last executing test programs:

978.571572ms ago: executing program 2 (id=5014):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x264, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1d64}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x63}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc7d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf6b0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x407a9d26}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2a61}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa6b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x55}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x490}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x26}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x268}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x128, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9420}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4008844}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000580)={<r4=>0x0, 0xe25}, &(0x7f00000005c0)=0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000600)={<r5=>r4, 0x72, "91ef71a68b205ef45a202edaf5d5ba5e4fbde97dd76569ed717fca477bfe45cf89a11de618d4a7192c2d87bb8e27aa6dd4c8081c7a9af1fbe0bd593a553b65533a043fe432531bda377da70f373489862c271af3252d7aa472f9a1454b7c3f2f5a21207670b9d8eefc845cbf51c96a9c966a"}, &(0x7f0000000680)=0x7a)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000006c0)={r5, 0x282}, &(0x7f0000000700)=0x8)
getsockopt(r6, 0x6, 0x8, &(0x7f0000000740)=""/4096, &(0x7f0000001740)=0x1000)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000017c0)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001800)=<r8=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001840)=<r9=>0x0)
sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f0000001900)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1000024}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x2040000)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000001940)={r4, 0x2}, &(0x7f0000001980)=0x8)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f00000019c0), 0x2, 0x0)
write$nci(r10, &(0x7f0000001a00)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x1, 0x2, 0x0, 0x9, {0x1, 0x9}}, 0x5)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000001a40)={0x3, 0xa})
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001b80)={'ip6_vti0\x00', &(0x7f0000001b00)={'syztnl1\x00', <r12=>0x0, 0x29, 0x4, 0xa8, 0x1, 0x2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x20, 0x400, 0x8}})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000001c80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x50, r11, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40050}, 0x84)
r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCGIFCONF(r13, 0x8912, &(0x7f0000001d80)=@buf={0x90, &(0x7f0000001cc0)="61bd87334a54e58cb30f6b6c1f3e17630f3283a05a26b9642c3ac444c4af9065371b7cf67225349fcc221105ed11ea27af67bb0af0cf65f2f7dec2254e3a634eb13ccbc7979e0623a8ef8b16efe3444feb9f30ae9dbed83ec3d5707d7259ed26c766832f96d5778dc5fb32542fc8366e9e88cdfacd143a606057e05c9033fdacc7664d716c8b8618bee6cefd28d90d7d"})
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r14, &(0x7f0000001f80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e00)={0x11c, 0xb, 0x8, 0x306, 0x70bd2b, 0x25dfdbff, {0x3, 0x0, 0x2}, [@nested={0xe7, 0xef, 0x0, 0x1, [@nested={0x4, 0x1e}, @generic="57ed82135b50c8ce09f6ce8fbcfb3830b5423d4c531f15d2462f666b9e1b92a54b65410e07906daed19953433a6cd1efbd9a617bb7891bad49388b5ea248c7b3f8d1917449b37aa720c402f44972f16897e5ec2557cf298fc0af40ffb66e1766d33454903255bc00c2b75c0c52bd90704d988a47e2309ec5e62fa050bc8843a73abcab77959ce329c7ad9a7ff4e33cdbeda4e79ac2e2db2ec0d6ac85d5e3e88d7a3fd2ec3de5988635e7f8128c25213e68976cb96a7dd6573db39aaa7f2a7030b8fe2a7304f0e0fe1ff07ea48f493acf624c4170af5e54e4c3e7a5", @nested={0x4, 0xd1}]}, @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@remote}, @typed={0xc, 0x2d, 0x0, 0x0, @u64=0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0xc011)
r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000002000), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000002180)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x54, r15, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000840)

870.101523ms ago: executing program 2 (id=5015):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$cgroup_pid(r1, &(0x7f0000002380), 0x12)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtaction={0x68, 0x30, 0x1, 0x3, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x5b}, {0x4, 0xa}, {0xc}, {0xfffffffffffffcf0}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r14 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$nci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r14], 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r15, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x54, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x5}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x3f2}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x584}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x5}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x2e3}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x3}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x4}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x273}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x48804)

759.098579ms ago: executing program 2 (id=5019):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x28)
syz_emit_ethernet(0x141, &(0x7f0000000580)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x1c, 0x4, 0x0, 0x38, 0x133, 0x67, 0x0, 0x2, 0x2, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xc8, 0x1, 0x8, [{@rand_addr=0x64010100, 0x1}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xc, 0xffffffffffffffff, [{0x6, 0x4, "64fb"}, {0x7, 0x2}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0x68, [@broadcast, @rand_addr=0x64010102, @local, @local, @multicast2]}, @end, @lsrr={0x83, 0x3, 0xe9}, @timestamp={0x44, 0x10, 0xa4, 0x0, 0x1, [0x81, 0xec7b, 0x101]}, @generic={0x89, 0xe, "9d0f9c0d3f35a68e5c80ce7b"}]}}, {0x12, 0x2, 0x0, @broadcast, "d0b8f2a0ff96e688389ac1b8f4cc905352b82911edf2835aa7cfde05374463b180abcba7b459f8ea2542f1520e7a4259e761d5cb996f66fde781cffd4f5682a93f716052110b1943d884654062fe567e4496f9cff37265e8ebd70d9f513e9bb39f231497bb8b4cecf920e52e8d564bab58d52ed8d8c897b7f62dff0332e3b24a83bc60f390fdf5832df0288a2825444247f5e42be47bac7efb3956003414878cc2f493f8b0e5c5c87e3a08702af2095eea52c997c3fa9677820389"}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xd6c, 0xc47, 0xf45, 0x42f]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004600000000000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180100000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000368000d8008000200ffffffff0400030914000400fe88000000000000000000000000000114000380060001"], 0x118}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x9}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x0, 0x1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x220c)
listen(r4, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r7, 0x103, 0x7, 0x0, &(0x7f0000001180))
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x38, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x858}, 0x20000004)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

678.670385ms ago: executing program 2 (id=5024):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet(0xa, 0x801, 0x84) (async)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0x8)
socket$inet(0xa, 0x801, 0x84)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x6, <r5=>0x0}, 0x8)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x4, &(0x7f00000002c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000300)='syzkaller\x00', 0x7, 0xf5, &(0x7f0000000640)=""/245, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x4, 0x5}, 0x10, r5, 0x0, 0x0, &(0x7f0000000880)=[r3, r3, r3, r6], 0x0, 0x10, 0x80}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
accept(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) (async)
accept(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r1, 0x2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x5c, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r9, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x3, 0x7, 0x40000000000009})
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x7}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x7}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

517.817807ms ago: executing program 2 (id=5028):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}}) (async)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth0_vlan\x00'})

516.919429ms ago: executing program 2 (id=5030):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x60}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)
sendmsg$nl_route(r0, 0x0, 0xc800)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r7, 0x4)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f640094000500", 0x2c}], 0x1)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x44c, 0x0, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001940)={'wpan0\x00'})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r9, 0x809, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
r13 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r13, &(0x7f0000000180)="c5", 0x1, 0x40080, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @local, 0x13}, 0x1c)
getsockopt$inet_sctp6_SCTP_RTOINFO(r13, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1000, 0x400, 0x3}, &(0x7f0000000140)=0x10)
close(r11)
socket$inet_icmp(0x2, 0x2, 0x1)

397.376289ms ago: executing program 0 (id=5032):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) (async, rerun: 32)
listen(r1, 0x1ad72f7) (async, rerun: 32)
r2 = epoll_create1(0x0) (async)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000008c0)={0x1}) (async, rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) (rerun: 64)
accept4(r1, 0x0, 0x0, 0x80000) (async)
r4 = accept4$netrom(r1, 0x0, 0x0, 0x80000) (async, rerun: 64)
r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000120001032cbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="6b8a00003015010008001d008340000069c27e1845987d338d2209614ba7251c78fc955287b798af7336e8d5cd88ae41216da95774fc6f505ce01fffbf6258ff005448560a2d698500432a0605daea1ae575c719c65d58219afd3fcf97a4affc0c8c59ec54c01280c775184210bece3697"], 0x28}}, 0x0) (async)
writev(r4, &(0x7f0000001b40)=[{&(0x7f0000000600)="16f68b2017beba386312104a1458eb86de", 0x11}, {&(0x7f0000000640)="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", 0x2b4}], 0x2)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000000)="9b", 0x1}], 0x1) (async, rerun: 32)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f00000010c0)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r8, 0x81}, &(0x7f0000000240)=0x8) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

330.270919ms ago: executing program 0 (id=5033):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
close(0x4) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="a4000000100003040300"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000680012800b00010067656e65766500005800028014000700fe80000000000000000000000000000d050003000e00000008000b400000020005000900010000000800010003000000050008000100000008000b400000000908000b400000000c05000400990000000a000100aa"], 0xa4}}, 0x8004)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt(r7, 0x918626f, 0xffffffff, 0x0, 0x0) (async)
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x140f, 0xee70877cfbc8a0b9, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x41844)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78", 0xffffff29, 0x0, 0xfffffffc}})

329.886141ms ago: executing program 0 (id=5034):
r0 = socket(0x2d, 0x2, 0x0) (async)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async)
setsockopt$netrom_NETROM_T1(r0, 0x11d, 0x1, 0x0, 0x4)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

313.433851ms ago: executing program 0 (id=5036):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="04010000100001002bbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200140003006e657464657673696d300000000000000a000100aaaaaaaaaaaa0000c4001680c000018010000600070080008d8700000800000077000c8014"], 0x104}, 0x1, 0x0, 0x0, 0x4044810}, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x54, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6}, {0x8, 0x13, 0xb}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x4044000)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'pim6reg1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "d77943c06ce882c3e931dd61be7051fd00ca44bd57a800", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

246.604472ms ago: executing program 0 (id=5038):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
socket(0x1d, 0x2, 0x5)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

246.352159ms ago: executing program 1 (id=5039):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x2d}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040884}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x10}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x2dc00, &(0x7f0000000000)=ANY=[], 0x0)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

150.606323ms ago: executing program 1 (id=5040):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x1, 0x80000, 0x25dfdbfe, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x6}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

149.908259ms ago: executing program 0 (id=5041):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x9, @remote, 0x5}], 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000300000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000200000000001c204c68bfa0b7810000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095d2ecd632ba304ae1a5151ca102d1ce8473a3871a2aea9cd7a77a2ca819348eec206aaa6b806b5b3e79d3973540d3c21b7244a3dc546d0ce407665866a7f12c3fe1ba255bab87ae961f0d0000db5a2108475cebc8c9a03e774273e57bb5b1e3fe194ebbc66b9402e6c7e981932826d12bc1a4cabc71799dc5c5f6dbf3d0222b385f8571610f9cac5a1243d09a9910cd60bc9b59c1c911a03f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x785, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000c40)=[{0x8, 0x3, 0x6, 0x6}, {0x5, 0x1, 0xb, 0x9}, {0x100001, 0x1, 0x4, 0xb}], 0x10, 0x3}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0}, 0x40)
socket$inet_icmp(0x2, 0x2, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x2200, 0x4)
sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000429bd704000000000000004000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x40)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x4}, @sack_perm, @window={0x3, 0xfffe}, @sack_perm], 0x8)
sendto$inet(r4, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020", 0x1a, 0xe044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, &(0x7f00000028c0), &(0x7f0000000380)=0x60)
sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_opts(r4, 0x0, 0x6, &(0x7f0000000200)=""/148, &(0x7f00000002c0)=0x94)
r6 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f34700009c09000019d0ba6b00", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

70.777663ms ago: executing program 1 (id=5042):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "070000007b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'caif0\x00', 0xc})

70.014066ms ago: executing program 1 (id=5043):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadf007ff5f0e2b4d4c1f5f3af99045f9bd8a2d138151eff", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78", 0x0, 0x0, 0xfffffffd}})

686.324µs ago: executing program 1 (id=5044):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000180), &(0x7f0000000340)=r2}, 0x20)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

