last executing test programs:

2.537566566s ago: executing program 0 (id=2186):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c001580080001"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendto$inet(r3, 0x0, 0x0, 0x20000040, 0x0, 0x0)
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@remote, @in6=@mcast2}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
splice(r2, 0x0, r4, 0x0, 0x10d00, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x20000000)
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f00000003c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000400)=0x2c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0}, 0x90)
r6 = socket$inet(0x2, 0x6000000000000001, 0x0)
mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r6, 0x0)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r7, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x1}}], 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010500000000000000ff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028008001f00000000000800070005000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20008041)

2.401034962s ago: executing program 0 (id=2189):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4, 0x0, 0x5}, 0x18)
r5 = socket(0x1, 0x2, 0x0)
connect$rose(r5, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
unshare(0x6a040000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r7, @ANYRES32=r7, @ANYBLOB="0800050003000000f9741a4d38db9da24068784b79f61208394b8d37ba5ba108a9473b0458a885970ddef94d8d9baae5f9e40edc3920e67dd58e86957ce8a4d68554d4ef0a606896e30e07766126b6be0d"], 0x24}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000000300000000000000000000000000000a2c000000050a010200000000000e0000020000000900030073797a3a000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44ecff2d5f28732c2dbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78ac86d603c1a66db4424a8ba100022db228bb7b5eb51001b2000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6c07c21dbb707f3336336ebb7d68100000011000080a64a6f8911"], 0xe0}], 0x1}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a320000"], 0xe8}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b00000002"], 0x68}}, 0x4000004)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x61e}, @in6={0xa, 0x4e20, 0x9, @loopback, 0x1}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x518}], 0x54)
sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x50, 0x2, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x191}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, 0x0, 0x25, 0x2, @void}, 0x10)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4840}, 0x40080)

1.995154916s ago: executing program 0 (id=2196):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x12}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000140)=0x4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x5)
r6 = socket$packet(0x11, 0x2, 0x300)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f00000012c0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x29}, 0x3}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000680)="e8d5b23341ca2005478d63675bfb46a8a8408192aecbe47fa8e33d5d858c35f387817d3ea8a3190bb0ba482b1fe0a41ae2e41c60772cc4c4df594be54e217521", 0x40}, {&(0x7f0000000d40)="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", 0x1a1}, {&(0x7f00000007c0)="ba8ca6c0964f7c73e4bc27b0d660fa7abfb79523b174e410f27b", 0x1a}, {&(0x7f0000000800)="de2a616c70b6c0dcb80516b26aba51bce3025a7df1053327a75b45cdb19d77cc84b00a0dde561852a5f9974f5741037cb844873c52d3435e0d0c48f79c220e14e3e042123ef376b5e8d7dbf3806074c614b40b709805830780ce801264a66c273c7a13bbc4f712818992f8511046021cbf3607d0ace2a052cc4244dc59667a137aa944cead541cb09b1359320522a9d6e38783012b5bf9f91977d8e4356a578e4690a9834d7913da936f0302a0a157347f7e746b209f8582d3558c41a82e020623", 0xc1}, {&(0x7f0000000900)="330373b6204d692464b27dafc0befa100925116ec43e4eb1e765384b5ef0f9bb4c09", 0x22}], 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xf0}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @private1, 0x4}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000009c0)="7e0c757836bd29c108627eb4cca829864bcf64fd342fd780a829385f204bf936d81e01e2e63fa915123fdf67bb6506ea287ae3eeb469befdc94aa612961819c1890d702aa2dbe3a7840bca1d0a7091f3804db013e796720789e7a6d6d97c499a291326254b407e41748578c404ff7c6edb52955cb1283b790e77ebadbaac6b0ee435b0071713131b06c506a3fa288d22dd5d69f0fcc0d5dea60b8bb431d98a18519fb8413e900fa7b004ba65665820f46752d65db05e287c5aa735c48a33d1257aca0cffed7710f751beb4ba2682b024e737a0dca722e4f4b8", 0xd9}, {&(0x7f00000003c0)="863f6d44c341df5930fdb6011bedaf", 0xf}, {&(0x7f0000000f00)="d1c20de9e579607750bc5ebd6e5537d683521a5bf47db89f8822d52dd6d134a9b3e04433d0c3aabbfc51c0e2dc0e93552433efb00bbd45734020315bfcff78971c1f26431e07b253963b4fcb505817bd2e54f4b3a5b32268d14ef7c410455bcbdd91eca67cb3ba81477c8127c664a63b81bbf48fae2c1c8870cffc27525508de5954a8cc7d25137d30f268802855c495e20c4e3395cfb1e3adb2e726162148856c3d66e730d814de81a7dcda8d152bb2f07a215e66d022e7d459b1ba8f29cd8258ea862cdf8aa6699902c6559c7de3c318f97cae11af847ca6675ff96bf12d7f55a33e1d0a2186a37e8f0593b40d", 0xee}], 0x3, &(0x7f0000001000)=[@hopopts={{0x50, 0x29, 0x36, {0x0, 0x6, '\x00', [@hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x10, {0x3, 0x2, 0x8, 0x7, [0x81]}}, @enc_lim={0x4, 0x1, 0xdc}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x67, 0x14, 0x2, 0x81, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2]}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x11, 0x4, '\x00', [@enc_lim, @calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x3, [0x1, 0x7]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x442}}, @flowinfo={{0x14, 0x29, 0xb, 0xffffffff}}, @rthdr={{0x68, 0x29, 0x39, {0x32, 0xa, 0x0, 0x5, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @local}, @private0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x4, 0xa, 0x2, 0xc, 0x0, [@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x16, 0xc, 0x0, 0x5, 0x0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2]}}}], 0x2c0}}], 0x4, 0x24000045)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
accept(r5, &(0x7f0000000080)=@can, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a00170000000004003700090003002e2e2564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000005000000000000000100000d000000000200002e2e2000000000000000"], 0x0, 0x31, 0x0, 0x1, 0x7}, 0x28)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0x2a0f5, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x30000000, @loopback}, 0x1c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0xd, <r9=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65, 0x0, 0x0, 0xfaffff7f}}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8201000000420000140003006272696467655f736c6176655f30000008000400d4000000600016805c00018010000200f9ffffff"], 0x9c}}, 0x0)
r10 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$BTRFS_IOC_BALANCE_CTL(r10, 0x40049421, 0x3)

1.090044951s ago: executing program 0 (id=2201):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)={0x1fc, r5, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa84a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xb471, @mcast2, 0x4f}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81c000}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "21f2d68771b809b6088e9108bf807914b525dff6ff67a5223d91a0152f7f15"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "18157056914a0528b64c8b3d412f2f8552a52937610ab28c0977d5d90db8e0e8"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "8d1d8488ec996a432898e2b107e1c88bcf5fba77ce39"}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8000000}, 0x40880)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x218, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2ad0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4104}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff7df2}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe7c2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x59b1}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc4c}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x80}, 0x84)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r6, 0x400454cc, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x4000})
ioctl$TUNSETOFFLOAD(r7, 0x400454ce, 0x9)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x440, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r4, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r10=>0x0})
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xd8, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4c840}, 0x88d0)
r11 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x4044004)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00'})
socket$nl_xfrm(0x10, 0x3, 0x6)

970.677105ms ago: executing program 1 (id=2203):
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
close(0xffffffffffffffff)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000200)=0x80) (async)
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000200)=0x80)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x7feff000)
sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x9}}}]}, 0x3c}}, 0x4008000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

848.924794ms ago: executing program 1 (id=2204):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x4, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1}}], 0xfd68)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
unshare(0x62040200)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYRES16=r4], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xffffffff}, 0x10}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
write$cgroup_type(r6, 0x0, 0x0)
r8 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r8, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r9, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r9, &(0x7f0000005240), 0x4000095, 0x0)
getsockname$packet(r9, 0x0, 0x0)
connect$rose(r9, 0x0, 0x0)
recvfrom$ax25(r9, &(0x7f0000000180)=""/4, 0x4, 0x10021, &(0x7f0000000440)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)

845.688667ms ago: executing program 0 (id=2206):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0)

716.597258ms ago: executing program 2 (id=2207):
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b14000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="70900400000000001800128008000100677470000c00028008000100", @ANYRES32=r1, @ANYBLOB="08000a004af4d5"], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0x58}}, 0x0) (rerun: 32)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="180100001f00010000000000000096000601008014000300fc010000000000000000000000000000140001"], 0x118}], 0x1}, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="180000000000", @ANYRES64=0x0], 0x20) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, 0x0) (async)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x400c000)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={<r7=>0x0, 0xa, "51d504934f983643144a"}, &(0x7f0000000040)=0x12)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000000c0)={r7, 0x3, 0x3, [0x40, 0x5, 0x8000]}, &(0x7f00000001c0)=0xe)

600.186582ms ago: executing program 2 (id=2208):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000500)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20000000}, 0xc, &(0x7f0000000480)=[{&(0x7f00000007c0)={0x414, 0x33, 0x4, 0x70bd2c, 0x25dfdbfb, "", [@nested={0xd2, 0x71, 0x0, 0x1, [@nested={0x4, 0x138}, @nested={0x4, 0x4c}, @generic="36ca267356de97eb9248d30a6ff1e9a4550e849230", @generic="13ddb0c51c9712d7627044908acd2014a947f2d2edf83894bb0e9e41ff1be69d68b08968ce466dcc3664708169dee7b95acf6f1df8a54f22dc3e093849fb1190416ddf561a6d02c4f9adfee14de2786021822845f128c5a1c17ff9030502cc5ff8070df5a0863b2a1c0f6353a17d2825337eca35fea40c9a3e88b8eeb24abfc1657e1c6bdc262833a29be5dd6f93ce08bb45994fc2bf84973218624ad39ef2a7b0e6654e88002ec65dfe553329691a1c0b"]}, @nested={0x1c1, 0x67, 0x0, 0x1, [@generic="491ee38e1a856d745f6bd2bfbdcbea40ac434ea12e6a9b43362bcb7128d5efe796bd2a3cb1d468580c4df1ec43e94ffb48c0a83818dae7f80daf7eff7ab79f528351778654fa24b29fdd6f1522822a766d2e5f0f96edaadc847b61f3243d149f0a24f4dfd6bb71dc62401444f17388c28b80e2640722d5ec8bfa748f071a2fd394ae66466a24ed9ced1e71e25e485dcdb106f489815d436709de702a26ad3d1533cd6cc0b3a24a9040f42f4c42bb5e6cd142757fc57e29505d8f39a9b901e10f04401546b7003f39f63d6608c767686b8e7143d3555dc9c1642a4c565cd2bcd99a149a18888f500bca2a1cb8f727415aeb", @nested={0x4, 0x7d}, @generic="bd1d80823da3ced8c48c6761337cc17d1a27952e4575c30ba0102c9d75c1da8075cf6992bfb8c194126aff242a6a05d3eacde3a502a1b2d4903ccffff1aaefcecd97416bbae09ade597bfb802c1fae7c378da24b85ce3e3e1d2383d6b802a7863b0fdf709a973e05dc9df40c46d2acf17378f0577331ca4d49f2f8326cffe4b2dbdbd48d573dea235521e8e6e5b2ee65dc8271b65b0e92f1fca20313e14d0fe08eb6b9a6186f1bca792301b4f3ce52be7bbf3eaeacdade4c4f92714b5da1fbd582cbdd4d0bebf687"]}, @typed={0x61, 0xb3, 0x0, 0x0, @binary="4f611635479f52c279f8acfc519aedc25f8dbb12292ea33f4a1cfa1d3de009b154f1cc4a2320bdf9f4a153f381c9f56129a41721cf96dd0ad73b704788537f264a3d0c617d7a1aacf33e27fc379371546da866a785ee9c3143ca95c60f"}, @generic="ad74b4d2c21d12b6ba4f1c6ca630680fd3e670f8680cc6fbcb94db16c0621c44bdddd928a41e68cc5fc5a728b9fa2da910dce14ec0f8afead4dc3d490cdecd6ad04ec5c9fc2e696a1bb02ac5bfcb3d183f3535e1826747a45b13f3ae744f4b9aa2559ba08538363fdd63d76bda0ead6f6011c5863e58ba3d3f9e4da650f4f3972b6c473ec993d977b35a96fa20883c1f609483e4d4202d7bb8e7d3ff22f877f1fb5107d6416a7d48d01b19582cf93d808718a5e7af8f2affa085d2f7312a696c2b3d50dce1547dea66ddf082544195e5fc9665dc1b66c5e3c87246481eb2873450ca8898be19db7b868d3f53be5f417b736944", @typed={0x8, 0xea, 0x0, 0x0, @uid=0xee01}, @generic="ddde30de97ae7b5d0e7a"]}, 0x414}], 0x1, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, r0, r0]}}, @cred={{0x1c}}], 0x48, 0x1}, 0x8000)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0xfe20, &(0x7f0000000100)={0x0, 0xff9b}, 0x1, 0x0, 0x0, 0x20008810}, 0x800)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r5=>0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
r8 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r9, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x4085)
recvmsg(r7, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', <r12=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x25dfdbfd, {0x6, 0x0, 0x8100, 0x0, {0xffe0}, {0xd}, {0xe, 0x10}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200003553434974eb92e43e800004feffff070000000100000080000000391a069ef0f9f3677d4c32e6288d4571a3ff82dfac8ad2e9104b97e4e983e32aac5836523189a6a5e379b47eba07a61d2e3d2b9799c5f4adf50c77fa0607f69efc94a3540f14d19f75b21ba10629fa071a767d27cbef32bb6d4a3e8a5c59677b536ecc49b7586a05e27d77b78889c921641d9955ad4091db1be2c7eccb40", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="04000000010000000100"/28], 0x50)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRES16=r10], 0x3c}, 0x1, 0x11}, 0x40)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000000)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000080", @ANYRES32=r14, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x3c}}, 0x24008001)

491.154088ms ago: executing program 2 (id=2209):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES16], 0x48) (async)
r1 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000008bb03b7c6c165934b005ff5a6ca10c4d3f208132b1fa79ba7e53b329e90f07d5258fee25cd87019a49639225efe63c68a721c06b2f0f2a61afbc760a3cf71161d051192b5789c3b4f424e2f94b5b3e15d5e0e7170a50549f5590ae0e0957512d46cb412701863b1bcab35ec545d09f431c0e0c63b417fca4f6659c229fdf86c0d2ebf80095805e86a287adb10e9b369b9c16a64c376cd55630605bc56a9c638221af0216f31ad326e9b5b8dfd5eb37f948afc5b008030290c3b8f18d88d02b95b0bf42dc6b290ea8c327889330067212580060f4"], 0x50) (rerun: 64)
poll(&(0x7f0000000000)=[{r1, 0xa404}, {r2, 0x21}], 0x2, 0xfffffffe)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) (async)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000040)={0xffffffffffffffff, 0x9})
r4 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async)
sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe30000000000000000061dc35817"]}]}, 0x114}], 0x1}, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYRES64=r5], 0x24}}, 0x0) (async, rerun: 32)
r7 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={@loopback, @rand_addr=0x64010101, 0x8, 0x5}})
sendmmsg(0xffffffffffffffff, &(0x7f000000d600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="82", 0x1}], 0x1}}], 0x1, 0x114027d77c4637a9) (async)
r8 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r8, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) (async)
sendmmsg$inet(r8, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) (async, rerun: 64)
r9 = socket$alg(0x26, 0x5, 0x0) (rerun: 64)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000140)={r5, r9, 0x7, 0x4d, &(0x7f00000000c0)="fa7f0d8aa1edca834d602ed42c7e5cd04f62a4695ddb8ebc37f1f652aafc772b81d8950a93ffedf8ba54996ce8acdf8bf4e43a081d30ff2ce6381a01d6816a2d5bc7507996494df23625c1276a", 0x7, 0x1, 0x1, 0x1ff, 0x4, 0x3, 0x9, 'syz0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$tipc(0x1e, 0x5, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) (async)
sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async, rerun: 32)
bind$tipc(r10, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (rerun: 32)

411.712394ms ago: executing program 1 (id=2210):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10000}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x40001)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x802, @multicast, 'ip_vti0\x00'}}, 0x1e)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r4 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f00000003c0)=0x800000001, 0x4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'ip_vti0\x00', <r5=>0x0, 0x8, 0x80, 0x7, 0x80000000, {{0xd, 0x4, 0x0, 0x9, 0x34, 0x68, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x2d, 0x3, 0x7, [{@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x1}]}]}}}}})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffdb2, &(0x7f0000000040)={&(0x7f0000000400)=@bridge_newvlan={0x0, 0x70, 0x100, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r5}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884)

321.603175ms ago: executing program 2 (id=2211):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r10, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r9}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
close(0x3)
r11 = socket(0x1, 0x803, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000340)={"908363d22079de6abe8f859279687f02", 0x0, <r12=>0x0, {0x9, 0x5}, {0x0, 0x9}, 0x3, [0x8001, 0x7, 0x5, 0x9, 0x2, 0x5, 0x6, 0x100000001, 0x100, 0x616e, 0x7, 0xffffffffffffffff, 0x3, 0x3, 0x8d, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001480)={{r1}, r12, 0x10, @inherit={0x90, &(0x7f0000000440)={0x0, 0x9, 0x3800000000, 0xb, {0x20, 0x3, 0x6, 0x5, 0x5}, [0x400, 0x7, 0x401, 0x3, 0x5, 0x638, 0x8000, 0x9, 0x80000000]}}, @name="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"})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e230000050021"], 0x6c}}, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

320.065233ms ago: executing program 1 (id=2212):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x30}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d30000000000000000000000014002b80080003"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="32a0362d5f57c7465bf533254f89a300009d9a18b954246e4f62436f01de70250cf16c0e033325234d5730fb1bbb5ec329e51405bbd48ceb57a5ba23fd0b314e655c8bc58e1b1b4c59742fdce9fcfd502a291b6017da3a1662c3dcebe6", @ANYRES16=r2, @ANYBLOB="240228bd7000fddbdf250600000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099003f0800006d0000001c00e700b79f12a9d688c7c4c9a0db73b773a6d7e0c630500f889adc0a00e8000802110000010000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x30}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d30000000000000000000000014002b80080003"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="32a0362d5f57c7465bf533254f89a300009d9a18b954246e4f62436f01de70250cf16c0e033325234d5730fb1bbb5ec329e51405bbd48ceb57a5ba23fd0b314e655c8bc58e1b1b4c59742fdce9fcfd502a291b6017da3a1662c3dcebe6", @ANYRES16=r2, @ANYBLOB="240228bd7000fddbdf250600000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099003f0800006d0000001c00e700b79f12a9d688c7c4c9a0db73b773a6d7e0c630500f889adc0a00e8000802110000010000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async)

76.362097ms ago: executing program 1 (id=2213):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000024c0)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x805}, 0x20000010)

75.689033ms ago: executing program 2 (id=2214):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) (async, rerun: 32)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001900010000000000000000001d0109002900838025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3"], 0x90}}, 0x0) (rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x50) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) (async, rerun: 64)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r0}, 0x38) (async, rerun: 64)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000180)={0x9, {{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x18}, 0x6}}, {{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd47a}}}, 0x108) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

72.411898ms ago: executing program 0 (id=2215):
close(0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x23, 0x800, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet(0x2, 0x3, 0x8)
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x4008000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

596.597µs ago: executing program 1 (id=2216):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r4=>0x0})
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@cgroup, 0xffffffffffffffff, 0x1f, 0x4}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

