last executing test programs:

1.589525868s ago: executing program 2 (id=948):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r2=>0x0})
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r4)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000640)=0xe, 0x1000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf25410000000e0001006e1d368fc50525181f0000000f0002006e657464657673696d3000001200870001000000726f7073000000005ebe74a1cc97275bafc96d0a0740f31312c58eea824c7142f0e3ec7ccaaa74fef8ae1f02000000000000005a0cf2aa913e2f07cb11"], 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40)
recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000740)=""/73, 0x49}, {0x0}, {0x0}], 0x4}, 0x6}], 0x1, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x79bfed0c99e70e0d, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x11508}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32=r2, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f8090000403a00fc000000000000000000000000000001ff0200012b029078de06a1e825ca06abea70b9f100000000604aa1d300000000fc01000000000000000000000000000000000000000000000000ffff7f0000012f0004000c28fe008700000000000000000000000000000000000000a26c51db40aac61fdf267bdd8d2b32fec1eba5bc4a847a836741763ab916ce545cf10398b843497ffe1a2f3bf140cf8132c590daf4c6fd90a1cc3a6b3f0b774c214cc36ff80fae115065c59c6dc225ea74e802df98a23bb9b976b55ab0"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r11}, 0x18)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50)
listen(r0, 0x9)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r12}, 0x38)
socket(0x25, 0x4, 0x6)

1.361178232s ago: executing program 2 (id=951):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x5)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000180)=[{0x6, 0xf}]}, 0x10)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x400)
unshare(0x6a040000)
socket(0x2, 0x3, 0xff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff})
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
unshare(0x14028080)
sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, 0x0}}], 0x1, 0x0)
setsockopt(r1, 0x1, 0x19, &(0x7f00000000c0)="5fa400aa9a9ffb69aca0d542c5f3e3a420bae703ccef68896a4b665883a711a8da371067f41e15d64e", 0x29)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18)
connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8}, 0x18)
sendmmsg$inet(r7, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010)

959.78774ms ago: executing program 0 (id=955):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e}, 0x10) (async)
r7 = socket$unix(0x1, 0x1, 0x0) (async)
socket$netlink(0x10, 0x3, 0xc) (async)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x400}) (async)
socket$unix(0x1, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) (rerun: 32)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

820.44474ms ago: executing program 0 (id=956):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x8000, 0x0, {{}, {}, {0x14, 0x18, {0x732, @bearer=@l2={'eth', 0x3a, 'syz_tun\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0)

739.609596ms ago: executing program 0 (id=958):
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x2b, 0xb, 0x0, 0x0, {0x6}}, 0x14}}, 0xc00)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000006c0)=<r5=>0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x33}, 0x4e20, 0x0, 0x4e20, 0x5, 0xa, 0x120, 0xa0, 0x3b, r3, r5}, {0x4498a237, 0x7, 0x1, 0x29085b9a, 0x3, 0x6, 0xe5, 0x6}, {0x7f, 0x8, 0xa3da, 0x6}, 0x2, 0x6e6bb1, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4d3, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3507, 0x0, 0x0, 0xb2, 0x9ac, 0x80000001, 0x854}}, 0xe8)
bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe)
connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route(r6, 0x0, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000180)={0x2, 0x5, 0xd, 0x9}, 0x8)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000300)=0x4)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
close(0x3)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r9, &(0x7f0000000580)={&(0x7f0000000340), 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x3f5, 0x2, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x881}, 0x40004)

471.167561ms ago: executing program 0 (id=959):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x4, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x70, 0x87, 0x0, 0xee01}, {}, {0x0, 0x3, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}}, 0x8004)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f00000000c0)="94afc869bbf008d16b9e67da2423180399ca4b2a9592dbb20f6f8ce7662a92a3af42ed5ae504e29c2a723fbbe86274ec890326afd1ce2f545c7f9131c28275e882ebbd3aa70c10742e7e902a3d31ecf6497088437baa148630790896a757d4004cebbe0d9959791f54a74b86dc6fdd594d89a3cedf4941260312602624f87c72a7a9e661d1053ea7bd78", &(0x7f0000000d80)=""/4096}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r3}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)

469.276866ms ago: executing program 2 (id=961):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x0, 0x3000000, {{}, {}, {0x14, 0x18, {0x732, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0)

338.105243ms ago: executing program 2 (id=962):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) (async)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000340)="4fed2736a94e3572", 0xfff, r5, 0x4}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0xffff, 0x3, 0x209, 0x846, 0x3, 0x1, 0x8, 0x6, <r7=>0x0}, &(0x7f00000003c0)=0x20)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000400)={r7, @in={{0x2, 0x4e21, @empty}}, 0xfa6, 0x1, 0xfffffe01, 0xffffa2a1, 0x6}, &(0x7f0000000600)=0x98)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r5, &(0x7f00000014c0)='o', &(0x7f0000000b40)=""/31}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0x3)
socket(0x10, 0x803, 0x0) (async)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x54}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x54}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}, {0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x56}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}, {0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x56}, 0x28)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb35, 0x8183}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x49}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x80) (async)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb35, 0x8183}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x49}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x80)

337.016393ms ago: executing program 1 (id=963):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000880)="5d80ceff4aa6dc5f710e8df1f7582c892af8d26c5bd9c07caa9e7ded20f3f5ce5e3a882a02450dcf19", 0x29}], 0x1, 0x0, 0x0, 0x4}, 0x2400c084) (async, rerun: 32)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) (rerun: 32)
write$tun(r0, &(0x7f0000000800)=ANY=[], 0x141) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x8, 0xb, 0x6, 0x6, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x60, &(0x7f0000000240)=""/96, 0x41100, 0x1, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000300)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xd, 0xd, 0xffff}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000380)=[r0, r0, r0, r0, r0, r0, r0, 0xffffffffffffffff, r0], &(0x7f00000003c0)=[{0x5, 0x3, 0x7, 0x8}, {0x5, 0x1, 0xe, 0xa}, {0x1, 0x3, 0xf, 0x3}, {0x5, 0x3, 0xb}, {0x3, 0x3, 0xc, 0x3}, {0x2, 0x1, 0xa, 0x7}, {0x3, 0x4, 0xb, 0x3}], 0x10, 0xfffffffb}, 0x94)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0)
r7 = openat$cgroup_type(r6, &(0x7f00000007c0), 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'vlan0\x00', <r8=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x79}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async)
sendto$packet(r5, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f4", 0x26, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r8, 0x1, 0x62}, 0x14) (async, rerun: 64)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (rerun: 64)
ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000c00)={r9, "bff4678338cdeac2bddd8f5f460de415"}) (async)
ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000000e80)={0x3, 0x3, @start={r9, 0x0, "1011097c094d640e96727113511d9f3b095b9e312ed48d49c2db9745e6c0bd2873c9b8f0e0b45fcdb11bc4de79214e6f4bf975bdd959bdb8197d43027892110db74dd6ba30ca0ac51cd21ce29e2712d23fff66a04ec0cb70a5684d1eeccac2d611303aad72ecd3ecf59231f43b525334fd69a782274844e51c7c341d6423d5998a8ce8d89a80aeb6c9b8f8e0c944cc75e352ab4b55979e5324a89adeb5df1f231a471e395e8046baf6ae3c2c973bc894bd0ae4b14d915d921ec01c8f33329286088adaaeaa98d3e391aab842dc9858e8208c3b362c63ab47f668aca1f7e221774df1b45377ac0518929c6f6ace700e325bc9ce240917340e05cc858aab7052082c6913f3ad35f06c6271f164796c5e66640f561174818a6a6e785252c6e771ab1dc00d7fd7ab603e653cc0dd6964b76be906d898f9e223d8d33212be5c9cccc931d09cb28a985618af04f0346070a6bbd86857d77e62f98e5195c4b8e931db2b135f12a4ccae951f35bd902d58663f6bf54911d729f46ffe2f7489dd1aef6c1d8235dbb5aef59bce17eb8ed7edf49043efabc118655deaca17696f3b726fa501bcc9401c6334db1d835e1d4a506f10365ce55702a38523038a5b5654692e85b7781c3fca8793915b6b78b11e4dcab0404a22c7787e11efaa92b136d6934bd64c29a43dc09624df1967eb922b15597320a7774a928cc287d9b859e81c7ccc5285387e06a3c410108f29856c5ecc214397dc79bd6496d69a843844aa6375d83c05376d8f70c846360ede082db404c0ab1637f728a9ff17f661ea63980a9ecf7c6fdf420b102c73cf6dd1bfb348e791f2625ffb89967447594e5f59cf7383f4dbb6cce1e56025e3719000c3a915d5896de486b29140785af757facd0376ee168fb234ad3af28b88c1211af35303fe695eb816f8f3b50e6cadb44b5aed066afe024790c665f1e36f23069c344c0d628542e401236a8edc2ea58185d17d0a14124522669793c9ef77711896bc4f92a7bc628221209e6613cc78add89f95164122633bcc33fa61f92cc8b9628b92001a5fc1ba9fd5ef9258357803c201c9480b347c8d68c6b0a812d37d7d87f48580584461108f1d30533421a22f5046149f915ea84b22b72767fd6ab92c2ff18686fccec05c9172a4bcd3738e2c778ba925972637f808eb4a9f56042f88fd5acd667aad02d738ae6715286082d43a564a5eb9399a1ecb72ee36cb64b3bcbf51bd48dfe15a40c523f35ae2af4ddf0853156ffd47348ba5943168ecd8995c93bbaa6ddba58178b90c4633d4af6195532db2b0a0cb339089b3aa7e4e64855db83c8f4e7710badbb0e89de354dcfd749b61ec363f3eb0554413c7363d724dda3f16fed570547e3b6c786ebcbe5f76a08c1f996a8214d9e5b8fdd54d5baf9a8f986677830ad16652e68e4b5fbfe3f7df23d1c6046fbf617d84", "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"}, [0x6, 0x80000000, 0x6, 0x7, 0xfffffffffffff699, 0xfe, 0x1, 0xad, 0x5, 0x8001, 0x4, 0x4, 0x9, 0x6, 0x8, 0x3, 0x8, 0x3, 0x3, 0xfb3e, 0x8, 0xb, 0x0, 0x65, 0xffffffffffffffff, 0x60, 0x5, 0x3, 0x1, 0x0, 0x7fff, 0x6, 0xfd40000000000000, 0x9, 0x80, 0x8, 0x1, 0x2, 0x2, 0x6, 0x0, 0x4, 0xc, 0x6, 0x100000000, 0x4, 0xe31, 0x3, 0x8001, 0x7f, 0x70, 0x5, 0x5, 0x5, 0x6, 0x4, 0x1ff, 0x80, 0x8, 0x5, 0x1, 0xf964, 0x5, 0x7fff]})
ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x20, 0x9, "f7979a9a53bd42c9f0"}}) (async)
ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) (async, rerun: 32)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (rerun: 32)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x894b, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x1, 0x1})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r10, 0x952de000)

238.473082ms ago: executing program 0 (id=964):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={<r1=>r0})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a0"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300) (async)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRESDEC=r5], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) (async)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRESDEC=r5], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)=ANY=[@ANYBLOB="1c000000020303336614eb1b88bfa73414afaa25c1000000000000000000000000100800010001000000"], 0x1c}}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)=ANY=[@ANYBLOB="1c000000020303336614eb1b88bfa73414afaa25c1000000000000000000000000100800010001000000"], 0x1c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001740)={0x0, 0x7, 0x20}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x18, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, [@map_fd={0x18, 0x8, 0x1, 0x0, r2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}, @alu={0x7, 0x0, 0x2, 0x8, 0x3, 0x20, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9e}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @generic={0x3, 0x6, 0x9, 0x7}, @generic={0x2, 0xc, 0x8, 0x7, 0x6}]}, &(0x7f0000001480)='syzkaller\x00', 0x2, 0xf2, &(0x7f00000014c0)=""/242, 0x40f00, 0x18, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f00000015c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001600)={0x5, 0xf, 0x1000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001780)=[r1, r2, 0xffffffffffffffff, r2, r2, r11], 0x0, 0x10, 0x8}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x18, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, [@map_fd={0x18, 0x8, 0x1, 0x0, r2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}, @alu={0x7, 0x0, 0x2, 0x8, 0x3, 0x20, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9e}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @generic={0x3, 0x6, 0x9, 0x7}, @generic={0x2, 0xc, 0x8, 0x7, 0x6}]}, &(0x7f0000001480)='syzkaller\x00', 0x2, 0xf2, &(0x7f00000014c0)=""/242, 0x40f00, 0x18, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f00000015c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001600)={0x5, 0xf, 0x1000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001780)=[r1, r2, 0xffffffffffffffff, r2, r2, r11], 0x0, 0x10, 0x8}, 0x94)
sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000)
close(r8)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)