0s ago: executing program 1 (id=5045):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'geneve0\x00'})
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000080)={0x5e, @empty, 0x4e20, 0x4, 'sh\x00', 0x71, 0x80000001, 0x2c}, 0x2c)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc4, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_LABELS_MASK={0xc, 0x17, [0xe, 0x8]}, @CTA_TUPLE_MASTER={0x6c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40040}, 0x4000)
sendto$phonet(0xffffffffffffffff, &(0x7f0000000280)="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", 0x1000, 0x0, &(0x7f0000001280)={0x23, 0xfa, 0x1, 0x3}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001300), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x5c, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x10}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xc}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
syz_80211_join_ibss(&(0x7f0000001440)='wlan0\x00', &(0x7f0000001480)=@random="e09855b1c0737b95", 0x8, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000014c0)={'batadv_slave_0\x00', <r4=>0x0})
pipe(&(0x7f0000001500)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001540)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x6, '\x00', r4, r6, 0x2, 0x3, 0x3}, 0x50)
read(r1, &(0x7f00000015c0)=""/144, 0x90)
close(r0)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000001680)=""/4096, &(0x7f0000002680)=0x1000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000026c0))
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002a00)={&(0x7f00000028c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdf, 0xdf, 0x6, [@int={0xf, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x1c, 0x1}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x3, 0x3}, {0xe}, {0xa}, {0x6, 0x3}, {0x7, 0x4}, {0xc, 0x3}, {0xf, 0x1}]}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x75, 0x0, 0x41, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0xd0}}, @var={0x6, 0x0, 0x0, 0xe, 0x4, 0x2}, @fwd={0x5}, @datasec={0x9, 0x1, 0x0, 0xf, 0x3, [{0x5, 0x6, 0x5}], "20950d"}, @enum={0x10, 0x4, 0x0, 0x6, 0x4, [{0x4, 0x2}, {0xc, 0x5}, {0x10, 0x67}, {0xa, 0x4}]}]}, {0x0, [0x30, 0x2e, 0x30, 0x5f]}}, &(0x7f00000029c0)=""/59, 0xfe, 0x3b, 0x1, 0x6}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b80)={0x11, 0x13, &(0x7f0000002700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r5}, @map_fd={0x18, 0x6, 0x1, 0x0, r6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000027c0)='GPL\x00', 0x7fffffff, 0xaf, &(0x7f0000002800)=""/175, 0x40f00, 0x14, '\x00', r4, 0x0, r7, 0x8, &(0x7f0000002a40)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000002a80)={0xffffff81, 0x6, 0xa, 0x7167}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000002ac0)=[r5], &(0x7f0000002b00)=[{0x2, 0x4, 0x2, 0xc}, {0x0, 0x2, 0x3, 0x7}, {0x1, 0x1, 0x1, 0x8}, {0x3, 0x4, 0xe, 0xa}, {0x2, 0x2, 0xd, 0xc}, {0x4, 0x2, 0x6, 0xe}, {0x2, 0x4, 0x3, 0xc}], 0x10, 0x14000}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002c40)={'vxcan1\x00', <r8=>0x0})
clock_gettime(0x0, &(0x7f0000002cc0)={<r9=>0x0, <r10=>0x0})
sendmsg$can_bcm(r5, &(0x7f0000002dc0)={&(0x7f0000002c80)={0x1d, r8}, 0x10, &(0x7f0000002d80)={&(0x7f0000002d00)={0x5, 0x10, 0x7, {r9, r10/1000+60000}, {0x77359400}, {0x2, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1, 0x1}, 0xd, 0x1, 0x0, 0x0, "5fa441e3838aafd60b10df0c6c289206009d4bf31067d0ba397f17b8292024ba3bbac7655f310c4fa6ede458d4d52427f4228d3f5f407d3d9f14977f3e56c5fd"}}, 0x80}, 0x1, 0x0, 0x0, 0x51}, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002e00), r2)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002e40)={'wlan1\x00'})
r11 = gettid()
write$cgroup_pid(r5, &(0x7f0000002e80)=r11, 0x12)
recvmmsg$unix(r5, &(0x7f0000007dc0)=[{{&(0x7f0000002ec0), 0x6e, &(0x7f00000033c0)=[{&(0x7f0000002f40)=""/224, 0xe0}, {&(0x7f0000003040)=""/160, 0xa0}, {&(0x7f0000003100)=""/211, 0xd3}, {&(0x7f0000003200)=""/227, 0xe3}, {&(0x7f0000003300)=""/191, 0xbf}], 0x5, &(0x7f0000003440)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000003540), 0x6e, &(0x7f00000038c0)=[{&(0x7f00000035c0)=""/78, 0x4e}, {&(0x7f0000003640)=""/92, 0x5c}, {&(0x7f00000036c0)=""/129, 0x81}, {&(0x7f0000003780)}, {&(0x7f00000037c0)=""/84, 0x54}, {&(0x7f0000003840)=""/105, 0x69}], 0x6, &(0x7f0000003940)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}, {{&(0x7f0000003a80), 0x6e, &(0x7f0000004b40)=[{&(0x7f0000003b00)=""/31, 0x1f}, {&(0x7f0000003b40)=""/4096, 0x1000}], 0x2, &(0x7f0000004b80)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000004c80)=""/239, 0xef}, {&(0x7f0000004d80)=""/17, 0x11}, {&(0x7f0000004dc0)=""/133, 0x85}, {&(0x7f0000004e80)=""/168, 0xa8}, {&(0x7f0000004f40)=""/4096, 0x1000}], 0x5, &(0x7f0000005fc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000006080)=@abs, 0x6e, &(0x7f0000006300)=[{&(0x7f0000006100)=""/62, 0x3e}, {&(0x7f0000006140)=""/240, 0xf0}, {&(0x7f0000006240)=""/174, 0xae}], 0x3, &(0x7f0000006340)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000006400)=@abs, 0x6e, &(0x7f0000006500)=[{&(0x7f0000006480)}, {&(0x7f00000064c0)=""/23, 0x17}], 0x2}}, {{&(0x7f0000006540), 0x6e, &(0x7f0000006980)=[{&(0x7f00000065c0)=""/12, 0xc}, {&(0x7f0000006600)=""/2, 0x2}, {&(0x7f0000006640)=""/222, 0xde}, {&(0x7f0000006740)=""/66, 0x42}, {&(0x7f00000067c0)=""/175, 0xaf}, {&(0x7f0000006880)=""/203, 0xcb}], 0x6, &(0x7f0000006a00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000006ac0), 0x6e, &(0x7f0000007c40)=[{&(0x7f0000006b40)=""/201, 0xc9}, {&(0x7f0000006c40)=""/4096, 0x1000}], 0x2, &(0x7f0000007c80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}], 0x8, 0x40000041, &(0x7f0000007fc0))

kernel console output (not intermixed with test programs):