0s ago: executing program 2 (id=2217):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000003500)=[{&(0x7f0000001440)="34325a3ec95335e2316325bc217474e55486f13461aa6d72f8ad90ba36f13758495616c22692c9888acd74c8141f760b360d963b2ea9defa4e0d04a1b08b1e9bca95a6fef2e1e2e3bcdf3fe633f09f44363b28eec64030d7269c6024f118efe0eaeda4ce2ffd74748748ea9e1f264a4efc5eb41bc90831fc6d70a3bb367f094dd21b1165959e0a48e43d1e01976a1b9b430e28acd780f7ea7bb157a161644979b927f6c7109538395a73f29cfbc4b79f775dc80ac55ec12ebf839793e3a665921c15820a20298addeb88eddabce5fcef43cc3e81dd4aa8a5f84a0f9f996f3705c0e88146b1e19b21aee9d4143adf57e60a482507714ac4d52d2d2160cdf2809ec84ec9d77d208fd5f432ec3b99343b90e4acc82033da76f34a63a14afae361533e1fcfa6af0a79632c6c794fc1ec142eac90249a1a805b5ed73226f01b33f95f41fbdc2e25e8dc53cc7ac7ba242d904c7899c839d4c5d9d919e67aa15d9ae4f4da9b080bc0b124af94583cecfb08dcebbe5fe70f2a73d727e5c1e7c402e82497e1596c92fecce9b0f83c7e99bafd08c953529186c98acd728b4885c70664b516100cc7dccbb3b2cb72889564dbe9e8bb4df5ec61b60215a8b0093a47f45be324de9ce13e2cdb02e70945d0bb9931061f0c559b4137e04f6b7d94795a11242565485ca654ccdec9dabfd5a344652dfc9a74fd89fd578408671e2745062713d7fc50486abe3c226b139058f2f9c1cdf0301bbcc388a4ac6ed2ad38f54fe1e4d88e316c15ac1039281b1a74ed890174d4c80a28ce29b05a223e07ad8c4a378a2b44ce349bc74ae73af2852130f7ad525c3853e2328fa12ff7b8444c1ec39a46b1c47ed2d7918d09a70b3d3ea39c16d17f397bccd069b62e231c5d251373de33602641d4220da1f3fb62f55989fbe379f35aa578949a3cdcc638befddd2e24d898d25ef9508467ac6d8952cb2fb9b7a5a9eb5238fb8e1cfc8bd967d2ad877ccbcad2a8f1c41b5e2b779df09ba8596ea37ed93a1dba30df412834a89b9510c42dbd697470087dd4c3c8458b177705a9aea6b5c26ac5999290bd63fa10c441cbdeb24f5918522f1cfd512b9627ecd59f275f0c469dc6e3b12e8a5a5a9a13b134ddd31b5a6feef3f6b9df2165291487f9397a95b18c6e800a4c7bd127dbc2c62a8f70368cf43b0d120fbc681fa781fde92df025871dbab0af3104eceb3187b7f7d5d7957047f30b6b03fdf26ede899d807725bd584a7380732f915089d775d45ff2620db6656e3c8efd52d3951b4aa52fddd9355581a6ba83192f93b285b7025bb524106c2633254a41868770cd6c8c539b9a83875a43bc4040ab1f31a4bfa99059b689318f01ee8e36525c5ed85fab4192d68c39f025b6762f0ed0acd647bb04436cd12bcba484baadb4b47c2e629b757943cf753c4cd330878f3bcd217b52ef916af4abaecb7c9ca7386e6c3458b89cae0391ec3b567e0a1ee45b7167e38507a5466b61e1defec4019a07efd4f524d55a431b7701c3bad1c0939ef7096e7ab4f5d4ee933a89c60413d299f96ce2e9da028cc17ef7b278307e224dc011a043cad95e0ce14aa55e5c1e03b224e081689cd064080286f30344941f17675c688b11544030e6277423da966e99fe1522ad5f8b37314113f8f78c152d18881148e97bd174dfd04951490c7aa3e344b8c02ff14cc3c61369825ed3d5155057c3f9ea645d094545179ddcf17ff75e549da3e28a9848b6e7d4432535ed7b04cd8b61933d68cccd8a056b949c16cbcb7b500c302837067face71a411e65950771ca68cfbb60f70d7aa9f81db96413e56fc92aa714452909158dc7f7478e8623a4e59ddce28e3c08726e1e28857f80891c12be40ec3543a384e5b95194c3b78c7f7f987e9a051fb56e0e17285bab975858d41b56c176ccaabdadadc88d51e5d9d126cf5581a9b975ade73f6b2ae6a4a9a72d568de6795e4d3791b64670ebbf78f17ae9bd24b684417be361c48ce9f1bc55a77e6f55689575c0dc4d3dd0c2c4257d5f3fc8e0300f7f76c3fd26e8b19c4ad239c179ee67bca56788412721a2ebead64f24c42ce4bba250b1e9fa84912d60c3d737297cb4e6e0bb1976903efe355dcc902ba0355d2e64018d0320fe6a43fdab880e7ac3d01a52848d6020b9ac83f1fea19a4db6afa7d3eb383ab6dba2edef4b2d0ba97bdb929bcc233951d44396a3e65e5860fa71a30168c0cf59ced3c776495b5ccdeab23a124f2e72629457aa4c2ea0cc6bf4a1b17105205b33956439f3d853af200ed5d24031c1fda9934f564524d571c38e2fe30103764a5bcb1e3d21305031ee5add1b205832eee5b196478688a6f25727ee6832425c6710898c62c13bac4ba951c2ad8eaff59856997a7c2b451bab9242ef610257a9b64fc99141bbd8f590bdeb2ef12020ba8ed784f492e6ef3195df7da08c9d27cf24118c29a571deda94b8e3434b170adbc33e3ab47755d4e7b1ce9716b2fc03687902c7703f888a86b4f38f0d52f477f98590352c82cc0ff4718a4c37b0ea9bd6d66d9b5c8fc7aabfd08c9a7a75bb3d6e970e8bf1f344b344186f078521d7b26a002bd1cba1ea408941e2f943278bd5abe504474ad89501aaee9935b77fc417bbc20e795f22259c3ad0f5a2fb205e581f617a992a6baabe41226b8005e34de92adfb70da635c60f4e7c8509b739f88eca6e91ea5142e107ce2c147c96e68d8e775a7464321f639846e7de8c6a91ed18fcaefbd44118e240d42ae6af70781c9dc71ef30230d3d50061716d080e9a1faf057243a0af6b12e1a76a1267a5a39e085f25b8bd289e3a140d266b46be7c59dbeec32edd1695fc4ba196ebc797b86e6885c6fb6ba04f282b71ccfc535707362c8b73d850a549c48b95bde8ca4f95249e8cc9b7751f6d42d2765505d06e5ff208dd1772ddfdf81086476516ce83fc70551cc66d27691c9fb951b71ceb6e9424ee66dcf129fa3f2906296e7b6b2a764027a72818d9cce46f8b47841d1024b16a5009045178dc7cbbfc5121c6378887a449cf0c9793d53c1d861ab7d7c9eb9e4713a0b071237cb3faa44a1c2567af77f6acb9a1b95e243c65b1c88b3c639b17c6b6a936bc01d9efcb0e7e4e0465b1dc7f3edb970d733043600d34f135f0f439bb82b1aade9a70b1435976f8aa7125009dec0f9d96fa613d62ddd09c621396c4ef82c5fbd1f745d64e05ae27e1069ee66bc10e301f95eda0215f0cdd423771e97b1cf634bc93c239caa557b7e7a8e599f7973ee31d8e9f6fdb05466eb278883bc315bfac83464ca462d5b966879bafeb007ea505e797ee8921b6f82540aa876740bc6d26a13065a3d0160e269ecdb905aad6eac3ee330fa9055f66b4f4305fb983931c1e229d6a0210f25756788e9a70e91a3aa5da28e677d84ac3fbe097c322011a050d7b2ea1612d10cbcdfcef38f22369eb531a724e4d7f9b8e8aa6664aa8ba1e378e4d9e626b863d46c9352bfdd0cf467bc1f17f0f534fee341b88d55a53d7a09d34b76eeec96dccb8f332585c753e9fd09ad4bd527e58781f854627f72eb8d6e59e68048c4b8ea4bfd76a8f27125bd51054732c6ca9096e69476dc8e52b51fdae262dcd91c2e23a414cb16d1d2159f33993fbda87c46a9e7b58195916eea891b7dee88fd23f1e461728161d8af0e067b4c80ca8fe0acd010fcdad461708c7ee41d4e2fd2cebd5c34de4edd763f6cfc583689141808ecf42e20b79f6d5ef323649c2b9ebb4ef4d4526767e44c58358105cd394410bacd486475c26e7ee8d79c731ad82d820f7fd20b0daca649334771ee07234e44b401a7fc7e7b86a845ce18946dc7c14b17854a80a0af5d0dc8bd0614650681982d2f6cec264da5add6720d84bcd3acefbca4fa00ffb53105cfe9da7ac34c88dab0b50878390bc1ef6a388df4f41be51714d22a29544edf59feedb71789efd8c40f1fd572ffc3b05a7eec9040ccd554c1b37b888bc6dac1fa4656a2c95bc9a5d10f2d0162b773ca6a6d9a30a9e172e6c8cca1de09626ca3e59b4dbb82f4dd949cc341deee27a0800e17a73a56386c0527f4d0f7c28f1d44b2c83cad51f616ad09e4e4ae2a1901b5fc0de12c5f93ffb547b4b3326f9cab45f8fcc8761196751585a8ff493b3d9ef077f899918bde019e0e66e818dedcff7d6d2ee0b1fcc1845716242adf546f08551cbd4f0e44482a39a871c5729a566b5726f2f33cbf28b47a7d661e2e35cfe3a548a5f1eec8069eed21c92c44e253bf275cbc7825b7e26f52145d415139cf09216335e19a3b4276269eed91c1b557f80f4101a0d733269b40d9ef0e9b12d3baa379e5a0c1300c63c5ff8c72f4420652838d6763544c6fd4c65a06a26eda3454206727c0507614c2a88277ebe880a5ecf981be57873a573d481eae5433d65dc4dc16d118bc057975265945bd9ddc64c0a63be3d5083fad6b22cfc89bc78c395b9ba767d8079fc4c2ffc9280888c2f53fd39801ad24b59f51a8318e5e9af7e1223cb4d385e3e4001f6249878d60cbcc9f67af75ff04de1ca8918eab36f915b9a150fdf99dc4df4af16715d3706fbd934c8e8479a99734dd6c32328565e3a351f5c8a61a2657d8dac76fb9623a6095adb4200d8e3707bc015aaf97ff0190caa4b22e102458fb40901fe161943f4c6ed6654264baa7dfa15e80cadaa0959e4030ee90451f1a35350ae7e6686f399f3bb230b87c36ebb536369e0bf32ee95f1a8fbbf05a0f74e801200cc4730ef0b35e9f6559f051023b23b29dad69477064118c67cc63ca3c4c8b564c446ce0d88d98252d2edb04983045e5424935791b208d90152b15287425c514f23ce64b41178e66fb55e1fe0aa153596a940ee6297b4046cf9a413232570638861a74e36c57fd548517d8028f18e8c194bc259b667b886f875d8f46a0554d3a11c0866fa2f988230e54192a96ffbae5f7fb5c0a71aa88bf59389c75a6093b3482a3f6e5c7d5704e97eec57e8037fe4df05d18b8bb75ae249e2c28a71fb2d5cdaf59168007e07dba122f5cf0d645bcd4e736159c6393bb772b820fb3c8fc17cb88393c90233fe4ab880593384bd96de985655c768d6f6f2f67896e7e15b3cbc513bfc52f63cba2c9b708bcc2252cda70822111c4503a7257c0d89fe1eb3d7d99e93c9b0b0935bc198bb8ce04917f73269716337b7bfb5142d8a7147bd5c84ca9bb41c5a86d5d36efc61d0d787cc085a9db5c3388aa2b4bd287627da24e70b62601fd0beaceba112d305148a8c97cae338094c8d92732b5c220abf8e0ce94826de7fe01e32932d05905c341545eeff2a86cd18912272f32e3cea5cbf13236b48de5b1235483449fb892f14a499a6ba89cdcc4224580bfc6a28b5cc25b6274381da039e4961977423d9c3d9217bbfddf7e5f2e044d892daa1f0b1018fac5a590be3bfd0995fc2126f805b00bb95afdd9740dcacea283c681da742e2fb99014b435593ed796e7230d135f65079575d1b51674bbaec6c02e7064f7c72d05bd65ccfa61e3b55110cf00e7aa359347b19c8c0e54c3ed30995966ad8e186314f5d852cd31ccfaa9d0c7e849d68a6b0cff756d0ab7ad920b44de00310c0edaa5ae60bf0787ece2e07da207608de0926e5e5b344bf8bab13c87b38fdd623353c37b448c5ee03678e9941b84f544c2ea87ed759156bf67e2e0fba081210479c4a71d671d03b6d2f5841aebc57a13f4f4d5432cda29b5962e39a093c69285902f11e4a75cdfd38b5f52e4238c90a0942ea741a79ead7e044bca535f51644b35dcc9d5d54b11a1e6c000000000000000000dc539a783a8e75a1fea31936bb9a09c88d55cf1771a67092228c231f39d79c28d1a9c544ce80546e4b8a5b924b6ef436d97eb77a1c8c300d6d775fdc61f3303b00cff340d8ea575b8136ea5efc84786fb76f3fc61b5ce797cb281aeac5acb5e63a33412ce27c", 0xfeb7}, {&(0x7f0000000080)="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", 0x137}, {0x0}, {&(0x7f0000001240)="d35c99d267", 0x5}, {0x0}, {&(0x7f0000000300)="aaf9cbbebec1c21b2b97fe8378b1a6f9b362b0ce28d64dcae763a477474cd92e109fff8cbeb8da39e130c0e87879555d7d691c5ffa0ac0fa49a8957e4836da102348dff8d9bf765e0ac0d619a539ea3d1bf88e4ed805f6577386bc995636ac2cea14b9677bdfb1914b421322ef4e955bc5147abd6102bd0a10ee2e48b60974cdd83be5c49500f9b91f88934faad163a176b3a9e397069e026a81e8dc2d094d1ccf11663075c478f859ad127e9b4e7a57fb3b687a7028a38d612c45d10ae18ea4e356730bd5f16d03bd49200bb34d64d2a7b86ba5aef9f82143803c2eff377d13191b2201bbdcd953a6f40365c42d1dba0dbd4f199ab5447ff3d4a43c90cb5cebf0b33851e3e7e1d8fc9c23470ed8b99af94d0e2fa928c92ad57b8a411d39e08d6a347154ba5714dae3e3e5f6f2e634006b9bed44a08df2050dd90a4fab00e368fe552ebd1c3ec9884f7ced36521d94cb7462c54e1e6150445d75535d7777cdd4bd21cbebe7aa6c97866613122b8b938fc003f4e9196f75611c7c16e2354554fce9d84c21b7c1adcfdb51a1e3df4d167ca6c934564fef3929531eb1cc3ce256fb03fced3d8838def483c40a0d60b346848e8ce72ca24d3bbd9938ec7ae7be11631bccb7627edd71f7d0d4328d7dd1d264ae863bd7e272976ac6c56d3cce490e8863bfd04e3a100d02a589d2632ab53a3131a5e7770f33cd51ddc49374db0b9b9bb32fd4f5e41ca242a04f54cca872d1bbfe8c791d04ddec5b2974622f5fab7dc51888c804d84f360788a4102fe183976bc88ccf9f6640370aac22aef9c6817376031d9750943d8f71dadf79ee97f922cdf352353f67dc8caaaac0d995fde8723ec54021840fe07d7cdb5cf9cc0e1e7081366deff4c2347554fb2bdd5a5f04b9a42fbf8fb3a1f4a95692dc658f5c8ba3d2660538462b78bbf67870cfea19ba5d3ac585c20e16c64d44e929375705272072f3914ac5427e8f527b3f5e60440cdf319947f3620c53df87ffad5bdcc97d1ad678958a18653be882e6ff1ce896f29fab9f934ad1d8db2bb7f35a14180e31ea843b0ca26855d81278848e66006c77d10a4298d55d3c872b27feef422fc3556396d61baa441e87aa036fe5215eae3716b51171984e0f72e0a9a54980167dc47d247e832d76fdd0717a87c5d30f675e97b187eb8d8a7b4094ddfeaf887227e43c803352373206d9bd83457f1c0abaf3e412802ca4192748b48947ce07e86db6826b8cd46fcaacd80b52f8669d1605eeabdab5a8c2aa4bd60e5838e021d041930525401c04304194f9b6309c2b10903ff4a22794c35485f5000a7365a62208ae85d29d8ad3e070670aabba3c86afced2fcdd93bf7c3170af1616b88f528aecd89ca0348d310dd281b5fb04169091221d7903afc4b741da130bc3d388e3fb35ad6e4574d4ea9ac012047fd5a52651fb642ced81284a2ba034cd963c8e9cc7b3b3fc5f9629c478aa7844c55feb692aeed5b97f638e7e2822907f7bd8a1729e30819bc53c4d497ac1a6dda76e13864e5f8b4ce0e34ed267870bd217035a28fec5a28fc8566f629cbd489171a29224637dc37fefb007481b4fa81c5dd39a4bc47c8cafe29ff949a8f613a4ddfdaafd6793ea7b9bf355d8471ae3e093f708957e9a9d5a7466854728ea82e0bb7ae6dae852b5090843d76d986dd005d495aa8bc209b20de8f45dd42a31129fabcb4cfaa30a7aed4b12be0fe2c0ede3e608b30895cd3e54324b83b43f66e504124195e9b18fa57ccb60c341d2017bd847d869a5ec1cc5efe008e70be2ba95098334a372fcb593e833ca36e301610e56eea80dfc2b781bd7207fcbee8da9308648d59befe0d493e495a78a8cd1cc8aff4472bbc833a708ab3115eda7e3640a12667bf58a0990cf2c3a59871e2155ed5dd101822b94804a0f87ed86b72840998356a66a5a947596acd2602ccc9f24e9709060e4c1e7b8e159560b5b4c66a3f9ac8b43f4f8fafc9342c0533747581ad7bd49277dc07b2c110ff91f21cbd6188c5d6759ca18fcdd314ee25ff410c3687e60df6a025901cc8e353c5b7b0974722a544b53b1b446b6edc48d149877fb72e59be779d33467598de6791f8188bbbbcb3fdb4ca5c90e8379180adb0d2dff15743d3cf263652b4495cbbce864f38267fb3108e40379362c10681774cc3c90d8bba07de8dbc67aab3b6585be9e1753686cba112a2ebccafe74f96be0fcfd5f3cc0463ed72726dbb970331823d8985e528286035a024cea50210b5bf6cc2f81f76fcee5ee5ef0c0b6ff14a10f4321df335a6c337628d426f9ad3890b037b1575c0d30c0e542310d4871f543fb25a5761769afcf7bca0fb0bc7160bde589846ff62375852db693297b97587e0d9db109fff87e2b5cadcc200678f2f348f18852e1eaa361c182c8dd9e6dfaa551c291cd0cfaef02718e66d6c44c7ee644a397591c8e8828e59f7631d265cf64875d416d0f17c39892773bc752d529dacef7c9a39e9b5f36e4e22464acdeed7f8f23361782f62fb822cd4cb7e04e9e0e9455fd61526dcfc7b270c682e839f85c7549f66da377666cc9e27ed1f598867844ce80d8404c53c2c433c38a0952a745ee943b634541d288d4c1d8b581353c93dc64ab9ad92bca5e6d00ef69b04001144301aee91700f20289615ba6539e33dfd8f24483ed8a48144073534c42d1cdb75c9ec45b88e355055bd52305a12c079ccd88f7710117ae218b43fdb6b868a375ab8c6de8790989f07ab8bf24f8a7d2b1052cbe07f65dc980ae88424c6a16ffdf79ff1ac8ec64414acc1c173e734b3f5bd11d61b5b77c8a50e733761eb81ea38942910a3a53c91acb1cde9973c41426239bcfb65c45cc61ea1553f267d861ce48fb9acde12ffc03b900fcdf0295fac14c739fe79f96e2d69abb7bce1946168bf98a9ec96f8ba7b8237967b67c70adc70cf5ec4569533e5fdf3ffe4ad85fdc11a5f9cd893ca47f279f688e414703215c83521b9451d8837dc5ec3aec1d4a4cf224f8d0e612950b33af62e6361b79185876e1809287a5b87edadd4fdc07e2b924f27def45adefa89b7343fc3e52c13c3caeb35afe011bcf212d2d82b0dc76d4452a7465e649f4871b0824d72e4ed8c4c39941da0d645748ee784f6b7875240d49e1f4270bf162629140a882af3bf9a3a6b0172b5777d61c24268cfd295fb0698e3b817694791f664c061bf6e4329018dc8812c600015ec84f4881b008140a1c9233c14dd8b654c4f8be97e173f9dfca54173a84edafccd35dc53bc9d97d70909f130e046df39986e5472921529366c4fdcf9d21f7e6fd13cf9ec2ef9888e240114f6a375a548016d6f1577bc69cad88b6e09dc37028d803b50b828df2ed26f1a1eca689331747083ba09239f2cd6be85b867af531398065d2e61f28691f557275cdbfd7ed35ff0b2548bd5c20d19f693168c0fec785f9436b5fa6068647a569812a42efbe4342ed58f6ee05373112b368218f20ffc074bee688091440de8fd9d9079af0c425654a4a78d9ab11cc1457ed21d439abf97baa77d1b4fccff20cc75a034edc86df5a2c2280fcb003ca8bb7055bc378e89691cd88d74919ad9c9b338d87157fae7a0ae7b9c90041d501bcddcd98607f54ce141d44a646d92ede0fdfaace16554dd9130d1d2ae152084dc9b0eb713170ba247024d7cc7b9f3f0bb10a4d3f61a85b4ab018dfec7d5c625d9d0864ad1e21939f21e200ec4449e29ffe7cd1b27a6ba5a025dcbdb608619088e8e73d148b8d28caf91da3f71c605238e3f6e2e5254465bde138884b4ed6a5d9cc1c7f6bba054141735eeb654608357faeb10e2b354a3b6b0421e2d3ede84e8a6902ecd446d74097c6c0b34430db23827e05d861f2763295cba86d486f402fbaf6e750ba872d7769dee32528c7b5b2f486384a6b1119e79aa1171dbacef24f902e49750e5e4cdea1af7c594f02ac8c7a9fd0e27ac1aac2dc1eadd6adaf776885615fcdcf6123e406c2f95f093479b7f90e05bfc2c06b71b631a55eed29f6152781b68fc1f96ecc23f63834aa270bb1b8b657ec6ce7c5e9da8bbc2af3c25fd2d0238e92600561a9b913ff60619d85706d79303c25faf7d7e8631aa098ceb842c16a52930b36681a727383a2f880e2df001888fb4c19f981c250de65cc186ff4b8fde1c67f061c2b63d1b0d74b3be65f871ade6beaa21459c2574a5042e00da4e2086492acefa572136fba2d6561e0d6747b0bee935d7aee889f0260457d23a98e6bd98c525724afb2fa9d8f8d71d85f852d6cb5109275627675032be285e887525db7a00a69d89ee0dd0c76c4c1553af4faaf74b8fe1c90208f077248553a", 0xbfa}, {0x0}, {0x0}, {0x0}], 0x9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r5)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000f00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700fffffffffcdbdf25010000000c000200ff00000000000000d6ff0100000000000c000200ff7f000000000000a4e64426c4ab1a3250968279ba08aa60a90a0ca0bdf418661935e4d7f310f7a4d312e76763f4af656d8f43d7c416bc6bd22301b1fd9045ca94f3c5d730149bc7f05b0ec7bcead2f0e5f531df49af7c06db362567806169180304d0b7cf1e1bf671d45193db1508e653e63fb5f4be5afaa4d31001673b759b7c4041de41c0a91587ba6404832e1a5dcf7db2036fa367541c3725bfbbece00303e2aa4e5c9df0674d830e5bc4938b5926028568441680ca620f0dcbcafb"], 0x34}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', <r8=>0x0, 0x7, 0x8000, 0x0, 0xffff, {{0x16, 0x4, 0x1, 0x21, 0x58, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0xe9, [@multicast1, @private=0xa010102, @empty, @remote]}, @ssrr={0x89, 0x1f, 0x42, [@loopback, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100, @private=0xa010101]}, @rr={0x7, 0xb, 0x29, [@broadcast, @local]}, @noop]}}}}})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r9)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880)
openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0)