171.233267ms ago: executing program 1 (id=965):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080)=0x7, 0x4)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0)=0x3a, 0x4)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'raw\x00', 0x0, [0xa, 0x6, 0x5, 0x101, 0x6]}, &(0x7f0000000180)=0x54)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000200)={[{0x2d, 'cpu'}, {0x2d, 'perf_event'}, {0x2b, 'cpu'}, {0x2b, 'rlimit'}, {0x2b, 'pids'}, {0x2d, 'pids'}]}, 0x2a)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={&(0x7f0000000240)="f0d8cc23b130b08538373f740377060490a0bc5a488733e7a91dfb3fe5d3d18a25feeac4a787668984e0f2a86ef008d903638d397c8c2ebbf1e217f6eca0851d4bbe7e9d1fecc99ef31ec0d4062ddb42fc5119d24a08e008cfd4c5affeab48742840aa05b4eafd58c14bcdadff88f7af7af4d60dec6ef54000ac6b9e75d2fc76f1286257a0ed7ed215d0bde73d4c772687e2918e58f0f241d3d4ea54104bf5e3ab58edb4c90f89aac3495536", &(0x7f0000000300)=""/182, &(0x7f00000003c0)="f49d9b15154fef0b20ec9add1c7c3c7d1ba5f91f63c6b7ce632280976ad42671976f45d31705bca5cf7c331b7731f963eb4dc9b4b1d0f28f589d30ec4646111199d3574e939e934f772e17d81601efff70b7ed652f8c5d479eb0926c600c57be8f695db7820ca817727fa7210cf9dc1477a2e810c6adf87165f3231c17b6e8151a5161724a81637ae79d7665cabf717130912f39c2b7d25d67b51431cb32813f02a04e6d2224a6d93fae0e1f009be5319702d6a2ad75a143944ad288be5f0ae9d521d251dba367abce30cc93158cfc3b570a72dcceaa6a301095292ce73164ab343bedf7334c5e22fb3146eb252679c5", &(0x7f00000004c0)="4c1b55812a354994117e14acc5ec3f67d4e15008a70993400d5c17502c845c7b7c8ca9626b083256208c81e4f787d9bfd3ed597dd9490d582ffb62a25291c5ee01eb0a325635650de143adf01d8c16b357b5ceaaddd00a787cc724cf686fc72d49d47a9a56ee61df14286440164fd293b143af5cfab0da9e295f959ea201a8194fad89fe33edb4a58c0a5797985b05e7a4683ea18fc93b4bd3acde0c5ea9c84083c35601e3974d2366444659c0a530b5e925d5e3c727100766ddbc0b4e62b3d1fef35b5be64d", 0x800, r4, 0x4}, 0x38)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r7, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'pids'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0xc440)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000780)={<r8=>r5})
getsockopt$SO_J1939_PROMISC(r8, 0x6b, 0x2, &(0x7f00000007c0), &(0x7f0000000800)=0x4)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={<r9=>0x0, 0x8226, 0x1, [0x8, 0x6, 0x3, 0x7, 0x915], [0x61, 0x3, 0x10, 0x0, 0x1, 0x3ff, 0xfffffffffffffffd, 0x8, 0x8000, 0x1, 0x1, 0xfffffffffffffff8, 0x3, 0xb, 0x7, 0x1, 0xf5, 0x1, 0x1, 0xff, 0x3, 0x4, 0xfffffffffffffff8, 0x3, 0x5, 0x0, 0x1, 0x8, 0x100000001, 0x2b, 0x2000000000000, 0x8000000000000000, 0x3, 0xfffffffffffffffa, 0x9, 0xfffffffffffffffe, 0x3, 0x5, 0x0, 0xb, 0x7fffffffffffffff, 0xe, 0x8, 0xffffffffffffffff, 0x8000000000000001, 0x5, 0x3ae, 0xc, 0x1, 0xfffffffffffffff7, 0x6, 0x3, 0x5, 0x80000001, 0x10000, 0x5f7, 0x4, 0x0, 0x2, 0x6, 0xf8c6, 0xd, 0x0, 0x6, 0x2, 0x4, 0xe, 0x80000001, 0x3, 0x100000001, 0x8000000000000001, 0x4, 0x1, 0xffffffffffffffff, 0x9, 0x3, 0x3, 0x400, 0x9, 0x8, 0x7, 0x5, 0x8001, 0x8, 0x7, 0x1218, 0x1000, 0x1, 0xfff, 0x7, 0x4, 0xf, 0xfffffffffffff6e7, 0x81, 0x8000000000000001, 0x72, 0xffffffffffff2bd7, 0xe, 0x2, 0x80000000, 0x3, 0x7, 0x7, 0x9168, 0x96, 0x100000000, 0x7fffffffffffffff, 0x3, 0x3, 0x4, 0x0, 0x5, 0x2, 0xe22, 0x1, 0x5, 0x8000, 0x8, 0x1, 0x6, 0x1]})
ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000c80)={<r10=>0x0, 0xfffffffffffffffc, 0x81d8c20184dffd93, [0x1, 0x480000000000000, 0x80000000, 0x5, 0x6], [0x7, 0xf, 0x0, 0x6e, 0x3000000, 0xbbc9, 0x80000001, 0x400, 0x7fffffffffffffff, 0x800, 0x84, 0x5, 0x3, 0x5, 0x61, 0x0, 0x9, 0xffffffffa821fa2e, 0x599, 0x5, 0x6b, 0x7, 0x81, 0x6, 0x80000001, 0x55, 0x800, 0x6, 0x6, 0xfffffffffffffff2, 0x6, 0xa3, 0xfff, 0x9, 0x7, 0x1, 0x8, 0x5, 0xfffffffffffffffc, 0x1, 0x2, 0x3, 0x80000000, 0x3, 0x7, 0x444b, 0x2, 0x0, 0x7037, 0x6757, 0xffffffffffffff9f, 0x9, 0x3, 0x2, 0xb, 0x5, 0x964b, 0x116579b2, 0x1, 0x6, 0xbf, 0x74a0, 0xa3df, 0x10, 0x400, 0x5, 0x7, 0x6, 0x0, 0x2, 0x6, 0x645, 0x3, 0x8, 0x8, 0x5, 0x3dfa79fe, 0x6, 0x7, 0x1, 0x8, 0x7, 0xfffffffffffffffa, 0x1, 0x8, 0x3, 0xe0, 0x3caf, 0x7, 0x1, 0x0, 0x1, 0x1, 0x5, 0x8, 0x5, 0x8, 0x1, 0x6, 0x7f, 0x5, 0x100000000, 0x4, 0x6165, 0x6eb, 0x800, 0x5, 0x3638, 0x3, 0x6, 0xa649, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe17, 0x9, 0x101]})
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000010c0)={0x9, 0x1, {0x2, @usage=0x2, r9, 0x1, 0x0, 0x6, 0x4, 0x3b73a0f8, 0x53, @usage=0x5, 0x2c7a4e21, 0x9, [0x6, 0x6, 0x7, 0x7ff, 0x0, 0xfc]}, {0xfffffffffffffff9, @usage=0x8, r10, 0xfffffffffffffcef, 0x9da8feb, 0x9, 0x9, 0x1, 0x44, @usage=0x8, 0x6, 0x7f, [0x8, 0x62, 0x40, 0x0, 0x0, 0x6]}, {0x7, @usage, 0x0, 0xe, 0x3, 0x3b, 0x3, 0xfffffffffffffff7, 0x80, @usage=0x7, 0xb407a8f3, 0x6, [0x5, 0x11ad, 0x6, 0xfff, 0x6, 0xffffffff7fffffff]}, {0x6, 0x8001}})
sendmsg$inet6(r8, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="6a470d73efbe88eca7eb7871ba2c6af177d5b3270507d0739766e5503275d7a93546279f7343fac16c711b5af4716e1be20b25c0d6d0128d64d060943ed51ed558114afae8f36c8ad0d133b10b5a50cde662601ee139da811fe6e9fc15c211786bec5110ffefec10c68edbd3a711e987b20d7860bd443c27819a79bda8b323ffec36c110cd7ff88e21ee839a43c936775165b1635feb141923e0e6ed3a6c7777394c44f6c49bb756f31f20046a5fa13588c591641b5795f55793826c366e74d88cadeaaa515111e5aa2201aa", 0xcc}, {&(0x7f00000015c0)="7ec621bd01554838278f0256bc1dee3d86ad52c3fc9402a17fb129581108e66f0ae07a6fdd0d90ebdb4952a5b83fe5dad423f892293f139ebd5807a9cac90942c539b5435028d54338cb99d67b0295ad", 0x50}], 0x2, &(0x7f0000001680)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x6c, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xf2}, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x4}]}}}, @hopopts={{0x40, 0x29, 0x36, {0x67, 0x4, '\x00', [@ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x9}, @pad1, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x59}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0xc, 0x2, '\x00', [@generic={0x40, 0x11, "c509df9a1d7ab16abba5ef4248806363e8"}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7ff}}], 0xe0}, 0x8800)
ioctl$IMGETVERSION(r8, 0x80044942, &(0x7f00000017c0))
sendmsg$can_bcm(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001800)={0x7, 0x942, 0xde42, {0x77359400}, {0x77359400}, {0x3, 0x0, 0x0, 0x1}, 0x1, @can={{0x4, 0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, "33021b6e9b846d7a"}}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x44800)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001900), 0x208000, 0x0)
ioctl$TUNSETIFINDEX(r11, 0x400454da, &(0x7f0000001940))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001980))
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000001b80))
getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, &(0x7f0000001bc0), &(0x7f0000001c00)=0x6)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000001c80), r8)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x2c, r12, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000)

120.709832ms ago: executing program 2 (id=966):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000000000000000020000004c000480480001800a0001006d61746368000000380002800e0001007374617469737469630000001c0003004cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a3000000000090af40900020073797a32000000001400000011000100000000000000000003"], 0xa0}}, 0x240100c0)

120.356076ms ago: executing program 1 (id=967):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x2000000009)
accept4(r1, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='sys_exit\x00'}, 0x79)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0xfffffffc, 0x0, {0xa, 0x40, 0x20, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

61.515732ms ago: executing program 1 (id=968):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYRESDEC], &(0x7f0000000500)='syzkaller\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe90, 0x30, 0x25, 0x0, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x0, 0x8001}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x5, 0x80000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0xbdf6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000100000005b979e01d2038d84"], 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b87675a"], 0x4c}}, 0x2)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xf00)

60.142791ms ago: executing program 0 (id=969):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000008, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x6)
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0xc96df000)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

59.070984ms ago: executing program 2 (id=970):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x48ac90d17dfc5eaa, 0xc, &(0x7f0000000a40)=ANY=[@ANYRES16=r0, @ANYBLOB="67c09f101970f8cf4863455233c2ed6857130793cbb51e0b532f7f272146f13ef6a23638999eb3a196c83b80e328457611dc65e3e6dffcf67cb0ce11d666da51fdbff4a36891d54edf0c3b8df3acf60e0cb524d6d292a86aa9c78443622d17dd2a7ea708f97345ccc4eb738cec0e23efb751648fb2fd2358287cdf94f4bcd7ae726e8fdc6573068eda6913eba2a3", @ANYBLOB="40c4acf0c28aedb281b2514b823ad56d94e8653d0bc9036a0ddae57e4b85d4c7ae1cd05404c1eac9bdae21d9e91d56ff08a38b5ba3568feddef18162f8552179a0840c60d274e9e317d0d28ecb921d8786547627166cb14d35c195cd6416bdbd11b9b0f6efe44c82024e9cd231b4ad8bd874ec8e5fbf28cf663e179cbe960c16f7b113d460110c1a9a281136aa2e99", @ANYRES64=r1, @ANYRES64=r1], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', r3, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000008c0)=[@in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}, 0x2}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0xc5, @mcast1, 0x40}, @in={0x2, 0x4e1d, @local}, @in6={0xa, 0x4e24, 0x9, @private0, 0x4}, @in6={0xa, 0x4e24, 0x6, @local, 0x6}, @in={0x2, 0x4e22, @broadcast}], 0xa0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x6, 0x6, 0x2, 0xffffffffffffffff, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000580), 0x1f93, r5}, 0x38)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000240)=0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="600100001600010000000000000000000000000000000c00000000000000f600ffffffff00000000000000000000000000000000000000080000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r9=>0x0})
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r9, 0x0, {0x0, 0x0, 0x4}}, 0x18)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff20004001d"], 0x20}], 0x1}, 0x300)
sendmsg$can_j1939(r10, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x9c235a449d62cd61, 0x0, 0x2}, 0x1}, 0x18, &(0x7f00000004c0)={&(0x7f0000000480)="92", 0x1}}, 0xee)
setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x2, {0x1}, {0x1, 0xff, 0x2}, 0xff}, {0x3, 0x2, {0x2, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0x1, 0xff}, {0x0, 0xfffffffffffffffb, {0x2, 0xf0, 0x2}, {0x1}, 0xfe, 0xff}], 0x60)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r9, {0x5, 0xb}, {0x4, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4)
socket(0x23, 0x80805, 0x8000000)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0)

379.194µs ago: executing program 1 (id=971):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @remote}, 0x10) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe889638000000000000000100"], 0xd8}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c00018006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
read$ptp(r0, &(0x7f0000000140)=""/156, 0x9c) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETTXFILTER(r4, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"])