tover after parsing attributes in process `syz.1.1888'.
[  175.994242][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1889'.
[  175.999039][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1889'.
[  176.134910][T12210] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.139641][T12210] syzkaller0: entered promiscuous mode
[  176.141956][T12210] syzkaller0: entered allmulticast mode
[  176.157068][T12210] tipc: Resetting bearer <eth:syzkaller0>
[  176.166188][T12209] tipc: Resetting bearer <eth:syzkaller0>
[  176.177171][T12209] tipc: Disabling bearer <eth:syzkaller0>
[  176.762980][T12242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1900'.
[  176.767540][T12242] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1900'.
[  176.770653][T12242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1900'.
[  176.774229][T12242] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1900'.
[  176.936438][T12259] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1906'.
[  176.998725][T12266] IPVS: length: 246 != 8
[  177.221137][T12294] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  177.405087][T12323] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  177.409524][T12323] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  177.417851][T12323] netlink: 'syz.0.1930': attribute type 21 has an invalid length.
[  177.422652][T12323] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1930'.
[  177.538222][T12342] netlink: 'syz.1.1934': attribute type 1 has an invalid length.
[  177.544501][T12342] netlink: 'syz.1.1934': attribute type 2 has an invalid length.
[  177.593758][T12343] netlink: 'syz.1.1934': attribute type 11 has an invalid length.
[  177.729045][T12366] syzkaller1: entered promiscuous mode
[  177.734003][T12366] syzkaller1: entered allmulticast mode
[  177.926685][T12377] netlink: 'syz.1.1944': attribute type 1 has an invalid length.
[  177.929695][T12377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.387197][T12379] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  179.772405][T12471] tipc: Resetting bearer <eth:gre0>
[  179.796866][T12471] sit0: left promiscuous mode
[  179.865045][T12471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.877226][T12471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.944736][T12471] bond1: left promiscuous mode
[  179.950613][T12471] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  179.954691][T12471] macsec0: left promiscuous mode
[  179.956896][T12471] macsec0: left allmulticast mode
[  179.968416][T12471] vlan0: left allmulticast mode
[  179.970561][T12471] gretap0: left allmulticast mode
[  179.979791][ T5860] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.990148][ T5860] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.998087][ T5860] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.162329][T12489] sctp: [Deprecated]: syz.2.1981 (pid 12489) Use of int in maxseg socket option.
[  180.162329][T12489] Use struct sctp_assoc_value instead
[  180.304346][T12492] netlink: 'syz.0.1982': attribute type 4 has an invalid length.
[  180.320300][T12492] netlink: 'syz.0.1982': attribute type 4 has an invalid length.
[  180.381908][T12504] netlink: 'syz.2.1984': attribute type 1 has an invalid length.
[  180.570948][ T5237] Bluetooth: hci1: command 0x0406 tx timeout
[  180.764831][T12521] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  181.622474][T12533] __nla_validate_parse: 13 callbacks suppressed
[  181.622485][T12533] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1995'.
[  181.702352][T12543] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1997'.
[  181.735194][T12545] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1998'.
[  181.897558][T12558] netlink: 'syz.1.2003': attribute type 1 has an invalid length.
[  182.096717][T12567] netlink: 'syz.1.2006': attribute type 3 has an invalid length.
[  182.109158][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2006'.
[  182.469745][T12586] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2013'.
[  182.501123][ T5854] Bluetooth: hci2: command 0x0406 tx timeout
[  182.519247][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2014'.
[  182.798000][T12614] netlink: 'syz.2.2021': attribute type 29 has an invalid length.
[  182.947089][T12625] 8021q: adding VLAN 0 to HW filter on device bond7
[  182.953244][T12625] bond0: (slave bond7): Enslaving as an active interface with an up link
[  183.014355][T12571] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  183.015466][T12628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2025'.
[  184.570964][ T5857] Bluetooth: hci2: command 0x0406 tx timeout
[  188.101006][   T60] block nbd0: Possible stuck request ffff888022408000: control (read@0,1024B). Runtime 30 seconds
[  188.106297][   T60] block nbd0: Possible stuck request ffff888022408200: control (read@1024,1024B). Runtime 30 seconds
[  188.111208][   T60] block nbd0: Possible stuck request ffff888022408400: control (read@2048,1024B). Runtime 30 seconds
[  188.115756][   T60] block nbd0: Possible stuck request ffff888022408600: control (read@3072,1024B). Runtime 30 seconds
[  193.853977][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  206.507285][T12635] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  206.511696][T12635] syzkaller0: entered promiscuous mode
[  206.513507][T12635] syzkaller0: entered allmulticast mode
[  206.591346][T12649] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2032'.
[  206.597463][T12650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2032'.
[  206.603515][T12649] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2032'.
[  207.305422][T12696] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  207.418846][T12698] syzkaller1: entered promiscuous mode
[  207.421462][T12698] syzkaller1: entered allmulticast mode
[  207.516999][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2050'.
[  207.520887][T12700] openvswitch: netlink: Flow actions attr not present in new flow.
[  207.628269][T12702] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  207.646585][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2053'.
[  207.649993][T12707] netlink: 'syz.2.2053': attribute type 1 has an invalid length.
[  207.653949][T12707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2053'.
[  207.659031][T12707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2053'.
[  207.715723][T12711] netlink: 'syz.2.2055': attribute type 29 has an invalid length.
[  207.722065][T12712] netlink: 'syz.2.2055': attribute type 29 has an invalid length.
[  207.725598][T12713] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2055'.
[  207.984567][T12739] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2064'.
[  207.988791][T12739] tc_dump_action: action bad kind
[  208.112909][T12749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2067'.
[  208.149683][T12754] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  208.396663][T12787] dvmrp1: tun_chr_ioctl cmd 1074025677
[  208.399273][T12787] dvmrp1: linktype set to 805
[  208.458327][T12792] lo speed is unknown, defaulting to 1000
[  208.524241][T12802] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.529202][T12802] mac80211_hwsim hwsim4 nicvf0: entered promiscuous mode
[  208.534175][T12802] mac80211_hwsim hwsim4 nicvf0: entered allmulticast mode
[  208.538492][T12802] tipc: Resetting bearer <eth:syzkaller0>
[  208.544371][T12801] tipc: Disabling bearer <eth:syzkaller0>
[  208.612901][T12792] netlink: 'syz.0.2079': attribute type 2 has an invalid length.
[  209.093164][T12861] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  209.107473][T12861] bond0: (slave bond_slave_0): Releasing backup interface
[  209.117085][T12861] bond0: (slave bond_slave_1): Releasing backup interface
[  209.125572][T12861] team0: Port device team_slave_0 removed
[  209.130695][T12861] team0: Port device team_slave_1 removed
[  209.135982][T12861] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.138637][T12861] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.142398][T12861] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.145002][T12861] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.153061][T12861] team0: Port device netdevsim0 removed
[  209.158089][T12861] bond5: (slave vcan1): Releasing backup interface
[  209.170012][T12861] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  209.176903][T12861] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  209.220236][T12866] openvswitch: netlink: IPv6 tunnel dst address is zero
[  209.255644][T12871] sctp: [Deprecated]: syz.1.2105 (pid 12871) Use of int in max_burst socket option deprecated.
[  209.255644][T12871] Use struct sctp_assoc_value instead
[  209.444746][T12896] bond0: Error: Cannot enslave bond to itself.
[  209.448010][T12899] netlink: 'syz.1.2113': attribute type 3 has an invalid length.
[  209.452563][T12899] netlink: 'syz.1.2113': attribute type 3 has an invalid length.
[  209.485714][T12902] sctp: [Deprecated]: syz.1.2115 (pid 12902) Use of int in max_burst socket option deprecated.
[  209.485714][T12902] Use struct sctp_assoc_value instead
[  209.518262][T12907] netlink: 'syz.1.2117': attribute type 1 has an invalid length.
[  211.647694][T13001] __nla_validate_parse: 12 callbacks suppressed
[  211.647707][T13001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2147'.
[  212.030663][T13018] netlink: 'syz.0.2153': attribute type 1 has an invalid length.
[  212.034352][T13018] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2153'.
[  212.097772][T13019] netlink: 'syz.0.2153': attribute type 13 has an invalid length.
[  212.100398][T13019] netlink: 'syz.0.2153': attribute type 17 has an invalid length.
[  212.131693][T13019] 8021q: adding VLAN 0 to HW filter on device team0
[  212.135843][T13019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  213.891530][T13059] lo speed is unknown, defaulting to 1000
[  213.995861][T13064] netlink: 'syz.2.2165': attribute type 23 has an invalid length.
[  214.098101][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'.
[  214.111765][T13067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'.
[  214.129957][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  214.133852][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'.
[  214.137506][T13067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'.
[  214.141507][ T5860] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  214.147012][ T5860] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  214.152994][ T5860] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  215.294372][T13169] tipc: Enabled bearer <udp:s>, priority 10
[  215.412648][T13181] ip6tnl0: Caught tx_queue_len zero misconfig
[  215.440186][T13175] tipc: Failed to remove unknown binding: 66,1,1/0:811410684/811410686
[  215.445261][T13175] netlink: 'syz.0.2190': attribute type 1 has an invalid length.
[  215.449442][T13175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.454387][T13175] tipc: Failed to remove unknown binding: 66,1,1/0:811410684/811410686
[  215.457824][T13175] tipc: Failed to remove unknown binding: 66,1,1/0:811410684/811410686
[  216.302017][T13194] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2193'.
[  216.420947][   T10] tipc: Node number set to 387418595
[  216.534849][T13198] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  216.556941][T13198] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2195'.
[  216.667714][T13208] netlink: 'syz.0.2198': attribute type 1 has an invalid length.
[  216.683611][T13208] x9: renamed from bridge_slave_0 (while UP)
[  216.694323][T13208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'.
[  216.932638][T13227] syzkaller0: entered promiscuous mode
[  216.934543][T13227] syzkaller0: entered allmulticast mode
[  217.176880][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2209'.
[  217.187726][T13249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2209'.
[  217.226012][T13251] lo speed is unknown, defaulting to 1000
[  217.263790][T13255] netlink: 'syz.1.2208': attribute type 1 has an invalid length.
[  217.266445][T13255] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2208'.
[  217.508141][T13273] netlink: 'syz.1.2214': attribute type 2 has an invalid length.
[  217.515692][T13273] netlink: 'syz.1.2214': attribute type 1 has an invalid length.
[  217.525843][T13273] netlink: 'syz.1.2214': attribute type 2 has an invalid length.
[  217.528978][T13273] netlink: 'syz.1.2214': attribute type 1 has an invalid length.
[  217.780011][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'.
[  217.790804][T13291] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2218'.
[  218.203827][   T60] block nbd0: Possible stuck request ffff888022408000: control (read@0,1024B). Runtime 60 seconds
[  218.209093][   T60] block nbd0: Possible stuck request ffff888022408200: control (read@1024,1024B). Runtime 60 seconds
[  218.213886][   T60] block nbd0: Possible stuck request ffff888022408400: control (read@2048,1024B). Runtime 60 seconds
[  218.218474][   T60] block nbd0: Possible stuck request ffff888022408600: control (read@3072,1024B). Runtime 60 seconds
[  218.798175][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2242'.
[  218.805862][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2242'.
[  219.046835][T13397] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  219.085875][T13401] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2253'.
[  219.093654][T13402] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  219.096901][T13402] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  219.099808][T13402] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  219.231856][T13419] netlink: 'syz.1.2260': attribute type 29 has an invalid length.
[  219.235818][T13419] netlink: 'syz.1.2260': attribute type 29 has an invalid length.
[  219.433359][T13451] netlink: 'syz.0.2269': attribute type 11 has an invalid length.
[  219.436001][T13451] netlink: 'syz.0.2269': attribute type 4 has an invalid length.
[  219.439478][T13451] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2269'.
[  219.511516][T13461] IPVS: Error connecting to the multicast addr
[  219.524930][T13465] netlink: 'syz.0.2274': attribute type 11 has an invalid length.
[  219.747552][T13496] netlink: 'syz.1.2280': attribute type 13 has an invalid length.
[  219.750221][T13496] netlink: 'syz.1.2280': attribute type 17 has an invalid length.
[  219.817105][T13496] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.823269][T13496] 8021q: adding VLAN 0 to HW filter on device team0
[  219.828987][T13496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  219.848716][T13503] lo speed is unknown, defaulting to 1000
[  219.991365][ T5911] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  219.994591][ T5911] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  219.998697][ T5911] bond0: now running without any active interface!
[  220.373535][T13560] openvswitch: netlink: Multiple metadata blocks provided
[  220.880694][T13605] IPVS: persistence engine module ip_vs_pe_ not found
[  221.089672][T13620] team_slave_1: Caught tx_queue_len zero misconfig
[  221.092884][T13623] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  221.212903][T13627] lo speed is unknown, defaulting to 1000
[  221.520112][T13648] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  221.596400][T13661] pimreg: entered allmulticast mode
[  221.599615][T13661] pimreg: left allmulticast mode
[  221.705062][T13676] __nla_validate_parse: 15 callbacks suppressed
[  221.705076][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2339'.
[  221.708166][T13678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2341'.
[  221.716955][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2339'.
[  221.720108][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2339'.
[  221.723878][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2339'.
[  221.734127][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2339'.
[  221.737852][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2339'.
[  221.742350][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2339'.
[  221.745960][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2339'.
[  221.749911][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2339'.
[  221.947072][T13705] bond0: Caught tx_queue_len zero misconfig
[  221.956592][T13705] syzkaller0: entered promiscuous mode
[  221.962608][T13705] syzkaller0: entered allmulticast mode
[  221.970535][T13704] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  222.079226][T13721] netlink: 'syz.2.2355': attribute type 1 has an invalid length.
[  222.184535][T13735] tap0: tun_chr_ioctl cmd 1074812118
[  222.185555][T13737] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  222.220447][T13740] netlink: 'syz.2.2362': attribute type 1 has an invalid length.
[  222.318713][T13755] netlink: 'syz.0.2366': attribute type 1 has an invalid length.
[  222.322931][T13755] netlink: 'syz.0.2366': attribute type 1 has an invalid length.
[  222.606066][T13778] bond6 (unregistering): Released all slaves
[  222.718011][T13784] openvswitch: netlink: Flow key attr not present in new flow.
[  222.939158][T13799] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  222.945154][T13799] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.005812][T13799] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  223.009316][T13799] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.070164][T13799] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  223.074440][T13799] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.124525][T13799] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  223.129028][T13799] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.229548][ T5860] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  223.239111][ T5860] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.251096][ T5860] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  223.258509][ T5860] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.276118][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  223.279815][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.306015][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  223.309390][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.451970][T13820] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  223.462161][T13820] syzkaller0: entered promiscuous mode
[  223.466964][T13820] syzkaller0: entered allmulticast mode
[  223.500014][T13830] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  223.548384][T13832] lo speed is unknown, defaulting to 1000
[  223.753100][T13851] sctp: [Deprecated]: syz.1.2398 (pid 13851) Use of struct sctp_assoc_value in delayed_ack socket option.