kernel console output (not intermixed with test programs):

  150.907073][ T9966]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.907090][ T9966]  ? aa_sock_msg_perm+0xf1/0x1d0
[  150.907105][ T9966]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  150.907120][ T9966]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.907135][ T9966]  __sock_sendmsg+0x21c/0x270
[  150.907184][ T9966]  ____sys_sendmsg+0x505/0x830
[  150.907206][ T9966]  ? __pfx_____sys_sendmsg+0x10/0x10
[  150.907229][ T9966]  ? import_iovec+0x74/0xa0
[  150.907249][ T9966]  ___sys_sendmsg+0x21f/0x2a0
[  150.907266][ T9966]  ? __pfx____sys_sendmsg+0x10/0x10
[  150.907313][ T9966]  ? __fget_files+0x2a/0x420
[  150.907325][ T9966]  ? __fget_files+0x3a0/0x420
[  150.907345][ T9966]  __x64_sys_sendmsg+0x19b/0x260
[  150.907364][ T9966]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  150.907387][ T9966]  ? rcu_is_watching+0x15/0xb0
[  150.907405][ T9966]  ? do_syscall_64+0xbe/0x3b0
[  150.907424][ T9966]  do_syscall_64+0xfa/0x3b0
[  150.907438][ T9966]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.907450][ T9966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.907463][ T9966]  ? exc_page_fault+0x9f/0xf0
[  150.907484][ T9966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.907497][ T9966] RIP: 0033:0x7f54a818ebe9
[  150.907510][ T9966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.907522][ T9966] RSP: 002b:00007f54a8fb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  150.907536][ T9966] RAX: ffffffffffffffda RBX: 00007f54a83c5fa0 RCX: 00007f54a818ebe9
[  150.907546][ T9966] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  150.907554][ T9966] RBP: 00007f54a8211e19 R08: 0000000000000000 R09: 0000000000000000
[  150.907561][ T9966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.907569][ T9966] R13: 00007f54a83c6038 R14: 00007f54a83c5fa0 R15: 00007ffe48b4c9c8
[  150.907592][ T9966]  </TASK>
[  151.321340][ T9982] pim6reg: entered allmulticast mode
[  151.329539][ T9982] pim6reg: left allmulticast mode
[  151.411984][ T9991] netlink: 'syz.0.1093': attribute type 1 has an invalid length.
[  151.415201][ T9991] netlink: 'syz.0.1093': attribute type 1 has an invalid length.
[  151.430066][ T9993] batadv1: entered promiscuous mode
[  151.614476][T10008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.618920][T10008] netlink: 'syz.0.1097': attribute type 1 has an invalid length.
[  151.635368][T10010] vlan2: entered promiscuous mode
[  151.641328][T10010] team0: entered promiscuous mode
[  151.921237][T10022] netlink: 'syz.1.1102': attribute type 13 has an invalid length.
[  151.923756][T10022] netlink: 'syz.1.1102': attribute type 17 has an invalid length.
[  151.970382][T10022] 8021q: adding VLAN 0 to HW filter on device team0
[  151.975948][T10022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.226459][T10075] bond19: option mode: unable to set because the bond device has slaves
[  153.314509][T10082] netlink: 'syz.1.1119': attribute type 18 has an invalid length.
[  153.396434][T10086] netlink: 'syz.1.1120': attribute type 1 has an invalid length.
[  153.430493][T10086] 8021q: adding VLAN 0 to HW filter on device bond26
[  153.455879][T10086] bond26: (slave batadv1): Opening slave failed
[  153.576057][T10094] __nla_validate_parse: 20 callbacks suppressed
[  153.576069][T10094] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1123'.
[  153.592966][T10094] vlan2: entered promiscuous mode
[  153.687849][ T6240] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  153.807186][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  153.942162][T10108] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  154.572956][T10118] netlink: 'syz.0.1128': attribute type 1 has an invalid length.
[  154.576229][T10118] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1128'.
[  155.644944][T10116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1129'.
[  155.653009][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1129'.
[  155.661869][T10116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1129'.
[  155.667158][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1129'.
[  155.785260][T10127] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1133'.
[  155.887783][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  155.955472][T10138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1136'.
[  155.998281][T10140] netdevsim0: entered allmulticast mode
[  156.000393][T10140] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  156.039327][T10144] netlink: 'syz.1.1138': attribute type 1 has an invalid length.
[  156.060785][T10144] 8021q: adding VLAN 0 to HW filter on device bond27
[  156.074603][T10149] ip6tnl5: entered promiscuous mode
[  156.076300][T10149] ip6tnl5: entered allmulticast mode
[  156.081937][T10149] team0: Refused to change device type
[  156.229253][T10160] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1143'.
[  156.260496][T10163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1144'.
[  156.335372][T10160] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  156.340508][T10160] bond0 (unregistering): (slave team0): Releasing backup interface
[  156.344253][T10160] bond0 (unregistering): (slave bond20): Releasing backup interface
[  156.348552][T10160] bond0 (unregistering): Released all slaves
[  157.135622][T10203] IPv6: sit3: Disabled Multicast RS
[  157.142373][T10203] sit3: entered allmulticast mode
[  157.260589][T10208] 8021q: adding VLAN 0 to HW filter on device bond28
[  157.263224][T10208] bridge0: port 1(bond28) entered blocking state
[  157.265363][T10208] bridge0: port 1(bond28) entered disabled state
[  157.269314][T10208] bond28: entered allmulticast mode
[  157.272783][T10208] bond28: entered promiscuous mode
[  157.476364][T10215] bond0 (unregistering): Released all slaves
[  157.926435][T10236] netlink: 'syz.1.1166': attribute type 4 has an invalid length.
[  158.145531][   T57] block nbd0: Receive control failed (result -32)
[  158.229058][T10258] sctp: [Deprecated]: syz.0.1172 (pid 10258) Use of int in max_burst socket option deprecated.
[  158.229058][T10258] Use struct sctp_assoc_value instead
[  160.219606][T10266] __nla_validate_parse: 9 callbacks suppressed
[  160.219629][T10266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1173'.
[  160.270133][T10266] netlink: 'syz.0.1173': attribute type 4 has an invalid length.
[  160.273811][T10266] netlink: 'syz.0.1173': attribute type 4 has an invalid length.
[  160.368919][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'.
[  160.397895][T10275] netlink: 'syz.2.1174': attribute type 1 has an invalid length.
[  160.429831][T10275] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.480771][T10282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1179'.
[  160.504011][T10282] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1179'.
[  160.651104][T10288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1181'.
[  160.661090][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'.
[  160.674362][T10288] netlink: 'syz.0.1181': attribute type 1 has an invalid length.
[  161.696560][T10300] netlink: 'syz.1.1184': attribute type 1 has an invalid length.
[  161.699542][T10300] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1184'.
[  162.708233][T10308] bond19: (slave vcan0): Releasing backup interface
[  162.710499][T10308] bond19: (slave vcan1): making interface the new active one
[  162.715916][T10308] bond19: (slave vcan1): Releasing backup interface
[  162.722627][T10308] bond20: (slave vxcan7): Releasing backup interface
[  162.728375][T10308] bond21: (slave bridge10): Releasing backup interface
[  162.785564][T10312] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1188'.
[  162.855960][T10317] netdevsim0: left allmulticast mode
[  163.013838][T10320] vxcan1: entered allmulticast mode
[  163.016227][T10320] vxcan1: left allmulticast mode
[  163.115398][T10323] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1191'.
[  163.151686][T10328] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1192'.
[  163.250274][T10334] netlink: 'syz.2.1194': attribute type 32 has an invalid length.
[  163.253462][T10334] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  163.431533][T10352] netlink: 'syz.2.1200': attribute type 1 has an invalid length.
[  163.490658][T10355] vlan5: entered promiscuous mode
[  163.493104][T10355] vlan5: entered allmulticast mode
[  163.495182][T10355] hsr_slave_1: entered allmulticast mode
[  163.529929][T10356] 8021q: adding VLAN 0 to HW filter on device bond28
[  163.972394][T10376] syzkaller0: entered allmulticast mode
[  163.975111][T10373] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  163.985179][T10378] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  163.989641][T10378] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  163.993006][T10378] tipc: Resetting bearer <eth:syzkaller0>
[  164.253936][T10402] netlink: 'syz.2.1213': attribute type 1 has an invalid length.
[  164.285727][T10402] 8021q: adding VLAN 0 to HW filter on device bond22
[  164.304125][T10403] 8021q: adding VLAN 0 to HW filter on device bond22
[  164.307198][T10403] bond22: (slave vxcan3): The slave device specified does not support setting the MAC address
[  164.314449][T10403] bond22: (slave vxcan3): Error -95 calling set_mac_address
[  164.351084][T10402] bond22: (slave bridge0): Enslaving as an active interface with a down link
[  164.496634][T10426] bridge0: failed insert local address into bridge forwarding table
[  165.066519][T10458] netlink: 'syz.2.1225': attribute type 1 has an invalid length.
[  165.135334][T10459] bond23: (slave vxcan3): The slave device specified does not support setting the MAC address
[  165.142371][T10459] bond23: (slave vxcan3): Error -95 calling set_mac_address
[  165.185874][T10458] bond23: (slave vxcan3): The slave device specified does not support setting the MAC address
[  165.194559][T10458] bond23: (slave vxcan3): Error -95 calling set_mac_address
[  165.347417][T10472] __nla_validate_parse: 12 callbacks suppressed
[  165.347435][T10472] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1228'.
[  165.359050][T10473] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1228'.
[  165.454984][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1231'.
[  165.503414][T10475] sctp: [Deprecated]: syz.1.1230 (pid 10475) Use of int in maxseg socket option.
[  165.503414][T10475] Use struct sctp_assoc_value instead
[  165.585766][T10494] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  165.639732][T10499] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  165.987507][T10522] netlink: 'syz.0.1237': attribute type 13 has an invalid length.
[  166.050795][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1240'.
[  166.117509][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1240'.
[  166.139586][T10528] tipc: Disabling bearer <eth:virt_wifi0>
[  166.284094][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1241'.
[  166.385344][T10536] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  166.406299][T10538] netlink: 'syz.2.1243': attribute type 9 has an invalid length.
[  166.594126][T10541] macsec0: entered promiscuous mode
[  166.597888][T10541] macsec0: entered allmulticast mode
[  166.611839][T10541] gretap0: entered allmulticast mode
[  166.614842][T10541] macsec0: left promiscuous mode
[  166.618571][T10541] macsec0: left allmulticast mode
[  166.620641][T10541] gretap0: left allmulticast mode
[  166.855122][T10556] netlink: 'syz.1.1248': attribute type 1 has an invalid length.
[  166.865358][T10556] bond19: (slave vcan0): The slave device specified does not support setting the MAC address
[  166.876832][T10556] bond19: (slave vcan0): making interface the new active one
[  166.880226][T10556] bond19: (slave vcan0): Enslaving as an active interface with an up link
[  166.890051][T10557] bond19: (slave vcan2): The slave device specified does not support setting the MAC address
[  166.896078][T10557] bond19: (slave vcan2): Enslaving as a backup interface with an up link
[  166.926814][T10565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1250'.
[  167.015783][T10570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1252'.
[  167.105416][T10572] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1253'.
[  167.191892][T10582] netlink: 'syz.2.1254': attribute type 1 has an invalid length.
[  167.220753][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'.
[  167.281233][T10582] 8021q: adding VLAN 0 to HW filter on device bond24
[  167.297493][T10588] netlink: 'syz.1.1257': attribute type 1 has an invalid length.
[  167.348201][T10588] 8021q: adding VLAN 0 to HW filter on device bond29
[  167.416448][T10587] veth23: entered promiscuous mode
[  167.463689][T10598] pim6reg1: entered allmulticast mode
[  167.656546][T10607] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  167.902939][T10627] netlink: 'syz.1.1268': attribute type 1 has an invalid length.
[  167.947473][T10624] 8021q: adding VLAN 0 to HW filter on device bond25
[  167.972309][T10627] tipc: Resetting bearer <eth:syzkaller0>
[  168.152249][T10640] bond19: (slave vcan0): Releasing backup interface
[  168.154961][T10640] bond19: (slave vcan2): making interface the new active one
[  168.355927][T10649] netlink: 'syz.1.1274': attribute type 4 has an invalid length.
[  168.439228][T10652] netlink: 'syz.1.1275': attribute type 2 has an invalid length.
[  168.482703][T10655] netlink: 'syz.1.1276': attribute type 58 has an invalid length.
[  168.624296][T10662] pim6reg1: entered allmulticast mode
[  168.634008][T10663] netlink: 'syz.0.1277': attribute type 1 has an invalid length.
[  168.674797][T10663] 8021q: adding VLAN 0 to HW filter on device bond29
[  168.876102][T10666] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  168.881624][T10666] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  168.885298][T10666] tipc: Resetting bearer <eth:syzkaller0>
[  168.962801][T10672] : renamed from batadv_slave_1
[  168.975150][T10672] bridge13: entered promiscuous mode
[  168.978089][T10672] bridge13: entered allmulticast mode
[  169.151404][T10678] bond26: entered promiscuous mode
[  169.153100][T10678] bond26: entered allmulticast mode
[  169.164343][T10678] bridge9: entered promiscuous mode
[  169.166495][T10678] bridge9: entered allmulticast mode
[  169.175013][T10678] bond26: (slave bridge9): making interface the new active one
[  169.179243][T10678] bond26: (slave bridge9): Enslaving as an active interface with an up link
[  169.257933][ T9920] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[  169.309090][T10685] pimreg3: entered allmulticast mode
[  169.397341][ T5914] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[  169.592827][T10707] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.690926][T10707] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.765763][T10723] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.797279][ T6240] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[  169.923803][T10731] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.926444][T10731] syzkaller0: entered promiscuous mode
[  169.930361][T10731] syzkaller0: entered allmulticast mode
[  169.933971][T10731] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  169.949172][T10731] tipc: Resetting bearer <eth:syzkaller0>
[  169.952970][T10730] tipc: Resetting bearer <eth:syzkaller0>
[  169.966372][T10730] tipc: Disabling bearer <eth:syzkaller0>
[  170.003693][T10737] syzkaller0: entered promiscuous mode
[  170.005684][T10737] syzkaller0: entered allmulticast mode
[  170.294359][T10754] team1: entered promiscuous mode
[  170.296420][T10754] team1: entered allmulticast mode
[  170.488157][T10780] __nla_validate_parse: 29 callbacks suppressed
[  170.488173][T10780] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1308'.
[  170.495393][T10780] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1308'.
[  170.539039][T10786] tipc: Resetting bearer <eth:syzkaller0>
[  170.563706][T10786] geneve6: entered promiscuous mode
[  170.565650][T10786] geneve6: entered allmulticast mode
[  170.571937][ T6240] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  170.575008][ T6240] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  170.593678][ T6240] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  170.600983][ T6240] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  170.651177][T10789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  170.801481][T10793] : renamed from macvlan0
[  170.838914][T10795] dvmrp8: entered allmulticast mode
[  171.003531][T10794] dvmrp8: left allmulticast mode
[  171.224436][T10818] validate_nla: 4 callbacks suppressed
[  171.224447][T10818] netlink: 'syz.1.1316': attribute type 8 has an invalid length.
[  171.283543][T10822] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  171.360295][T10822] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  171.431954][T10822] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  171.503235][T10822] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  171.599016][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  171.613867][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  171.626696][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  171.685419][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  171.856297][T10867] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1319'.
[  171.868390][T10867] batadv1: entered promiscuous mode
[  171.870539][T10867] batadv1: entered allmulticast mode
[  172.128502][T10881] netlink: 'syz.1.1323': attribute type 1 has an invalid length.
[  172.189848][T10881] 8021q: adding VLAN 0 to HW filter on device bond31
[  173.891002][T10908] team0: Mode changed to "activebackup"
[  173.893741][T10908] vlan0: entered promiscuous mode
[  173.921221][T10910] netlink: 'syz.1.1331': attribute type 6 has an invalid length.
[  173.968525][T10919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1334'.
[  174.024230][T10925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1336'.
[  174.044206][T10925] netlink: 'syz.1.1336': attribute type 10 has an invalid length.
[  174.056317][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1336'.
[  174.061104][T10925] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.067719][T10925] netem: change failed
[  174.123995][T10931] sctp: [Deprecated]: syz.1.1338 (pid 10931) Use of int in max_burst socket option deprecated.
[  174.123995][T10931] Use struct sctp_assoc_value instead
[  174.159258][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1338'.
[  174.214265][T10935] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1339'.
[  174.220735][T10935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  174.291724][T10938] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  174.335575][T10940] netlink: 'syz.0.1342': attribute type 1 has an invalid length.
[  174.342738][T10941] netlink: 'syz.1.1341': attribute type 1 has an invalid length.
[  174.346189][T10938] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  174.368449][T10940] 8021q: adding VLAN 0 to HW filter on device bond30
[  174.379584][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'.
[  174.383207][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'.
[  174.395384][T10941] bond32: entered promiscuous mode
[  174.403093][T10941] 8021q: adding VLAN 0 to HW filter on device bond32
[  174.423721][T10944] 8021q: adding VLAN 0 to HW filter on device bond33
[  174.429988][T10944] bond32: (slave bond33): making interface the new active one
[  174.432584][T10944] bond33: entered promiscuous mode
[  174.434744][T10944] bond32: (slave bond33): Enslaving as an active interface with an up link
[  174.457731][T10938] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  174.470178][T10941] bond32: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  174.474357][T10941] bond32: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  174.505157][T10938] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  174.511605][T10951] netlink: 'syz.0.1344': attribute type 1 has an invalid length.
[  174.543890][T10951] bond31: (slave geneve4): making interface the new active one
[  174.550601][T10951] bond31: (slave geneve4): Enslaving as an active interface with an up link