0s ago: executing program 1 (id=972):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x4b}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x3, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30, 0x61, 0x2e, 0x5f, 0x30]}}, 0x0, 0x2b, 0x0, 0x1, 0x7}, 0x28)
setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000180), 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4000040)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:35418' (ED25519) to the list of known hosts.
syzkaller login: [   48.718426][ T5832] cgroup: Unknown subsys name 'net'
[   48.879744][ T5832] cgroup: Unknown subsys name 'cpuset'
[   48.883448][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.400756][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.276006][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.280380][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.280442][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.284009][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.287172][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.289291][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.291805][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.295601][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.296529][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.299907][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.302091][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.303939][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.309257][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.313035][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.315972][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.546355][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   54.652959][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   54.669461][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   54.691870][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.694605][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.698115][ T5852] bridge_slave_0: entered allmulticast mode
[   54.701003][ T5852] bridge_slave_0: entered promiscuous mode
[   54.723289][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.726295][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.730786][ T5852] bridge_slave_1: entered allmulticast mode
[   54.734591][ T5852] bridge_slave_1: entered promiscuous mode
[   54.800955][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.803473][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.805842][ T5844] bridge_slave_0: entered allmulticast mode
[   54.809473][ T5844] bridge_slave_0: entered promiscuous mode
[   54.815179][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.834117][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.837726][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.840287][ T5844] bridge_slave_1: entered allmulticast mode
[   54.843019][ T5844] bridge_slave_1: entered promiscuous mode
[   54.847803][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.858601][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.861267][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.863857][ T5848] bridge_slave_0: entered allmulticast mode
[   54.866699][ T5848] bridge_slave_0: entered promiscuous mode
[   54.890286][ T5852] team0: Port device team_slave_0 added
[   54.892447][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.895197][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.898612][ T5848] bridge_slave_1: entered allmulticast mode
[   54.902159][ T5848] bridge_slave_1: entered promiscuous mode
[   54.913425][ T5852] team0: Port device team_slave_1 added
[   54.929456][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.970280][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.975623][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.982155][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.995032][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.998026][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.008698][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.040598][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.043574][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.054878][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.074317][ T5848] team0: Port device team_slave_0 added
[   55.078643][ T5844] team0: Port device team_slave_0 added
[   55.089632][ T5848] team0: Port device team_slave_1 added
[   55.093185][ T5844] team0: Port device team_slave_1 added
[   55.155687][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.159082][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.171435][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.179669][ T5852] hsr_slave_0: entered promiscuous mode
[   55.182145][ T5852] hsr_slave_1: entered promiscuous mode
[   55.185148][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.188421][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.199174][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.203863][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.206509][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.217902][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.230763][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.233620][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.242942][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.330845][ T5848] hsr_slave_0: entered promiscuous mode
[   55.333516][ T5848] hsr_slave_1: entered promiscuous mode
[   55.335909][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   55.339554][ T5848] Cannot create hsr debugfs directory
[   55.345803][ T5844] hsr_slave_0: entered promiscuous mode
[   55.349177][ T5844] hsr_slave_1: entered promiscuous mode
[   55.352022][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   55.354383][ T5844] Cannot create hsr debugfs directory
[   55.520649][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.526604][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.532146][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.543262][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.594317][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.603586][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.617441][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.622927][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.663080][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.668073][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.680289][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.686424][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.746493][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.769490][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   55.782076][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.784929][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.801391][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.811436][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.813897][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.834774][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   55.846625][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.856187][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.858784][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.874946][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.877501][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.903010][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   55.918950][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.921308][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.930426][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.932791][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.094909][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.135487][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.161672][ T5852] veth0_vlan: entered promiscuous mode
[   56.169451][ T5852] veth1_vlan: entered promiscuous mode
[   56.174576][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.200563][ T5844] veth0_vlan: entered promiscuous mode
[   56.210454][ T5852] veth0_macvtap: entered promiscuous mode
[   56.219610][ T5852] veth1_macvtap: entered promiscuous mode
[   56.224777][ T5844] veth1_vlan: entered promiscuous mode
[   56.251097][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.256838][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.268887][ T5848] veth0_vlan: entered promiscuous mode
[   56.278442][ T5875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.285186][ T5875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.290008][ T5875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.293055][ T5875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.299284][ T5848] veth1_vlan: entered promiscuous mode
[   56.310270][ T5844] veth0_macvtap: entered promiscuous mode
[   56.321529][ T5844] veth1_macvtap: entered promiscuous mode
[   56.341843][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.355650][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.358856][ T5846] Bluetooth: hci0: command tx timeout
[   56.360770][ T5846] Bluetooth: hci1: command tx timeout
[   56.362821][ T5236] Bluetooth: hci2: command tx timeout
[   56.375366][ T5848] veth0_macvtap: entered promiscuous mode
[   56.381146][ T5848] veth1_macvtap: entered promiscuous mode
[   56.392048][ T5888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.396688][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.402269][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.416221][ T5888] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.422026][ T5888] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.426027][ T5888] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.464507][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.473373][ T4416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.478779][ T4416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.485956][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.507390][ T5888] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.516830][ T5888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.527650][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.534168][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.539481][ T5888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.542913][ T5888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.553391][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.619511][ T4416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.624250][ T5910] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2'.
[   56.627672][ T4416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.655347][ T5910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'.
[   56.682797][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.685906][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.746511][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.749899][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.758576][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.975816][ T5922] 8021q: VLANs not supported on ip6_vti0
[   57.030787][ T5928] tipc: Started in network mode
[   57.032789][ T5928] tipc: Node identity 7ac71d9e4dad, cluster identity 4711
[   57.035461][ T5928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.040913][ T5928] syzkaller0: entered promiscuous mode
[   57.042868][ T5928] syzkaller0: entered allmulticast mode
[   57.050144][ T5925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7'.
[   57.067842][ T5928] tipc: Resetting bearer <eth:syzkaller0>
[   57.075962][ T5927] tipc: Resetting bearer <eth:syzkaller0>
[   57.088169][ T5927] tipc: Disabling bearer <eth:syzkaller0>
[   57.134271][ T5931] : renamed from macvlan0 (while UP)
[   57.169657][ T5933] netlink: 'syz.0.10': attribute type 25 has an invalid length.
[   57.176175][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'.
[   57.195995][ T5933] netlink: 'syz.0.10': attribute type 25 has an invalid length.
[   57.200309][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'.
[   57.203543][ T5933] Zero length message leads to an empty skb
[   57.205993][ T5723] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   57.206041][ T5723] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   57.206064][ T5723] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   57.222820][ T5723] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   57.229274][ T5935] netlink: 'syz.1.11': attribute type 25 has an invalid length.
[   57.235950][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'.
[   57.264101][ T5935] netlink: 'syz.1.11': attribute type 25 has an invalid length.
[   57.265358][ T5875] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   57.271249][ T5875] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   57.274964][ T5875] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   57.277658][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'.
[   57.280689][ T5875] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   57.474935][ T5955] syz.1.17 uses obsolete (PF_INET,SOCK_PACKET)
[   57.607172][ T5965] openvswitch: netlink: IPv4 tun info is not correct
[   57.712784][ T5976] warning: `syz.0.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.780299][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'.
[   57.783333][ T5984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24'.
[   57.984295][ T5990] netlink: 'syz.2.27': attribute type 4 has an invalid length.
[   57.997490][ T5992] netlink: 'syz.0.28': attribute type 9 has an invalid length.
[   58.002574][ T5992] netlink: 'syz.0.28': attribute type 11 has an invalid length.
[   58.437477][ T5846] Bluetooth: hci1: command tx timeout
[   58.439358][ T5846] Bluetooth: hci2: command tx timeout
[   58.445781][ T6027] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.523151][ T6015] infiniband syz2: set active
[   58.525377][ T6015] infiniband syz2: added bond_slave_0
[   58.605060][ T6015] RDS/IB: syz2: added
[   58.609407][ T6015] smc: adding ib device syz2 with port count 1
[   58.612190][ T6015] smc:    ib device syz2 port 1 has pnetid 
[   58.765045][ T6043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.155615][ T6050] sctp: [Deprecated]: syz.0.44 (pid 6050) Use of int in max_burst socket option deprecated.
[   59.155615][ T6050] Use struct sctp_assoc_value instead
[   59.212592][ T6052] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.232073][ T6052] syzkaller0: entered promiscuous mode
[   59.233883][ T6052] syzkaller0: entered allmulticast mode
[   59.240575][ T6052] sctp: [Deprecated]: syz.0.45 (pid 6052) Use of int in maxseg socket option.
[   59.240575][ T6052] Use struct sctp_assoc_value instead
[   59.249989][ T6052] tipc: Resetting bearer <eth:syzkaller0>
[   59.263249][ T6051] tipc: Resetting bearer <eth:syzkaller0>
[   59.273283][ T6059] trusted_key: syz.1.46 sent an empty control message without MSG_MORE.
[   59.291527][ T6051] tipc: Disabling bearer <eth:syzkaller0>
[   59.292189][ T6059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.332074][ T6061] tipc: Started in network mode
[   59.333904][ T6061] tipc: Node identity 0ab2d69ad9a5, cluster identity 4711
[   59.336659][ T6061] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.341191][ T6061] syzkaller0: entered promiscuous mode
[   59.344216][ T6061] syzkaller0: entered allmulticast mode
[   59.355821][ T6061] tipc: Resetting bearer <eth:syzkaller0>
[   59.360206][ T6060] tipc: Resetting bearer <eth:syzkaller0>
[   59.365924][ T6060] tipc: Disabling bearer <eth:syzkaller0>
[   59.668419][ T6073] netlink: 'syz.2.51': attribute type 25 has an invalid length.
[   59.685448][ T5875] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   59.685556][ T6073] netlink: 'syz.2.51': attribute type 25 has an invalid length.
[   59.690139][ T5875] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   59.695292][ T5875] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   59.703369][ T5875] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   59.896487][ T6086] syz_tun: entered allmulticast mode
[   59.906008][ T6086] dvmrp8: entered allmulticast mode
[   60.082645][ T6085] syz_tun: left allmulticast mode
[   60.084929][ T6085] dvmrp8: left allmulticast mode
[   60.185655][ T6100] netlink: 'syz.1.59': attribute type 25 has an invalid length.
[   60.294254][ T6105] dvmrp0: entered allmulticast mode
[   60.382972][ T6111] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[   60.518334][ T5236] Bluetooth: hci2: command tx timeout
[   60.518371][ T5846] Bluetooth: hci1: command tx timeout
[   61.263604][ T6134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.356976][ T6141] Driver unsupported XDP return value 0 on prog  (id 16) dev N/A, expect packet loss!
[   61.624213][ T6161] 8021q: VLANs not supported on sit0
[   61.627023][ T6164] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[   61.631601][ T6164] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   61.796428][ T6180] __nla_validate_parse: 24 callbacks suppressed
[   61.796436][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'.
[   61.831110][ T6182] netlink: 108 bytes leftover after parsing attributes in process `syz.1.85'.
[   61.841741][ T6182] netlink: 128 bytes leftover after parsing attributes in process `syz.1.85'.
[   61.856947][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.861547][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.864550][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'.
[   61.919718][ T6183] team0: Device ipvlan1 failed to register rx_handler
[   61.985300][ T6187] netlink: 40 bytes leftover after parsing attributes in process `syz.2.87'.
[   61.996463][ T6187] syzkaller1: entered promiscuous mode
[   61.999150][ T6187] syzkaller1: entered allmulticast mode
[   62.597399][ T5846] Bluetooth: hci2: command tx timeout
[   62.597556][ T5236] Bluetooth: hci1: command tx timeout
[   62.662796][   T10] cfg80211: failed to load regulatory.db