[  223.753100][T13851] Use struct sctp_sack_info instead
[  223.947785][T13868] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  223.958717][T13868] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.019935][T13868] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  224.028456][T13868] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.102522][T13868] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  224.107199][T13868] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.132558][T13885] sctp: [Deprecated]: syz.1.2410 (pid 13885) Use of int in max_burst socket option deprecated.
[  224.132558][T13885] Use struct sctp_assoc_value instead
[  224.155550][T13868] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  224.159458][T13868] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.398003][T13903] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  224.490464][T13915] validate_nla: 4 callbacks suppressed
[  224.490477][T13915] netlink: 'syz.2.2418': attribute type 1 has an invalid length.
[  224.499781][T13915] netlink: 'syz.2.2418': attribute type 11 has an invalid length.
[  224.761084][T13932] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  225.659425][T13971] 8021q: adding VLAN 0 to HW filter on device bond5
[  225.662438][T13971] bridge0: port 3(bond5) entered blocking state
[  225.665089][T13971] bridge0: port 3(bond5) entered disabled state
[  225.667800][T13971] bond5: entered allmulticast mode
[  225.672041][T13971] bond5: entered promiscuous mode
[  225.675308][T13971] bridge0: port 3(bond5) entered blocking state
[  225.677967][T13971] bridge0: port 3(bond5) entered forwarding state
[  225.685680][  T945] bridge0: port 3(bond5) entered disabled state
[  225.783934][T13990] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  225.871266][T14005] geneve3: entered promiscuous mode
[  225.873050][T14005] geneve3: entered allmulticast mode
[  226.860878][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  226.866256][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.881911][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  226.885024][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.901164][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  226.905318][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.921015][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  226.924595][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.318713][T14115] __nla_validate_parse: 70 callbacks suppressed
[  227.318725][T14115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2477'.
[  227.472878][T14134] netlink: 'syz.2.2482': attribute type 11 has an invalid length.
[  227.476881][T14136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2483'.
[  227.480109][T14136] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  227.491358][T14136] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2483'.
[  227.559949][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2485'.
[  227.566585][T14144] netlink: 'syz.2.2485': attribute type 5 has an invalid length.
[  227.569733][T14144] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2485'.
[  227.575828][T14141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.579721][T14141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.594310][T14144] geneve3: entered promiscuous mode
[  227.596646][T14144] geneve3: entered allmulticast mode
[  227.599979][   T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  227.603410][   T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  227.607024][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  227.622346][T14141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.626033][T14141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.630207][T14141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  227.671561][T14141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.675620][T14141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.679955][T14141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  227.690926][ T5857] Bluetooth: hci1: command 0x0406 tx timeout
[  227.719535][T14141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.723223][T14141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.726689][T14141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  227.789664][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  227.792900][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  227.795780][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  227.804164][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  227.807328][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  227.810488][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  227.818870][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  227.824086][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  227.826895][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  227.835109][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  227.838258][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  227.842817][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  227.920043][T14149] openvswitch: netlink: IPv4 tun info is not correct
[  227.998020][T14152] netlink: 'syz.2.2488': attribute type 41 has an invalid length.
[  228.149640][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2491'.
[  228.181110][T14160] nbd2: detected capacity change from 0 to 63
[  228.185305][   T56] block nbd2: Receive control failed (result -104)
[  228.186601][T11604] block nbd2: Send control failed (result -32)
[  228.192375][T11604] block nbd2: Request send failed, requeueing
[  228.196984][T11604] block nbd2: Dead connection, failed to find a fallback
[  228.200615][   T60] block nbd2: Dead connection, failed to find a fallback
[  228.204267][   T60] block nbd2: shutting down sockets
[  228.207018][   T60] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  228.211604][   T60] Buffer I/O error on dev nbd2, logical block 1, async page read
[  228.215190][T11604] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  228.218977][T11604] Buffer I/O error on dev nbd2, logical block 2, async page read
[  228.223549][T11604] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  228.227313][T11604] Buffer I/O error on dev nbd2, logical block 3, async page read
[  228.319875][T14170] batadv_slave_0: entered promiscuous mode
[  228.324635][T14168] batadv_slave_0: left promiscuous mode
[  229.037065][T14248] netlink: 'syz.2.2520': attribute type 10 has an invalid length.
[  229.047467][T14249] bridge_slave_0: left allmulticast mode
[  229.050217][T14249] bridge_slave_0: left promiscuous mode
[  229.057139][T14249] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.063356][T14249] bridge_slave_1: left allmulticast mode
[  229.065718][T14249] bridge_slave_1: left promiscuous mode
[  229.068221][T14249] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.077732][T14249] bond0: (slave bond_slave_0): Releasing backup interface
[  229.082753][T14249] bond0: (slave bond_slave_1): Releasing backup interface
[  229.089718][T14249] team0: Port device team_slave_0 removed
[  229.096385][T14249] team0: Port device team_slave_1 removed
[  229.099258][T14249] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.102991][T14249] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.107011][T14249] bond5: left allmulticast mode
[  229.109194][T14249] bond5: left promiscuous mode
[  229.112730][T14249] bridge0: port 3(bond5) entered disabled state
[  229.119709][T14248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2520'.
[  229.123694][T14248] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2520'.
[  229.127594][T14248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2520'.
[  229.134906][T14248] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2520'.
[  229.832517][T14258] netlink: 'syz.1.2523': attribute type 1 has an invalid length.
[  229.835847][T14258] netlink: 'syz.1.2523': attribute type 1 has an invalid length.
[  230.402860][T13856] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.406485][T13856] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  230.409928][T13856] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  230.416461][T13856] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.419882][T13856] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  230.424559][T13856] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  230.432971][T13856] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.435934][T13856] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  230.438656][T13856] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  230.441848][T13856] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.444887][T13856] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  230.447793][T13856] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  231.026860][T14311] netlink: 'syz.0.2542': attribute type 1 has an invalid length.
[  231.029744][T14311] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.363885][ T5297] udevd[5297]: worker [8823] /devices/virtual/block/nbd0 is taking a long time
[  231.559565][T14353] netlink: 'syz.0.2558': attribute type 7 has an invalid length.
[  231.693846][T14374] netlink: 'syz.0.2564': attribute type 14 has an invalid length.
[  231.703858][T14374] netlink: 'syz.0.2564': attribute type 14 has an invalid length.
[  248.251129][   T60] block nbd0: Possible stuck request ffff888022408000: control (read@0,1024B). Runtime 90 seconds
[  248.255375][   T60] block nbd0: Possible stuck request ffff888022408200: control (read@1024,1024B). Runtime 90 seconds
[  248.259633][   T60] block nbd0: Possible stuck request ffff888022408400: control (read@2048,1024B). Runtime 90 seconds
[  248.264695][   T60] block nbd0: Possible stuck request ffff888022408600: control (read@3072,1024B). Runtime 90 seconds
[  254.771387][T14405] __nla_validate_parse: 21 callbacks suppressed
[  254.771396][T14405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2573'.
[  254.777059][T14405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2573'.
[  254.867229][T14423] lo speed is unknown, defaulting to 1000
[  254.885843][T14415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2577'.
[  254.897223][T14415] netlink: 'syz.1.2577': attribute type 13 has an invalid length.
[  254.899993][T14415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2577'.
[  255.021319][T14436] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  255.025261][T14436] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  255.029196][T14436] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  255.105920][T14423] netlink: 'syz.2.2579': attribute type 2 has an invalid length.
[  255.129136][T14423] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2579'.
[  255.293303][T14461] lo speed is unknown, defaulting to 1000
[  255.416940][T14463] netem: incorrect ge model size
[  255.418932][T14463] netem: change failed
[  255.424199][T14464] lo speed is unknown, defaulting to 1000
[  255.439721][T14470] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  255.469462][T14473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2591'.
[  255.472585][T14473] netlink: 'syz.1.2591': attribute type 20 has an invalid length.
[  255.475395][T14473] netlink: 'syz.1.2591': attribute type 21 has an invalid length.
[  255.560390][T14478] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2593'.
[  256.059460][T14508] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  256.064344][T14508] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  257.429274][T14568] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2622'.
[  257.437839][T14568] netlink: 'syz.1.2622': attribute type 21 has an invalid length.
[  257.441959][T14568] netlink: 'syz.1.2622': attribute type 6 has an invalid length.
[  257.444657][T14568] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2622'.
[  257.494849][T14574] netlink: 'syz.1.2624': attribute type 12 has an invalid length.
[  257.583301][T14581] netlink: 'syz.0.2627': attribute type 1 has an invalid length.
[  257.604478][T14579] netlink: 'syz.1.2626': attribute type 1 has an invalid length.
[  257.629163][T14581] netlink: 'syz.0.2627': attribute type 1 has an invalid length.
[  257.632391][T14581] netlink: 600 bytes leftover after parsing attributes in process `syz.0.2627'.
[  257.759106][T14595] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  257.765294][T14595] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  258.500291][   T60] block nbd2: Possible stuck request ffff8880224e8000: control (read@0,1024B). Runtime 30 seconds
[  258.575039][T14630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  258.693876][T14633] lo speed is unknown, defaulting to 1000
[  258.698324][T14639] lo speed is unknown, defaulting to 1000
[  258.985188][T14657] lo speed is unknown, defaulting to 1000
[  259.272714][T14670] xt_limit: Overflow, try lower: 271964/0
[  259.379961][T14676] IPv6: NLM_F_CREATE should be specified when creating new route
[  259.384633][T14676] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  259.387931][T14676] IPv6: NLM_F_CREATE should be set when creating new route
[  259.391197][T14676] IPv6: NLM_F_CREATE should be set when creating new route
[  259.811036][T14705] __nla_validate_parse: 5 callbacks suppressed
[  259.811047][T14705] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2663'.
[  259.877196][T14711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2665'.
[  259.884367][T14713] Unsupported ieee802154 address type: 0
[  259.886678][T14713] Unsupported ieee802154 address type: 0
[  259.888570][T14713] Unsupported ieee802154 address type: 0
[  259.892175][T14713] Unsupported ieee802154 address type: 0
[  259.929061][T14722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2667'.
[  259.931544][T14723] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2668'.
[  260.189965][T14739] validate_nla: 1 callbacks suppressed
[  260.189975][T14739] netlink: 'syz.2.2669': attribute type 1 has an invalid length.
[  260.226886][T14739] 8021q: adding VLAN 0 to HW filter on device bond8
[  260.247214][T14728] bond8: (slave gretap2): making interface the new active one
[  260.252967][T14728] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  260.385690][T14751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2677'.
[  260.400926][T14754] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  260.405421][T14749] IPVS: stopping backup sync thread 14754 ...
[  260.470969][T14763] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  260.502425][T14767] delete_channel: no stack
[  260.508225][T14765] delete_channel: no stack
[  260.599135][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2684'.
[  260.680454][T14774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2684'.
[  261.309767][T14804] lo speed is unknown, defaulting to 1000
[  261.343405][T14805] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.345754][T14812] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.462835][T14817] GUP no longer grows the stack in syz.1.2694 (14817): 200000006000-20000000a000 (200000005000)
[  261.467427][T14817] CPU: 1 UID: 0 PID: 14817 Comm: syz.1.2694 Not tainted syzkaller #0 PREEMPT(full) 
[  261.467443][T14817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  261.467451][T14817] Call Trace:
[  261.467456][T14817]  <TASK>
[  261.467462][T14817]  dump_stack_lvl+0x189/0x250
[  261.467485][T14817]  ? __pfx_dump_stack_lvl+0x10/0x10
[  261.467500][T14817]  ? __pfx__printk+0x10/0x10
[  261.467515][T14817]  ? find_vma+0xe7/0x160
[  261.467532][T14817]  ? mas_next_slot+0xc27/0xcf0
[  261.467586][T14817]  __get_user_pages+0x24d0/0x2ce0
[  261.467603][T14817]  ? __lock_acquire+0xab9/0xd20
[  261.467643][T14817]  ? __gup_longterm_locked+0xc68/0x1660
[  261.467664][T14817]  __gup_longterm_locked+0xde9/0x1660
[  261.467682][T14817]  ? try_grab_folio_fast+0x1be/0x4f0
[  261.467703][T14817]  ? gup_fast_fallback+0x195f/0x2010
[  261.467720][T14817]  gup_fast_fallback+0x1e6a/0x2010
[  261.467757][T14817]  ? __pfx_gup_fast_fallback+0x10/0x10
[  261.467771][T14817]  ? __mutex_lock+0x335/0x1350
[  261.467787][T14817]  ? is_valid_gup_args+0x11f/0x200
[  261.467802][T14817]  ? get_user_pages_fast+0x4d/0xb0
[  261.467819][T14817]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  261.467841][T14817]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  261.467858][T14817]  ? wait_for_space+0x24d/0x2d0
[  261.467877][T14817]  iov_iter_get_pages2+0x5e/0xa0
[  261.467893][T14817]  __se_sys_vmsplice+0x548/0x10d0
[  261.467916][T14817]  ? futex_private_hash_put+0x4b/0x280
[  261.467935][T14817]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  261.467956][T14817]  ? __pfx_futex_wake+0x10/0x10
[  261.467980][T14817]  ? __lock_acquire+0xab9/0xd20
[  261.468020][T14817]  ? do_pipe2+0xf7/0x170
[  261.468042][T14817]  ? rcu_is_watching+0x15/0xb0
[  261.468058][T14817]  ? do_syscall_64+0xbe/0x3b0
[  261.468072][T14817]  do_syscall_64+0xfa/0x3b0
[  261.468082][T14817]  ? lockdep_hardirqs_on+0x9c/0x150
[  261.468099][T14817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.468111][T14817]  ? exc_page_fault+0x9f/0xf0
[  261.468129][T14817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.468141][T14817] RIP: 0033:0x7fdf3ff8ebe9
[  261.468153][T14817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  261.468161][T14817] RSP: 002b:00007fdf40dc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  261.468174][T14817] RAX: ffffffffffffffda RBX: 00007fdf401c5fa0 RCX: 00007fdf3ff8ebe9
[  261.468181][T14817] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e
[  261.468188][T14817] RBP: 00007fdf40011e19 R08: 0000000000000000 R09: 0000000000000000
[  261.468196][T14817] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  261.468203][T14817] R13: 00007fdf401c6038 R14: 00007fdf401c5fa0 R15: 00007fff7aa969d8
[  261.468225][T14817]  </TASK>
[  261.928903][T14842] netlink: 'syz.0.2703': attribute type 83 has an invalid length.
[  262.051660][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'.
[  262.055611][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2705'.
[  262.279022][   T33] audit: type=1800 audit(1757304602.978:4): pid=14853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2708" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4380 res=0 errno=0
[  262.283923][T14853] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2708'.
[  262.442968][T14873] netlink: 'syz.0.2715': attribute type 1 has an invalid length.
[  262.447281][T14873] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  262.503168][T14878] openvswitch: netlink: Key type 29 is not supported