[  174.554207][ T6240] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  174.560556][ T6240] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  174.564098][ T6240] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  174.569203][ T6240] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  174.611818][ T6240] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  174.630821][ T6240] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  174.644475][ T6240] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  174.658040][ T6240] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  174.868291][T10974] bond18: (slave ip6gretap0): Releasing active interface
[  174.874616][T10974] bond18: (slave ip6gretap0): the permanent HWaddr of slave - fa:40:9a:b4:09:32 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  174.885866][T10974] bond18: (slave veth7): Releasing active interface
[  174.891213][T10974] veth9: left allmulticast mode
[  174.893361][T10974] veth9: left promiscuous mode
[  174.895948][T10974] bridge7: port 1(veth9) entered disabled state
[  174.903114][T10974] vlan4: left promiscuous mode
[  174.905330][T10974] bridge7: port 2(vlan4) entered disabled state
[  174.912517][T10974] bond22: (slave bridge0): Releasing active interface
[  174.922026][T10974] bond26: (slave bridge9): Releasing backup interface
[  175.227845][T11002] netlink: 'syz.2.1355': attribute type 10 has an invalid length.
[  175.311888][T11007] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  175.320843][T11007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.323845][T11007] syzkaller0: entered promiscuous mode
[  175.326122][T11007] syzkaller0: entered allmulticast mode
[  175.357430][T11007] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  175.367795][T11007] tipc: Resetting bearer <eth:syzkaller0>
[  175.379092][T11006] tipc: Resetting bearer <eth:syzkaller0>
[  175.400801][T11006] tipc: Disabling bearer <eth:syzkaller0>
[  175.405685][T11005] netlink: 'syz.2.1356': attribute type 1 has an invalid length.
[  175.501841][T11012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.504972][T11011] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.542726][T11010] tipc: Disabling bearer <eth:syzkaller0>
[  175.646618][T11021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.656290][T11021] syzkaller0: entered promiscuous mode
[  175.659088][T11021] syzkaller0: entered allmulticast mode
[  175.690722][T11021] tipc: Resetting bearer <eth:syzkaller0>
[  175.694781][T11019] tipc: Resetting bearer <eth:syzkaller0>
[  175.707970][T11030] netlink: 'syz.1.1364': attribute type 1 has an invalid length.
[  175.715204][T11019] tipc: Disabling bearer <eth:syzkaller0>
[  175.747516][T11029] bond34: entered promiscuous mode
[  175.749926][T11029] 8021q: adding VLAN 0 to HW filter on device bond34
[  175.753044][T11033] team0: Mode changed to "activebackup"
[  175.757352][T11033] vlan0: entered promiscuous mode
[  175.808162][ T9920] page_pool_release_retry() stalled pool shutdown: id 19, 1 inflight 60 sec
[  175.813290][T11036] syzkaller0: entered promiscuous mode
[  175.815689][T11036] syzkaller0: entered allmulticast mode
[  175.852931][T11040] 8021q: adding VLAN 0 to HW filter on device bond32
[  175.855947][T11036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.864878][T11036] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  175.876729][T11036] tipc: Resetting bearer <eth:syzkaller0>
[  175.914991][T11040] __nla_validate_parse: 69 callbacks suppressed
[  175.915006][T11040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1368'.
[  175.924729][T11035] tipc: Resetting bearer <eth:syzkaller0>
[  175.943433][T11035] tipc: Disabling bearer <eth:syzkaller0>
[  176.154479][T11059] 8021q: adding VLAN 0 to HW filter on device bond27
[  176.170827][T11059] ipvlan2: entered allmulticast mode
[  176.172564][T11059] bond27: entered allmulticast mode
[  176.181534][T11059] bond27: (slave gretap4): making interface the new active one
[  176.184069][T11059] gretap4: entered allmulticast mode
[  176.187833][T11059] bond27: (slave gretap4): Enslaving as an active interface with an up link
[  176.195733][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1370'.
[  176.331830][T11075] validate_nla: 3 callbacks suppressed
[  176.331925][T11075] netlink: 'syz.2.1373': attribute type 2 has an invalid length.
[  176.345269][T11075] k*]: entered promiscuous mode
[  176.354422][T11075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  176.414699][T11082] veth0_to_team: entered promiscuous mode
[  176.420147][T11082] veth0_to_team: entered allmulticast mode
[  177.161331][T11104] syzkaller0: entered promiscuous mode
[  177.163403][T11104] syzkaller0: entered allmulticast mode
[  177.342336][T11126] bond19: (slave vcan2): Releasing backup interface
[  177.348522][T11126] bond32: (slave bond33): Releasing backup interface
[  177.351145][T11126] bond33: left promiscuous mode
[  177.388278][T11128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1378'.
[  178.181872][T11137] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  178.199595][T11140] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1382'.
[  178.209382][T11140] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.214595][T11140] syzkaller0: entered promiscuous mode
[  178.219357][T11140] syzkaller0: entered allmulticast mode
[  178.224997][T11139] tipc: Resetting bearer <eth:syzkaller0>
[  178.244764][T11139] tipc: Disabling bearer <eth:syzkaller0>
[  178.309810][T11144] netlink: 'syz.1.1384': attribute type 1 has an invalid length.
[  178.375879][T11144] 8021q: adding VLAN 0 to HW filter on device bond35
[  178.553106][T11160] netlink: 'syz.1.1388': attribute type 1 has an invalid length.
[  178.592077][T11160] bond36: (slave bridge14): Enslaving as a backup interface with an up link
[  178.629293][ T6240] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  178.646308][ T6240] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  178.658581][ T6240] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  178.671135][ T6240] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  178.751094][T11166] syzkaller1: entered promiscuous mode
[  178.753252][T11166] syzkaller1: entered allmulticast mode
[  178.762884][T11166] macvlan0: entered allmulticast mode
[  178.764784][T11166] bond0: entered allmulticast mode
[  178.767494][T11166] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  178.775625][T11166] bond0: left allmulticast mode
[  179.049657][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'.
[  179.138235][T11180] netlink: 'syz.1.1395': attribute type 1 has an invalid length.
[  179.140954][T11180] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1395'.
[  179.152571][T11180] netlink: 'syz.1.1395': attribute type 1 has an invalid length.
[  179.155724][T11180] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1395'.
[  179.194728][T11185] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  179.300564][T11191] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  179.303733][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1398'.
[  179.354652][T11197] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.357644][T11197] syzkaller0: entered promiscuous mode
[  179.359823][T11197] syzkaller0: entered allmulticast mode
[  179.364166][T11197] netem: change failed
[  179.384924][T11197] tipc: Resetting bearer <eth:syzkaller0>
[  179.390402][T11196] tipc: Resetting bearer <eth:syzkaller0>
[  179.406578][T11196] tipc: Disabling bearer <eth:syzkaller0>
[  179.414040][T11204] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1401'.
[  179.449430][T11209] sctp: [Deprecated]: syz.1.1402 (pid 11209) Use of int in maxseg socket option.
[  179.449430][T11209] Use struct sctp_assoc_value instead
[  179.464918][T11214] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1403'.
[  179.718212][T11227] netlink: 'syz.1.1404': attribute type 19 has an invalid length.
[  179.840121][T11235] netlink: 'syz.1.1407': attribute type 1 has an invalid length.
[  180.111977][T11243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.115367][T11243] syzkaller0: entered promiscuous mode
[  180.120258][T11243] syzkaller0: entered allmulticast mode
[  180.137373][T11243] syzkaller0: MTU too low for tipc bearer
[  180.139493][T11243] tipc: Disabling bearer <eth:syzkaller0>
[  180.409885][T11262] netlink: 'syz.0.1415': attribute type 1 has an invalid length.
[  180.761140][T11283] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  180.884219][T11293] netlink: 'syz.0.1425': attribute type 1 has an invalid length.
[  180.953867][T11300] __nla_validate_parse: 17 callbacks suppressed
[  180.953936][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1425'.
[  180.983608][T11301] dvmrp8: entered allmulticast mode
[  180.989293][T11299] dvmrp8: left allmulticast mode
[  181.065456][T11306] syzkaller1: entered promiscuous mode
[  181.068160][T11306] syzkaller1: entered allmulticast mode
[  181.124408][T11312] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.131133][T11312] syzkaller0: entered promiscuous mode
[  181.133171][T11312] syzkaller0: entered allmulticast mode
[  181.181349][T11314] netlink: 'syz.1.1431': attribute type 1 has an invalid length.
[  181.185608][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1430'.
[  181.219555][T11311] tipc: Resetting bearer <eth:syzkaller0>
[  181.224800][T11310] tipc: Resetting bearer <eth:syzkaller0>
[  181.244485][T11310] tipc: Disabling bearer <eth:syzkaller0>
[  181.300868][T11319] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  181.393086][T11326] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  181.398631][T11326] tipc: Resetting bearer <eth:syzkaller0>
[  181.455758][T11333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1438'.
[  181.465348][T11333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1438'.
[  181.469326][T11333] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1438'.
[  181.484858][T11333] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  181.490234][T11333] bond2: (slave macvlan0): Enslaving as a backup interface with a down link
[  181.493962][T11333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1438'.
[  181.616453][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1439'.
[  181.915933][T11355] netlink: 'syz.2.1444': attribute type 1 has an invalid length.
[  181.935882][T11355] 8021q: adding VLAN 0 to HW filter on device bond28
[  181.954461][T11355] bond28: (slave veth11): Enslaving as an active interface with a down link
[  182.126384][T11355] 8021q: adding VLAN 0 to HW filter on device batadv1
[  182.130399][T11355] bond28: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  182.140111][T11363] netlink: 'syz.0.1445': attribute type 1 has an invalid length.
[  182.172857][T11363] 8021q: adding VLAN 0 to HW filter on device bond33
[  182.292076][T11373] syz.1.1446: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  182.302916][T11373] CPU: 0 UID: 0 PID: 11373 Comm: syz.1.1446 Not tainted syzkaller #0 PREEMPT(full) 
[  182.302944][T11373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  182.302953][T11373] Call Trace:
[  182.302960][T11373]  <TASK>
[  182.302967][T11373]  dump_stack_lvl+0x189/0x250
[  182.302995][T11373]  ? __pfx_dump_stack_lvl+0x10/0x10
[  182.303011][T11373]  ? __pfx__printk+0x10/0x10
[  182.303030][T11373]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  182.303048][T11373]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  182.303067][T11373]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  182.303085][T11373]  warn_alloc+0x214/0x310
[  182.303110][T11373]  ? stack_depot_save_flags+0x40/0x860
[  182.303132][T11373]  ? __pfx_warn_alloc+0x10/0x10
[  182.303186][T11373]  ? kasan_save_track+0x4f/0x80
[  182.303206][T11373]  ? xskq_create+0x56/0x170
[  182.303219][T11373]  ? xsk_init_queue+0xb0/0x110
[  182.303229][T11373]  ? xsk_setsockopt+0x4dc/0x8d0
[  182.303241][T11373]  ? do_sock_setsockopt+0x17c/0x1b0
[  182.303258][T11373]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  182.303274][T11373]  ? do_syscall_64+0xfa/0x3b0
[  182.303289][T11373]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.303311][T11373]  __vmalloc_node_range_noprof+0x125/0x12f0
[  182.303354][T11373]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  182.303379][T11373]  ? __kasan_kmalloc+0x93/0xb0
[  182.303399][T11373]  vmalloc_user_noprof+0xad/0xf0
[  182.303420][T11373]  ? xskq_create+0xbf/0x170
[  182.303434][T11373]  xskq_create+0xbf/0x170
[  182.303452][T11373]  xsk_init_queue+0xb0/0x110
[  182.303469][T11373]  xsk_setsockopt+0x4dc/0x8d0
[  182.303484][T11373]  ? __pfx_xsk_setsockopt+0x10/0x10
[  182.303497][T11373]  ? __pfx_aa_sk_perm+0x10/0x10
[  182.303522][T11373]  ? aa_sock_opt_perm+0xff/0x1b0
[  182.303539][T11373]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  182.303555][T11373]  ? __pfx_xsk_setsockopt+0x10/0x10
[  182.303569][T11373]  do_sock_setsockopt+0x17c/0x1b0
[  182.303589][T11373]  __x64_sys_setsockopt+0x13f/0x1b0
[  182.303617][T11373]  do_syscall_64+0xfa/0x3b0
[  182.303634][T11373]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.303650][T11373]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.303663][T11373]  ? exc_page_fault+0x9f/0xf0
[  182.303676][T11373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.303687][T11373] RIP: 0033:0x7f468ef8ebe9
[  182.303699][T11373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.303712][T11373] RSP: 002b:00007f468fd29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  182.303729][T11373] RAX: ffffffffffffffda RBX: 00007f468f1c5fa0 RCX: 00007f468ef8ebe9
[  182.303741][T11373] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  182.303751][T11373] RBP: 00007f468f011e19 R08: 0000000000000004 R09: 0000000000000000
[  182.303760][T11373] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.303771][T11373] R13: 00007f468f1c6038 R14: 00007f468f1c5fa0 R15: 00007ffc44703a48
[  182.303794][T11373]  </TASK>
[  182.303800][T11373] Mem-Info:
[  182.422656][T11373] active_anon:4518 inactive_anon:0 isolated_anon:0
[  182.422656][T11373]  active_file:1588 inactive_file:38272 isolated_file:0
[  182.422656][T11373]  unevictable:1768 dirty:163 writeback:0
[  182.422656][T11373]  slab_reclaimable:10774 slab_unreclaimable:87108
[  182.422656][T11373]  mapped:18068 shmem:2451 pagetables:903
[  182.422656][T11373]  sec_pagetables:0 bounce:0
[  182.422656][T11373]  kernel_misc_reclaimable:0
[  182.422656][T11373]  free:256890 free_pcp:19520 free_cma:0
[  182.439185][T11373] Node 0 active_anon:9492kB inactive_anon:0kB active_file:4024kB inactive_file:141012kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28328kB dirty:408kB writeback:0kB shmem:4912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9860kB pagetables:1752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  182.449915][T11373] Node 1 active_anon:8580kB inactive_anon:0kB active_file:2328kB inactive_file:12076kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43944kB dirty:244kB writeback:0kB shmem:4892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5336kB pagetables:1928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  182.467567][T11373] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  182.542890][T11373] lowmem_reserve[]: 0 811 811 811 811
[  182.545107][T11373] Node 0 DMA32 free:189172kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9464kB inactive_anon:0kB active_file:4024kB inactive_file:141012kB unevictable:3536kB writepending:408kB present:1556484kB managed:830868kB mlocked:0kB bounce:0kB free_pcp:37080kB local_pcp:22200kB free_cma:0kB
[  182.557608][T11373] lowmem_reserve[]: 0 0 0 0 0
[  182.559449][T11373] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  182.570233][T11373] lowmem_reserve[]: 0 0 854 854 854
[  182.572489][T11373] Node 1 Normal free:356168kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8564kB inactive_anon:0kB active_file:2328kB inactive_file:12076kB unevictable:3536kB writepending:244kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:41608kB local_pcp:17188kB free_cma:0kB
[  182.587390][T11373] lowmem_reserve[]: 0 0 0 0 0
[  182.589482][T11373] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  182.595175][T11373] Node 0 DMA32: 499*4kB (M) 723*8kB (UME) 277*16kB (UME) 134*32kB (UM) 42*64kB (ME) 28*128kB (ME) 18*256kB 
[  182.595346][T11387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1450'.
[  182.602788][T11373] (UME) 14*512kB (M) 7*1024kB (ME) 4*2048kB (UM) 36*4096kB (UM) = 197364kB
[  182.605663][T11373] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  182.612092][T11373] Node 1 Normal: 3*4kB (ME) 2*8kB (UM) 1*16kB (E) 95*32kB (UME) 119*64kB (UME) 69*128kB (UM) 26*256kB (UME) 8*512kB (UME) 2*1024kB (UM) 4*2048kB (UME) 77*4096kB (UM) = 355916kB
[  182.618291][T11373] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  182.621377][T11373] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  182.624159][T11373] 42308 total pagecache pages
[  182.625916][T11373] 0 pages in swap cache
[  182.627700][T11373] Free swap  = 124996kB
[  182.629149][T11373] Total swap = 124996kB
[  182.632489][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  182.635436][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  182.636981][T11373] 786301 pages RAM
[  182.639329][T11373] 0 pages HighMem/MovableOnly
[  182.640908][T11373] 241352 pages reserved
[  182.642302][T11373] 0 pages cma reserved
[  182.657163][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  182.665544][T11392] netlink: 'syz.2.1451': attribute type 13 has an invalid length.
[  182.669644][T11392] netlink: 'syz.2.1451': attribute type 17 has an invalid length.
[  182.677839][T11392] erspan0: left promiscuous mode
[  182.694961][T11392] 8021q: adding VLAN 0 to HW filter on device team0
[  182.706216][T11392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  182.721160][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'.
[  182.733192][T11391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1451'.
[  182.837982][T11405] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  183.218291][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  183.242241][T11459] geneve0: entered allmulticast mode
[  183.307869][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  183.416632][T11468] netlink: 'syz.1.1469': attribute type 3 has an invalid length.
[  183.450268][T11470] netlink: 'syz.2.1471': attribute type 1 has an invalid length.
[  183.518027][T11478] netlink: 'syz.2.1473': attribute type 12 has an invalid length.
[  183.522579][T11472] syzkaller1: entered promiscuous mode
[  183.524324][T11472] syzkaller1: entered allmulticast mode
[  183.735418][T11489] netlink: 'syz.1.1477': attribute type 8 has an invalid length.
[  183.790146][T11496] netlink: 'syz.2.1478': attribute type 1 has an invalid length.
[  183.803508][T11494] netlink: 'syz.1.1479': attribute type 4 has an invalid length.
[  183.817258][T11496] 8021q: adding VLAN 0 to HW filter on device bond29
[  183.850798][T11496] veth13: entered promiscuous mode
[  183.862468][T11496] bond29: (slave veth13): Enslaving as an active interface with an up link
[  183.899861][T11502] vlan4: entered promiscuous mode
[  183.902007][T11502] bond0: entered promiscuous mode
[  183.904275][T11502] vlan4: entered allmulticast mode
[  183.907578][T11502] bond0: entered allmulticast mode
[  184.131351][T11519] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  184.470247][T11530] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[  184.475461][T11530] bond1: (slave vcan0): Error -95 calling set_mac_address
[  184.546626][T11530] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[  184.556823][T11530] bond1: (slave vcan0): Error -95 calling set_mac_address
[  184.601069][T11537] 8021q: adding VLAN 0 to HW filter on device bond1
[  184.645852][T11540] bond27: (slave gretap4): Releasing active interface
[  184.656355][T11540] gretap4: left allmulticast mode
[  184.665543][T11540] bond2: (slave macvlan0): Releasing backup interface
[  184.673631][T11540] bond28: (slave veth11): Releasing active interface
[  184.681562][T11540] bond29: (slave veth13): Releasing backup interface
[  184.693689][T11540] rdma_op ffff88804071f1f0 conn xmit_rdma 0000000000000000
[  184.715242][T11544] syzkaller0: entered promiscuous mode
[  184.722973][T11544] syzkaller0: entered allmulticast mode
[  184.753817][T11546] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20002
[  184.814978][T11548] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  184.994598][T11555] team0: Mode "" not found
[  185.044682][T11566] 8021q: adding VLAN 0 to HW filter on device bond1
[  185.048852][T11566] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[  185.053658][T11566] bond1: (slave vcan0): Error -95 calling set_mac_address
[  185.091401][T11564] 8021q: adding VLAN 0 to HW filter on device bond1