[   62.673511][ T6200] netlink: 52 bytes leftover after parsing attributes in process `syz.0.90'.
[   62.857321][ T6220] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.880106][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'.
[   62.894031][ T6222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.898681][ T6220] validate_nla: 6 callbacks suppressed
[   62.898690][ T6220] netlink: 'syz.0.95': attribute type 21 has an invalid length.
[   62.913950][ T6220] netlink: 132 bytes leftover after parsing attributes in process `syz.0.95'.
[   62.945372][ T6229] netlink: 112 bytes leftover after parsing attributes in process `syz.2.98'.
[   62.983613][ T6231] netlink: 'syz.0.99': attribute type 12 has an invalid length.
[   62.988325][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'.
[   63.152840][ T6245] netlink: 'syz.0.106': attribute type 1 has an invalid length.
[   63.155410][ T6245] netlink: 'syz.0.106': attribute type 1 has an invalid length.
[   63.350412][ T6250] netlink: 'syz.0.107': attribute type 7 has an invalid length.
[   63.364324][ T6250] : entered promiscuous mode
[   63.442701][ T6259] netlink: 'syz.1.108': attribute type 25 has an invalid length.
[   63.446934][ T6259] netlink: 'syz.1.108': attribute type 25 has an invalid length.
[   63.873202][ T6282] bridge_slave_1: left allmulticast mode
[   63.875224][ T6282] bridge_slave_1: left promiscuous mode
[   63.879737][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.885812][ T6282] bridge_slave_0: left allmulticast mode
[   63.889679][ T6282] bridge_slave_0: left promiscuous mode
[   63.892170][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.425525][ T6300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.434312][ T6300] syzkaller0: entered promiscuous mode
[   64.436256][ T6300] syzkaller0: entered allmulticast mode
[   64.450451][ T6300] tipc: Resetting bearer <eth:syzkaller0>
[   64.814784][ T6324] lo speed is unknown, defaulting to 1000
[   64.822979][ T6324] lo speed is unknown, defaulting to 1000
[   64.854220][ T6324] lo speed is unknown, defaulting to 1000
[   64.880909][ T6330] netlink: 'syz.1.130': attribute type 7 has an invalid length.
[   64.888092][ T6325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.912324][ T6331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   65.130564][ T6324] infiniband syz0: set active
[   65.132597][   T10] lo speed is unknown, defaulting to 1000
[   65.135109][ T6324] infiniband syz0: added lo
[   65.137297][ T6324] syz0: rxe_create_cq: returned err = -12
[   65.139848][ T6324] infiniband syz0: Couldn't create ib_mad CQ
[   65.142048][ T6324] infiniband syz0: Couldn't open port 1
[   65.160788][ T6324] RDS/IB: syz0: added
[   65.165270][ T6324] smc: adding ib device syz0 with port count 1
[   65.169476][ T6324] smc:    ib device syz0 port 1 has pnetid 
[   65.172295][   T10] lo speed is unknown, defaulting to 1000
[   65.175381][ T6324] lo speed is unknown, defaulting to 1000
[   65.294884][ T6324] lo speed is unknown, defaulting to 1000
[   65.428093][   T10] tipc: Node number set to 3541554842
[   65.437745][ T6324] lo speed is unknown, defaulting to 1000
[   65.648516][ T6353] syzkaller1: entered promiscuous mode
[   65.651160][ T6353] syzkaller1: entered allmulticast mode
[   65.813935][ T6363] netlink: 'syz.2.135': attribute type 17 has an invalid length.
[   65.818153][ T6363] netlink: 'syz.2.135': attribute type 27 has an invalid length.
[   65.934583][ T6357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.992216][ T6363] lo speed is unknown, defaulting to 1000
[   66.506858][ T6386] openvswitch: netlink: Multiple metadata blocks provided
[   66.700487][ T6398] syzkaller1: entered promiscuous mode
[   66.708160][ T6398] syzkaller1: entered allmulticast mode
[   66.955884][ T6421] __nla_validate_parse: 23 callbacks suppressed
[   66.955893][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.156'.
[   67.005835][ T6423] veth3: entered promiscuous mode
[   67.009209][ T6422] netlink: 68 bytes leftover after parsing attributes in process `syz.1.156'.
[   67.073228][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'.
[   67.086737][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.092387][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.268936][ T6434] team0: Port device dummy0 added
[   67.300128][ T6434] team0: Port device dummy0 removed
[   67.320501][ T6434] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   67.364936][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'.
[   67.466326][ T6444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.162'.
[   67.568599][ T6436] lo speed is unknown, defaulting to 1000
[   67.748065][ T6441] siw: device registration error -23
[   67.788117][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'.
[   67.799580][ T6454] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   67.802901][ T6454] team0: Device ipvlan2 is already an upper device of the team interface
[   67.946341][ T6466] validate_nla: 4 callbacks suppressed
[   67.946355][ T6466] netlink: 'syz.0.165': attribute type 4 has an invalid length.
[   67.985622][ T6466] netlink: 'syz.0.165': attribute type 4 has an invalid length.
[   68.060896][ T6473] netlink: 'syz.2.166': attribute type 1 has an invalid length.
[   68.167514][ T6489] netlink: 60 bytes leftover after parsing attributes in process `syz.2.166'.
[   68.191386][ T6473] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.225955][ T6486] vlan0: entered promiscuous mode
[   68.227957][ T6486] bond1: entered promiscuous mode
[   68.229872][ T6486] vlan0: entered allmulticast mode
[   68.231838][ T6486] bond1: entered allmulticast mode
[   68.234867][ T6484] : renamed from pim6reg1
[   68.376136][ T6501] netlink: 44 bytes leftover after parsing attributes in process `syz.0.172'.
[   68.402690][ T6506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.173'.
[   68.511052][ T6512] netlink: 52 bytes leftover after parsing attributes in process `syz.1.175'.
[   68.530530][ T6515] siw: device registration error -23
[   68.538917][ T6516] siw: device registration error -23
[   68.552922][ T6515] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   68.555909][ T6515] veth0_to_bridge: entered promiscuous mode
[   68.559146][ T6515] veth0_to_bridge: entered allmulticast mode
[   68.604459][ T6524] syzkaller1: entered promiscuous mode
[   68.606457][ T6524] syzkaller1: entered allmulticast mode
[   68.612439][ T6521] netlink: 'syz.2.179': attribute type 10 has an invalid length.
[   68.621974][ T6521] 8021q: adding VLAN 0 to HW filter on device team0
[   68.625479][ T6521] bond0: (slave team0): Enslaving as an active interface with an up link
[   68.630920][ T6521] netlink: 'syz.2.179': attribute type 10 has an invalid length.
[   68.675184][ T6521] 8021q: adding VLAN 0 to HW filter on device bond2
[   68.685527][ T6521] bond_slave_0: entered promiscuous mode
[   68.688271][ T6521] bond_slave_1: entered promiscuous mode
[   68.690825][ T6521] dummy0: entered promiscuous mode
[   68.693336][ T6521] team_slave_0: entered promiscuous mode
[   68.695713][ T6521] team_slave_1: entered promiscuous mode
[   68.712069][ T6521] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   68.720214][ T6521] bond2: (slave macvlan0): Enslaving as a backup interface with an up link
[   68.731533][ T6523] bond2: (slave macvlan1): Error -98 calling set_mac_address
[   68.770584][ T6532] netlink: 'syz.0.181': attribute type 15 has an invalid length.
[   68.950336][ T6554] IPVS: sync thread started: state = MASTER, mcast_ifn = wg0, syncid = 0, id = 0
[   69.118840][ T6566] netlink: 'syz.2.191': attribute type 12 has an invalid length.
[   69.406329][ T6588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.102897][ T6630] netlink: 'syz.1.197': attribute type 4 has an invalid length.
[   70.334802][ T6656] block nbd0: not configured, cannot reconfigure
[   70.357968][ T6657] block nbd0: not configured, cannot reconfigure
[   70.374118][ T6661] netlink: 'syz.0.202': attribute type 12 has an invalid length.
[   70.464347][ T6669] tc_dump_action: action bad kind
[   70.538329][ T6671] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   70.541985][ T6671] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   70.600826][ T6678] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.607087][ T6651] lo speed is unknown, defaulting to 1000
[   70.614479][ T6678] syzkaller0: entered promiscuous mode
[   70.616492][ T6678] syzkaller0: entered allmulticast mode
[   70.634680][ T6678] tipc: Resetting bearer <eth:syzkaller0>
[   70.637884][ T6676] tipc: Resetting bearer <eth:syzkaller0>
[   70.644827][ T6682] netlink: 'syz.1.205': attribute type 10 has an invalid length.
[   70.648741][ T6676] tipc: Disabling bearer <eth:syzkaller0>
[   70.660088][ T6682] team0: Device ipvlan1 failed to register rx_handler
[   71.081364][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.130443][ T6690] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   71.431669][ T6699] bond3: entered promiscuous mode
[   71.433640][ T6699] 8021q: adding VLAN 0 to HW filter on device bond3
[   71.470255][ T6704] batadv1: entered promiscuous mode
[   71.472196][ T6704] batadv1: entered allmulticast mode
[   71.477067][ T6704] 8021q: adding VLAN 0 to HW filter on device batadv1
[   71.485401][ T6704] bond3: (slave batadv1): making interface the new active one
[   71.490084][ T6704] bond3: (slave batadv1): Enslaving as an active interface with an up link
[   71.575437][ T6708] team0: Port device geneve0 added
[   71.639853][ T6714] syzkaller1: entered promiscuous mode
[   71.645520][ T6714] syzkaller1: entered allmulticast mode
[   71.704813][ T6723] nftables ruleset with unbound chain
[   71.777847][ T6724] syzkaller1: entered promiscuous mode
[   71.779732][ T6724] syzkaller1: entered allmulticast mode
[   71.950050][ T6738] tipc: Enabling <ib:lo> not permitted
[   71.951962][ T6738] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   71.957912][ T6738] __nla_validate_parse: 20 callbacks suppressed
[   71.957926][ T6738] netlink: 100 bytes leftover after parsing attributes in process `syz.0.223'.
[   71.971953][ T6738] netlink: 248 bytes leftover after parsing attributes in process `syz.0.223'.
[   72.142219][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'.
[   72.148730][ T6731] lo speed is unknown, defaulting to 1000
[   72.525774][ T6774] TCP: TCP_TX_DELAY enabled
[   72.737008][ T6792] syz_tun: entered allmulticast mode
[   72.763015][ T6792] vcan0: tx drop: invalid sa for name 0x0000000000000003
[   72.840822][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'.
[   72.877066][ T6794] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.893115][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'.
[   72.904148][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'.
[   72.909458][ T6794] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.912068][ T6794] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   72.912663][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'.
[   72.923371][ T6794] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   72.933525][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'.
[   72.946694][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'.
[   72.952074][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'.
[   72.959489][ T6805] bond1: (slave bridge1): Enslaving as an active interface with a down link
[   73.056378][ T6807] pim6reg: entered allmulticast mode
[   73.328952][ T6850] validate_nla: 3 callbacks suppressed
[   73.328961][ T6850] netlink: 'syz.1.249': attribute type 1 has an invalid length.
[   73.360575][ T6853] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   73.373063][ T6853] netlink: 'syz.2.250': attribute type 3 has an invalid length.
[   73.549019][ T6879] netlink: 'syz.1.259': attribute type 9 has an invalid length.
[   73.633404][ T6884] IPVS: stopping backup sync thread 6893 ...
[   73.753789][ T6903] (unnamed net_device) (uninitialized): option use_carrier: invalid value (31)
[   73.981299][ T6909] lo speed is unknown, defaulting to 1000
[   74.120481][ T6914] lo speed is unknown, defaulting to 1000
[   74.189955][ T6919] netlink: 'syz.1.267': attribute type 25 has an invalid length.
[   74.486025][ T6931] hsr_slave_0: left promiscuous mode
[   74.489162][ T6931] hsr_slave_1: left promiscuous mode
[   74.635268][ T6938] netlink: 'syz.2.272': attribute type 6 has an invalid length.
[   74.653842][ T6938] netlink: 'syz.2.272': attribute type 12 has an invalid length.
[   75.232928][ T6958] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   75.237402][ T6957] IPVS: stopping backup sync thread 6958 ...
[   75.446819][ T6967] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[   75.963782][ T6988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   75.966432][ T6988] IPv6: NLM_F_CREATE should be set when creating new route
[   75.972182][ T6988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.008327][ T6992] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   76.045560][ T6997] rdma_rxe: rxe_newlink: failed to add lo
[   76.233739][ T6999] lo speed is unknown, defaulting to 1000
[   76.246348][ T7016] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   76.249740][ T7016] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   76.277942][ T5846] Bluetooth: hci2: command 0x0405 tx timeout
[   76.302252][ T7018] netlink: 'syz.2.297': attribute type 10 has an invalid length.
[   76.436558][ T7006] lo speed is unknown, defaulting to 1000
[   76.593993][ T7022] geneve2: entered promiscuous mode
[   76.642267][ T7026] can: request_module (can-proto-5) failed.
[   76.734702][ T7031] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   76.750148][ T7031] openvswitch: netlink: Duplicate key (type 0).
[   76.797624][ T7033] tipc: Started in network mode
[   76.799665][ T7033] tipc: Node identity , cluster identity 4711
[   76.802196][ T7033] tipc: Failed to obtain node identity
[   76.804167][ T7033] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   76.835466][ T7033] syzkaller0: entered promiscuous mode
[   76.838383][ T7033] syzkaller0: entered allmulticast mode
[   77.193807][ T7047] Bluetooth: MGMT ver 1.23
[   77.196985][ T7047] __nla_validate_parse: 74 callbacks suppressed
[   77.196996][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'.
[   77.745956][ T7051] netlink: 60 bytes leftover after parsing attributes in process `syz.2.304'.
[   77.750266][ T7051] unsupported nlmsg_type 40
[   77.766075][ T7056] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   77.911362][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.914135][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.014350][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.308'.
[   78.025250][ T7059] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.034536][ T7059] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.143756][ T7059] geneve2: left promiscuous mode
[   78.177337][ T5875] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.187245][ T5875] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.190729][ T5875] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.194597][ T5875] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.203539][ T5875] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.206922][ T5875] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.221940][ T5875] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.225181][ T5875] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.229699][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'.
[   78.693362][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'.
[   79.486430][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'.
[   79.553960][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'.
[   79.637682][ T7197] lo speed is unknown, defaulting to 1000
[   79.723795][ T7215] netlink: 'syz.2.326': attribute type 11 has an invalid length.
[   79.729238][ T7214] netlink: 'syz.0.325': attribute type 1 has an invalid length.
[   79.756556][ T7214] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.838199][ T7214] veth3: entered promiscuous mode
[   79.843218][ T7214] bond2: (slave veth3): Enslaving as an active interface with a down link
[   79.849157][ T7198] lo speed is unknown, defaulting to 1000
[   80.296133][ T7243] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   80.382828][ T7245] bridge0: port 3(vlan1) entered blocking state
[   80.385153][ T7245] bridge0: port 3(vlan1) entered disabled state
[   80.387962][ T7245] vlan1: entered allmulticast mode
[   80.389721][ T7245] bridge0: entered allmulticast mode
[   80.392989][ T7245] vlan1: left allmulticast mode
[   80.394661][ T7245] bridge0: left allmulticast mode
[   80.416167][ T7247] netlink: zone id is out of range
[   80.420707][ T7247] netlink: zone id is out of range
[   80.427534][ T7247] netlink: zone id is out of range
[   80.429614][ T7247] netlink: zone id is out of range
[   80.431412][ T7247] netlink: zone id is out of range
[   80.433091][ T7247] netlink: zone id is out of range
[   80.435027][ T7247] netlink: zone id is out of range
[   80.436943][ T7247] netlink: zone id is out of range
[   80.452615][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.336'.
[   80.488148][ T7250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.337'.
[   80.694496][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.339'.
[   81.045043][ T7273] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   81.170684][ T7273] syzkaller1: entered promiscuous mode
[   81.172720][ T7273] syzkaller1: entered allmulticast mode
[   81.789802][ T7333] pim6reg1: entered promiscuous mode
[   81.797869][ T7333] pim6reg1: entered allmulticast mode
[   81.921531][ T7344] rdma_rxe: rxe_newlink: failed to add lo
[   81.962641][ T7346] netlink: 'syz.2.360': attribute type 6 has an invalid length.