[  262.511155][T14878] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  262.602362][T14892] syzkaller0: entered promiscuous mode
[  262.604816][T14892] syzkaller0: entered allmulticast mode
[  262.628067][T14892] sch_fq: defrate 257 ignored.
[  262.630384][T14895] sch_fq: defrate 257 ignored.
[  263.803323][T15004] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  263.807052][T15004] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  263.825232][T15004] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  263.828609][T15004] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  264.390468][T15067] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  264.501449][T15080] xt_time: invalid argument - start or stop time greater than 23:59:59
[  264.543782][T15082] nbd: must specify at least one socket
[  265.077820][T15110] syzkaller1: entered promiscuous mode
[  265.080339][T15110] syzkaller1: entered allmulticast mode
[  265.173423][T15115] lo speed is unknown, defaulting to 1000
[  265.241902][T15124] __nla_validate_parse: 10 callbacks suppressed
[  265.241913][T15124] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2790'.
[  265.367470][T15131] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2792'.
[  266.024247][T15177] netlink: 'syz.0.2808': attribute type 1 has an invalid length.
[  266.045421][T15177] 8021q: adding VLAN 0 to HW filter on device bond7
[  266.601245][T15205] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  266.754899][T15211] 8021q: VLANs not supported on ip6_vti0
[  267.073928][T15227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2821'.
[  267.088323][T15227] netlink: 'syz.1.2821': attribute type 2 has an invalid length.
[  267.198933][T15234] syzkaller1: entered promiscuous mode
[  267.204100][T15234] syzkaller1: entered allmulticast mode
[  267.207367][T15234] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  267.226329][T15234] syz_tun: entered allmulticast mode
[  267.234639][T15234] dvmrp8: entered allmulticast mode
[  267.235587][T15238] netlink: 'syz.1.2825': attribute type 21 has an invalid length.
[  267.238746][T15233] syz_tun: left allmulticast mode
[  267.243374][T15233] dvmrp8: left allmulticast mode
[  267.407247][T15243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2827'.
[  267.481161][T15245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2828'.
[  267.545348][T15247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2829'.
[  267.797826][T15262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2832'.
[  267.804409][T15262] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2832'.
[  268.100307][T15277] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2838'.
[  268.312169][T15297] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  268.331043][T15297] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2846'.
[  268.347705][T15305] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  268.467392][T15314] syzkaller1: entered promiscuous mode
[  268.469597][T15314] syzkaller1: entered allmulticast mode
[  268.649108][T15329] bridge: RTM_NEWNEIGH with invalid ether address
[  269.141307][T15377] IPVS: length: 113 != 24
[  269.798212][T15419] lo speed is unknown, defaulting to 1000
[  270.305263][T15472] __nla_validate_parse: 9 callbacks suppressed
[  270.305272][T15472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2902'.
[  270.325345][T15478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2903'.
[  270.425616][T15484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.969652][T15524] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2917'.
[  270.978786][T15525] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2917'.
[  270.983918][T15524] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2917'.
[  271.395902][T15536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2921'.
[  271.399965][T15536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2921'.
[  271.566136][T15558] tun0: tun_chr_ioctl cmd 1074025675
[  271.568482][T15558] tun0: persist enabled
[  271.571205][T15558] tun0: tun_chr_ioctl cmd 1074025675
[  271.573508][T15558] tun0: persist enabled
[  271.583775][T15559] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  271.653240][T15568] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2930'.
[  271.656802][T15568] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2930'.
[  271.758427][T15581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2935'.
[  271.866389][T15590] vcan0: tx drop: invalid da for name 0x0000000000000003
[  272.816529][T15623] netlink: 'syz.1.2947': attribute type 10 has an invalid length.
[  272.828271][T15623] bond0: (slave 0!): Enslaving as an active interface with an up link
[  272.878189][T15630] batadv_slave_1: entered promiscuous mode
[  272.894219][T15629] batadv_slave_1: left promiscuous mode
[  273.852929][T15681] delete_channel: no stack
[  273.868241][T15684] tap0: tun_chr_ioctl cmd 1074025677
[  273.870536][T15684] tap0: linktype set to 0
[  274.214090][T15734] netlink: 'syz.2.2980': attribute type 1 has an invalid length.
[  275.184659][T15803] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.315626][T15811] __nla_validate_parse: 79 callbacks suppressed
[  275.315638][T15811] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3004'.
[  275.345932][T15811] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  275.345955][T15812] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  275.360463][T15814] netlink: 'syz.1.3005': attribute type 4 has an invalid length.
[  275.365748][T15811] netlink: 'syz.2.3004': attribute type 1 has an invalid length.
[  275.365824][T15812] netlink: 'syz.2.3004': attribute type 1 has an invalid length.
[  275.384043][T15811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3004'.
[  275.391265][T15811] 8021q: adding VLAN 0 to HW filter on device bond9
[  275.526492][T15820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3007'.
[  275.530502][T15820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3007'.
[  275.622786][T15827] netlink: 'syz.1.3008': attribute type 10 has an invalid length.
[  275.627614][T15827] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3008'.
[  275.632092][T15827] team0: entered promiscuous mode
[  275.634716][T15827] bridge0: port 1(team0) entered blocking state
[  275.638165][T15827] bridge0: port 1(team0) entered disabled state
[  275.641096][T15827] team0: entered allmulticast mode
[  275.643858][T15832] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3011'.
[  275.767513][T15841] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3015'.
[  275.913333][T15854] syz.0.3018: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  275.919380][T15854] CPU: 0 UID: 0 PID: 15854 Comm: syz.0.3018 Not tainted syzkaller #0 PREEMPT(full) 
[  275.919391][T15854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  275.919396][T15854] Call Trace:
[  275.919399][T15854]  <TASK>
[  275.919403][T15854]  dump_stack_lvl+0x189/0x250
[  275.919436][T15854]  ? __pfx_dump_stack_lvl+0x10/0x10
[  275.919444][T15854]  ? __pfx__printk+0x10/0x10
[  275.919455][T15854]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  275.919464][T15854]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  275.919472][T15854]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  275.919481][T15854]  warn_alloc+0x214/0x310
[  275.919494][T15854]  ? __pfx_warn_alloc+0x10/0x10
[  275.919508][T15854]  ? __get_vm_area_node+0x28f/0x300
[  275.919518][T15854]  ? xskq_create+0xbf/0x170
[  275.919530][T15854]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  275.919551][T15854]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  275.919563][T15854]  ? __kasan_kmalloc+0x93/0xb0
[  275.919573][T15854]  vmalloc_user_noprof+0xad/0xf0
[  275.919583][T15854]  ? xskq_create+0xbf/0x170
[  275.919593][T15854]  xskq_create+0xbf/0x170
[  275.919603][T15854]  xsk_init_queue+0xb0/0x110
[  275.919613][T15854]  xsk_setsockopt+0x57b/0x8d0
[  275.919623][T15854]  ? __pfx_xsk_setsockopt+0x10/0x10
[  275.919632][T15854]  ? __pfx_aa_sk_perm+0x10/0x10
[  275.919643][T15854]  ? __fget_files+0x2a/0x420
[  275.919650][T15854]  ? aa_sock_opt_perm+0xff/0x1b0
[  275.919658][T15854]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  275.919667][T15854]  ? __pfx_xsk_setsockopt+0x10/0x10
[  275.919676][T15854]  do_sock_setsockopt+0x17c/0x1b0
[  275.919687][T15854]  __x64_sys_setsockopt+0x13f/0x1b0
[  275.919696][T15854]  do_syscall_64+0xfa/0x3b0
[  275.919703][T15854]  ? lockdep_hardirqs_on+0x9c/0x150
[  275.919712][T15854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.919719][T15854]  ? exc_page_fault+0x9f/0xf0
[  275.919729][T15854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.919735][T15854] RIP: 0033:0x7f593358ebe9
[  275.919743][T15854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  275.919749][T15854] RSP: 002b:00007f59317cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  275.919758][T15854] RAX: ffffffffffffffda RBX: 00007f59337c6090 RCX: 00007f593358ebe9
[  275.919763][T15854] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004
[  275.919767][T15854] RBP: 00007f5933611e19 R08: 0000000000000004 R09: 0000000000000000
[  275.919771][T15854] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  275.919775][T15854] R13: 00007f59337c6128 R14: 00007f59337c6090 R15: 00007ffda2b7ace8
[  275.919786][T15854]  </TASK>
[  275.927729][T15854] Mem-Info:
[  276.018366][T15858] netlink: 'syz.2.3019': attribute type 11 has an invalid length.
[  276.026769][T15854] active_anon:6505 inactive_anon:0 isolated_anon:0
[  276.026769][T15854]  active_file:1529 inactive_file:38306 isolated_file:0
[  276.026769][T15854]  unevictable:1768 dirty:109 writeback:0
[  276.026769][T15854]  slab_reclaimable:10985 slab_unreclaimable:136966
[  276.026769][T15854]  mapped:18334 shmem:2449 pagetables:1257
[  276.026769][T15854]  sec_pagetables:0 bounce:0
[  276.026769][T15854]  kernel_misc_reclaimable:0
[  276.026769][T15854]  free:206936 free_pcp:21405 free_cma:0
[  276.057321][T15854] Node 0 active_anon:10120kB inactive_anon:0kB active_file:1844kB inactive_file:131772kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33576kB dirty:168kB writeback:0kB shmem:5076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7940kB pagetables:2736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  276.076183][T15854] Node 1 active_anon:16036kB inactive_anon:0kB active_file:4272kB inactive_file:21452kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39828kB dirty:268kB writeback:0kB shmem:4720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4616kB pagetables:2224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  276.089092][T15854] Node 0 DMA free:10860kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:384kB local_pcp:32kB free_cma:0kB
[  276.105147][T15854] lowmem_reserve[]: 0 811 811 811 811
[  276.111332][T15854] Node 0 DMA32 free:232812kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10120kB inactive_anon:0kB active_file:1844kB inactive_file:131772kB unevictable:3536kB writepending:168kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:44404kB local_pcp:20368kB free_cma:0kB
[  276.128182][T15854] lowmem_reserve[]: 0 0 0 0 0
[  276.131049][T15854] Node 1 DMA32 free:283020kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:15168kB local_pcp:11992kB free_cma:0kB
[  276.143760][T15854] lowmem_reserve[]: 0 0 854 854 854
[  276.145989][T15854] Node 1 Normal free:301052kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16036kB inactive_anon:0kB active_file:4272kB inactive_file:21452kB unevictable:3536kB writepending:268kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:26168kB local_pcp:21264kB free_cma:0kB
[  276.159637][T15854] lowmem_reserve[]: 0 0 0 0 0
[  276.161531][T15854] Node 0 DMA: 7*4kB (U) 6*8kB (U) 6*16kB (U) 8*32kB (U) 7*64kB (U) 6*128kB (U) 4*256kB (U) 6*512kB (U) 5*1024kB (U) 0*2048kB 0*4096kB = 10860kB
[  276.168545][T15854] Node 0 DMA32: 580*4kB (UM) 804*8kB (UME) 469*16kB (UME) 422*32kB (UME) 210*64kB (UME) 153*128kB (UME) 110*256kB (UME) 99*512kB (UE) 85*1024kB (UM) 2*2048kB (UM) 0*4096kB = 232768kB
[  276.179391][T15854] Node 1 DMA32: 37*4kB (UM) 17*8kB (U) 21*16kB (U) 17*32kB (U) 16*64kB (U) 18*128kB (UM) 14*256kB (U) 17*512kB (UM) 14*1024kB (UM) 3*2048kB (UM) 60*4096kB (M) = 283020kB
[  276.186965][T15854] Node 1 Normal: 507*4kB (UM) 600*8kB (UME) 649*16kB (UME) 936*32kB (UME) 441*64kB (UME) 223*128kB (UM) 158*256kB (UM) 116*512kB (UM) 87*1024kB (U) 4*2048kB (UM) 0*4096kB = 301052kB
[  276.197522][T15854] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  276.201818][T15854] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  276.205484][T15854] 42284 total pagecache pages
[  276.211074][T15854] 0 pages in swap cache
[  276.212990][T15854] Free swap  = 124996kB
[  276.214739][T15854] Total swap = 124996kB
[  276.216520][T15854] 786301 pages RAM
[  276.218073][T15854] 0 pages HighMem/MovableOnly
[  276.220123][T15854] 241337 pages reserved
[  276.222164][T15854] 0 pages cma reserved
[  276.299102][T15870] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3023'.
[  276.367805][T15874] IPv6: Can't replace route, no match found
[  276.829016][T15927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  277.283126][T15951] netlink: 'syz.0.3051': attribute type 12 has an invalid length.
[  277.320658][T15955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3052'.
[  277.498551][T15967] lo speed is unknown, defaulting to 1000
[  277.542906][T15977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3062'.
[  278.119957][T16043] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  278.302223][T16064] lo speed is unknown, defaulting to 1000
[  278.352631][   T60] block nbd0: Possible stuck request ffff888022408000: control (read@0,1024B). Runtime 120 seconds
[  278.356222][   T60] block nbd0: Possible stuck request ffff888022408200: control (read@1024,1024B). Runtime 120 seconds
[  278.359836][   T60] block nbd0: Possible stuck request ffff888022408400: control (read@2048,1024B). Runtime 120 seconds
[  278.363410][   T60] block nbd0: Possible stuck request ffff888022408600: control (read@3072,1024B). Runtime 120 seconds
[  278.458115][T16066] lo speed is unknown, defaulting to 1000
[  278.468918][T16072] netlink: 'syz.1.3090': attribute type 1 has an invalid length.
[  279.486048][T16122] netlink: 'syz.1.3104': attribute type 7 has an invalid length.
[  279.487819][T16124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  279.489384][T16122] netlink: 'syz.1.3104': attribute type 8 has an invalid length.
[  279.857549][T16127] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  279.890306][ T5878] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.902995][ T5878] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.906466][ T5878] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.909840][ T5878] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.917813][ T5878] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.923497][ T5878] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.927029][ T5878] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.930477][ T5878] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  280.042127][T16153] netlink: 'syz.1.3116': attribute type 5 has an invalid length.
[  280.045235][T16153] netlink: 'syz.1.3116': attribute type 6 has an invalid length.
[  280.049557][T16153] netlink: 'syz.1.3116': attribute type 1 has an invalid length.
[  280.114399][T16158] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  280.265029][T16175] sctp: [Deprecated]: syz.2.3120 (pid 16175) Use of struct sctp_assoc_value in delayed_ack socket option.
[  280.265029][T16175] Use struct sctp_sack_info instead
[  280.277063][T16175] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  280.477192][T16197] netlink: 'syz.2.3127': attribute type 11 has an invalid length.
[  280.563453][T16203] nbd: nbd2 already in use
[  280.800004][T16213] lo speed is unknown, defaulting to 1000
[  281.267334][T16237] nbd: nbd0 already in use
[  281.458593][T16252] __nla_validate_parse: 13 callbacks suppressed
[  281.458605][T16252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3145'.
[  281.466991][T16252] netlink: 'syz.0.3145': attribute type 2 has an invalid length.
[  281.474204][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3145'.
[  281.675358][T16273] lo speed is unknown, defaulting to 1000
[  281.680199][T16272] lo speed is unknown, defaulting to 1000
[  282.069143][T16305] netlink: 'syz.2.3164': attribute type 1 has an invalid length.
[  282.113338][T16305] bond10: entered promiscuous mode
[  282.115426][T16305] 8021q: adding VLAN 0 to HW filter on device bond10
[  282.137667][T16305] bond10: (slave bridge10): making interface the new active one
[  282.140232][T16305] bridge10: entered promiscuous mode
[  282.147016][T16305] bond10: (slave bridge10): Enslaving as an active interface with an up link
[  282.151737][T16304] tap0: tun_chr_ioctl cmd 1074025676
[  282.154057][T16304] tap0: owner set to 0
[  282.208215][T16318] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  282.338648][T16330] netlink: 'syz.0.3170': attribute type 83 has an invalid length.
[  282.395221][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3167'.
[  282.400498][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3167'.
[  282.524654][T16347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3172'.
[  282.546745][T16349] netlink: 'syz.0.3176': attribute type 3 has an invalid length.
[  282.552899][T16349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3176'.
[  283.343391][T16356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3179'.
[  283.428083][T16372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3185'.
[  283.508389][T16378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3186'.
[  283.520370][T16378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3186'.
[  283.540600][T16378] validate_nla: 1 callbacks suppressed
[  283.540609][T16378] netlink: 'syz.2.3186': attribute type 2 has an invalid length.
[  283.601749][T16390] netlink: 'syz.2.3190': attribute type 1 has an invalid length.
[  283.626765][T16390] 8021q: adding VLAN 0 to HW filter on device bond11
[  283.796436][T16425] netlink: 'syz.0.3200': attribute type 7 has an invalid length.
[  283.810877][T16425] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  283.886853][T16437] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  284.979384][T16504] netlink: 'syz.1.3228': attribute type 3 has an invalid length.
[  285.515710][T16527] lo speed is unknown, defaulting to 1000
[  285.566352][T16528] lo speed is unknown, defaulting to 1000
[  286.050070][T16565] team0: left allmulticast mode