[  185.239665][T11574] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  186.457163][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  186.905134][T11585] workqueue: Failed to create a rescuer kthread for wq "bond42": -EINTR
[  186.944295][T11590] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  186.962025][T11590] bond2: (slave macvlan2): Enslaving as a backup interface with a down link
[  186.965210][T11594] validate_nla: 10 callbacks suppressed
[  186.965221][T11594] netlink: 'syz.0.1511': attribute type 2 has an invalid length.
[  186.985809][T11594] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.994336][T11594] 8021q: adding VLAN 0 to HW filter on device team0
[  187.009181][T11594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  187.038898][T11603] __nla_validate_parse: 32 callbacks suppressed
[  187.038914][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'.
[  187.101047][T11608] syzkaller0: entered promiscuous mode
[  187.102818][T11608] syzkaller0: entered allmulticast mode
[  187.203940][T11618] netlink: 'syz.1.1515': attribute type 4 has an invalid length.
[  187.216568][T11612] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  187.224568][T11612] CPU: 0 UID: 0 PID: 11612 Comm: syz.0.1514 Not tainted syzkaller #0 PREEMPT(full) 
[  187.224590][T11612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.224600][T11612] Call Trace:
[  187.224606][T11612]  <TASK>
[  187.224614][T11612]  dump_stack_lvl+0x189/0x250
[  187.224644][T11612]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.224663][T11612]  ? __pfx__printk+0x10/0x10
[  187.224692][T11612]  ? kernfs_path_from_node+0x2f/0x290
[  187.224710][T11612]  ? kernfs_path_from_node+0x250/0x290
[  187.224723][T11612]  ? kernfs_path_from_node+0x2f/0x290
[  187.224741][T11612]  sysfs_warn_dup+0x8e/0xa0
[  187.224757][T11612]  sysfs_do_create_link_sd+0xc0/0x110
[  187.224775][T11612]  device_add_class_symlinks+0x1cf/0x240
[  187.224795][T11612]  device_add+0x475/0xb50
[  187.224815][T11612]  wiphy_register+0x1ba6/0x28d0
[  187.224872][T11612]  ? __pfx_wiphy_register+0x10/0x10
[  187.224890][T11612]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  187.224919][T11612]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  187.224943][T11612]  ieee80211_register_hw+0x3484/0x4100
[  187.224975][T11612]  ? ieee80211_register_hw+0x14a1/0x4100
[  187.225004][T11612]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  187.225027][T11612]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  187.225051][T11612]  ? __hrtimer_setup+0x187/0x210
[  187.225064][T11612]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  187.225091][T11612]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  187.225138][T11612]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  187.225158][T11612]  ? trace_kmalloc+0x1f/0xd0
[  187.225175][T11612]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  187.225204][T11612]  ? kstrndup+0xbf/0x160
[  187.225229][T11612]  hwsim_new_radio_nl+0xea4/0x1b10
[  187.225252][T11612]  ? __pfx___nla_validate_parse+0x10/0x10
[  187.225288][T11612]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  187.225320][T11612]  ? __nla_parse+0x40/0x60
[  187.225337][T11612]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  187.225365][T11612]  genl_family_rcv_msg_doit+0x215/0x300
[  187.225391][T11612]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  187.225422][T11612]  ? bpf_lsm_capable+0x9/0x20
[  187.225441][T11612]  ? security_capable+0x7e/0x2e0
[  187.225468][T11612]  genl_rcv_msg+0x60e/0x790
[  187.225493][T11612]  ? __pfx_genl_rcv_msg+0x10/0x10
[  187.225510][T11612]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  187.225544][T11612]  netlink_rcv_skb+0x208/0x470
[  187.225556][T11612]  ? __lock_acquire+0xab9/0xd20
[  187.225578][T11612]  ? __pfx_genl_rcv_msg+0x10/0x10
[  187.225598][T11612]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  187.225630][T11612]  ? down_read+0x1ad/0x2e0
[  187.225651][T11612]  genl_rcv+0x28/0x40
[  187.225669][T11612]  netlink_unicast+0x82f/0x9e0
[  187.225699][T11612]  ? __pfx_netlink_unicast+0x10/0x10
[  187.225721][T11612]  ? netlink_sendmsg+0x642/0xb30
[  187.225733][T11612]  ? skb_put+0x11b/0x210
[  187.225753][T11612]  netlink_sendmsg+0x805/0xb30
[  187.225777][T11612]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.225794][T11612]  ? aa_sock_msg_perm+0xf1/0x1d0
[  187.225812][T11612]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  187.225828][T11612]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.225872][T11612]  __sock_sendmsg+0x21c/0x270
[  187.225901][T11612]  ____sys_sendmsg+0x505/0x830
[  187.225923][T11612]  ? __pfx_____sys_sendmsg+0x10/0x10
[  187.225948][T11612]  ? import_iovec+0x74/0xa0
[  187.225969][T11612]  ___sys_sendmsg+0x21f/0x2a0
[  187.225988][T11612]  ? __pfx____sys_sendmsg+0x10/0x10
[  187.226037][T11612]  ? __fget_files+0x2a/0x420
[  187.226049][T11612]  ? __fget_files+0x3a0/0x420
[  187.226071][T11612]  __x64_sys_sendmsg+0x19b/0x260
[  187.226091][T11612]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  187.226116][T11612]  ? rcu_is_watching+0x15/0xb0
[  187.226137][T11612]  ? do_syscall_64+0xbe/0x3b0
[  187.226157][T11612]  do_syscall_64+0xfa/0x3b0
[  187.226169][T11612]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.226191][T11612]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.226208][T11612]  ? exc_page_fault+0x9f/0xf0
[  187.226227][T11612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.226240][T11612] RIP: 0033:0x7fce6db8ebe9
[  187.226254][T11612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.226265][T11612] RSP: 002b:00007fce6ea28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  187.226281][T11612] RAX: ffffffffffffffda RBX: 00007fce6ddc5fa0 RCX: 00007fce6db8ebe9
[  187.226292][T11612] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  187.226301][T11612] RBP: 00007fce6dc11e19 R08: 0000000000000000 R09: 0000000000000000
[  187.226311][T11612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.226320][T11612] R13: 00007fce6ddc6038 R14: 00007fce6ddc5fa0 R15: 00007ffd2961ebf8
[  187.226347][T11612]  </TASK>
[  187.434052][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'.
[  187.437244][T11623] netlink: 'syz.2.1517': attribute type 30 has an invalid length.
[  187.466152][ T6240] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  187.469456][ T6240] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  187.472949][ T6240] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  187.476375][ T6240] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  187.487430][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  187.563437][T11631] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  187.643431][T11631] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  187.724126][T11631] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  187.765477][T11634] netlink: 'syz.2.1518': attribute type 13 has an invalid length.
[  187.773267][T11634] netlink: 'syz.2.1518': attribute type 17 has an invalid length.
[  187.783639][T11634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  187.819677][T11631] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  187.833656][T11637] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1519'.
[  187.838267][T11637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  187.890272][T11638] netlink: 'syz.2.1518': attribute type 4 has an invalid length.
[  187.963178][ T6240] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  187.985211][ T6240] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  188.004686][ T5861] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  188.035387][ T5861] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  188.185299][T11645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1521'.
[  188.595585][T11653] netlink: 'syz.0.1524': attribute type 2 has an invalid length.
[  188.842879][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1525'.
[  188.846296][T11658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1525'.
[  188.850633][T11658] netlink: 'syz.0.1525': attribute type 12 has an invalid length.
[  188.903279][T11660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1526'.
[  189.169550][T11676] ip6tnl2: entered promiscuous mode
[  189.220993][T11695] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1531'.
[  189.309995][T11700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1534'.
[  189.375694][T11705] pim6reg1: entered promiscuous mode
[  189.379846][T11705] pim6reg1: entered allmulticast mode
[  189.484090][T11719] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1539'.
[  189.490613][T11714] 8021q: adding VLAN 0 to HW filter on device bond30
[  189.504650][T11714] bond2: (slave macvlan5): Error -98 calling set_mac_address
[  189.537497][T11730] netlink: 'syz.0.1542': attribute type 4 has an invalid length.
[  189.557307][T11732] bond2: (slave macvlan2): Releasing backup interface
[  189.590997][T11731] netlink: 'syz.0.1542': attribute type 4 has an invalid length.
[  189.609383][T11735] 8021q: adding VLAN 0 to HW filter on device bond31
[  189.613600][T11735] bond0: (slave bond31): Enslaving as an active interface with a down link
[  190.624657][T11791] 8021q: adding VLAN 0 to HW filter on device bond19
[  190.830527][T11810] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  190.857713][ T5854] Bluetooth: hci1: command 0x0406 tx timeout
[  190.908980][T11814] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  191.029014][T11817] batadv_slave_0: entered promiscuous mode
[  191.122492][T11820] bond19: option mode: unable to set because the bond device is up
[  191.213925][T11825] tipc: Resetting bearer <eth:syzkaller0>
[  191.569608][ T5234] Bluetooth: hci2: command 0x0405 tx timeout
[  191.631064][T11852] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  192.044829][T11862] vlan0: left promiscuous mode
[  192.046645][T11862] geneve0: left allmulticast mode
[  192.049473][T11862] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  192.064785][T11862] vlan4: left promiscuous mode
[  192.068151][T11862] bond26: left promiscuous mode
[  192.069808][T11862] gretap2: left promiscuous mode
[  192.071787][T11862] vlan4: left allmulticast mode
[  192.073426][T11862] bond26: left allmulticast mode
[  192.075040][T11862] gretap2: left allmulticast mode
[  192.081792][T11862] sit3: left allmulticast mode
[  192.115942][ T5861] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  192.119705][ T5861] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  192.123946][ T5861] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  192.129090][ T5861] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  192.213619][T11866] __nla_validate_parse: 18 callbacks suppressed
[  192.213629][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1575'.
[  192.266461][T11872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1576'.
[  192.345269][T11874] syz_tun: entered allmulticast mode
[  192.351356][T11873] syz_tun: left allmulticast mode
[  192.382959][T11878] tipc: Enabling of bearer <et:g> rejected, media not registered
[  192.469013][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1579'.
[  192.472637][T11882] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  192.478755][T11882] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.482806][T11882] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  192.700197][T11889] validate_nla: 5 callbacks suppressed
[  192.700214][T11889] netlink: 'syz.1.1581': attribute type 2 has an invalid length.
[  192.876287][T11902] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1585'.
[  192.890903][T11902] netlink: 'syz.0.1585': attribute type 1 has an invalid length.
[  192.914116][T11902] 8021q: adding VLAN 0 to HW filter on device bond34
[  192.939596][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'.
[  193.056131][T11908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1588'.
[  193.086202][T11911] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.104534][T11912] syzkaller0: entered promiscuous mode
[  193.106628][T11912] syzkaller0: entered allmulticast mode
[  193.157562][T11917] tipc: Resetting bearer <eth:syzkaller0>
[  193.261173][T11933] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  193.894224][T11910] tipc: Resetting bearer <eth:syzkaller0>
[  193.908068][T11910] tipc: Disabling bearer <eth:syzkaller0>
[  193.960576][T11911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  194.108942][T11942] netlink: 'syz.0.1595': attribute type 13 has an invalid length.
[  194.111703][T11942] netlink: 'syz.0.1595': attribute type 17 has an invalid length.
[  194.122837][T11948] pim6reg: entered allmulticast mode
[  194.125994][T11948] netlink: 'syz.1.1598': attribute type 1 has an invalid length.
[  194.143707][T11948] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1598'.
[  194.147611][T11942] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.154105][T11942] 8021q: adding VLAN 0 to HW filter on device team0
[  194.170981][T11942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  194.175326][T11950] netlink: 'syz.2.1599': attribute type 1 has an invalid length.
[  194.213302][T11950] bond32: entered promiscuous mode
[  194.215259][T11950] 8021q: adding VLAN 0 to HW filter on device bond32
[  194.222576][T11952] pim6reg: left allmulticast mode
[  194.288894][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1600'.
[  194.293322][T11958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1601'.
[  194.302823][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1601'.
[  194.306327][T11958] netlink: 'syz.1.1601': attribute type 13 has an invalid length.
[  194.312419][T11958] netlink: 'syz.1.1601': attribute type 11 has an invalid length.
[  194.366053][T11963] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  194.651837][T11995] netlink: ct family unspecified
[  194.653955][T11995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.704731][T12001] openvswitch: netlink: Flow key attr not present in new flow.
[  194.861966][ T5861] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  194.864531][ T5861] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  194.874533][ T5861] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  194.922432][ T5861] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  194.955891][T12020] batadv_slave_0: entered promiscuous mode
[  194.967811][T12020] batadv_slave_0: left promiscuous mode
[  195.140523][T12034] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  195.181505][T12041] netlink: 'syz.2.1623': attribute type 1 has an invalid length.
[  195.203170][T12041] 8021q: adding VLAN 0 to HW filter on device bond33
[  195.229367][T12041] bond33: (slave veth15): Enslaving as an active interface with a down link
[  195.242446][T12041] macvlan5: entered promiscuous mode
[  195.244449][T12041] macvlan5: entered allmulticast mode
[  195.246723][T12041] bond33: entered promiscuous mode
[  195.250266][T12041] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  195.253230][T12041] bond33: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  195.260097][T12041] bond33: left promiscuous mode
[  195.274495][T12040] IPVS: Error connecting to the multicast addr
[  195.370398][T12047] lo speed is unknown, defaulting to 1000
[  195.379580][T12047] lo speed is unknown, defaulting to 1000
[  195.386753][T12047] lo speed is unknown, defaulting to 1000
[  195.396715][T12049] netlink: 'syz.2.1626': attribute type 1 has an invalid length.
[  195.450241][T12054] vxcan10: entered allmulticast mode
[  195.462726][T12049] 8021q: adding VLAN 0 to HW filter on device bond34
[  195.562513][T12067] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.589040][T12065] sctp: [Deprecated]: syz.2.1630 (pid 12065) Use of int in maxseg socket option.
[  195.589040][T12065] Use struct sctp_assoc_value instead
[  195.604618][ T5914] lo speed is unknown, defaulting to 1000
[  195.606761][T12047] infiniband syz0: set active
[  195.608977][T12047] infiniband syz0: added lo
[  195.658772][T12047] RDS/IB: syz0: added
[  195.660709][T12047] smc: adding ib device syz0 with port count 1
[  195.662925][T12047] smc:    ib device syz0 port 1 has no pnetid
[  195.667922][ T5914] lo speed is unknown, defaulting to 1000
[  195.675503][T12047] lo speed is unknown, defaulting to 1000
[  195.812192][T12047] lo speed is unknown, defaulting to 1000
[  195.955533][T12047] lo speed is unknown, defaulting to 1000
[  196.176006][T12107] syzkaller0: entered promiscuous mode
[  196.180006][T12107] syzkaller0: entered allmulticast mode
[  196.184757][T12109] sctp: [Deprecated]: syz.1.1644 (pid 12109) Use of struct sctp_assoc_value in delayed_ack socket option.
[  196.184757][T12109] Use struct sctp_sack_info instead
[  196.231188][T12111] team0: Refused to change device type
[  196.305464][T12114] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  196.355452][T12114] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  196.394638][T12114] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  196.402292][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.404793][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.433448][T12114] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  196.525769][ T5861] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  196.551948][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  196.572888][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  196.588808][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  196.622326][T12138] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  196.624616][T12138] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  196.627900][T12138] tipc: Resetting bearer <eth:syzkaller0>
[  196.662147][T12142] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.674354][T12142] syzkaller0: entered promiscuous mode
[  196.676509][T12142] syzkaller0: entered allmulticast mode
[  196.699035][T12142] tipc: Resetting bearer <eth:syzkaller0>
[  196.709190][T12141] tipc: Resetting bearer <eth:syzkaller0>
[  196.723373][T12141] tipc: Disabling bearer <eth:syzkaller0>
[  196.754335][T12153] bridge0: port 1(batadv1) entered blocking state
[  196.756823][T12153] bridge0: port 1(batadv1) entered disabled state
[  196.760824][T12153] batadv1: entered allmulticast mode
[  196.765497][T12153] batadv1: entered promiscuous mode
[  197.085169][T12171] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  197.125019][T12173] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  197.133733][T12173] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  197.136815][T12173] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  197.260415][ T5861] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  197.264292][ T5861] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  197.710498][T12207] __nla_validate_parse: 39 callbacks suppressed
[  197.710510][T12207] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1666'.
[  197.719515][T12207] validate_nla: 1 callbacks suppressed
[  197.719525][T12207] netlink: 'syz.0.1666': attribute type 1 has an invalid length.
[  197.811413][T12214] netlink: 'syz.0.1667': attribute type 1 has an invalid length.
[  197.851254][T12214] bond35: entered promiscuous mode
[  197.853426][T12214] 8021q: adding VLAN 0 to HW filter on device bond35
[  197.858457][T12214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1667'.
[  197.876568][T12217] bridge20: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  197.966779][T12214] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1667'.
[  198.031220][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1671'.
[  198.064411][T12230] bond36: (slave bridge14): Releasing backup interface
[  198.069855][T12230] batadv1: left allmulticast mode
[  198.071470][T12230] batadv1: left promiscuous mode
[  198.073134][T12230] bridge0: port 1(batadv1) entered disabled state
[  198.089281][T12230] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  198.131884][T12232] netlink: 'syz.0.1673': attribute type 13 has an invalid length.
[  198.135315][T12232] netlink: 'syz.0.1673': attribute type 17 has an invalid length.
[  198.147709][T12232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.157379][   T47] lo speed is unknown, defaulting to 1000
[  198.232133][T12232] lo speed is unknown, defaulting to 1000
[  198.241059][T12243] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  198.294247][T12248] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1676'.
[  198.351912][T12253] dvmrp0: entered allmulticast mode