[   81.988970][ T7348] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   81.997426][ T7348] bridge0: port 3(netdevsim2) entered blocking state
[   82.002212][ T7348] bridge0: port 3(netdevsim2) entered disabled state
[   82.005000][ T7348] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[   82.017369][ T7348] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[   82.052121][ T7362] netlink: 'syz.1.365': attribute type 7 has an invalid length.
[   82.059994][ T7362] : entered promiscuous mode
[   82.070696][ T7344] netlink: 'syz.0.359': attribute type 11 has an invalid length.
[   82.417692][ T7377] lo speed is unknown, defaulting to 1000
[   82.433159][ T7386] __nla_validate_parse: 8 callbacks suppressed
[   82.433169][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.372'.
[   82.556264][ T7388] batadv1: entered allmulticast mode
[   82.559896][ T7388] 8021q: adding VLAN 0 to HW filter on device batadv1
[   82.935929][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'.
[   82.939401][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'.
[   82.976650][ T7412] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002
[   83.014127][ T7412] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20004
[   83.323150][ T7434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.381'.
[   83.612616][ T7451] syzkaller0: entered promiscuous mode
[   83.614537][ T7451] syzkaller0: entered allmulticast mode
[   83.701820][ T7458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.384'.
[   83.728736][ T7458] netlink: 216 bytes leftover after parsing attributes in process `syz.0.384'.
[   83.889578][ T7466] netlink: 540 bytes leftover after parsing attributes in process `syz.2.389'.
[   83.891862][ T7465] Bluetooth: MGMT ver 1.23
[   83.898875][ T7465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.418871][ T7492] lo speed is unknown, defaulting to 1000
[   84.450295][ T7500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.471087][ T7497] tipc: Disabling bearer <eth:syzkaller0>
[   84.546173][ T7503] netlink: 64 bytes leftover after parsing attributes in process `syz.0.401'.
[   84.554021][ T7503] netlink: 40 bytes leftover after parsing attributes in process `syz.0.401'.
[   84.605545][ T7505] netlink: 'syz.0.402': attribute type 3 has an invalid length.
[   84.645024][ T7506] netlink: 'syz.0.402': attribute type 1 has an invalid length.
[   84.652449][ T7505] netlink: 'syz.0.402': attribute type 1 has an invalid length.
[   84.716829][ T7519] netlink: 224 bytes leftover after parsing attributes in process `syz.0.405'.
[   84.729223][ T7519] netlink: 'syz.0.405': attribute type 1 has an invalid length.
[   84.745860][ T7519] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.765229][ T7519] bond3: (slave gretap1): making interface the new active one
[   84.770224][ T7519] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   84.849059][ T7533] net_ratelimit: 2 callbacks suppressed
[   84.849069][ T7533] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   84.883977][ T7536] gre1: entered promiscuous mode
[   84.886142][ T7536] team0: Device gre1 is of different type
[   84.944165][ T7541] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20000
[   85.991512][ T7633] tipc: Started in network mode
[   85.993454][ T7633] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[   85.995847][ T7633] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[   86.083884][ T7646] netlink: 'syz.2.436': attribute type 30 has an invalid length.
[   86.324853][ T7661] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[   86.461133][ T7668] netlink: 'syz.0.443': attribute type 1 has an invalid length.
[   86.589818][ T7675] netlink: 'syz.0.445': attribute type 1 has an invalid length.
[   86.613566][ T7675] bond4: entered promiscuous mode
[   86.616250][ T7675] 8021q: adding VLAN 0 to HW filter on device bond4
[   86.635627][ T7675] 8021q: adding VLAN 0 to HW filter on device bond4
[   86.638897][ T7675] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[   86.643233][ T7675] bond4: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[   86.648833][ T7675] bond4: (slave vxcan3): making interface the new active one
[   86.651869][ T7675] vxcan3: entered promiscuous mode
[   86.654885][ T7675] bond4: (slave vxcan3): Enslaving as an active interface with an up link
[   86.836379][ T7686] geneve2: entered promiscuous mode
[   86.838521][ T7686] geneve2: entered allmulticast mode
[   86.844724][ T7687] dvmrp0: left allmulticast mode
[   86.987313][ T5313] tipc: Node number set to 10136234
[   87.556572][ T7734] netlink: 'syz.2.458': attribute type 1 has an invalid length.
[   87.561679][ T7734] __nla_validate_parse: 20 callbacks suppressed
[   87.561688][ T7734] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.458'.
[   87.567586][ T7734] netlink: 'syz.2.458': attribute type 1 has an invalid length.
[   87.570117][ T7734] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.458'.
[   88.268847][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.464'.
[   88.550029][ T7748] netlink: 44 bytes leftover after parsing attributes in process `syz.0.464'.
[   88.571540][ T7748] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   88.683885][ T7764] netlink: 'syz.1.467': attribute type 4 has an invalid length.
[   88.686765][ T7770] netlink: 'syz.1.467': attribute type 4 has an invalid length.
[   88.704911][ T7764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.764446][ T7777] netlink: 248 bytes leftover after parsing attributes in process `syz.0.469'.
[   88.786528][ T7764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.796798][ T7779] netlink: 224 bytes leftover after parsing attributes in process `syz.0.469'.
[   88.804618][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'.
[   88.808104][ T7777] netlink: 224 bytes leftover after parsing attributes in process `syz.0.469'.
[   88.811510][ T7782] netlink: 'syz.2.470': attribute type 14 has an invalid length.
[   88.814262][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'.
[   88.825587][ T7777] netlink: 'syz.0.469': attribute type 1 has an invalid length.
[   88.828533][ T7779] netlink: 'syz.0.469': attribute type 1 has an invalid length.
[   88.838524][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'.
[   88.846063][ T7764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.849551][ T7777] bond_slave_0: entered promiscuous mode
[   88.849594][ T7777] bond_slave_1: entered promiscuous mode
[   88.849662][ T7777] macsec2: entered promiscuous mode
[   88.849670][ T7777] bond0: entered promiscuous mode
[   88.859881][ T7777] bond0: left promiscuous mode
[   88.861847][ T7777] bond_slave_0: left promiscuous mode
[   88.863731][ T7777] bond_slave_1: left promiscuous mode
[   89.116465][ T7812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.126345][ T5313] lo speed is unknown, defaulting to 1000
[   89.387462][ T7824] lo speed is unknown, defaulting to 1000
[   89.749596][ T7879] C: renamed from team_slave_0 (while UP)
[   90.442337][ T7904] lo speed is unknown, defaulting to 1000
[   90.471504][ T7915] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.480017][ T7915] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   90.663905][ T7921] lo speed is unknown, defaulting to 1000
[   90.692443][ T5911] IPVS: starting estimator thread 0...
[   90.797640][ T7929] IPVS: using max 82 ests per chain, 196800 per kthread
[   91.463638][ T7961] lo speed is unknown, defaulting to 1000
[   92.249555][ T8035] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.253404][ T8035] batadv_slave_0: entered promiscuous mode
[   92.352370][ T8048] syzkaller0: entered promiscuous mode
[   92.354201][ T8048] syzkaller0: entered allmulticast mode
[   92.433711][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.436789][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.470079][ T8057] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   92.486374][ T8057] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   92.537449][ T8063] validate_nla: 4 callbacks suppressed
[   92.537463][ T8063] netlink: 'syz.0.531': attribute type 10 has an invalid length.
[   92.544318][   T24] IPVS: starting estimator thread 0...
[   92.544615][ T8063] team0: Device ipvlan1 failed to register rx_handler
[   92.546627][ T8066] IPVS: nq: FWM 3 0x00000003 - no destination available
[   92.657414][ T8067] IPVS: using max 55 ests per chain, 132000 per kthread
[   93.283810][ T8077] netlink: 'syz.0.537': attribute type 10 has an invalid length.
[   93.288806][ T8077] macvlan0: entered promiscuous mode
[   93.299402][ T8077] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   93.320178][ T8074] __nla_validate_parse: 18 callbacks suppressed
[   93.320192][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'.
[   93.510564][ T8092] netlink: 'syz.2.541': attribute type 1 has an invalid length.
[   93.515860][ T8095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.539'.
[   93.585428][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'.
[   93.639509][ T8112] netlink: 884 bytes leftover after parsing attributes in process `syz.0.546'.
[   93.776105][ T8125] veth1_to_bridge: entered promiscuous mode
[   93.787994][ T8125] veth1_to_bridge: entered allmulticast mode
[   93.817465][ T8125] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[   93.902413][ T8141] netlink: 36 bytes leftover after parsing attributes in process `syz.2.551'.
[   93.920654][ T8145] netlink: 'syz.0.553': attribute type 42 has an invalid length.
[   93.944413][ T8145] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.947959][ T8145] syzkaller0: entered promiscuous mode
[   93.950265][ T8145] syzkaller0: entered allmulticast mode
[   93.962720][ T8145] tipc: Resetting bearer <eth:syzkaller0>
[   93.968886][ T8143] tipc: Resetting bearer <eth:syzkaller0>
[   93.971809][ T8148] netlink: 68 bytes leftover after parsing attributes in process `syz.2.554'.
[   93.983410][ T8143] tipc: Disabling bearer <eth:syzkaller0>
[   94.709181][ T8189] netlink: 'syz.0.563': attribute type 1 has an invalid length.
[   94.860594][ T8197] lo speed is unknown, defaulting to 1000
[   94.868011][ T8197] lo speed is unknown, defaulting to 1000
[   94.870872][ T8197] lo speed is unknown, defaulting to 1000
[   94.880004][ T8197] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   94.889756][ T8197] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   94.909336][ T8197] lo speed is unknown, defaulting to 1000
[   94.913602][ T8197] lo speed is unknown, defaulting to 1000
[   94.922555][ T8197] lo speed is unknown, defaulting to 1000
[   95.007052][ T8203] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.567'.
[   95.043912][ T8206] netlink: 68 bytes leftover after parsing attributes in process `syz.0.568'.
[   95.046778][ T8206] netlink: 68 bytes leftover after parsing attributes in process `syz.0.568'.
[   95.234259][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'.
[   95.764432][ T8230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.803338][ T8231] netlink: 'syz.1.575': attribute type 1 has an invalid length.
[   95.821823][ T8236] siw: device registration error -23
[   95.835133][ T8236] smc: removing ib device syz2
[   95.889056][ T8240] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   96.125652][ T8249] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.133048][ T8249] syzkaller0: entered promiscuous mode
[   96.136443][ T8249] syzkaller0: entered allmulticast mode
[   96.146598][ T8248] tipc: Resetting bearer <eth:syzkaller0>
[   96.164996][ T8248] tipc: Disabling bearer <eth:syzkaller0>
[   96.194621][ T8251] netlink: 'syz.0.581': attribute type 5 has an invalid length.
[   96.224387][ T8253] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   96.333581][ T8261] netdevsim netdevsim1 netdevsim2: left allmulticast mode
[   96.336562][ T8261] netdevsim netdevsim1 netdevsim2: left promiscuous mode
[   96.341777][ T8261] bridge0: port 3(netdevsim2) entered disabled state
[   96.348841][ T8261] bridge_slave_1: left allmulticast mode
[   96.350812][ T8261] bridge_slave_1: left promiscuous mode
[   96.355618][ T8261] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.362975][ T8261] bridge_slave_0: left allmulticast mode
[   96.365139][ T8261] bridge_slave_0: left promiscuous mode
[   96.368003][ T8261] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.579394][ T8288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.651101][ T8288] lo speed is unknown, defaulting to 1000
[   96.689706][ T8296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.819972][ T8288] lo speed is unknown, defaulting to 1000
[   96.848424][ T8303] netlink: 'syz.2.594': attribute type 12 has an invalid length.
[   97.295923][ T8345] syzkaller0: entered promiscuous mode
[   97.299138][ T8345] syzkaller0: entered allmulticast mode
[   97.302163][ T8344] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.305910][ T8344] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   97.310908][ T8344] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   97.313802][ T8344] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   97.316711][ T8344] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   97.320954][ T8344] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   97.324248][ T8344] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   97.330892][ T8344] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   97.333937][ T8344] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   97.337667][ T8344] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   97.341867][ T8344] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   97.360814][ T8344] tipc: Resetting bearer <eth:syzkaller0>
[   97.370904][ T8344] tipc: Disabling bearer <eth:syzkaller0>
[   97.434771][ T8350] erspan0: entered promiscuous mode
[   97.452924][ T8350] erspan0: left promiscuous mode
[   97.607927][ T8355] lo speed is unknown, defaulting to 1000
[   97.764532][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.767883][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.773707][ T8370] netlink: 'syz.0.610': attribute type 12 has an invalid length.
[   97.784154][ T8369] bond_slave_0: left promiscuous mode
[   97.787349][ T8369] bond_slave_1: left promiscuous mode
[   97.792626][ T8369] dummy0: left promiscuous mode
[   97.794648][ T8369] team_slave_0: left promiscuous mode
[   97.796760][ T8369] team_slave_1: left promiscuous mode
[   97.848881][ T8369] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.855118][ T8369] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.892663][ T8369] tipc: Resetting bearer <eth:syzkaller0>
[   97.934206][ T5313] lo speed is unknown, defaulting to 1000
[   97.943752][ T5313] syz0: Port: 1 Link DOWN
[   97.952204][ T8355] lo speed is unknown, defaulting to 1000
[   97.957726][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.961493][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.970540][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.974495][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.980239][ T5313] lo speed is unknown, defaulting to 1000
[   97.999387][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.002679][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.006094][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.016185][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.051992][ T8374] tipc: Enabling of bearer <et:g> rejected, media not registered
[   98.130499][ T8382] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.133548][ T8382] syzkaller0: entered promiscuous mode
[   98.136678][ T8382] syzkaller0: entered allmulticast mode
[   98.151833][ T8382] tipc: Resetting bearer <eth:syzkaller0>
[   98.160066][ T8381] tipc: Resetting bearer <eth:syzkaller0>
[   98.171058][ T8381] tipc: Disabling bearer <eth:syzkaller0>
[   98.324147][ T8398] netlink: 'syz.1.618': attribute type 1 has an invalid length.
[   98.363916][ T8398] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   98.389335][ T8400] lo speed is unknown, defaulting to 1000
[   98.562235][ T8400] lo speed is unknown, defaulting to 1000
[   98.870937][ T8396] netlink: 'syz.2.617': attribute type 1 has an invalid length.
[   98.877460][ T8396] __nla_validate_parse: 15 callbacks suppressed
[   98.877468][ T8396] netlink: 228 bytes leftover after parsing attributes in process `syz.2.617'.
[   98.950359][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.621'.
[   99.066300][ T8417] netlink: 'syz.2.622': attribute type 4 has an invalid length.
[   99.098415][ T8417] netlink: 'syz.2.622': attribute type 4 has an invalid length.
[   99.108832][   T24] lo speed is unknown, defaulting to 1000
[   99.111391][   T24] syz0: Port: 1 Link ACTIVE
[   99.113476][   T24] lo speed is unknown, defaulting to 1000
[   99.169982][ T8422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.623'.
[   99.526579][ T8436] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   99.619085][ T8437] !: renamed from dummy0
[  102.634697][ T8455] lo speed is unknown, defaulting to 1000
[  102.731107][ T8473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'.
[  102.756628][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'.
[  102.934144][ T8488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.636'.
[  102.946724][ T8455] lo speed is unknown, defaulting to 1000
[  102.979070][   T33] audit: type=1800 audit(1756743861.578:2): pid=8490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.637" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1196 res=0 errno=0
[  102.988583][   T33] audit: type=1800 audit(1756743861.588:3): pid=8490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.637" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1196 res=0 errno=0
[  103.182399][ T8497] syzkaller1: entered promiscuous mode
[  103.184322][ T8497] syzkaller1: entered allmulticast mode
[  103.284854][ T8505] syzkaller1: entered promiscuous mode
[  103.287613][ T8505] syzkaller1: entered allmulticast mode
[  103.499348][ T8512] dvmrp8: entered allmulticast mode