[  286.052747][T16565] bridge0: port 1(team0) entered disabled state
[  286.059032][T16565] bond0: (slave 0!): Releasing backup interface
[  286.685775][T16602] netlink: 'syz.0.3259': attribute type 1 has an invalid length.
[  286.840551][T16611] IPVS: set_ctl: invalid protocol: 59 100.1.1.0:20002
[  286.962622][T16626] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  286.990053][T16629] __nla_validate_parse: 14 callbacks suppressed
[  286.990069][T16629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3267'.
[  287.107040][T16634] lo speed is unknown, defaulting to 1000
[  287.146845][T16641] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3271'.
[  287.151412][T16645] netlink: 210932 bytes leftover after parsing attributes in process `syz.0.3272'.
[  287.155898][T16645] netlink: 210932 bytes leftover after parsing attributes in process `syz.0.3272'.
[  287.162217][T16645] netlink: 210932 bytes leftover after parsing attributes in process `syz.0.3272'.
[  287.167038][T16645] netlink: 210932 bytes leftover after parsing attributes in process `syz.0.3272'.
[  287.182874][T16645] netlink: 210932 bytes leftover after parsing attributes in process `syz.0.3272'.
[  287.187376][T16645] netlink: 210932 bytes leftover after parsing attributes in process `syz.0.3272'.
[  287.204743][T16645] netlink: 210932 bytes leftover after parsing attributes in process `syz.0.3272'.
[  287.209043][T16645] netlink: 210932 bytes leftover after parsing attributes in process `syz.0.3272'.
[  287.425784][T16671] lo speed is unknown, defaulting to 1000
[  287.589441][T16684] openvswitch: netlink: Missing key (keys=40, expected=100)
[  288.571184][   T60] block nbd2: Possible stuck request ffff8880224e8000: control (read@0,1024B). Runtime 60 seconds
[  288.793863][T16717] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.796535][T16717] syzkaller0: entered promiscuous mode
[  288.799723][T16717] syzkaller0: entered allmulticast mode
[  288.817710][T16717] tipc: Resetting bearer <eth:syzkaller0>
[  288.825703][T16716] tipc: Resetting bearer <eth:syzkaller0>
[  288.835278][T16716] tipc: Disabling bearer <eth:syzkaller0>
[  289.347137][T16768] netlink: 'syz.0.3311': attribute type 12 has an invalid length.
[  289.350408][T16768] netlink: 'syz.0.3311': attribute type 11 has an invalid length.
[  289.360676][T16767] netlink: 'syz.0.3311': attribute type 33 has an invalid length.
[  289.413945][T16778] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.419292][T16778] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  289.502261][T16787] IPVS: set_ctl: invalid protocol: 59 172.20.20.11:20000
[  289.569473][T16797] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.587960][T16797] syzkaller0: entered promiscuous mode
[  289.592595][T16797] syzkaller0: entered allmulticast mode
[  289.612363][T16797] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  289.629339][T16797] tipc: Resetting bearer <eth:syzkaller0>
[  289.641544][T16794] tipc: Resetting bearer <eth:syzkaller0>
[  289.653172][T16794] tipc: Disabling bearer <eth:syzkaller0>
[  289.869574][T16823] syzkaller0: entered promiscuous mode
[  289.873440][T16823] syzkaller0: entered allmulticast mode
[  289.877233][T16822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.887140][T16824] tipc: Resetting bearer <eth:syzkaller0>
[  289.898552][T16824] tipc: Disabling bearer <eth:syzkaller0>
[  290.095519][T16840] pim6reg1: entered allmulticast mode
[  290.174174][T16842] netlink: 'syz.1.3337': attribute type 20 has an invalid length.
[  290.176825][T16842] netlink: 'syz.1.3337': attribute type 21 has an invalid length.
[  290.623561][T16873] netlink: 'syz.0.3347': attribute type 30 has an invalid length.
[  290.733903][ T5297] udevd[5297]: worker [11604] /devices/virtual/block/nbd2 is taking a long time
[  290.795601][T16883] @0: renamed from bond_slave_1
[  290.840346][T16883] macsec2: entered promiscuous mode
[  290.843474][T16883] macsec2: entered allmulticast mode
[  290.993527][T16894] batadv_slave_0: entered promiscuous mode
[  290.995475][T16894] netlink: 'syz.0.3353': attribute type 3 has an invalid length.
[  291.045947][T16905] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.524299][T16942] vti0: entered promiscuous mode
[  291.534421][T16942] vti0: entered allmulticast mode
[  291.543892][T16942] team0: Device vti0 is of different type
[  291.813417][T16970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  291.822474][T16970] unknown channel width for channel at 909000KHz?
[  291.881791][T16976] syz_tun: entered allmulticast mode
[  291.884580][T16976] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  291.893135][T16978] syz_tun: entered allmulticast mode
[  291.897719][T16976] syz_tun: left allmulticast mode
[  291.908819][T16978] dvmrp1: entered allmulticast mode
[  291.952463][T16978] syz_tun: left allmulticast mode
[  291.999407][T16985] netlink: 'syz.0.3382': attribute type 3 has an invalid length.
[  292.154837][T17006] can: request_module (can-proto-5) failed.
[  292.167367][T17006] __nla_validate_parse: 80 callbacks suppressed
[  292.167377][T17006] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3384'.
[  292.257799][T17024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3388'.
[  292.263024][T17024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3388'.
[  292.266188][T17024] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3388'.
[  292.379153][T17036] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  292.635508][T17065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3400'.
[  292.673621][T17071] netlink: 844 bytes leftover after parsing attributes in process `syz.2.3402'.
[  292.724510][T17071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3402'.
[  292.858375][T17089] netlink: 'syz.1.3407': attribute type 1 has an invalid length.
[  292.873718][T17089] 8021q: adding VLAN 0 to HW filter on device bond7
[  292.886315][T17089] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  292.910524][T17096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3411'.
[  293.032075][T17100] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3411'.
[  293.987403][T17113] netlink: 'syz.2.3418': attribute type 2 has an invalid length.
[  293.994249][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3418'.
[  294.279886][T17135] sctp: [Deprecated]: syz.2.3423 (pid 17135) Use of int in maxseg socket option.
[  294.279886][T17135] Use struct sctp_assoc_value instead
[  294.366195][T17139] lo speed is unknown, defaulting to 1000
[  294.497674][T17152] validate_nla: 1 callbacks suppressed
[  294.497685][T17152] netlink: 'syz.1.3428': attribute type 3 has an invalid length.
[  294.497704][T17151] netlink: 'syz.1.3428': attribute type 3 has an invalid length.
[  294.499613][T17152] netlink: 'syz.1.3428': attribute type 1 has an invalid length.
[  294.502442][T17151] netlink: 'syz.1.3428': attribute type 1 has an invalid length.
[  295.017121][T17188] netlink: 'syz.1.3439': attribute type 1 has an invalid length.
[  295.019738][T17188] netlink: 'syz.1.3439': attribute type 2 has an invalid length.
[  295.043671][T17194] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  295.154639][T17217] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  295.438971][T17262] : renamed from bond_slave_0
[  295.452180][T17254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  295.463602][T17254] tipc: Resetting bearer <eth:syzkaller0>
[  295.472644][T17253] tipc: Disabling bearer <eth:syzkaller0>
[  295.653514][T17294] syzkaller0: left promiscuous mode
[  295.655294][T17294] syzkaller0: left allmulticast mode
[  295.661417][T17294] tipc: Resetting bearer <eth:syzkaller0>
[  295.756759][T17307] netlink: 'syz.0.3478': attribute type 58 has an invalid length.
[  295.984157][T17326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  296.036268][T17330] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  296.044333][T17330] syzkaller0: entered promiscuous mode
[  296.046405][T17330] syzkaller0: entered allmulticast mode
[  296.522570][T17387] netlink: 'syz.2.3506': attribute type 1 has an invalid length.
[  296.754361][T17408] macvlan3: entered allmulticast mode
[  296.756309][T17408] veth1_vlan: entered allmulticast mode
[  296.759486][T17408] veth1_vlan: left allmulticast mode
[  296.909391][T17420] sctp: [Deprecated]: syz.2.3517 (pid 17420) Use of struct sctp_assoc_value in delayed_ack socket option.
[  296.909391][T17420] Use struct sctp_sack_info instead
[  297.207545][T17445] __nla_validate_parse: 20 callbacks suppressed
[  297.207557][T17445] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3525'.
[  297.224111][T17445] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3525'.
[  297.498028][T17485] netlink: 'syz.1.3538': attribute type 12 has an invalid length.
[  297.540061][T17494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3542'.
[  297.546052][T17494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3542'.
[  297.547849][ T5878] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  297.554091][ T5878] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  297.557250][ T5878] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  297.562201][ T5878] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  297.569619][T17494] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.3542'.
[  297.643925][T17497] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  297.687014][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3545'.
[  297.796443][T17521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3550'.
[  298.120678][T17559] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3558'.
[  298.212472][T17568] sock: sock_set_timeout: `syz.0.3561' (pid 17568) tries to set negative timeout
[  308.411409][   T60] block nbd0: Possible stuck request ffff888022408000: control (read@0,1024B). Runtime 150 seconds
[  308.416051][   T60] block nbd0: Possible stuck request ffff888022408200: control (read@1024,1024B). Runtime 150 seconds
[  308.420634][   T60] block nbd0: Possible stuck request ffff888022408400: control (read@2048,1024B). Runtime 150 seconds
[  308.425250][   T60] block nbd0: Possible stuck request ffff888022408600: control (read@3072,1024B). Runtime 150 seconds
[  318.663711][   T60] block nbd2: Possible stuck request ffff8880224e8000: control (read@0,1024B). Runtime 90 seconds
[  320.402794][T17578] netlink: 'syz.1.3565': attribute type 1 has an invalid length.
[  320.406256][T17578] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3565'.
[  320.524164][T17592] delete_channel: no stack
[  320.576987][T17600] pimreg: entered allmulticast mode
[  321.306608][T17617] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  321.309131][T17617] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  321.617686][T17637] netlink: 'syz.0.3583': attribute type 1 has an invalid length.
[  321.617900][T17638] syzkaller1: entered promiscuous mode
[  321.620370][T17637] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3583'.
[  321.628513][T17638] syzkaller1: entered allmulticast mode
[  321.652685][T17638] lo speed is unknown, defaulting to 1000
[  322.006046][T17647] lo speed is unknown, defaulting to 1000
[  322.117188][T17653] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.120012][T17653] syzkaller0: entered promiscuous mode
[  322.123349][T17653] syzkaller0: entered allmulticast mode
[  322.140040][T17652] tipc: Resetting bearer <eth:syzkaller0>
[  322.154184][T17652] tipc: Disabling bearer <eth:syzkaller0>
[  322.355784][T17668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3595'.
[  322.483260][T17673] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3597'.
[  322.601187][T17679] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3598'.
[  322.691048][T17685] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3601'.
[  322.785610][T17698] netlink: 'syz.1.3605': attribute type 10 has an invalid length.
[  322.804261][T17702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3607'.
[  322.830576][T17704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3608'.
[  322.834262][T17704] netlink: 'syz.1.3608': attribute type 7 has an invalid length.
[  322.837219][T17704] netlink: 'syz.1.3608': attribute type 8 has an invalid length.
[  322.840621][T17704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3608'.
[  322.885677][T17704] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3608'.
[  322.894869][T17704] gretap0: entered promiscuous mode
[  322.902386][T17710] bond0: option arp_validate: invalid value (18446744073491447809)
[  323.084674][T17727] netlink: 'syz.2.3617': attribute type 6 has an invalid length.
[  323.518491][T17777] netlink: 'syz.0.3632': attribute type 153 has an invalid length.
[  323.745278][T17799] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004
[  324.199504][T17875] netlink: 'syz.1.3659': attribute type 13 has an invalid length.
[  324.203685][T17875] netlink: 'syz.1.3659': attribute type 17 has an invalid length.
[  324.208012][T17875] gretap0: left promiscuous mode
[  324.213018][T17875] team0: left promiscuous mode
[  324.216807][T17875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  324.271900][T17882] veth13: entered promiscuous mode
[  324.444946][T17900] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  324.512718][T17912] erspan0: mtu less than device minimum
[  324.784270][T17952] IPv6: sit2: Disabled Multicast RS
[  324.820586][T17964] syzkaller1: entered promiscuous mode
[  324.822850][T17964] syzkaller1: entered allmulticast mode
[  325.169285][T17996] syz.1.3702 uses old SIOCAX25GETINFO
[  325.448420][T18023] __nla_validate_parse: 10 callbacks suppressed
[  325.448438][T18023] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3711'.
[  325.454804][T18023] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3711'.
[  325.458504][T18023] netlink: 'syz.1.3711': attribute type 1 has an invalid length.
[  326.105066][T18043] netlink: 360 bytes leftover after parsing attributes in process `syz.0.3719'.
[  326.194727][T18045] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  326.255327][T18053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3722'.
[  326.434277][T18073] netlink: 'syz.0.3730': attribute type 10 has an invalid length.
[  326.436883][T18073] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3730'.
[  326.447013][T18073] team0: entered promiscuous mode
[  326.449444][T18073] 8021q: adding VLAN 0 to HW filter on device team0
[  326.966613][T18117] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3747'.
[  327.457384][T18132] lo speed is unknown, defaulting to 1000
[  327.957075][T18157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3759'.
[  328.002574][T18160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3760'.
[  328.063370][T18165] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  328.118609][T18160] netlink: 'syz.1.3760': attribute type 3 has an invalid length.
[  328.123457][T18160] netlink: 'syz.1.3760': attribute type 1 has an invalid length.
[  328.126959][T18160] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3760'.
[  328.329130][T18181] IPVS: set_ctl: invalid protocol: 52 172.30.0.2:20003
[  328.363788][T18186] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3768'.
[  328.404796][T18190] macsec2: entered promiscuous mode
[  328.406686][T18190] macsec2: entered allmulticast mode
[  328.547200][T18217] netlink: 'syz.1.3774': attribute type 29 has an invalid length.
[  328.577352][T18220] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  329.503272][T18272] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002
[  329.705416][T18296] lo speed is unknown, defaulting to 1000
[  329.714549][T18295] lo speed is unknown, defaulting to 1000
[  330.180451][T18309] netlink: 'syz.1.3807': attribute type 26 has an invalid length.
[  330.497201][T18335] lo speed is unknown, defaulting to 1000
[  330.573025][T18335] __nla_validate_parse: 5 callbacks suppressed
[  330.573038][T18335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3815'.
[  331.866678][T18362] "syz.0.3821" (18362) uses obsolete ecb(arc4) skcipher
[  331.879615][T18362] 8021q: VLANs not supported on gre0
[  331.972925][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3824'.
[  332.057172][T18375] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001
[  332.163960][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3832'.
[  332.178173][T18386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3831'.
[  332.182888][T18391] netlink: 364 bytes leftover after parsing attributes in process `syz.1.3833'.
[  332.186480][T18391] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  332.195480][T18386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3831'.
[  332.244677][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3836'.
[  332.342838][T18406] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  332.346159][T18406] syzkaller0: entered promiscuous mode
[  332.348190][T18406] syzkaller0: entered allmulticast mode
[  332.356224][T18410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3840'.
[  332.621376][T18425] netlink: 'syz.2.3845': attribute type 4 has an invalid length.
[  332.665339][T18433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3848'.
[  332.769633][T18445] netlink: 732 bytes leftover after parsing attributes in process `syz.1.3852'.
[  332.790131][T18442] sctp: [Deprecated]: syz.0.3851 (pid 18442) Use of int in maxseg socket option.
[  332.790131][T18442] Use struct sctp_assoc_value instead
[  332.915585][T18459] netlink: 'syz.1.3856': attribute type 29 has an invalid length.
[  332.920069][T18459] netlink: 'syz.1.3856': attribute type 30 has an invalid length.
[  332.939803][T18459] netlink: 'syz.1.3856': attribute type 29 has an invalid length.
[  333.967182][T18521] geneve2: entered promiscuous mode
[  333.969559][T18521] geneve2: entered allmulticast mode
[  333.974452][ T5878] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  333.977628][ T5878] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  333.982647][ T5878] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  333.987614][ T5878] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  334.564454][T18582] can: request_module (can-proto-0) failed.
[  334.592697][T18587] netlink: 'syz.0.3901': attribute type 2 has an invalid length.
[  334.692228][T18602] syzkaller1: entered promiscuous mode
[  334.694278][T18602] syzkaller1: entered allmulticast mode
[  334.909499][T18618] lo speed is unknown, defaulting to 1000
[  335.628041][T18692] netlink: 'syz.0.3933': attribute type 3 has an invalid length.
[  335.640106][T18692] __nla_validate_parse: 13 callbacks suppressed