[  198.355128][T12253] dvmrp0: left allmulticast mode
[  198.381407][T12252] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1677'.
[  198.385054][T12252] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1677'.
[  198.408960][T12252] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1677'.
[  198.488714][T12258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1678'.
[  198.658978][T12271] netem: change failed
[  199.011911][T12277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1682'.
[  199.492335][T12290] netlink: 'syz.1.1684': attribute type 13 has an invalid length.
[  199.495490][T12290] netlink: 'syz.1.1684': attribute type 17 has an invalid length.
[  199.539351][T12290] 8021q: adding VLAN 0 to HW filter on device team0
[  199.545765][T12290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  199.573242][T12293] netlink: 'syz.2.1686': attribute type 1 has an invalid length.
[  199.604269][T12293] 8021q: adding VLAN 0 to HW filter on device bond35
[  199.700226][T12296] netlink: 'syz.2.1687': attribute type 30 has an invalid length.
[  199.811530][T12303] netlink: 'syz.2.1688': attribute type 1 has an invalid length.
[  199.830827][T12303] 8021q: adding VLAN 0 to HW filter on device bond37
[  199.855543][T12302] 8021q: adding VLAN 0 to HW filter on device bond37
[  199.861573][T12302] bond37: (slave vxcan3): The slave device specified does not support setting the MAC address
[  199.867604][T12302] bond37: (slave vxcan3): Error -95 calling set_mac_address
[  200.081826][T12314] netlink: 'syz.0.1691': attribute type 13 has an invalid length.
[  200.087793][T12314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  200.135051][T12322] IPv6: Can't replace route, no match found
[  200.219974][T12327] 8021q: VLANs not supported on vxcan0
[  200.259784][T12334] IPv6: sit4: Disabled Multicast RS
[  200.361569][T12345] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  200.594160][T12370] syzkaller0: create flow: hash 539989562 index 1
[  200.594154][ T6240] syzkaller0: tun_net_xmit 76
[  200.599512][ T6240] syzkaller0: tun_net_xmit 48
[  200.617180][   T47] syzkaller0: tun_net_xmit 76
[  200.662119][T12372] syzkaller0: delete flow: hash 539989562 index 1
[  202.355694][T12386] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  202.386574][   T55] Bluetooth: hci2: link tx timeout
[  202.390817][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  202.411787][T12391] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  202.489793][T12397] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.538626][T12402] syzkaller0: mtu less than device minimum
[  204.451409][ T5234] Bluetooth: hci2: command 0x0405 tx timeout
[  204.514845][T12412] validate_nla: 4 callbacks suppressed
[  204.514866][T12412] netlink: 'syz.1.1720': attribute type 1 has an invalid length.
[  204.516311][T12413] netlink: 'syz.1.1720': attribute type 1 has an invalid length.
[  204.534425][ T5881] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  204.539945][ T5881] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  204.544257][ T5881] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  204.551026][T12417] __nla_validate_parse: 16 callbacks suppressed
[  204.551044][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1721'.
[  204.559444][ T5881] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  204.593929][T12417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1721'.
[  204.919489][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1723'.
[  205.026024][T12428] netlink: 'syz.0.1724': attribute type 1 has an invalid length.
[  205.111096][T12428] bond36: (slave gretap4): making interface the new active one
[  205.114226][T12428] bond36: (slave gretap4): Enslaving as an active interface with an up link
[  205.409094][T12444] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1729'.
[  205.427519][T12444] bridge_slave_0: entered allmulticast mode
[  205.431345][T12446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1730'.
[  205.473360][T12448] netlink: 'syz.1.1731': attribute type 1 has an invalid length.
[  205.527817][T12448] 8021q: adding VLAN 0 to HW filter on device bond43
[  205.584570][T12450] bond43: (slave veth27): Enslaving as an active interface with a down link
[  205.595327][T12448] 8021q: adding VLAN 0 to HW filter on device batadv2
[  205.617392][T12448] bond43: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  205.632421][T12457] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1733'.
[  205.909022][T12465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1735'.
[  206.478281][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1737'.
[  206.756844][T12476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.763968][T12476] syzkaller0: entered promiscuous mode
[  206.773295][T12476] syzkaller0: entered allmulticast mode
[  206.818450][T12476] tipc: Resetting bearer <eth:syzkaller0>
[  206.829125][T12475] tipc: Resetting bearer <eth:syzkaller0>
[  206.853267][T12475] tipc: Disabling bearer <eth:syzkaller0>
[  206.969121][T12483] bridge0: port 1(batadv2) entered blocking state
[  206.973774][T12483] bridge0: port 1(batadv2) entered disabled state
[  206.976129][T12483] batadv2: entered allmulticast mode
[  206.979839][T12483] batadv2: entered promiscuous mode
[  207.051832][T12494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1743'.
[  207.067949][T12494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1743'.
[  207.262096][T12503] syzkaller1: entered promiscuous mode
[  207.263800][T12503] syzkaller1: entered allmulticast mode
[  207.268940][T12501] batadv2: left allmulticast mode
[  207.270591][T12501] batadv2: left promiscuous mode
[  207.272304][T12501] bridge0: port 1(batadv2) entered disabled state
[  207.860920][T12527] netlink: 'syz.2.1752': attribute type 2 has an invalid length.
[  207.869722][T12527] netlink: 'syz.2.1752': attribute type 2 has an invalid length.
[  207.873880][T12527] netlink: 'syz.2.1752': attribute type 2 has an invalid length.
[  207.879625][T12527] netlink: 'syz.2.1752': attribute type 2 has an invalid length.
[  207.883656][T12527] netlink: 'syz.2.1752': attribute type 2 has an invalid length.
[  207.890741][T12527] netlink: 'syz.2.1752': attribute type 2 has an invalid length.
[  207.933323][T12519] lo speed is unknown, defaulting to 1000
[  208.973224][T12568] lo speed is unknown, defaulting to 1000
[  209.588476][T12603] validate_nla: 16 callbacks suppressed
[  209.588489][T12603] netlink: 'syz.0.1765': attribute type 10 has an invalid length.
[  209.682935][T12604] __nla_validate_parse: 5 callbacks suppressed
[  209.682948][T12604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1765'.
[  210.302057][T12621] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  210.361471][T12623] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1770'.
[  210.676129][T12632] : entered promiscuous mode
[  210.682146][T12635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1774'.
[  210.944498][T12645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.951126][T12645] syzkaller0: entered promiscuous mode
[  210.953059][T12645] syzkaller0: entered allmulticast mode
[  211.012308][T12650] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1780'.
[  211.019155][T12645] tipc: Resetting bearer <eth:syzkaller0>
[  211.023680][T12650] 0X: renamed from caif0
[  211.036441][T12650] 0X: entered allmulticast mode
[  211.038925][T12650] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  211.063227][T12651] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.066432][T12651] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  211.095931][T12651] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  211.110549][T12644] tipc: Resetting bearer <eth:syzkaller0>
[  211.134273][T12644] tipc: Disabling bearer <eth:syzkaller0>
[  211.142480][T12651] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  211.166978][T12654] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  211.266505][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1782'.
[  211.271669][T12651] tipc: Disabling bearer <eth:syzkaller0>
[  211.315793][T12661] lo speed is unknown, defaulting to 1000
[  211.429007][T12682] batadv_slave_0: entered promiscuous mode
[  211.432371][T12682] batadv_slave_0: left promiscuous mode
[  211.515159][T12687] netlink: 'syz.2.1789': attribute type 4 has an invalid length.
[  211.540386][T12687] netlink: 'syz.2.1789': attribute type 4 has an invalid length.
[  211.571384][T12687] netlink: 'syz.2.1789': attribute type 1 has an invalid length.
[  211.574381][T12687] netlink: 'syz.2.1789': attribute type 3 has an invalid length.
[  211.578272][T12687] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1789'.
[  211.582125][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1789'.
[  211.618921][T12692] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1792'.
[  211.640003][T12693] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  211.643731][T12693] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  211.821523][T12702] netlink: 'syz.1.1796': attribute type 1 has an invalid length.
[  211.851254][T12702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1796'.
[  211.865645][T12708] netlink: 'syz.2.1797': attribute type 3 has an invalid length.
[  211.869024][T12708] netlink: 'syz.2.1797': attribute type 1 has an invalid length.
[  211.871983][T12708] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1797'.
[  211.876485][T12708] NCSI netlink: No device for ifindex 0
[  211.882630][T12708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  212.025378][T12719] veth29: entered promiscuous mode
[  212.555784][T12744] netlink: 'syz.0.1805': attribute type 7 has an invalid length.
[  212.590893][T12746] netlink: 'syz.0.1806': attribute type 1 has an invalid length.
[  212.626377][T12746] 8021q: adding VLAN 0 to HW filter on device bond38
[  212.649794][T12746] bond38: (slave veth17): Enslaving as an active interface with a down link
[  212.660793][T12746] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.663165][T12746] bond38: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  213.078570][T12773] geneve6: entered promiscuous mode
[  213.080259][T12773] geneve6: entered allmulticast mode
[  213.082650][ T6240] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  213.102076][ T6240] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  213.105514][ T6240] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  213.137992][ T6240] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  213.431314][T12776] bond0 (unregistering): Released all slaves
[  213.757077][T12806] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  213.825638][T12802] syz_tun (unregistering): left promiscuous mode
[  213.986659][T12804] lo speed is unknown, defaulting to 1000
[  213.986713][T12816] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  215.117777][T12863] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  215.310836][T12882] validate_nla: 4 callbacks suppressed
[  215.310859][T12882] netlink: 'syz.2.1841': attribute type 2 has an invalid length.
[  215.325582][T12882] k*: entered promiscuous mode
[  215.352727][T12884] netlink: 'syz.0.1840': attribute type 30 has an invalid length.
[  215.360322][T12882] 8021q: adding VLAN 0 to HW filter on device team0
[  215.365235][T12882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  215.571940][T12898] dvmrp8: entered allmulticast mode
[  215.602239][T12898] dvmrp8: left allmulticast mode
[  215.759143][T12911] __nla_validate_parse: 18 callbacks suppressed
[  215.759156][T12911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1846'.
[  216.062662][T12929] netlink: 'syz.1.1850': attribute type 10 has an invalid length.
[  216.067398][T12929] batadv_slave_0: left promiscuous mode
[  216.141563][T12934] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.148089][T12934] syzkaller0: entered promiscuous mode
[  216.150072][T12934] syzkaller0: entered allmulticast mode
[  216.180765][T12934] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1851'.
[  216.195933][T12934] tipc: Resetting bearer <eth:syzkaller0>
[  216.205963][T12933] tipc: Resetting bearer <eth:syzkaller0>
[  216.257491][T12933] tipc: Disabling bearer <eth:syzkaller0>
[  216.398495][T12944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1853'.
[  216.420764][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1854'.
[  216.479825][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1855'.
[  216.582640][T12955] lo speed is unknown, defaulting to 1000
[  216.679015][T12959] tipc: Resetting bearer <eth:syzkaller0>
[  216.853718][T12963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1858'.
[  216.863397][T12963] xfrm1: entered promiscuous mode
[  216.865486][T12963] xfrm1: entered allmulticast mode
[  216.870675][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'.
[  216.893310][T12964] syzkaller1: entered promiscuous mode
[  216.895406][T12964] syzkaller1: entered allmulticast mode
[  216.947028][T12957] netlink: 'syz.0.1856': attribute type 1 has an invalid length.
[  217.169151][T12970] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.261686][T12974] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1861'.
[  217.275499][T12977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1862'.
[  217.302850][T12974] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  217.306154][T12974] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  217.526266][T12997] netlink: 'syz.1.1867': attribute type 11 has an invalid length.
[  217.614261][T13000] netlink: 'syz.0.1869': attribute type 9 has an invalid length.
[  217.614671][T13001] netlink: 'syz.1.1868': attribute type 13 has an invalid length.
[  217.622455][T13001] netlink: 'syz.1.1868': attribute type 17 has an invalid length.
[  217.629432][T13001] 8021q: adding VLAN 0 to HW filter on device team0
[  217.634440][T13001] 0X: left allmulticast mode
[  217.636551][T13001] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  217.718352][T13003] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1870'.
[  217.767028][T13003] netlink: 'syz.1.1870': attribute type 1 has an invalid length.
[  217.874852][T13013] x_tables: ip_tables: udp match: only valid for protocol 17
[  218.094347][T13021] netlink: 'syz.0.1877': attribute type 1 has an invalid length.
[  218.224176][T13031] bridge21: port 1(veth19) entered blocking state
[  218.226829][T13031] bridge21: port 1(veth19) entered disabled state
[  218.232281][T13031] veth19: entered allmulticast mode
[  218.236319][T13031] veth19: entered promiscuous mode
[  218.511230][T13042] netlink: 'syz.0.1882': attribute type 2 has an invalid length.
[  218.523800][T13042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  218.595919][T13046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  218.630780][T13046] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.634241][T13046] syzkaller0: entered promiscuous mode
[  218.639171][T13046] syzkaller0: entered allmulticast mode
[  218.671450][T13046] tipc: Resetting bearer <eth:syzkaller0>
[  218.721682][T13046] tipc: Resetting bearer <eth:syzkaller0>
[  218.746773][T13046] tipc: Disabling bearer <eth:syzkaller0>
[  218.796349][T13051] lo speed is unknown, defaulting to 1000
[  218.914656][T13065] 0X: renamed from caif0
[  218.924461][T13065] 0X: entered allmulticast mode
[  218.926565][T13065] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  219.293235][T13080] dvmrp1: entered allmulticast mode
[  219.302051][   T24] lo speed is unknown, defaulting to 1000
[  219.304333][   T24] syz0: Port: 1 Link DOWN
[  219.308223][   T24] lo speed is unknown, defaulting to 1000
[  219.426094][ T5914] lo speed is unknown, defaulting to 1000
[  219.436452][ T5914] syz0: Port: 1 Link ACTIVE
[  219.449146][ T5914] lo speed is unknown, defaulting to 1000
[  219.501138][T13089] lo speed is unknown, defaulting to 1000
[  219.675767][T13088] lo speed is unknown, defaulting to 1000
[  220.265076][T13125] vlan0: entered promiscuous mode
[  220.295290][T13129] 0X: left allmulticast mode
[  220.297344][T13129] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  220.422605][T13136] team1: entered promiscuous mode
[  220.425693][T13136] team1: entered allmulticast mode
[  220.431856][T13131] lo speed is unknown, defaulting to 1000
[  220.531996][T13138] IPv6: sit4: Disabled Multicast RS
[  220.628825][   T34] audit: type=1800 audit(1757214276.492:3): pid=13152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1907" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3576 res=0 errno=0
[  220.663259][   T34] audit: type=1800 audit(1757214276.492:4): pid=13152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1907" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3576 res=0 errno=0
[  220.674942][T13154] validate_nla: 6 callbacks suppressed
[  220.674957][T13154] netlink: 'syz.1.1908': attribute type 1 has an invalid length.
[  220.786360][T13158] bond41: entered promiscuous mode
[  220.793839][T13158] 8021q: adding VLAN 0 to HW filter on device bond41
[  220.819357][T13162] __nla_validate_parse: 22 callbacks suppressed
[  220.819373][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1909'.
[  220.840944][T13162] gtp2: entered promiscuous mode
[  220.842821][T13162] gtp2: entered allmulticast mode
[  221.048806][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1912'.
[  221.068680][T13171] 8021q: adding VLAN 0 to HW filter on device bond46
[  221.079551][T13171] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.152155][T13176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.155429][T13176] syzkaller0: entered promiscuous mode
[  221.159482][T13176] syzkaller0: entered allmulticast mode
[  221.163587][T13179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'.
[  221.172786][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'.
[  221.181445][T13179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'.
[  221.192198][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'.
[  221.195631][ T5861] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  221.201017][ T5861] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  221.204956][ T5861] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  221.208174][ T5861] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  221.212848][T13176] tipc: Resetting bearer <eth:syzkaller0>
[  221.228729][T13175] tipc: Resetting bearer <eth:syzkaller0>
[  221.243821][T13175] tipc: Disabling bearer <eth:syzkaller0>
[  221.422426][T13192] wg1: entered promiscuous mode
[  221.424129][T13192] wg1: entered allmulticast mode
[  221.475456][T13198] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  221.511296][T13198] bond43: (slave veth27): Releasing active interface
[  221.526534][T13198] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1921'.
[  221.554621][T13198] netlink: 'syz.1.1921': attribute type 10 has an invalid length.
[  221.558030][T13198] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  221.675993][T13214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1926'.
[  221.770105][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1928'.
[  221.826524][T13229] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.1931'.
[  221.838809][T13226] lo speed is unknown, defaulting to 1000
[  221.852125][T13232] bridge16: the hash_elasticity option has been deprecated and is always 16
[  221.855533][T13232] bridge16: entered allmulticast mode
[  221.858622][T13229] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  221.861627][T13229] CPU: 0 UID: 0 PID: 13229 Comm: syz.0.1931 Not tainted syzkaller #0 PREEMPT(full) 
[  221.861669][T13229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  221.861678][T13229] Call Trace:
[  221.861687][T13229]  <TASK>
[  221.861695][T13229]  dump_stack_lvl+0x189/0x250
[  221.861720][T13229]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.861736][T13229]  ? __pfx__printk+0x10/0x10
[  221.861757][T13229]  ? kernfs_path_from_node+0x2f/0x290
[  221.861772][T13229]  ? kernfs_path_from_node+0x250/0x290
[  221.861785][T13229]  ? kernfs_path_from_node+0x2f/0x290
[  221.861803][T13229]  sysfs_warn_dup+0x8e/0xa0
[  221.861817][T13229]  sysfs_do_create_link_sd+0xc0/0x110
[  221.861834][T13229]  device_add_class_symlinks+0x1cf/0x240
[  221.861852][T13229]  device_add+0x475/0xb50
[  221.861870][T13229]  wiphy_register+0x1ba6/0x28d0
[  221.861899][T13229]  ? __pfx_wiphy_register+0x10/0x10
[  221.861912][T13229]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  221.861937][T13229]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  221.861964][T13229]  ieee80211_register_hw+0x3484/0x4100