[  103.503302][ T8512] dvmrp8: left allmulticast mode
[  103.718678][ T8520] block nbd0: server does not support multiple connections per device.
[  103.728094][ T8520] block nbd0: shutting down sockets
[  103.773286][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'.
[  103.783170][ T8524] netlink: 'syz.1.648': attribute type 3 has an invalid length.
[  103.785840][ T8524] netlink: 'syz.1.648': attribute type 1 has an invalid length.
[  103.918527][ T8535] netlink: 'syz.2.652': attribute type 1 has an invalid length.
[  103.919303][ T8536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.652'.
[  103.979350][ T8535] netlink: 'syz.2.652': attribute type 1 has an invalid length.
[  104.044987][ T8541] dvmrp8: entered allmulticast mode
[  104.066830][ T8546] lo speed is unknown, defaulting to 1000
[  104.224179][ T8546] lo speed is unknown, defaulting to 1000
[  104.265371][ T8554] sctp: [Deprecated]: syz.2.656 (pid 8554) Use of int in max_burst socket option.
[  104.265371][ T8554] Use struct sctp_assoc_value instead
[  104.279100][ T8554] netlink: 56 bytes leftover after parsing attributes in process `syz.2.656'.
[  104.283090][ T8554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.656'.
[  104.482568][ T8546] dvmrp8: left allmulticast mode
[  104.552626][ T8558] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.556182][ T8558] syzkaller0: entered promiscuous mode
[  104.559389][ T8558] syzkaller0: entered allmulticast mode
[  104.574665][ T8558] tipc: Resetting bearer <eth:syzkaller0>
[  104.580343][ T8557] tipc: Resetting bearer <eth:syzkaller0>
[  104.588547][ T8557] tipc: Disabling bearer <eth:syzkaller0>
[  105.324163][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'.
[  105.402555][ T8578] netlink: 'syz.1.664': attribute type 4 has an invalid length.
[  105.408918][ T8578] netlink: 'syz.1.664': attribute type 4 has an invalid length.
[  105.462534][ T8582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.665'.
[  105.550849][ T8589] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  105.659812][ T8592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.669'.
[  105.662884][ T8592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.669'.
[  105.665842][ T8592] netlink: 'syz.0.669': attribute type 4 has an invalid length.
[  105.709376][ T8596] netlink: 'syz.1.671': attribute type 1 has an invalid length.
[  105.731312][ T8596] 8021q: adding VLAN 0 to HW filter on device bond2
[  105.751561][ T8596] veth11: entered promiscuous mode
[  105.804396][ T8603] syzkaller0: tun_chr_ioctl cmd 1074025677
[  105.806732][ T8603] syzkaller0: linktype set to 1
[  106.051523][ T8619] netlink: 128 bytes leftover after parsing attributes in process `syz.1.677'.
[  106.093428][ T8623] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  106.173901][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.677'.
[  106.177629][ T8619] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  106.181861][ T8619] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  106.207998][ T8636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.680'.
[  106.225368][ T8638] netlink: 'syz.1.677': attribute type 10 has an invalid length.
[  106.235373][ T8636] 8021q: adding VLAN 0 to HW filter on device bond6
[  106.239160][ T8638] team0: Device ipvlan1 failed to register rx_handler
[  106.242060][ T8638] tipc: Resetting bearer <eth:ipvlan1>
[  106.276454][ T8640] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  106.320109][   T10] IPVS: starting estimator thread 0...
[  106.417310][ T8643] IPVS: using max 82 ests per chain, 196800 per kthread
[  106.453219][ T8650] tipc: Enabling <ib:lo> not permitted
[  106.455291][ T8650] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  106.844899][ T8655] tipc: New replicast peer: 255.255.255.255
[  106.850393][ T8655] tipc: Enabled bearer <udp:syz2>, priority 10
[  106.949920][ T8660] netlink: 'syz.1.688': attribute type 13 has an invalid length.
[  106.963172][ T8660] erspan0: entered promiscuous mode
[  107.006164][ T8660] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.011487][ T8660] 8021q: adding VLAN 0 to HW filter on device team0
[  107.015865][ T8660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.064971][ T8660] lo speed is unknown, defaulting to 1000
[  107.066101][ T8663] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.070752][ T8663] syzkaller0: entered promiscuous mode
[  107.072863][ T8663] syzkaller0: entered allmulticast mode
[  107.085089][ T8663] tipc: Resetting bearer <eth:syzkaller0>
[  107.093585][ T8662] tipc: Resetting bearer <eth:syzkaller0>
[  107.103956][ T8662] tipc: Disabling bearer <eth:syzkaller0>
[  107.192259][ T8660] lo speed is unknown, defaulting to 1000
[  107.549042][ T8700] 8021q: adding VLAN 0 to HW filter on device bond3
[  107.586155][ T8700] 8021q: adding VLAN 0 to HW filter on device bond3
[  107.593886][ T8700] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  107.601499][ T8700] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  107.658490][ T8711] bond3: (slave bridge0): Enslaving as an active interface with a down link
[  107.661681][ T8713] v: renamed from ip6_vti0
[  107.835884][ T8731] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.841235][ T8731] syzkaller0: entered promiscuous mode
[  107.843113][ T8731] syzkaller0: entered allmulticast mode
[  107.852868][ T8731] tipc: Resetting bearer <eth:syzkaller0>
[  107.874996][ T8731] tipc: Resetting bearer <eth:syzkaller0>
[  107.889256][ T8736] openvswitch: netlink: Multiple metadata blocks provided
[  107.897944][ T8731] tipc: Disabling bearer <eth:syzkaller0>
[  107.951579][ T8734] lo speed is unknown, defaulting to 1000
[  108.065560][ T8734] lo speed is unknown, defaulting to 1000
[  108.151655][ T8749] syz0: rxe_newlink: already configured on lo
[  108.837594][  T972] tipc: Node number set to 929701278
[  108.984929][ T8762] __nla_validate_parse: 13 callbacks suppressed
[  108.984944][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.718'.
[  109.078628][ T8767] validate_nla: 3 callbacks suppressed
[  109.078641][ T8767] netlink: 'syz.2.719': attribute type 23 has an invalid length.
[  109.281133][ T8775] syzkaller1: entered promiscuous mode
[  109.283520][ T8775] syzkaller1: entered allmulticast mode
[  110.066449][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'.
[  110.140009][ T8797] syzkaller0: entered promiscuous mode
[  110.142335][ T8797] syzkaller0: entered allmulticast mode
[  110.156194][ T8800] netlink: 36 bytes leftover after parsing attributes in process `syz.2.730'.
[  110.162251][ T8800] netlink: 'syz.2.730': attribute type 1 has an invalid length.
[  110.167355][ T8800] netlink: 228 bytes leftover after parsing attributes in process `syz.2.730'.
[  110.220220][ T8805] erspan0: entered allmulticast mode
[  110.272023][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'.
[  110.311638][ T8818] netlink: 'syz.1.737': attribute type 1 has an invalid length.
[  110.316056][ T8818] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  110.341790][ T8824] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  110.433135][ T8830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.740'.
[  110.438940][ T8830] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  110.700809][ T8843] IPVS: Scheduler module ip_vs_sip not found
[  110.746167][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'.
[  110.751774][ T8850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.745'.
[  110.780731][ T8850] netlink: 277 bytes leftover after parsing attributes in process `syz.1.745'.
[  110.846173][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.747'.
[  110.850857][ T8856] netlink: 'syz.1.747': attribute type 2 has an invalid length.
[  110.914064][ T8864] netlink: 'syz.1.749': attribute type 7 has an invalid length.
[  110.945075][ T8864] 8021q: adding VLAN 0 to HW filter on device bond4
[  110.949470][ T8864] bridge3: port 1(bond4) entered blocking state
[  110.952320][ T8864] bridge3: port 1(bond4) entered disabled state
[  110.955101][ T8864] bond4: entered allmulticast mode
[  110.962554][ T8864] bridge3: port 1(bond4) entered blocking state
[  110.965379][ T8864] bridge3: port 1(bond4) entered forwarding state
[  111.182935][ T8878] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.186550][ T8878] syzkaller0: entered promiscuous mode
[  111.189829][ T8878] syzkaller0: entered allmulticast mode
[  111.194799][ T8878] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.210627][ T8878] tipc: Resetting bearer <eth:syzkaller0>
[  111.232712][ T8877] tipc: Resetting bearer <eth:syzkaller0>
[  111.242854][ T8877] tipc: Disabling bearer <eth:syzkaller0>
[  111.354787][ T8883] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[  111.363634][ T8883] netlink: 'syz.1.757': attribute type 21 has an invalid length.
[  111.502064][ T8889] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  111.625094][ T8905] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  111.754387][ T8897] bridge3: port 1(bond4) entered disabled state
[  111.814243][ T8911] netlink: 'syz.2.763': attribute type 1 has an invalid length.
[  111.853419][ T8911] 8021q: adding VLAN 0 to HW filter on device bond7
[  111.877613][ T8911] 8021q: adding VLAN 0 to HW filter on device bond7
[  111.880822][ T8911] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address
[  111.896676][ T8911] bond7: (slave vxcan5): Error -95 calling set_mac_address
[  111.936729][ T8917] veth5: entered promiscuous mode
[  111.941715][ T8917] bond7: (slave veth5): Enslaving as an active interface with a down link
[  111.953047][ T7141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.955997][ T7141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.013489][ T8919] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.016680][ T8919] syzkaller0: entered promiscuous mode
[  112.019329][ T8919] syzkaller0: entered allmulticast mode
[  112.057368][ T8919] tipc: Resetting bearer <eth:syzkaller0>
[  112.099579][ T8918] tipc: Resetting bearer <eth:syzkaller0>
[  112.130054][ T8918] tipc: Disabling bearer <eth:syzkaller0>
[  112.223441][ T8924] lo speed is unknown, defaulting to 1000
[  112.239481][ T8927] ip6tnl0: entered promiscuous mode
[  112.241688][ T8927] ip6tnl0: entered allmulticast mode
[  112.365294][ T8924] lo speed is unknown, defaulting to 1000
[  112.511089][ T8939] bond0: Device is already in use.
[  112.616775][ T8944] pim6reg: entered allmulticast mode
[  112.645990][ T8946] sctp: [Deprecated]: syz.2.775 (pid 8946) Use of int in max_burst socket option deprecated.
[  112.645990][ T8946] Use struct sctp_assoc_value instead
[  112.716800][ T8953] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.720161][ T8953] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.912861][ T8970] netlink: 'syz.2.780': attribute type 11 has an invalid length.
[  113.180606][ T8993] netlink: 'syz.0.786': attribute type 6 has an invalid length.
[  113.183888][ T8993] netlink: 'syz.0.786': attribute type 6 has an invalid length.
[  113.223283][ T8996] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.262021][ T9002] netlink: 'syz.0.789': attribute type 1 has an invalid length.
[  113.892123][ T9050] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  114.003525][ T9057] sch_fq: defrate 257 ignored.
[  114.342924][ T9090] __nla_validate_parse: 21 callbacks suppressed
[  114.342934][ T9090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.798'.
[  114.383689][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'.
[  114.389961][ T9095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.799'.
[  114.393827][ T9095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.799'.
[  114.433509][ T9097] netlink: 36 bytes leftover after parsing attributes in process `syz.0.800'.
[  114.624286][ T9105] netlink: 'syz.0.802': attribute type 4 has an invalid length.
[  114.627956][ T9105] netlink: 17 bytes leftover after parsing attributes in process `syz.0.802'.
[  114.742018][ T9112] netlink: 'syz.0.804': attribute type 3 has an invalid length.
[  114.965450][ T9121] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  114.968206][ T9117] Bluetooth: MGMT ver 1.23
[  115.014857][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.807'.
[  115.063291][ T9135] netlink: 'syz.0.809': attribute type 3 has an invalid length.
[  115.139453][ T9144] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  115.142646][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.813'.
[  115.146374][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.813'.
[  115.240636][ T9153] netlink: 32 bytes leftover after parsing attributes in process `syz.0.817'.
[  115.362792][ T9162] netlink: 'syz.1.818': attribute type 1 has an invalid length.
[  115.459534][ T5236] Bluetooth: hci2: link tx timeout
[  115.461531][ T5236] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  115.536233][ T9176] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.540803][ T9176] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.558830][ T9183] IPVS: length: 163 != 8
[  115.613667][ T9176] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.619912][ T9176] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.663168][ T9193] netlink: 'syz.1.828': attribute type 1 has an invalid length.
[  115.666245][ T9193] netlink: 'syz.1.828': attribute type 1 has an invalid length.
[  115.684793][ T9176] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.692569][ T9176] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.710236][ T9194] lo speed is unknown, defaulting to 1000
[  115.773175][ T9176] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.780672][ T9176] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.866872][ T9194] lo speed is unknown, defaulting to 1000
[  115.922202][ T5888] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  115.924970][ T5888] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.939707][ T5888] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  115.943205][ T5888] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.963310][ T5888] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  115.966185][ T5888] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.983127][ T5888] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  115.985824][ T5888] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.076370][ T9226] netlink: 'syz.1.836': attribute type 1 has an invalid length.
[  116.158847][ T9232] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.161623][ T9232] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  116.168622][ T9232] syzkaller0: entered promiscuous mode
[  116.170482][ T9232] syzkaller0: entered allmulticast mode
[  117.106705][ T9240] tipc: Resetting bearer <eth:syzkaller0>
[  117.120742][ T9231] tipc: Resetting bearer <eth:syzkaller0>
[  117.130972][ T9231] tipc: Disabling bearer <eth:syzkaller0>
[  117.231233][ T9254] batadv1: left allmulticast mode
[  117.234337][ T9254] veth11: left promiscuous mode
[  117.306411][ T9260] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.477788][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  117.552245][ T9288] openvswitch: netlink: EtherType 0 is less than min 600
[  117.576133][ T9290] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  117.582124][ T9291] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  117.673252][ T9297] 8021q: adding VLAN 0 to HW filter on device bond59
[  117.799672][ T9307] netlink: 'syz.1.859': attribute type 15 has an invalid length.
[  117.803220][ T9310] netlink: 'syz.1.859': attribute type 1 has an invalid length.
[  117.924105][ T9319] lo speed is unknown, defaulting to 1000
[  118.007964][ T9319] lo speed is unknown, defaulting to 1000
[  118.163375][ T9344] netlink: 'syz.2.869': attribute type 12 has an invalid length.
[  118.353246][ T9353] bond59: option mode: unable to set because the bond device is up
[  118.363530][ T9353] bond59: (slave macvlan0): Enslaving as a backup interface with an up link
[  118.372045][ T9353] bond0: (slave batadv0): Releasing backup interface
[  118.376865][ T9353] bond0: (slave bond_slave_0): Releasing backup interface
[  118.382533][ T9353] bond0: (slave bond_slave_1): Releasing backup interface
[  118.386593][ T9353] team0: Port device team_slave_0 removed
[  118.391168][ T9353] team0: Port device team_slave_1 removed
[  118.393911][ T9353] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.400282][ T9353] team0: Port device geneve0 removed
[  118.403930][ T9353] bond1: (slave ip6gretap1): Releasing backup interface
[  118.410126][ T9353] bond3: (slave bridge0): Releasing active interface
[  118.414032][ T9353] bond4: left allmulticast mode
[  118.416450][ T9353] bridge3: port 1(bond4) entered disabled state
[  118.426635][ T9353] bond59: (slave macvlan0): Releasing backup interface
[  118.435618][ T9359] vlan0: left allmulticast mode
[  118.439825][ T9359] bond1: left allmulticast mode
[  119.521510][ T9423] __nla_validate_parse: 23 callbacks suppressed
[  119.521521][ T9423] netlink: 52 bytes leftover after parsing attributes in process `syz.1.887'.
[  119.570737][ T9427] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  119.575865][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'.
[  119.616385][ T9427] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  119.622392][ T9427] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  119.625372][ T9431] netlink: 44 bytes leftover after parsing attributes in process `syz.0.890'.
[  119.630926][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'.
[  119.661122][ T9433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.891'.
[  119.689512][ T9435] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.693426][ T9435] syzkaller0: entered promiscuous mode
[  119.695742][ T9435] syzkaller0: entered allmulticast mode
[  119.710135][ T9435] tipc: Resetting bearer <eth:syzkaller0>
[  119.760273][ T9434] tipc: Resetting bearer <eth:syzkaller0>