[  335.640121][T18692] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3933'.
[  335.684411][T18696] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3936'.
[  335.936856][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3945'.
[  335.964827][T18733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3947'.
[  335.984622][T18735] dvmrp8: entered allmulticast mode
[  336.007319][T18735] netlink: 'syz.2.3948': attribute type 2 has an invalid length.
[  336.010657][T18735] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.3948'.
[  336.025317][T18735] netlink: 'syz.2.3948': attribute type 1 has an invalid length.
[  336.027954][T18735] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.072576][T18738] netlink: 'syz.1.3949': attribute type 23 has an invalid length.
[  336.105086][T18738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3949'.
[  336.133462][T18744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3951'.
[  336.176074][T18746] bridge0: entered promiscuous mode
[  336.263885][T18755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3955'.
[  336.267414][T18755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3955'.
[  336.272146][T18755] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3955'.
[  336.409630][T18763] : entered promiscuous mode
[  336.551405][T18783] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  336.748415][T18808] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96
[  337.036528][T18837] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.039585][T18838] syzkaller0: entered promiscuous mode
[  337.042961][T18838] syzkaller0: entered allmulticast mode
[  337.048431][T18837] tipc: Resetting bearer <eth:syzkaller0>
[  337.349087][T18845] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20001
[  337.783625][T18883] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  337.786678][T18883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.859825][T18885] netlink: 'syz.2.3996': attribute type 32 has an invalid length.
[  337.863664][T18885] (unnamed net_device) (uninitialized): option coupled_control: invalid value (255)
[  337.995802][T18899] ip6gre1: entered allmulticast mode
[  338.275523][T18931] netlink: 'syz.1.4011': attribute type 3 has an invalid length.
[  338.497633][   T60] block nbd0: Possible stuck request ffff888022408000: control (read@0,1024B). Runtime 180 seconds
[  338.501513][   T60] block nbd0: Possible stuck request ffff888022408200: control (read@1024,1024B). Runtime 180 seconds
[  338.505455][   T60] block nbd0: Possible stuck request ffff888022408400: control (read@2048,1024B). Runtime 180 seconds
[  338.509340][   T60] block nbd0: Possible stuck request ffff888022408600: control (read@3072,1024B). Runtime 180 seconds
[  338.522877][T18966] tipc: Can't bind to reserved service type 0
[  338.824858][T19015] netlink: 'syz.0.4028': attribute type 33 has an invalid length.
[  338.831473][T19015] netlink: 'syz.0.4028': attribute type 1 has an invalid length.
[  338.930312][T19029] netlink: 'syz.2.4030': attribute type 30 has an invalid length.
[  340.069033][T19108] netlink: 'syz.0.4056': attribute type 6 has an invalid length.
[  340.400158][T19152] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  341.844033][T19248] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  341.847753][T19248] __nla_validate_parse: 17 callbacks suppressed
[  341.847760][T19248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4101'.
[  342.247829][T19284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4114'.
[  342.365777][T19298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4118'.
[  342.589089][T19317] openvswitch: netlink: IP tunnel TTL not specified.
[  342.625100][T19321] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.670512][T19324] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4125'.
[  342.683493][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  342.687825][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  342.694038][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  342.697813][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  342.726322][T19326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4126'.
[  343.105620][T19353] netlink: 'syz.0.4136': attribute type 11 has an invalid length.
[  343.206726][T19365] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4140'.
[  343.379495][T19386] syzkaller1: entered promiscuous mode
[  343.382300][T19386] syzkaller1: entered allmulticast mode
[  343.388478][ T5297] udevd[5297]: worker [8823] /devices/virtual/block/nbd0 timeout; kill it
[  343.392992][ T5297] udevd[5297]: seq 12960 '/devices/virtual/block/nbd0' killed
[  343.467188][T19388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4148'.
[  343.472235][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4148'.
[  343.486831][T19389] netlink: 'syz.0.4148': attribute type 1 has an invalid length.
[  343.490155][T19389] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.4148'.
[  343.500953][T19403] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[  343.504110][T19403] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[  343.578627][T19407] bond0: (slave gretap0): Opening slave failed
[  343.582954][T19408] bond0: (slave gretap0): Opening slave failed
[  343.988276][T19450] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  343.992588][T19450] syzkaller0: entered promiscuous mode
[  343.995065][T19450] syzkaller0: entered allmulticast mode
[  344.016798][T19450] tipc: Resetting bearer <eth:syzkaller0>
[  344.024867][T19447] tipc: Resetting bearer <eth:syzkaller0>
[  344.037014][T19447] tipc: Disabling bearer <eth:syzkaller0>
[  344.137805][T19459] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4169'.
[  344.782963][T19540] lo speed is unknown, defaulting to 1000
[  344.833968][T19544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  344.896558][T19547] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  344.953501][T19552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  345.118047][T19569] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  345.159665][T19574] netlink: 'syz.2.4204': attribute type 2 has an invalid length.
[  345.306408][T19590] netlink: 'syz.1.4210': attribute type 1 has an invalid length.
[  345.347314][T19592] lo speed is unknown, defaulting to 1000
[  345.798973][T19621] netlink: 'syz.1.4219': attribute type 1 has an invalid length.
[  346.187458][T19652] netlink: 'syz.2.4232': attribute type 10 has an invalid length.
[  346.190352][T19652] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.199738][T19652] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  346.485124][T19688] netlink: 'syz.1.4244': attribute type 3 has an invalid length.
[  346.743875][T19715] lo speed is unknown, defaulting to 1000
[  346.912810][T19729] IPVS: Scheduler module ip_vs_sip not found
[  347.067690][T19739] __nla_validate_parse: 15 callbacks suppressed
[  347.067711][T19739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4260'.
[  347.305224][T19751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4264'.
[  347.999910][T19811] sctp: [Deprecated]: syz.2.4285 (pid 19811) Use of int in maxseg socket option.
[  347.999910][T19811] Use struct sctp_assoc_value instead
[  348.006804][T19811] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4285'.
[  348.017101][T19811] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4285'.
[  348.174090][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4288'.
[  348.238178][T19822] netlink: 'syz.2.4289': attribute type 4 has an invalid length.
[  348.291513][T19834] openvswitch: netlink: Message has 4 unknown bytes.
[  348.388381][T19840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4292'.
[  348.465341][T19851] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  348.682304][T19870] syzkaller0: left promiscuous mode
[  348.684222][T19870] syzkaller0: left allmulticast mode
[  348.753690][   T60] block nbd2: Possible stuck request ffff8880224e8000: control (read@0,1024B). Runtime 120 seconds
[  348.883100][T19886] netlink: 'syz.2.4305': attribute type 13 has an invalid length.
[  348.885920][T19886] netlink: 'syz.2.4305': attribute type 17 has an invalid length.
[  348.944375][T19886] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.949118][T19886] 8021q: adding VLAN 0 to HW filter on device team0
[  348.957277][T19886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  348.966204][  T791] lo speed is unknown, defaulting to 1000
[  348.968522][  T791] syz1: Port: 1 Link ACTIVE
[  348.970680][T19889] xfrm0: entered promiscuous mode
[  348.975555][T19889] xfrm0: entered allmulticast mode
[  349.030063][T19880] lo speed is unknown, defaulting to 1000
[  349.082403][T19886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  349.151989][T19880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  349.829536][T19923] netlink: 'syz.2.4318': attribute type 12 has an invalid length.
[  349.832806][T19924] netlink: 'syz.2.4318': attribute type 1 has an invalid length.
[  349.835479][T19924] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4318'.
[  349.955043][T19934] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4321'.
[  350.074964][T19953] openvswitch: netlink: IPv6 tunnel dst address is zero
[  350.157615][T19963] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20129
[  350.317500][T19979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4333'.
[  350.375756][T19989] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  350.391233][T19989] syzkaller0: entered promiscuous mode
[  350.394213][T19989] syzkaller0: entered allmulticast mode
[  350.459419][T19987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4335'.
[  351.123528][T20084] raw_sendmsg: syz.1.4356 forgot to set AF_INET. Fix it!
[  351.131997][T20074] netlink: 'syz.0.4354': attribute type 1 has an invalid length.
[  351.313986][T20105] RDS: rds_bind could not find a transport for ::aaaa:aaaa:b:0:20:0, load rds_tcp or rds_rdma?
[  351.546481][T20134] netlink: 'syz.2.4375': attribute type 24 has an invalid length.
[  351.549246][T20134] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  351.554386][T20134] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  351.660117][T20148] netlink: 'syz.1.4379': attribute type 10 has an invalid length.
[  351.669132][T20148] team0: Port device 0! added
[  351.673196][T20148] netlink: 'syz.1.4379': attribute type 10 has an invalid length.
[  351.679054][T20148] team0: Port device 0! removed
[  351.683336][T20148] bond0: (slave 0!): Enslaving as an active interface with an up link
[  351.691173][T13856] bond0: (slave 0!): interface is now down
[  351.695411][T13856] bond0: now running without any active interface!
[  351.716206][T20145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  351.819608][T20153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.479549][T20173] lo speed is unknown, defaulting to 1000
[  352.695609][T20190] __nla_validate_parse: 9 callbacks suppressed
[  352.695624][T20190] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4390'.
[  352.834551][T20206] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4396'.
[  353.174649][T20233] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4405'.
[  353.178597][T20234] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4405'.
[  353.189936][T20234] openvswitch: netlink: Key type 29 is not supported
[  353.191700][T20235] openvswitch: netlink: Key type 29 is not supported
[  353.329713][T20242] syzkaller1: entered promiscuous mode
[  353.332128][T20242] syzkaller1: entered allmulticast mode
[  353.339114][T20242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4408'.
[  353.638192][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4411'.
[  353.642966][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4411'.
[  353.649699][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4411'.
[  353.655763][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4411'.
[  353.714021][T20262] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4413'.
[  353.929729][T20281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.617027][T20303] netlink: 'syz.2.4426': attribute type 9 has an invalid length.
[  354.794944][T20311] lo speed is unknown, defaulting to 1000
[  354.982105][T20311] netlink: 'syz.2.4430': attribute type 2 has an invalid length.
[  356.164774][T20368] IPVS: set_ctl: invalid protocol: 110 255.255.255.255:20000
[  356.167514][T20368] IPVS: set_ctl: invalid protocol: 110 255.255.255.255:20000
[  356.285537][T20381] lo speed is unknown, defaulting to 1000
[  356.314873][T20386] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.335271][T20389] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.384939][T20393] syz.0.4454 (20393) used obsolete PPPIOCDETACH ioctl
[  356.829241][T20429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.852595][T20429] syzkaller0: entered promiscuous mode
[  356.854730][T20429] syzkaller0: entered allmulticast mode
[  356.857278][T20429] tipc: Resetting bearer <eth:syzkaller0>
[  356.867477][T20428] tipc: Resetting bearer <eth:syzkaller0>
[  357.432662][T20438] xt_HMARK: spi-set and port-set can't be combined
[  357.890071][T20428] tipc: Disabling bearer <eth:syzkaller0>
[  358.005867][T20448] netlink: 'syz.0.4474': attribute type 1 has an invalid length.
[  358.185025][T20470] __nla_validate_parse: 5 callbacks suppressed
[  358.185035][T20470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4482'.
[  358.200036][T20468] tipc: Resetting bearer <eth:gre0>
[  358.242430][T20468] mac80211_hwsim hwsim4 nicvf0: left promiscuous mode
[  358.268834][T20468] macsec2: left promiscuous mode
[  358.394191][T20484] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4488'.
[  358.408898][T20486] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4489'.
[  358.768579][T20512] bond0: (slave rose0): Error: Device can not be enslaved while up
[  358.995974][T20523] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4499'.
[  359.208928][T20525] sctp: [Deprecated]: syz.2.4500 (pid 20525) Use of int in max_burst socket option deprecated.
[  359.208928][T20525] Use struct sctp_assoc_value instead
[  359.336476][T20540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  359.340687][T20536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  359.438467][T20545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4505'.
[  359.442587][T20545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  359.705783][T20560] netlink: 'syz.0.4510': attribute type 10 has an invalid length.
[  359.709127][T20560] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4510'.
[  359.713132][T20561] netlink: 'syz.0.4510': attribute type 10 has an invalid length.
[  359.716400][T20561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4510'.
[  359.722275][T20561] bond0: entered promiscuous mode
[  359.724437][T20561] bond0: entered allmulticast mode
[  359.727457][T20561] 8021q: adding VLAN 0 to HW filter on device bond0
[  359.730672][T20561] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  359.737366][T20560] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  359.906437][T20578] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  360.047546][T20597] netlink: 'syz.2.4521': attribute type 4 has an invalid length.
[  360.057198][T20597] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4521'.
[  360.082189][T20597] TCP: TCP_TX_DELAY enabled
[  360.200268][T20610] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4525'.
[  360.489936][T20628] syzkaller1: entered promiscuous mode
[  360.495151][T20628] syzkaller1: entered allmulticast mode
[  360.520462][T20628] lo speed is unknown, defaulting to 1000
[  360.824643][   T33] audit: type=1800 audit(1757304701.528:5): pid=20639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4532" name="blkio.bfq.time_recursive" dev="tmpfs" ino=7711 res=0 errno=0
[  361.905296][T20675] netlink: 'syz.2.4542': attribute type 1 has an invalid length.
[  361.944746][T20675] 8021q: adding VLAN 0 to HW filter on device bond12
[  361.962607][T20675] vlan3: entered allmulticast mode
[  361.964808][T20675] batadv0: entered allmulticast mode
[  361.968080][T20675] bond12: (slave vlan3): Opening slave failed
[  362.059794][T20683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4546'.
[  362.279463][T20639] syz.0.4532: vmalloc error: size 35651584, failed to allocated page array size 69632, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  362.287720][T20639] CPU: 1 UID: 0 PID: 20639 Comm: syz.0.4532 Not tainted syzkaller #0 PREEMPT(full) 
[  362.287732][T20639] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  362.287737][T20639] Call Trace:
[  362.287741][T20639]  <TASK>
[  362.287744][T20639]  dump_stack_lvl+0x189/0x250
[  362.287762][T20639]  ? __pfx_dump_stack_lvl+0x10/0x10
[  362.287771][T20639]  ? __pfx__printk+0x10/0x10
[  362.287781][T20639]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  362.287791][T20639]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  362.287800][T20639]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  362.287808][T20639]  warn_alloc+0x214/0x310
[  362.287839][T20639]  ? __pfx_warn_alloc+0x10/0x10
[  362.287854][T20639]  ? __get_vm_area_node+0x28f/0x300
[  362.287863][T20639]  ? hash_netport4_resize+0x235/0x1b60
[  362.287874][T20639]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  362.287895][T20639]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  362.287907][T20639]  ? rcu_is_watching+0x15/0xb0
[  362.287916][T20639]  ? hash_netport4_resize+0x235/0x1b60
[  362.287922][T20639]  ? hash_netport4_resize+0x235/0x1b60
[  362.287929][T20639]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  362.287939][T20639]  ? hash_netport4_resize+0x235/0x1b60
[  362.287949][T20639]  hash_netport4_resize+0x235/0x1b60
[  362.287956][T20639]  ? hash_netport4_uadt+0xc97/0xf30
[  362.287965][T20639]  ? __pfx_hash_netport4_add+0x10/0x10
[  362.287972][T20639]  ? __pfx_hash_netport4_uadt+0x10/0x10
[  362.287983][T20639]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  362.287996][T20639]  call_ad+0x44e/0xb00
[  362.288008][T20639]  ? __pfx_call_ad+0x10/0x10
[  362.288023][T20639]  ? __nla_parse+0x40/0x60
[  362.288036][T20639]  ip_set_ad+0x791/0x930
[  362.288048][T20639]  ? __pfx_ip_set_ad+0x10/0x10
[  362.288072][T20639]  nfnetlink_rcv_msg+0xb4d/0x1130
[  362.288083][T20639]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  362.288099][T20639]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  362.288119][T20639]  ? _raw_spin_unlock+0x28/0x50
[  362.288129][T20639]  ? unwind_get_return_address+0x4d/0x90
[  362.288144][T20639]  netlink_rcv_skb+0x208/0x470