[  221.861996][T13229]  ? ieee80211_register_hw+0x14a1/0x4100
[  221.862022][T13229]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  221.862042][T13229]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  221.862063][T13229]  ? __hrtimer_setup+0x187/0x210
[  221.862075][T13229]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  221.862098][T13229]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  221.862142][T13229]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  221.862158][T13229]  ? trace_kmalloc+0x1f/0xd0
[  221.862173][T13229]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  221.862191][T13229]  ? kstrndup+0xbf/0x160
[  221.862213][T13229]  hwsim_new_radio_nl+0xea4/0x1b10
[  221.862233][T13229]  ? __pfx___nla_validate_parse+0x10/0x10
[  221.862265][T13229]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  221.862293][T13229]  ? __nla_parse+0x40/0x60
[  221.862309][T13229]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  221.862334][T13229]  genl_family_rcv_msg_doit+0x215/0x300
[  221.862357][T13229]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  221.862386][T13229]  ? bpf_lsm_capable+0x9/0x20
[  221.862403][T13229]  ? security_capable+0x7e/0x2e0
[  221.862428][T13229]  genl_rcv_msg+0x60e/0x790
[  221.862450][T13229]  ? __pfx_genl_rcv_msg+0x10/0x10
[  221.862467][T13229]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  221.862496][T13229]  netlink_rcv_skb+0x208/0x470
[  221.862509][T13229]  ? __lock_acquire+0xab9/0xd20
[  221.862529][T13229]  ? __pfx_genl_rcv_msg+0x10/0x10
[  221.862547][T13229]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  221.862577][T13229]  ? down_read+0x1ad/0x2e0
[  221.862595][T13229]  genl_rcv+0x28/0x40
[  221.862610][T13229]  netlink_unicast+0x82f/0x9e0
[  221.862637][T13229]  ? __pfx_netlink_unicast+0x10/0x10
[  221.862683][T13229]  ? netlink_sendmsg+0x642/0xb30
[  221.862695][T13229]  ? skb_put+0x11b/0x210
[  221.862713][T13229]  netlink_sendmsg+0x805/0xb30
[  221.862735][T13229]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.862753][T13229]  ? aa_sock_msg_perm+0xf1/0x1d0
[  221.862767][T13229]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  221.862781][T13229]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.862796][T13229]  __sock_sendmsg+0x21c/0x270
[  221.862818][T13229]  ____sys_sendmsg+0x505/0x830
[  221.862839][T13229]  ? __pfx_____sys_sendmsg+0x10/0x10
[  221.862863][T13229]  ? import_iovec+0x74/0xa0
[  221.862882][T13229]  ___sys_sendmsg+0x21f/0x2a0
[  221.862900][T13229]  ? __pfx____sys_sendmsg+0x10/0x10
[  221.862955][T13229]  ? __fget_files+0x2a/0x420
[  221.862967][T13229]  ? __fget_files+0x3a0/0x420
[  221.862987][T13229]  __x64_sys_sendmsg+0x19b/0x260
[  221.863005][T13229]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  221.863030][T13229]  ? rcu_is_watching+0x15/0xb0
[  221.863048][T13229]  ? do_syscall_64+0xbe/0x3b0
[  221.863067][T13229]  do_syscall_64+0xfa/0x3b0
[  221.863081][T13229]  ? lockdep_hardirqs_on+0x9c/0x150
[  221.863095][T13229]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.863108][T13229]  ? exc_page_fault+0x9f/0xf0
[  221.863124][T13229]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.863137][T13229] RIP: 0033:0x7fce6db8ebe9
[  221.863152][T13229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.863163][T13229] RSP: 002b:00007fce6ea28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.863178][T13229] RAX: ffffffffffffffda RBX: 00007fce6ddc5fa0 RCX: 00007fce6db8ebe9
[  221.863188][T13229] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  221.863196][T13229] RBP: 00007fce6dc11e19 R08: 0000000000000000 R09: 0000000000000000
[  221.863204][T13229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  221.863212][T13229] R13: 00007fce6ddc6038 R14: 00007fce6ddc5fa0 R15: 00007ffd2961ebf8
[  221.863236][T13229]  </TASK>
[  222.104289][T13240] netlink: 'syz.2.1933': attribute type 1 has an invalid length.
[  222.175086][T13240] 8021q: adding VLAN 0 to HW filter on device bond39
[  222.343943][T13258] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  222.348971][T13258] bond2: (slave macvlan5): Enslaving as a backup interface with a down link
[  222.369824][T13258] bond0: (slave bond31): Releasing active interface
[  222.381062][T13258] bond33: (slave veth15): Releasing active interface
[  222.403607][T13258] bond2: (slave macvlan5): Releasing backup interface
[  222.773013][T13285] nftables ruleset with unbound set
[  222.816659][T13289] sctp: [Deprecated]: syz.2.1945 (pid 13289) Use of int in max_burst socket option deprecated.
[  222.816659][T13289] Use struct sctp_assoc_value instead
[  222.902899][T13300] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  222.911130][T13300] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  223.252440][T13330] netlink: 'syz.1.1960': attribute type 1 has an invalid length.
[  223.441106][T13347] ip6tnl5: entered promiscuous mode
[  223.443021][T13347] ip6tnl5: entered allmulticast mode
[  223.446067][T13347] team0: Refused to change device type
[  223.481277][T13352] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  223.503355][T13352] syzkaller0: mtu less than device minimum
[  223.600041][T13354] netlink: 'syz.2.1969': attribute type 4 has an invalid length.
[  223.666204][T13359] netlink: 'syz.1.1971': attribute type 1 has an invalid length.
[  223.670572][T13359] pim6reg1: entered promiscuous mode
[  223.672564][T13359] pim6reg1: entered allmulticast mode
[  223.713180][T13366] bond26: (slave gretap2): Releasing active interface
[  223.716760][T13366] bond28: left allmulticast mode
[  223.719935][T13366] bond28: left promiscuous mode
[  223.722113][T13366] bridge0: port 1(bond28) entered disabled state
[  223.757568][T13366] bond31: (slave geneve4): Releasing active interface
[  223.764431][T13366] bond36: (slave gretap4): Releasing active interface
[  223.771147][T13366] bond38: (slave veth17): Releasing active interface
[  223.777300][T13366] veth19: left allmulticast mode
[  223.779024][T13366] veth19: left promiscuous mode
[  223.780809][T13366] bridge21: port 1(veth19) entered disabled state
[  223.787254][T13367] netlink: 'syz.2.1973': attribute type 1 has an invalid length.
[  223.801257][T13367] bond40: entered promiscuous mode
[  223.803209][T13367] 8021q: adding VLAN 0 to HW filter on device bond40
[  223.821337][T13366] netlink: 'syz.0.1970': attribute type 10 has an invalid length.
[  223.871954][T13373] sctp: [Deprecated]: syz.2.1973 (pid 13373) Use of int in max_burst socket option.
[  223.871954][T13373] Use struct sctp_assoc_value instead
[  224.562352][T13376] netlink: 'syz.1.1975': attribute type 10 has an invalid length.
[  224.746378][T13403] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.752639][T13401] syzkaller0: entered promiscuous mode
[  224.754437][T13401] syzkaller0: entered allmulticast mode
[  224.768219][T13405] netlink: 'syz.0.1982': attribute type 6 has an invalid length.
[  224.784652][T13401] tipc: Resetting bearer <eth:syzkaller0>
[  224.810008][T13401] tipc: Disabling bearer <eth:syzkaller0>
[  224.972825][T13427] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  224.975552][T13427] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  225.031952][T13431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.035282][T13431] syzkaller0: entered promiscuous mode
[  225.042355][T13431] syzkaller0: entered allmulticast mode
[  225.106383][ T5881] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  225.122763][T13438] tipc: Resetting bearer <eth:syzkaller0>
[  225.867427][T13429] tipc: Resetting bearer <eth:syzkaller0>
[  225.924991][T13429] tipc: Disabling bearer <eth:syzkaller0>
[  226.014930][T13455] __nla_validate_parse: 23 callbacks suppressed
[  226.014951][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'.
[  226.022294][T13455] lo speed is unknown, defaulting to 1000
[  226.057328][T13462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1996'.
[  226.085765][T13462] 8021q: adding VLAN 0 to HW filter on device bond48
[  226.098036][T13453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1996'.
[  226.145775][T13455] wg1: left promiscuous mode
[  226.147740][T13455] wg1: left allmulticast mode
[  226.150484][T13455] bridge_slave_0: left promiscuous mode
[  226.153416][T13455] veth0_to_team: left promiscuous mode
[  226.155273][T13455] veth0_to_team: left allmulticast mode
[  226.157592][T13455] team_slave_1: left promiscuous mode
[  226.159551][T13455] team_slave_1: left allmulticast mode
[  226.164614][T13455] vlan0: left promiscuous mode
[  226.170036][T13455] ipvlan1: left allmulticast mode
[  226.172271][T13455] veth0_vlan: left allmulticast mode
[  226.174834][T13455] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  226.181354][T13455] gretap1: left allmulticast mode
[  226.183689][T13455] geneve3: left promiscuous mode
[  226.185826][T13455] macvtap1: left allmulticast mode
[  226.190713][T13455] geneve4: left promiscuous mode
[  226.193124][T13455] bond5: left promiscuous mode
[  226.196255][T13455] veth1: left promiscuous mode
[  226.199168][T13455] gretap3: left promiscuous mode
[  226.201095][T13455] bond13: left promiscuous mode
[  226.202956][T13455] bond13: left allmulticast mode
[  226.205150][T13455] veth5: left promiscuous mode
[  226.207090][T13455] sit2: left allmulticast mode
[  226.210279][T13455] veth7: left promiscuous mode
[  226.213331][T13455] vlan4: left allmulticast mode
[  226.229953][T13455] bond26: left promiscuous mode
[  226.231935][T13455] bond26: left allmulticast mode
[  226.233768][T13455] bridge9: left promiscuous mode
[  226.235969][T13455] bridge9: left allmulticast mode
[  226.242361][T13455] team1: left promiscuous mode
[  226.244165][T13455] team1: left allmulticast mode
[  226.251209][T13455] ipvlan2: left allmulticast mode
[  226.253005][T13455] bond27: left allmulticast mode
[  226.262185][T13455] veth13: left promiscuous mode
[  226.275209][T13455] bond32: left promiscuous mode
[  226.301444][T13455] geneve6: left promiscuous mode
[  226.303116][T13455] geneve6: left allmulticast mode
[  226.312938][T13455] bridge16: left allmulticast mode
[  226.320439][T13455] bond40: left promiscuous mode
[  226.348678][ T5881] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.353017][ T5881] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  226.357881][ T5881] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 19999 - 0
[  226.361734][ T5881] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.364819][ T5881] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  226.377901][ T5881] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 19999 - 0
[  226.384140][ T5881] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.392480][ T5881] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  226.395898][ T5881] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 19999 - 0
[  226.412999][ T5881] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.416442][ T5881] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  226.427166][ T5881] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 19999 - 0
[  226.459886][T13481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2001'.
[  226.463322][T13481] netdevsim0: entered promiscuous mode
[  226.529767][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2002'.
[  226.543720][T13492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2004'.
[  226.661915][T13495] netlink: 34 bytes leftover after parsing attributes in process `syz.1.2005'.
[  226.749393][T13513] macsec1: entered promiscuous mode
[  226.751298][T13513] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  226.753787][T13513] macsec1: entered allmulticast mode
[  226.755611][T13513] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  226.764669][T13513] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2008'.
[  226.811765][T13519] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2010'.
[  226.815718][T13519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'.
[  226.878483][T13525] netdevsim0: left promiscuous mode
[  226.899713][T13525] veth23: left promiscuous mode
[  226.907836][T13525] geneve6: left promiscuous mode
[  226.909755][T13525] bond32: left promiscuous mode
[  226.911459][T13525] bond34: left promiscuous mode
[  226.920401][T13525] vlan4: left promiscuous mode
[  226.921960][T13525] bond0: left promiscuous mode
[  226.924031][T13525] ip6tnl2: left promiscuous mode
[  226.929056][T13526] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  226.929559][T13525] xfrm1: left promiscuous mode
[  226.934667][T13525] gtp2: left promiscuous mode
[  226.939221][T13525] macsec1: left promiscuous mode
[  226.941174][T13525] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  226.982157][T13541] dvmrp8: entered allmulticast mode
[  226.984316][T13540] dvmrp8: left allmulticast mode
[  227.019609][T13546] netlink: zone id is out of range
[  227.022213][T13546] netlink: zone id is out of range
[  227.029984][T13546] netlink: zone id is out of range
[  227.032134][T13546] netlink: zone id is out of range
[  227.034628][T13546] netlink: zone id is out of range
[  227.036590][T13546] netlink: zone id is out of range
[  227.038003][T13551] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  227.086696][T13553] validate_nla: 3 callbacks suppressed
[  227.086716][T13553] netlink: 'syz.0.2018': attribute type 10 has an invalid length.
[  227.121810][T13553] netlink: 'syz.0.2018': attribute type 10 has an invalid length.
[  227.168839][T13553] 8021q: adding VLAN 0 to HW filter on device bond1
[  227.342443][T13571] netlink: 'syz.2.2025': attribute type 1 has an invalid length.
[  227.382675][T13571] 8021q: adding VLAN 0 to HW filter on device bond41
[  227.390903][T13570] ip6tnl5: entered promiscuous mode
[  227.393033][T13570] ip6tnl5: entered allmulticast mode
[  227.410749][T13571] bond41: (slave veth19): Enslaving as an active interface with a down link
[  227.431749][   T34] audit: type=1800 audit(1757214283.272:5): pid=13575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2026" name="memory.events" dev="tmpfs" ino=3828 res=0 errno=0
[  227.439396][   T34] audit: type=1804 audit(1757214283.282:6): pid=13575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2026" name="/newroot/749/memory.events" dev="tmpfs" ino=3828 res=1 errno=0
[  227.613432][T13592] netlink: 'syz.1.2030': attribute type 1 has an invalid length.
[  227.737242][T13604] netlink: 'syz.1.2034': attribute type 13 has an invalid length.
[  227.740457][T13604] netlink: 'syz.1.2034': attribute type 17 has an invalid length.
[  227.780251][T13607] bond1: option mode: unable to set because the bond device is up
[  227.820646][T13602] lo speed is unknown, defaulting to 1000
[  227.829402][T13609] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.832372][T13609] syzkaller0: entered promiscuous mode
[  227.834400][T13609] syzkaller0: entered allmulticast mode
[  227.859686][T13609] tipc: Resetting bearer <eth:syzkaller0>
[  227.865226][T13608] tipc: Resetting bearer <eth:syzkaller0>
[  227.886550][T13608] tipc: Disabling bearer <eth:syzkaller0>
[  227.974408][T13612] macvlan3: entered allmulticast mode
[  227.976586][T13612] bond0: entered allmulticast mode
[  227.979196][T13612] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  228.114660][T13621] netlink: 'syz.0.2041': attribute type 1 has an invalid length.
[  228.132233][T13621] 8021q: adding VLAN 0 to HW filter on device bond42
[  228.140703][T13621] ipvlan3: entered allmulticast mode
[  228.142426][T13621] bond42: entered allmulticast mode
[  228.613846][T13642] vlan7: entered promiscuous mode
[  228.718128][T13654] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.728419][T13654] syzkaller0: entered promiscuous mode
[  228.730692][T13654] syzkaller0: entered allmulticast mode
[  228.819494][T13654] tipc: Resetting bearer <eth:syzkaller0>
[  228.832822][T13653] tipc: Resetting bearer <eth:syzkaller0>
[  228.872324][T13653] tipc: Disabling bearer <eth:syzkaller0>
[  228.948636][T13661] netlink: 'syz.2.2053': attribute type 10 has an invalid length.
[  229.109059][T13681] netlink: 'syz.2.2058': attribute type 1 has an invalid length.
[  229.134386][T13681] 8021q: adding VLAN 0 to HW filter on device bond42
[  229.182105][T13687] net_ratelimit: 17 callbacks suppressed
[  229.182118][T13687] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  229.298981][T13704] netlink: 'syz.1.2064': attribute type 30 has an invalid length.
[  229.321714][T13701] lo speed is unknown, defaulting to 1000
[  229.695730][T13723] 8021q: adding VLAN 0 to HW filter on device team0
[  229.700895][T13723] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  229.706133][T13720] batadv_slave_0: entered promiscuous mode
[  229.715198][T13724] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  230.030831][T13744] 8021q: adding VLAN 0 to HW filter on device bond44
[  230.148185][T13758] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  230.198606][T13764] bridge_slave_0: entered promiscuous mode
[  230.200862][T13764] bridge_slave_0: left allmulticast mode
[  230.203303][T13764] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  230.223315][T13751] lo speed is unknown, defaulting to 1000
[  230.482152][T13772] lo speed is unknown, defaulting to 1000
[  230.874227][T13779] bond45: entered promiscuous mode
[  230.876371][T13779] bond45: entered allmulticast mode
[  230.923313][T13786] bridge23: entered promiscuous mode
[  230.925549][T13786] bridge23: entered allmulticast mode
[  230.945724][T13786] bond45: (slave bridge23): making interface the new active one
[  230.951417][T13786] bond45: (slave bridge23): Enslaving as an active interface with an up link
[  231.073570][T13795] __nla_validate_parse: 31 callbacks suppressed
[  231.073582][T13795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2086'.
[  231.211549][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2087'.
[  231.260306][T13808] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2085'.
[  232.504140][T13798] 8021q: adding VLAN 0 to HW filter on device bond49
[  232.610765][T13812] bond19: option mode: unable to set because the bond device is up
[  232.624035][T13812] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  232.856484][T13828] validate_nla: 12 callbacks suppressed
[  232.856499][T13828] netlink: 'syz.0.2092': attribute type 1 has an invalid length.
[  232.862348][T13828] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2092'.
[  232.862529][T13830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2093'.
[  232.876147][T13832] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2094'.
[  233.001889][T13840] netlink: 'syz.1.2095': attribute type 13 has an invalid length.
[  233.004633][T13840] netlink: 'syz.1.2095': attribute type 17 has an invalid length.
[  233.014906][T13840] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  233.043802][T13834] lo speed is unknown, defaulting to 1000
[  233.053482][T13842] netlink: 'syz.0.2098': attribute type 1 has an invalid length.
[  233.093858][T13840] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2095'.
[  233.160745][T13845] batadv0: entered promiscuous mode
[  233.828801][T13851] bridge_slave_0: entered promiscuous mode
[  233.831800][T13851] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  233.909749][T13851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'.
[  234.124159][T13863] sctp: [Deprecated]: syz.1.2104 (pid 13863) Use of int in max_burst socket option.
[  234.124159][T13863] Use struct sctp_assoc_value instead
[  234.247657][T13875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2107'.
[  234.282513][T13877] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  234.323089][T13881] netlink: 'syz.1.2110': attribute type 11 has an invalid length.
[  234.338808][T13881] IPv6: sit4: Disabled Multicast RS
[  234.342253][T13881] sit4: entered allmulticast mode
[  234.466319][T13886] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  235.142614][T13908] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  235.287151][T13915] lo speed is unknown, defaulting to 1000
[  235.648873][T13928] netlink: 'syz.1.2122': attribute type 10 has an invalid length.
[  235.752740][T13930] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  235.792981][T13932] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2124'.
[  235.827399][T13935] netlink: 'syz.1.2125': attribute type 1 has an invalid length.
[  235.848280][T13935] 8021q: adding VLAN 0 to HW filter on device bond50
[  236.192550][T13946] __nla_validate_parse: 2 callbacks suppressed