[  119.775915][ T9434] tipc: Disabling bearer <eth:syzkaller0>
[  119.783539][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.894'.
[  119.891400][ T9449] netlink: 'syz.1.897': attribute type 11 has an invalid length.
[  119.912937][ T9450] xt_HMARK: spi-set and port-set can't be combined
[  119.946920][ T9455] netlink: 128 bytes leftover after parsing attributes in process `syz.0.899'.
[  119.955748][   T53] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  119.964653][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.899'.
[  119.972213][ T9455] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  119.977032][ T9455] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  120.016786][ T9460] validate_nla: 2 callbacks suppressed
[  120.016795][ T9460] netlink: 'syz.0.899': attribute type 10 has an invalid length.
[  120.024770][ T9460] team0: Device ipvlan1 failed to register rx_handler
[  120.240243][ T9472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'.
[  120.287922][ T9474] netlink: 256 bytes leftover after parsing attributes in process `syz.1.903'.
[  120.410386][ T9480] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  120.804462][ T9489] syz0: rxe_newlink: already configured on lo
[  120.810751][ T9490] erspan0: left allmulticast mode
[  120.819549][ T9490] ip6tnl0: left promiscuous mode
[  120.821399][ T9490] ip6tnl0: left allmulticast mode
[  120.825757][ T9493] netlink: 'syz.0.908': attribute type 1 has an invalid length.
[  120.833159][ T9490] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.840597][ T9490] 8021q: adding VLAN 0 to HW filter on device team0
[  120.846574][ T9490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.891849][ T9493] bond7: (slave gretap3): making interface the new active one
[  120.894975][ T9493] bond7: (slave gretap3): Enslaving as an active interface with an up link
[  120.900649][ T9493] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  120.908654][ T9493] vlan2: entered allmulticast mode
[  120.910543][ T9493] bond7: entered allmulticast mode
[  120.912363][ T9493] gretap3: entered allmulticast mode
[  120.915740][ T9493] bond7: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  120.993124][ T9502] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2
[  121.243884][ T9515] netlink: 'syz.0.913': attribute type 27 has an invalid length.
[  121.262140][ T9515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.269518][ T5911] lo speed is unknown, defaulting to 1000
[  121.307817][ T9524] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  121.311490][ T9524] gretap1: entered promiscuous mode
[  121.313290][ T9524] gretap1: entered allmulticast mode
[  121.628586][ T9540] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.691705][   T24] lo speed is unknown, defaulting to 1000
[  121.694185][   T24] syz1: Port: 1 Link DOWN
[  121.700264][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.703270][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.706850][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.711785][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.714708][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.718997][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.722554][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.725865][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.740509][ T9544] syzkaller1: entered promiscuous mode
[  121.743012][ T9544] syzkaller1: entered allmulticast mode
[  122.305088][ T9570] netlink: 'syz.0.925': attribute type 6 has an invalid length.
[  123.315615][ T9607] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  123.363341][ T9610] 8021q: adding VLAN 0 to HW filter on device bond8
[  123.366237][ T9607] lo speed is unknown, defaulting to 1000
[  123.487702][ T9607] lo speed is unknown, defaulting to 1000
[  123.564097][ T9627] delete_channel: no stack
[  123.591931][ T9627] bridge5: entered allmulticast mode
[  123.655107][ T9621] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  123.699354][ T9637] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  123.707296][ T9638] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  123.812767][ T9640] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  123.813419][ T9647] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  124.210954][ T9676] lo speed is unknown, defaulting to 1000
[  124.367827][ T9676] lo speed is unknown, defaulting to 1000
[  124.484959][ T9694] lo speed is unknown, defaulting to 1000
[  124.524675][ T9697] sctp: [Deprecated]: syz.1.954 (pid 9697) Use of int in max_burst socket option deprecated.
[  124.524675][ T9697] Use struct sctp_assoc_value instead
[  124.558490][ T9701] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.561707][ T9702] syzkaller0: entered promiscuous mode
[  124.571328][ T9702] syzkaller0: entered allmulticast mode
[  124.575562][ T9701] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  124.589177][ T9701] tipc: Resetting bearer <eth:syzkaller0>
[  124.601474][ T9701] tipc: Disabling bearer <eth:syzkaller0>
[  124.642551][ T9694] lo speed is unknown, defaulting to 1000
[  124.792070][ T9716] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.160723][ T9725] __nla_validate_parse: 49 callbacks suppressed
[  125.160733][ T9725] netlink: 224 bytes leftover after parsing attributes in process `syz.2.962'.
[  125.284711][   T33] audit: type=1800 audit(1756743883.878:4): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.963" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=1627 res=0 errno=0
[  125.348848][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'.
[  125.353340][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'.
[  125.380661][ T9747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.966'.
[  125.409117][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.964'.
[  125.450760][ T9751] gretap1: left promiscuous mode
[  125.453095][ T9751] gretap1: left allmulticast mode
[  125.502168][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'.
[  125.543511][ T9753] ==================================================================
[  125.546883][ T9753] BUG: KASAN: use-after-free in xfrm_alloc_spi+0x570/0xf30
[  125.550004][ T9753] Read of size 4 at addr ffff8881104eb6c4 by task syz.2.970/9753
[  125.554126][ T9753] 
[  125.555186][ T9753] CPU: 1 UID: 0 PID: 9753 Comm: syz.2.970 Not tainted syzkaller #0 PREEMPT(full) 
[  125.555201][ T9753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.555215][ T9753] Call Trace:
[  125.555224][ T9753]  <TASK>
[  125.555230][ T9753]  dump_stack_lvl+0x189/0x250
[  125.555247][ T9753]  ? __kasan_check_byte+0x12/0x40
[  125.555267][ T9753]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.555280][ T9753]  ? lock_release+0x4b/0x3e0
[  125.555299][ T9753]  ? __virt_addr_valid+0x4a5/0x5c0
[  125.555316][ T9753]  print_report+0xca/0x240
[  125.555328][ T9753]  ? xfrm_alloc_spi+0x570/0xf30
[  125.555343][ T9753]  kasan_report+0x118/0x150
[  125.555359][ T9753]  ? xfrm_alloc_spi+0x570/0xf30
[  125.555374][ T9753]  xfrm_alloc_spi+0x570/0xf30
[  125.555388][ T9753]  ? xfrm_alloc_spi+0x2a0/0xf30
[  125.555405][ T9753]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  125.555420][ T9753]  ? xfrm_find_acq+0x87/0xa0
[  125.555436][ T9753]  xfrm_alloc_userspi+0x70b/0xc90
[  125.555457][ T9753]  ? apparmor_capable+0x137/0x1b0
[  125.555470][ T9753]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  125.555486][ T9753]  ? __nla_parse+0x40/0x60
[  125.555505][ T9753]  xfrm_user_rcv_msg+0x7a3/0xab0
[  125.555521][ T9753]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  125.555543][ T9753]  ? __pfx___mutex_trylock_common+0x10/0x10
[  125.555556][ T9753]  ? rcu_is_watching+0x15/0xb0
[  125.555567][ T9753]  ? trace_contention_end+0x39/0x120
[  125.555579][ T9753]  ? __mutex_lock+0x335/0x1350
[  125.555594][ T9753]  netlink_rcv_skb+0x208/0x470
[  125.555606][ T9753]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  125.555622][ T9753]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  125.555636][ T9753]  ? netlink_deliver_tap+0x2e/0x1b0
[  125.555647][ T9753]  ? netlink_deliver_tap+0x2e/0x1b0
[  125.555658][ T9753]  xfrm_netlink_rcv+0x79/0x90
[  125.555673][ T9753]  netlink_unicast+0x82f/0x9e0
[  125.555692][ T9753]  ? __pfx_netlink_unicast+0x10/0x10
[  125.555709][ T9753]  ? netlink_sendmsg+0x642/0xb30
[  125.555720][ T9753]  ? skb_put+0x11b/0x210
[  125.555733][ T9753]  netlink_sendmsg+0x805/0xb30
[  125.555747][ T9753]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.555758][ T9753]  ? aa_sock_msg_perm+0xf1/0x1d0
[  125.555769][ T9753]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  125.555781][ T9753]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.555792][ T9753]  __sock_sendmsg+0x21c/0x270
[  125.555809][ T9753]  ____sys_sendmsg+0x505/0x830
[  125.555823][ T9753]  ? __pfx_____sys_sendmsg+0x10/0x10
[  125.555838][ T9753]  ? import_iovec+0x74/0xa0
[  125.555852][ T9753]  ___sys_sendmsg+0x21f/0x2a0
[  125.555865][ T9753]  ? __pfx____sys_sendmsg+0x10/0x10
[  125.555887][ T9753]  ? __fget_files+0x2a/0x420
[  125.555897][ T9753]  ? __fget_files+0x3a0/0x420
[  125.555909][ T9753]  __x64_sys_sendmsg+0x19b/0x260
[  125.555923][ T9753]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  125.555938][ T9753]  ? rcu_is_watching+0x15/0xb0
[  125.555950][ T9753]  ? do_syscall_64+0xbe/0x3b0
[  125.555961][ T9753]  do_syscall_64+0xfa/0x3b0
[  125.556000][ T9753]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.556013][ T9753]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.556025][ T9753]  ? exc_page_fault+0x9f/0xf0
[  125.556036][ T9753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.556049][ T9753] RIP: 0033:0x7fa1d678ebe9
[  125.556060][ T9753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.556070][ T9753] RSP: 002b:00007fa1d7655038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.556083][ T9753] RAX: ffffffffffffffda RBX: 00007fa1d69c5fa0 RCX: 00007fa1d678ebe9
[  125.556091][ T9753] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008
[  125.556098][ T9753] RBP: 00007fa1d6811e19 R08: 0000000000000000 R09: 0000000000000000
[  125.556105][ T9753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.556112][ T9753] R13: 00007fa1d69c6038 R14: 00007fa1d69c5fa0 R15: 00007ffc5e2db778
[  125.556124][ T9753]  </TASK>
[  125.556129][ T9753] 
[  125.711206][ T9753] The buggy address belongs to the physical page:
[  125.713598][ T9753] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1104eb
[  125.716641][ T9753] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  125.719111][ T9753] raw: 057ff00000000000 0000000000000000 ffffea0004413ac8 0000000000000000
[  125.721951][ T9753] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  125.724743][ T9753] page dumped because: kasan: bad access detected
[  125.727085][ T9753] page_owner tracks the page as freed
[  125.728996][ T9753] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7080, tgid 7073 (syz.2.311), ts 78383897022, free_ts 123766616943
[  125.735451][ T9753]  post_alloc_hook+0x240/0x2a0
[  125.737039][ T9753]  get_page_from_freelist+0x21e4/0x22c0
[  125.739382][ T9753]  __alloc_frozen_pages_noprof+0x181/0x370
[  125.741731][ T9753]  alloc_pages_mpol+0x232/0x4a0
[  125.743683][ T9753]  allocate_slab+0x8a/0x370
[  125.745428][ T9753]  ___slab_alloc+0xbeb/0x1410
[  125.747255][ T9753]  kmem_cache_alloc_noprof+0x283/0x3c0
[  125.749096][ T9753]  xfrm_state_alloc+0x24/0x2f0
[  125.750759][ T9753]  xfrm_state_find+0x37d4/0x5400
[  125.752416][ T9753]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  125.754660][ T9753]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  125.756451][ T9753]  xfrm_lookup_route+0x3c/0x1c0
[  125.758136][ T9753]  udp_sendmsg+0x142e/0x2170
[  125.759607][ T9753]  __sock_sendmsg+0x19c/0x270
[  125.761293][ T9753]  ____sys_sendmsg+0x52d/0x830
[  125.763270][ T9753]  ___sys_sendmsg+0x21f/0x2a0
[  125.765169][ T9753] page last free pid 5295 tgid 5295 stack trace:
[  125.767693][ T9753]  __free_frozen_pages+0xbc4/0xd30
[  125.769774][ T9753]  __slab_free+0x303/0x3c0
[  125.771654][ T9753]  qlist_free_all+0x97/0x140
[  125.773555][ T9753]  kasan_quarantine_reduce+0x148/0x160
[  125.775711][ T9753]  __kasan_slab_alloc+0x22/0x80
[  125.777663][ T9753]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  125.779873][ T9753]  getname_flags+0xb8/0x540
[  125.781745][ T9753]  do_sys_openat2+0xbc/0x1c0
[  125.783614][ T9753]  __x64_sys_openat+0x138/0x170
[  125.785580][ T9753]  do_syscall_64+0xfa/0x3b0
[  125.787408][ T9753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.789759][ T9753] 
[  125.790759][ T9753] Memory state around the buggy address:
[  125.793031][ T9753]  ffff8881104eb580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  125.796269][ T9753]  ffff8881104eb600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  125.799442][ T9753] >ffff8881104eb680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  125.802642][ T9753]                                            ^
[  125.804937][ T9753]  ffff8881104eb700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  125.808077][ T9753]  ffff8881104eb780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  125.811264][ T9753] ==================================================================
[  125.814371][ T9753] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  125.816738][ T9753] CPU: 1 UID: 0 PID: 9753 Comm: syz.2.970 Not tainted syzkaller #0 PREEMPT(full) 
[  125.820076][ T9753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.823716][ T9753] Call Trace:
[  125.824959][ T9753]  <TASK>
[  125.826041][ T9753]  dump_stack_lvl+0x99/0x250
[  125.827939][ T9753]  ? __asan_memcpy+0x40/0x70
[  125.829789][ T9753]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.831630][ T9753]  ? __pfx__printk+0x10/0x10
[  125.833256][ T9753]  vpanic+0x281/0x750
[  125.834758][ T9753]  ? __pfx_vpanic+0x10/0x10
[  125.836535][ T9753]  ? irqentry_exit+0x74/0x90
[  125.838207][ T9753]  panic+0xb9/0xc0
[  125.839736][ T9753]  ? __pfx_panic+0x10/0x10
[  125.841536][ T9753]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  125.843784][ T9753]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  125.846168][ T9753]  ? xfrm_alloc_spi+0x570/0xf30
[  125.848119][ T9753]  check_panic_on_warn+0x89/0xb0
[  125.849903][ T9753]  ? xfrm_alloc_spi+0x570/0xf30
[  125.851655][ T9753]  end_report+0x78/0x160
[  125.853020][ T9753]  kasan_report+0x129/0x150
[  125.854693][ T9753]  ? xfrm_alloc_spi+0x570/0xf30
[  125.856533][ T9753]  xfrm_alloc_spi+0x570/0xf30
[  125.858119][ T9753]  ? xfrm_alloc_spi+0x2a0/0xf30
[  125.859804][ T9753]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  125.861571][ T9753]  ? xfrm_find_acq+0x87/0xa0
[  125.863291][ T9753]  xfrm_alloc_userspi+0x70b/0xc90
[  125.865205][ T9753]  ? apparmor_capable+0x137/0x1b0
[  125.866925][ T9753]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  125.868824][ T9753]  ? __nla_parse+0x40/0x60
[  125.870520][ T9753]  xfrm_user_rcv_msg+0x7a3/0xab0
[  125.872468][ T9753]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  125.874340][ T9753]  ? __pfx___mutex_trylock_common+0x10/0x10
[  125.876455][ T9753]  ? rcu_is_watching+0x15/0xb0
[  125.878382][ T9753]  ? trace_contention_end+0x39/0x120
[  125.880260][ T9753]  ? __mutex_lock+0x335/0x1350
[  125.882096][ T9753]  netlink_rcv_skb+0x208/0x470
[  125.883870][ T9753]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  125.885931][ T9753]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  125.887715][ T9753]  ? netlink_deliver_tap+0x2e/0x1b0
[  125.889719][ T9753]  ? netlink_deliver_tap+0x2e/0x1b0
[  125.891855][ T9753]  xfrm_netlink_rcv+0x79/0x90
[  125.893416][ T9753]  netlink_unicast+0x82f/0x9e0
[  125.895042][ T9753]  ? __pfx_netlink_unicast+0x10/0x10
[  125.896716][ T9753]  ? netlink_sendmsg+0x642/0xb30
[  125.898360][ T9753]  ? skb_put+0x11b/0x210
[  125.899753][ T9753]  netlink_sendmsg+0x805/0xb30
[  125.901328][ T9753]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.903175][ T9753]  ? aa_sock_msg_perm+0xf1/0x1d0
[  125.904788][ T9753]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  125.906655][ T9753]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.908746][ T9753]  __sock_sendmsg+0x21c/0x270
[  125.910720][ T9753]  ____sys_sendmsg+0x505/0x830
[  125.912384][ T9753]  ? __pfx_____sys_sendmsg+0x10/0x10
[  125.914274][ T9753]  ? import_iovec+0x74/0xa0
[  125.915922][ T9753]  ___sys_sendmsg+0x21f/0x2a0
[  125.917452][ T9753]  ? __pfx____sys_sendmsg+0x10/0x10
[  125.919360][ T9753]  ? __fget_files+0x2a/0x420
[  125.920844][ T9753]  ? __fget_files+0x3a0/0x420
[  125.922355][ T9753]  __x64_sys_sendmsg+0x19b/0x260
[  125.923950][ T9753]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  125.925675][ T9753]  ? rcu_is_watching+0x15/0xb0
[  125.927193][ T9753]  ? do_syscall_64+0xbe/0x3b0
[  125.928671][ T9753]  do_syscall_64+0xfa/0x3b0
[  125.930250][ T9753]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.932168][ T9753]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.934559][ T9753]  ? exc_page_fault+0x9f/0xf0
[  125.936432][ T9753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.938749][ T9753] RIP: 0033:0x7fa1d678ebe9
[  125.940154][ T9753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.946742][ T9753] RSP: 002b:00007fa1d7655038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.949506][ T9753] RAX: ffffffffffffffda RBX: 00007fa1d69c5fa0 RCX: 00007fa1d678ebe9
[  125.952367][ T9753] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008
[  125.955226][ T9753] RBP: 00007fa1d6811e19 R08: 0000000000000000 R09: 0000000000000000
[  125.958053][ T9753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.960583][ T9753] R13: 00007fa1d69c6038 R14: 00007fa1d69c5fa0 R15: 00007ffc5e2db778
[  125.963298][ T9753]  </TASK>
[  125.965113][ T9753] Kernel Offset: disabled
[  125.966515][ T9753] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:24:44  Registers:
info registers vcpu 0

