664 b76b79cf8a3fee07 XMM09=0000000000000000 00007fd0b5a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90007540000 RBX=1ffff110042e025a RCX=ffff888037f35640 RDX=0000000000010000
RSI=ffff888021700000 RDI=0000000000000017 RBP=0000000000000080 RSP=ffffc90009547d00
R8 =ffffffff8fa38437 R9 =1ffffffff1f47086 R10=dffffc0000000000 R11=ffffffff8699c190
R12=dffffc0000000000 R13=ffff8880217012d0 R14=ffff888021700000 R15=dffffc0000000000
RIP=ffffffff8699c1d8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555618b2500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055eedeb457e8 CR3=0000000028908000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=10000400001a0425 dfdbfc00f0bd2600
XMM02=00007f54f5797498 00007f54f5797470 XMM03=00007f54f57974a8 00007f54f57974a0
XMM04=00007f54f62fd100 00007f54f5797460 XMM05=00007f54f5797478 00007f54f57974c0
XMM06=00007f54f57974b8 00007f54f57974b0 XMM07=00007f54f57974a8 00007f54f57974a0
XMM08=0000000000000000 00007f54f5612ee7 XMM09=0000000000000000 00007f54f5612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