[  236.192570][T13946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2128'.
[  236.205863][T13946] netlink: 'syz.0.2128': attribute type 7 has an invalid length.
[  236.209226][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'.
[  236.441420][T13960] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2131'.
[  236.528144][T13967] erspan0: entered promiscuous mode
[  236.530483][T13967] macsec0: entered promiscuous mode
[  236.535185][T13967] erspan0: left promiscuous mode
[  236.575329][T13968] sctp: [Deprecated]: syz.0.2133 (pid 13968) Use of struct sctp_assoc_value in delayed_ack socket option.
[  236.575329][T13968] Use struct sctp_sack_info instead
[  236.589392][T13968] erspan0: entered promiscuous mode
[  236.591567][T13968] macsec0: entered promiscuous mode
[  236.595502][T13968] erspan0: left promiscuous mode
[  236.763194][T13982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2136'.
[  236.904392][T13989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2138'.
[  236.941110][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2139'.
[  237.076130][T14005] bond45: (slave bridge23): Releasing backup interface
[  237.092250][T14005] team0: Mode changed to "broadcast"
[  237.095827][T14009] netlink: 'syz.1.2142': attribute type 1 has an invalid length.
[  237.117281][T14009] 8021q: adding VLAN 0 to HW filter on device bond51
[  237.159862][T14009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2142'.
[  237.164077][T14009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2142'.
[  237.172696][T14014] syzkaller1: entered promiscuous mode
[  237.174520][T14014] syzkaller1: entered allmulticast mode
[  237.200040][T14013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2143'.
[  237.203733][T14013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2143'.
[  237.233736][T14019] lo speed is unknown, defaulting to 1000
[  237.488643][T14031] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  237.964252][T14045] lo speed is unknown, defaulting to 1000
[  238.806185][T14059] netlink: 'syz.0.2156': attribute type 5 has an invalid length.
[  238.849944][T14061] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.863689][T14061] syzkaller0: entered promiscuous mode
[  238.865658][T14061] syzkaller0: entered allmulticast mode
[  238.886506][T14061] tipc: Resetting bearer <eth:syzkaller0>
[  238.889809][T14060] tipc: Resetting bearer <eth:syzkaller0>
[  238.919058][T14060] tipc: Disabling bearer <eth:syzkaller0>
[  239.119879][T14072] syzkaller0: entered promiscuous mode
[  239.121765][T14072] syzkaller0: entered allmulticast mode
[  239.326612][T14084] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.384405][T14084] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.434961][T14084] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.464739][T14084] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.479794][T14081] syzkaller0: entered promiscuous mode
[  239.481729][T14081] syzkaller0: entered allmulticast mode
[  239.536611][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  239.545333][ T6244] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  239.555645][ T6244] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  239.573710][ T6244] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  239.649091][T14097] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  239.661710][T14097] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  239.664240][T14097] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  239.678567][T14099] netlink: 'syz.0.2168': attribute type 1 has an invalid length.
[  239.681869][T14099] netlink: 'syz.0.2168': attribute type 1 has an invalid length.
[  239.685133][T14099] netlink: 'syz.0.2168': attribute type 1 has an invalid length.
[  239.692916][T14099] syzkaller0: entered promiscuous mode
[  239.695348][T14099] syzkaller0: entered allmulticast mode
[  239.903402][T14112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.907642][T14112] syzkaller0: entered promiscuous mode
[  239.910064][T14112] syzkaller0: entered allmulticast mode
[  239.927766][T14112] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  239.961461][T14112] tipc: Resetting bearer <eth:syzkaller0>
[  240.005343][T14113] tipc: Resetting bearer <eth:syzkaller0>
[  240.029414][T14113] tipc: Disabling bearer <eth:syzkaller0>
[  240.119057][T14129] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  240.213619][T14142] syzkaller0: entered promiscuous mode
[  240.215702][T14142] syzkaller0: entered allmulticast mode
[  240.400385][T14152] bridge24: port 1(veth31) entered blocking state
[  240.403123][T14152] bridge24: port 1(veth31) entered disabled state
[  240.405575][T14152] veth31: entered allmulticast mode
[  240.409713][T14152] veth31: entered promiscuous mode
[  240.466230][T14161] netlink: 'syz.0.2186': attribute type 1 has an invalid length.
[  240.469146][T14161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.568644][T14168] netlink: 'syz.1.2188': attribute type 1 has an invalid length.
[  240.575213][T14168] workqueue: Failed to create a rescuer kthread for wq "bond52": -EINTR
[  240.644990][T14173] lo speed is unknown, defaulting to 1000
[  240.692967][T14180] netlink: 'syz.1.2191': attribute type 4 has an invalid length.
[  240.703703][T14180] netlink: 'syz.1.2191': attribute type 4 has an invalid length.
[  241.016628][T14185] lo speed is unknown, defaulting to 1000
[  241.023087][T14197] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  241.049342][T14198] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  241.130795][T14194] netlink: 'syz.2.2195': attribute type 14 has an invalid length.
[  241.133918][T14194] netlink: 'syz.2.2195': attribute type 14 has an invalid length.
[  241.167983][T14197] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  241.187321][T14202] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  241.417956][T14207] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  241.420612][T14207] CPU: 1 UID: 0 PID: 14207 Comm: syz.1.2198 Not tainted syzkaller #0 PREEMPT(full) 
[  241.420630][T14207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.420637][T14207] Call Trace:
[  241.420642][T14207]  <TASK>
[  241.420647][T14207]  dump_stack_lvl+0x189/0x250
[  241.420665][T14207]  ? __pfx_dump_stack_lvl+0x10/0x10
[  241.420675][T14207]  ? __pfx__printk+0x10/0x10
[  241.420691][T14207]  ? kernfs_path_from_node+0x2f/0x290
[  241.420702][T14207]  ? kernfs_path_from_node+0x250/0x290
[  241.420709][T14207]  ? kernfs_path_from_node+0x2f/0x290
[  241.420719][T14207]  sysfs_warn_dup+0x8e/0xa0
[  241.420728][T14207]  sysfs_do_create_link_sd+0xc0/0x110
[  241.420739][T14207]  device_add_class_symlinks+0x1cf/0x240
[  241.420751][T14207]  device_add+0x475/0xb50
[  241.420761][T14207]  wiphy_register+0x1ba6/0x28d0
[  241.420780][T14207]  ? __pfx_wiphy_register+0x10/0x10
[  241.420788][T14207]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  241.420805][T14207]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  241.420819][T14207]  ieee80211_register_hw+0x3484/0x4100
[  241.420838][T14207]  ? ieee80211_register_hw+0x14a1/0x4100
[  241.420854][T14207]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  241.420867][T14207]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  241.420880][T14207]  ? __hrtimer_setup+0x187/0x210
[  241.420888][T14207]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  241.420913][T14207]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  241.420938][T14207]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  241.420948][T14207]  ? trace_kmalloc+0x1f/0xd0
[  241.420959][T14207]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  241.420971][T14207]  ? kstrndup+0xbf/0x160
[  241.420985][T14207]  hwsim_new_radio_nl+0xea4/0x1b10
[  241.420997][T14207]  ? __pfx___nla_validate_parse+0x10/0x10
[  241.421018][T14207]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  241.421035][T14207]  ? __nla_parse+0x40/0x60
[  241.421044][T14207]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  241.421060][T14207]  genl_family_rcv_msg_doit+0x215/0x300
[  241.421074][T14207]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  241.421091][T14207]  ? bpf_lsm_capable+0x9/0x20
[  241.421102][T14207]  ? security_capable+0x7e/0x2e0
[  241.421119][T14207]  genl_rcv_msg+0x60e/0x790
[  241.421132][T14207]  ? __pfx_genl_rcv_msg+0x10/0x10
[  241.421142][T14207]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  241.421159][T14207]  netlink_rcv_skb+0x208/0x470
[  241.421166][T14207]  ? __lock_acquire+0xab9/0xd20
[  241.421180][T14207]  ? __pfx_genl_rcv_msg+0x10/0x10
[  241.421191][T14207]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  241.421208][T14207]  ? down_read+0x1ad/0x2e0
[  241.421220][T14207]  genl_rcv+0x28/0x40
[  241.421229][T14207]  netlink_unicast+0x82f/0x9e0
[  241.421245][T14207]  ? __pfx_netlink_unicast+0x10/0x10
[  241.421258][T14207]  ? netlink_sendmsg+0x642/0xb30
[  241.421265][T14207]  ? skb_put+0x11b/0x210
[  241.421277][T14207]  netlink_sendmsg+0x805/0xb30
[  241.421289][T14207]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.421299][T14207]  ? aa_sock_msg_perm+0xf1/0x1d0
[  241.421309][T14207]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  241.421317][T14207]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.421325][T14207]  __sock_sendmsg+0x21c/0x270
[  241.421340][T14207]  ____sys_sendmsg+0x505/0x830
[  241.421353][T14207]  ? __pfx_____sys_sendmsg+0x10/0x10
[  241.421367][T14207]  ? import_iovec+0x74/0xa0
[  241.421379][T14207]  ___sys_sendmsg+0x21f/0x2a0
[  241.421390][T14207]  ? __pfx____sys_sendmsg+0x10/0x10
[  241.421442][T14207]  ? __fget_files+0x2a/0x420
[  241.421452][T14207]  ? __fget_files+0x3a0/0x420
[  241.421464][T14207]  __x64_sys_sendmsg+0x19b/0x260
[  241.421475][T14207]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  241.421490][T14207]  ? rcu_is_watching+0x15/0xb0
[  241.421501][T14207]  ? do_syscall_64+0xbe/0x3b0
[  241.421513][T14207]  do_syscall_64+0xfa/0x3b0
[  241.421521][T14207]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.421530][T14207]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.421538][T14207]  ? exc_page_fault+0x9f/0xf0
[  241.421547][T14207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.421555][T14207] RIP: 0033:0x7f468ef8ebe9
[  241.421564][T14207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  241.421571][T14207] RSP: 002b:00007f468fd29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  241.421580][T14207] RAX: ffffffffffffffda RBX: 00007f468f1c5fa0 RCX: 00007f468ef8ebe9
[  241.421586][T14207] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d
[  241.421591][T14207] RBP: 00007f468f011e19 R08: 0000000000000000 R09: 0000000000000000
[  241.421596][T14207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  241.421601][T14207] R13: 00007f468f1c6038 R14: 00007f468f1c5fa0 R15: 00007ffc44703a48
[  241.421614][T14207]  </TASK>
[  241.933442][T14218] __nla_validate_parse: 24 callbacks suppressed
[  241.933459][T14218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2202'.
[  242.006110][T14224] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  242.012057][T14223] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  242.145843][T14228] lo speed is unknown, defaulting to 1000
[  242.332923][   T24] lo speed is unknown, defaulting to 1000
[  242.335145][   T24] syz0: Port: 1 Link DOWN
[  242.338913][   T24] lo speed is unknown, defaulting to 1000
[  242.343862][  T791] lo speed is unknown, defaulting to 1000
[  242.345720][  T791] syz0: Port: 1 Link ACTIVE
[  242.354249][ T5879] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  242.362662][ T5879] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  242.374242][ T5879] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  242.374249][   T24] lo speed is unknown, defaulting to 1000
[  242.379074][ T5879] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  242.395983][T14233] lo speed is unknown, defaulting to 1000
[  242.402468][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2208'.
[  242.633421][T14253] 8021q: adding VLAN 0 to HW filter on device bond2
[  242.715963][T14253] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  242.720717][T14253] bond2: (slave macvlan6): Enslaving as a backup interface with a down link
[  242.756269][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2212'.
[  242.759580][T14255] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  242.798293][T14256] bond41: (slave veth19): Releasing active interface
[  242.806616][T14256] bond2: (slave macvlan6): Releasing backup interface
[  242.823707][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2212'.
[  242.828007][T14257] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  242.923968][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2214'.
[  242.933728][T14265] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  242.943695][T14266] (unnamed net_device) (uninitialized): option coupled_control: invalid value (36)
[  242.956428][T14265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.964058][T14265] syzkaller0: entered promiscuous mode
[  242.966284][T14265] syzkaller0: entered allmulticast mode
[  242.999705][T14273] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  243.003495][T14273] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  243.006689][T14273] CPU: 1 UID: 0 PID: 14273 Comm: syz.2.2217 Not tainted syzkaller #0 PREEMPT(full) 
[  243.010179][T14273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  243.013331][T14273] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  243.015269][T14273] Code: 18 00 74 08 4c 89 ef e8 3d 63 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 3a 62 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 11 63 01 f8 4d 89 2e 41 80 3c 1f 00
[  243.021938][T14273] RSP: 0018:ffffc9000436f130 EFLAGS: 00010246
[  243.023854][T14273] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  243.026387][T14273] RDX: ffffc90003b62000 RSI: 00000000000009b6 RDI: 00000000000009b7
[  243.028886][T14273] RBP: ffff88810f786430 R08: ffff888021998000 R09: 0000000000000002
[  243.031374][T14273] R10: 000000000000000a R11: 0000000000000002 R12: ffff888029796428
[  243.033887][T14273] R13: ffff88810f786428 R14: 0000000000000000 R15: 1ffff110052f2c86
[  243.036505][T14273] FS:  00007f54a8fb06c0(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  243.039244][T14273] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  243.041235][T14273] CR2: 000000110c2c1cd1 CR3: 0000000028c32000 CR4: 00000000000006f0
[  243.043607][T14273] Call Trace:
[  243.044672][T14273]  <TASK>
[  243.045699][T14273]  xfrm_state_add+0x564/0xc40
[  243.047320][T14273]  xfrm_add_sa+0x35a1/0x4070
[  243.048787][T14273]  ? __pfx_xfrm_add_sa+0x10/0x10
[  243.050677][T14273]  ? apparmor_capable+0x137/0x1b0
[  243.052716][T14273]  ? __nla_parse+0x40/0x60
[  243.054525][T14273]  xfrm_user_rcv_msg+0x7a3/0xab0
[  243.056277][T14273]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  243.057923][T14273]  ? __pfx___mutex_trylock_common+0x10/0x10
[  243.058211][T14274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2217'.
[  243.059780][T14273]  ? rcu_is_watching+0x15/0xb0
[  243.059800][T14273]  ? trace_contention_end+0x39/0x120
[  243.059812][T14273]  ? __mutex_lock+0x335/0x1350
[  243.059825][T14273]  netlink_rcv_skb+0x208/0x470
[  243.059835][T14273]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  243.059850][T14273]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  243.063552][T14274] nbd: must specify at least one socket
[  243.065339][T14273]  ? netlink_deliver_tap+0x2e/0x1b0
[  243.065367][T14273]  ? netlink_deliver_tap+0x2e/0x1b0
[  243.065384][T14273]  xfrm_netlink_rcv+0x79/0x90
[  243.065408][T14273]  netlink_unicast+0x82f/0x9e0
[  243.085443][T14273]  ? __pfx_netlink_unicast+0x10/0x10
[  243.087558][T14273]  ? netlink_sendmsg+0x642/0xb30
[  243.089498][T14273]  ? skb_put+0x11b/0x210
[  243.091194][T14273]  netlink_sendmsg+0x805/0xb30
[  243.093084][T14273]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.095239][T14273]  ? aa_sock_msg_perm+0xf1/0x1d0
[  243.097242][T14273]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  243.099374][T14273]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.101497][T14273]  __sock_sendmsg+0x21c/0x270
[  243.103352][T14273]  ____sys_sendmsg+0x505/0x830
[  243.105269][T14273]  ? __pfx_____sys_sendmsg+0x10/0x10
[  243.107380][T14273]  ? import_iovec+0x74/0xa0
[  243.109143][T14273]  ___sys_sendmsg+0x21f/0x2a0
[  243.111015][T14273]  ? __pfx____sys_sendmsg+0x10/0x10
[  243.112678][T14273]  ? __fget_files+0x2a/0x420
[  243.114089][T14273]  ? __fget_files+0x3a0/0x420
[  243.115486][T14273]  __x64_sys_sendmsg+0x19b/0x260
[  243.117358][T14273]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  243.119519][T14273]  ? rcu_is_watching+0x15/0xb0
[  243.121196][T14273]  ? do_syscall_64+0xbe/0x3b0
[  243.123047][T14273]  do_syscall_64+0xfa/0x3b0
[  243.124504][T14273]  ? lockdep_hardirqs_on+0x9c/0x150
[  243.126213][T14273]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.128121][T14273]  ? exc_page_fault+0x9f/0xf0
[  243.129621][T14273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.131484][T14273] RIP: 0033:0x7f54a818ebe9
[  243.133025][T14273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.139636][T14273] RSP: 002b:00007f54a8fb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  243.142411][T14273] RAX: ffffffffffffffda RBX: 00007f54a83c5fa0 RCX: 00007f54a818ebe9
[  243.145136][T14273] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  243.148161][T14273] RBP: 00007f54a8211e19 R08: 0000000000000000 R09: 0000000000000000
[  243.150673][T14273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.153091][T14273] R13: 00007f54a83c6038 R14: 00007f54a83c5fa0 R15: 00007ffe48b4c9c8
[  243.155595][T14273]  </TASK>
[  243.156632][T14273] Modules linked in:
[  243.158230][T14273] ---[ end trace 0000000000000000 ]---
[  243.159979][T14273] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  243.161936][T14273] Code: 18 00 74 08 4c 89 ef e8 3d 63 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 3a 62 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 11 63 01 f8 4d 89 2e 41 80 3c 1f 00
[  243.168158][T14273] RSP: 0018:ffffc9000436f130 EFLAGS: 00010246
[  243.170101][T14273] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  243.172620][T14273] RDX: ffffc90003b62000 RSI: 00000000000009b6 RDI: 00000000000009b7
[  243.174901][T14273] RBP: ffff88810f786430 R08: ffff888021998000 R09: 0000000000000002
[  243.177571][T14273] R10: 000000000000000a R11: 0000000000000002 R12: ffff888029796428
[  243.180212][T14273] R13: ffff88810f786428 R14: 0000000000000000 R15: 1ffff110052f2c86
[  243.182919][T14273] FS:  00007f54a8fb06c0(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  243.186333][T14273] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  243.189085][T14273] CR2: 000000110c2c1cd1 CR3: 0000000028c32000 CR4: 00000000000006f0
[  243.192202][T14273] Kernel panic - not syncing: Fatal exception in interrupt
[  243.195804][T14273] Kernel Offset: disabled
[  243.197573][T14273] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:04:59  Registers:
info registers vcpu 0

CPU#0
RAX=72229bedcf28f900 RBX=ffffffff819683f8 RCX=72229bedcf28f900 RDX=0000000000000001
RSI=ffffffff8be33860 RDI=ffffffff819683f8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39830 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a93f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=000000011522c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f54a8212e53
XMM06=0000000000000000 00007f54a8212e4d XMM07=0000000000000000 00007f54a8212e61
XMM08=0000000000000000 00007f54a8212ee7 XMM09=0000000000000000 00007f54a8212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000044 RBX=0000000000000044 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001b82 RDI=0000000000001b83 RBP=00000000000003f8 RSP=ffffc9000436e8d0
R8 =ffff888107918237 R9 =1ffff11020f23046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018e8 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f54a8fb06c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2c1cd1 CR3=0000000028c32000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f54a8397498 00007f54a8397470 XMM03=00007f54a83974a8 00007f54a83974a0
XMM04=00007f54a8efd100 00007f54a8397460 XMM05=00007f54a8397478 00007f54a83974c0
XMM06=00007f54a83974b8 00007f54a83974b0 XMM07=00007f54a83974a8 00007f54a83974a0
XMM08=0000000000000000 00007f54a8212ee7 XMM09=0000000000000000 00007f54a8212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