CPU#0
RAX=7ca0cc9816b0c900 RBX=ffffffff819683c8 RCX=7ca0cc9816b0c900 RDX=0000000000000001
RSI=ffffffff8d9b9570 RDI=ffffffff8be33800 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39330 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a43f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c297ed8 CR3=000000003b58a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000006f6c
XMM02=00007f3bd5997498 00007f3bd5997470 XMM03=00007f3bd59974a8 00007f3bd59974a0
XMM04=00007f3bd64fd100 00007f3bd5997460 XMM05=00007f3bd5997478 00007f3bd59974c0
XMM06=00007f3bd59974b8 00007f3bd59974b0 XMM07=00007f3bd59974a8 00007f3bd59974a0
XMM08=0000000000000000 00007f3bd5812ee7 XMM09=0000000000000000 00007f3bd5812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001247 RDI=0000000000001248 RBP=00000000000003f8 RSP=ffffc90007d169f0
R8 =ffff888021580237 R9 =1ffff110042b0046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b018ef R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa1d76556c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000ab9ff0 CR3=000000010872c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa1d6997498 00007fa1d6997470 XMM03=00007fa1d69974a8 00007fa1d69974a0
XMM04=00007fa1d74fd100 00007fa1d6997460 XMM05=00007fa1d6997478 00007fa1d69974c0
XMM06=00007fa1d69974b8 00007fa1d69974b0 XMM07=00007fa1d69974a8 00007fa1d69974a0
XMM08=0000000000000000 00007fa1d6812ee7 XMM09=0000000000000000 00007fa1d6812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