[  362.288155][T20639]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  362.288180][T20639]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  362.288195][T20639]  ? bpf_lsm_capable+0x9/0x20
[  362.288205][T20639]  ? security_capable+0x7e/0x2e0
[  362.288219][T20639]  nfnetlink_rcv+0x26a/0x2520
[  362.288228][T20639]  ? is_bpf_text_address+0x26/0x2b0
[  362.288239][T20639]  ? kernel_text_address+0xa5/0xe0
[  362.288250][T20639]  ? __kernel_text_address+0xd/0x40
[  362.288258][T20639]  ? unwind_get_return_address+0x4d/0x90
[  362.288265][T20639]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  362.288274][T20639]  ? arch_stack_walk+0xfc/0x150
[  362.288289][T20639]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  362.288298][T20639]  ? stack_depot_save_flags+0x40/0x860
[  362.288310][T20639]  ? __lock_acquire+0xab9/0xd20
[  362.288330][T20639]  ? __lock_acquire+0xab9/0xd20
[  362.288344][T20639]  ? netlink_deliver_tap+0x2e/0x1b0
[  362.288356][T20639]  ? netlink_deliver_tap+0x2e/0x1b0
[  362.288369][T20639]  netlink_unicast+0x82f/0x9e0
[  362.288382][T20639]  ? __pfx_netlink_unicast+0x10/0x10
[  362.288392][T20639]  ? netlink_sendmsg+0x642/0xb30
[  362.288397][T20639]  ? skb_put+0x11b/0x210
[  362.288407][T20639]  netlink_sendmsg+0x805/0xb30
[  362.288417][T20639]  ? __pfx_netlink_sendmsg+0x10/0x10
[  362.288424][T20639]  ? aa_sock_msg_perm+0xf1/0x1d0
[  362.288432][T20639]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  362.288440][T20639]  ? __pfx_netlink_sendmsg+0x10/0x10
[  362.288447][T20639]  __sock_sendmsg+0x21c/0x270
[  362.288457][T20639]  ____sys_sendmsg+0x505/0x830
[  362.288468][T20639]  ? __pfx_____sys_sendmsg+0x10/0x10
[  362.288478][T20639]  ? import_iovec+0x74/0xa0
[  362.288493][T20639]  ___sys_sendmsg+0x21f/0x2a0
[  362.288501][T20639]  ? __pfx____sys_sendmsg+0x10/0x10
[  362.288523][T20639]  ? __fget_files+0x2a/0x420
[  362.288529][T20639]  ? __fget_files+0x3a0/0x420
[  362.288539][T20639]  __x64_sys_sendmsg+0x19b/0x260
[  362.288548][T20639]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  362.288559][T20639]  ? rcu_is_watching+0x15/0xb0
[  362.288568][T20639]  ? do_syscall_64+0xbe/0x3b0
[  362.288577][T20639]  do_syscall_64+0xfa/0x3b0
[  362.288582][T20639]  ? lockdep_hardirqs_on+0x9c/0x150
[  362.288592][T20639]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.288598][T20639]  ? exc_page_fault+0x9f/0xf0
[  362.288608][T20639]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.288615][T20639] RIP: 0033:0x7f593358ebe9
[  362.288623][T20639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  362.288629][T20639] RSP: 002b:00007f59317ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  362.288637][T20639] RAX: ffffffffffffffda RBX: 00007f59337c5fa0 RCX: 00007f593358ebe9
[  362.288642][T20639] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000007
[  362.288646][T20639] RBP: 00007f5933611e19 R08: 0000000000000000 R09: 0000000000000000
[  362.288651][T20639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  362.288655][T20639] R13: 00007f59337c6038 R14: 00007f59337c5fa0 R15: 00007ffda2b7ace8
[  362.288666][T20639]  </TASK>
[  362.288763][T20639] Mem-Info:
[  362.299568][T20699] netlink: 'syz.2.4549': attribute type 21 has an invalid length.
[  362.307529][T20639] active_anon:6707 inactive_anon:0 isolated_anon:0
[  362.307529][T20639]  active_file:1569 inactive_file:38336 isolated_file:0
[  362.307529][T20639]  unevictable:1768 dirty:59 writeback:0
[  362.307529][T20639]  slab_reclaimable:10890 slab_unreclaimable:146066
[  362.307529][T20639]  mapped:18415 shmem:2467 pagetables:1305
[  362.307529][T20639]  sec_pagetables:0 bounce:0
[  362.307529][T20639]  kernel_misc_reclaimable:0
[  362.307529][T20639]  free:179390 free_pcp:30818 free_cma:0
[  362.309823][T20699] syzkaller1: entered promiscuous mode
[  362.315981][T20639] Node 0 active_anon:10580kB inactive_anon:0kB active_file:2004kB inactive_file:131772kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33696kB dirty:88kB writeback:0kB shmem:5116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8060kB pagetables:2792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  362.317242][T20699] syzkaller1: entered allmulticast mode
[  362.319055][T20639] Node 1 active_anon:16248kB inactive_anon:0kB active_file:4272kB inactive_file:21572kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40032kB dirty:148kB writeback:0kB shmem:4752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4580kB pagetables:2428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  362.319075][T20639] Node 0 DMA free:9196kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  362.319097][T20639] lowmem_reserve[]: 0 811 811 811 811
[  362.436409][T20705] syz_tun: refused to change device tx_queue_len
[  362.436716][T20639] 
[  362.439217][T20705] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  362.440976][T20639] Node 0 DMA32 free:205060kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10648kB inactive_anon:0kB active_file:2004kB inactive_file:131772kB unevictable:3536kB writepending:88kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:55548kB local_pcp:16496kB free_cma:0kB
[  362.441003][T20639] lowmem_reserve[]: 0 0 0 0 0
[  362.441019][T20639] Node 1 DMA32 free:243092kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:16600kB local_pcp:3812kB free_cma:0kB
[  362.441039][T20639] lowmem_reserve[]: 0 0 854 854 854
[  362.444332][T20706] syz_tun: refused to change device tx_queue_len
[  362.445161][T20639] 
[  362.445166][T20639] Node 1 
[  362.447234][T20706] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  362.453784][T20639] Normal free:260172kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16224kB inactive_anon:0kB active_file:4272kB inactive_file:21572kB unevictable:3536kB writepending:148kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:50852kB local_pcp:28232kB free_cma:0kB
[  362.453820][T20639] lowmem_reserve[]: 0 0 0 0 0
[  362.453849][T20639] Node 0 DMA: 5*4kB (U) 5*8kB (U) 5*16kB (U) 5*32kB (U) 5*64kB (U) 5*128kB (U) 5*256kB (U) 5*512kB (U) 4*1024kB (U) 0*2048kB 0*4096kB = 9196kB
[  362.453960][T20639] Node 0 DMA32: 1*4kB (E) 18*8kB (UE) 15*16kB (E) 404*32kB (UE) 325*64kB (UME) 207*128kB (UME) 94*256kB (UME) 69*512kB (UM) 83*1024kB (UME) 0*2048kB 0*4096kB = 204996kB
[  362.454072][T20639] Node 1 DMA32: 35*4kB (UM) 39*8kB (UM) 31*16kB (UM) 37*32kB (UM) 31*64kB (UM) 23*128kB (UM) 24*256kB (UM) 23*512kB (UM) 19*1024kB (UM) 1*2048kB (M) 48*4096kB (M) = 243092kB
[  362.454190][T20639] Node 1 Normal: 95*4kB (M) 30*8kB (UME) 6*16kB (ME) 74*32kB (UME) 447*64kB (UME) 247*128kB (UM) 169*256kB (UM) 116*512kB (UM) 92*1024kB (U) 0*2048kB 0*4096kB = 260172kB
[  362.454300][T20639] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  362.454311][T20639] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  362.454321][T20639] 42376 total pagecache pages
[  362.454327][T20639] 0 pages in swap cache
[  362.618601][T20639] Free swap  = 124996kB
[  362.620004][T20639] Total swap = 124996kB
[  362.621992][T20639] 786301 pages RAM
[  362.623564][T20639] 0 pages HighMem/MovableOnly
[  362.625426][T20639] 241337 pages reserved
[  362.626915][T20639] 0 pages cma reserved
[  362.741725][T20719] openvswitch: netlink: IPv4 tunnel dst address is zero
[  362.846302][T20724] netlink: 'syz.0.4556': attribute type 2 has an invalid length.
[  362.859226][T20724] : entered promiscuous mode
[  363.094665][T20739] netlink: 'syz.1.4559': attribute type 3 has an invalid length.
[  363.207264][T20750] __nla_validate_parse: 3 callbacks suppressed
[  363.207275][T20750] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4563'.
[  363.252700][T20758] netlink: 'syz.2.4564': attribute type 1 has an invalid length.
[  363.258298][T20758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4564'.
[  363.280272][T20758] netlink: 360 bytes leftover after parsing attributes in process `syz.2.4564'.
[  363.299913][T20747] netlink: 'syz.1.4561': attribute type 21 has an invalid length.
[  363.305013][T20747] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4561'.
[  363.554895][T20789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4573'.
[  363.712773][T20801] delete_channel: no stack
[  363.914642][T20829] netlink: 'syz.1.4587': attribute type 1 has an invalid length.
[  363.917911][T20829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4587'.
[  363.933313][T20829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4587'.
[  364.051424][T20854] syzkaller1: entered promiscuous mode
[  364.053947][T20854] syzkaller1: entered allmulticast mode
[  364.513425][T20906] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.4611'.
[  364.611814][T20913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4612'.
[  364.709289][T20924] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4616'.
[  364.808578][T20925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  364.813079][T20936] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  365.009184][T20954] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) !
[  365.230605][T20979] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  365.676843][T20968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.728988][T21023] lo speed is unknown, defaulting to 1000
[  365.815173][T21031] validate_nla: 2 callbacks suppressed
[  365.815187][T21031] netlink: 'syz.0.4648': attribute type 4 has an invalid length.
[  365.828097][T21031] netlink: 'syz.0.4648': attribute type 4 has an invalid length.
[  366.188471][T21057] syz_tun: entered allmulticast mode
[  366.200153][T21057] bond0: left promiscuous mode
[  366.202510][T21057] bond0: left allmulticast mode
[  366.206222][T21057] team0: left promiscuous mode
[  366.210356][T21057] bridge_slave_1: left allmulticast mode
[  366.213178][T21057] batadv_slave_0: left promiscuous mode
[  366.219853][T21057] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  366.229280][T21057] macvtap1: left allmulticast mode
[  366.232407][T21057] tipc: Resetting bearer <eth:syzkaller0>
[  366.234663][T21057] syzkaller0: left promiscuous mode
[  366.236533][T21057] syzkaller0: left allmulticast mode
[  366.244265][T21057] macsec2: left promiscuous mode
[  366.246144][T21057] macsec2: left allmulticast mode
[  366.248318][T21057] veth13: left promiscuous mode
[  366.252851][T21057] geneve2: left promiscuous mode
[  366.254639][T21057] geneve2: left allmulticast mode
[  366.264684][ T5911] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.268838][ T5911] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.272878][T13856] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.275567][T13856] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.278721][T13856] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.287473][T13856] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.291120][T13856] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.293896][T13856] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  367.351893][T21085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  367.673701][T21124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  367.746242][T21150] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.749758][T21151] syzkaller0: entered promiscuous mode
[  367.751816][T21151] syzkaller0: entered allmulticast mode
[  367.754023][T21150] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.757869][T21150] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.762779][T21150] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.765749][T21150] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.769069][T21150] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.775297][T21150] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.778093][T21153] sctp: [Deprecated]: syz.1.4687 (pid 21153) Use of int in maxseg socket option.
[  367.778093][T21153] Use struct sctp_assoc_value instead
[  367.787163][T21150] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.923369][T21165] netlink: 'syz.1.4691': attribute type 3 has an invalid length.
[  368.337641][T21207] ipvlan2: entered promiscuous mode
[  368.343532][T21207] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  368.545802][T21232] __nla_validate_parse: 6 callbacks suppressed
[  368.545820][T21232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4709'.
[  368.577524][   T60] block nbd0: Possible stuck request ffff888022408000: control (read@0,1024B). Runtime 210 seconds
[  368.582165][   T60] block nbd0: Possible stuck request ffff888022408200: control (read@1024,1024B). Runtime 210 seconds
[  368.586752][   T60] block nbd0: Possible stuck request ffff888022408400: control (read@2048,1024B). Runtime 210 seconds
[  368.591807][   T60] block nbd0: Possible stuck request ffff888022408600: control (read@3072,1024B). Runtime 210 seconds
[  368.725690][T21248] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  368.821431][T21255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4718'.
[  368.824993][T21255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4718'.
[  368.825119][T21256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4718'.
[  368.831364][T21256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4718'.
[  368.872934][T21258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4719'.
[  368.880556][T21258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4719'.
[  369.005458][T21272] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4725'.
[  369.009331][T21272] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4725'.
[  369.020039][T21272] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  369.024015][T21272] gretap1: entered promiscuous mode
[  369.026047][T21272] gretap1: entered allmulticast mode
[  369.036460][T21274] netlink: 'syz.2.4726': attribute type 26 has an invalid length.
[  369.036469][T21272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4725'.
[  369.583951][T21326] netlink: 'syz.2.4747': attribute type 4 has an invalid length.
[  369.723512][T21339] netlink: 'syz.2.4751': attribute type 12 has an invalid length.
[  370.490474][T21410] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.563212][T21414] netlink: 'syz.1.4773': attribute type 1 has an invalid length.
[  370.622320][T21419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.865051][T21435] IPVS: stopping backup sync thread 8646 ...
[  370.977206][T21441] openvswitch: netlink: Flow key attr not present in new flow.
[  371.104795][T21445] nbd: must specify at least one socket
[  371.150820][T21449] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  371.534162][T21465] vlan0: entered promiscuous mode
[  371.535946][T21465] gretap0: entered promiscuous mode
[  371.720034][T21480] team0: Port device team_slave_0 removed
[  372.042374][T21510] syzkaller1: entered promiscuous mode
[  372.044328][T21510] syzkaller1: entered allmulticast mode
[  372.527040][T21532] netlink: 'syz.1.4816': attribute type 1 has an invalid length.
[  372.542336][T21532] netem: incorrect gi model size
[  372.544421][T21532] netem: change failed
[  373.574932][T21551] __nla_validate_parse: 12 callbacks suppressed
[  373.574950][T21551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4822'.
[  373.753627][T21567] syzkaller1: entered promiscuous mode
[  373.755845][T21567] syzkaller1: entered allmulticast mode
[  374.071456][T21591] bond0: option arp_validate: invalid value (18446744073491447809)
[  374.077313][   T13] bond0: (slave 77): interface is now down
[  374.080305][   T13] bond0: (slave bond_slave_1): interface is now down
[  374.094254][   T13] bond0: (slave bond7): interface is now down
[  374.101029][   T13] bond0: (slave batadv_slave_0): interface is now down
[  374.113407][   T13] bond0: now running without any active interface!
[  374.569166][T21646] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4851'.
[  374.613630][T21646] netlink: 'syz.2.4851': attribute type 1 has an invalid length.
[  374.617058][T21646] netlink: 600 bytes leftover after parsing attributes in process `syz.2.4851'.
[  374.702357][T21646] veth0: Caught tx_queue_len zero misconfig
[  374.706331][T21657] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.4855'.
[  374.741116][T21661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4857'.
[  375.196738][T21675] lo speed is unknown, defaulting to 1000
[  375.464436][T21713] syzkaller1: entered promiscuous mode
[  375.466965][T21713] syzkaller1: entered allmulticast mode
[  375.549380][T21724] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  375.549806][T21722] netlink: 'syz.2.4878': attribute type 3 has an invalid length.
[  375.563144][T21722] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4878'.
[  375.619757][T21727] lo speed is unknown, defaulting to 1000
[  375.655200][T21726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4879'.
[  375.827638][T21742] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  376.046302][T21775] syzkaller0: entered promiscuous mode
[  376.053178][T21775] syzkaller0: entered allmulticast mode
[  376.175483][T21782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4893'.
[  376.339322][T21786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.347020][T21786] netlink: 'syz.1.4895': attribute type 1 has an invalid length.
[  376.350481][T21786] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4895'.
[  376.539228][T21794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4896'.
[  377.710311][T21853] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  378.519743][T21916] tap0: tun_chr_ioctl cmd 1074025677
[  378.523885][T21916] tap0: linktype set to 0
[  378.532660][T21916] bridge_slave_0: Caught tx_queue_len zero misconfig
[  378.658604][T21922] __nla_validate_parse: 3 callbacks suppressed
[  378.658615][T21922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4936'.
[  378.771563][T21926] lo speed is unknown, defaulting to 1000
[  378.810295][T21926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  378.821196][   T60] block nbd2: Possible stuck request ffff8880224e8000: control (read@0,1024B). Runtime 150 seconds
[  379.494502][T21960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4946'.
[  379.578776][T21966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4949'.
[  379.655353][T21974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4951'.
[  379.662981][T21974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4951'.
[  379.666162][T21974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4951'.
[  379.846242][T21983] netlink: 'syz.2.4954': attribute type 4 has an invalid length.
[  379.963462][T21985] netlink: 'syz.2.4955': attribute type 3 has an invalid length.
[  379.966556][T21985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4955'.
[  379.970210][T21985] netlink: 'syz.2.4955': attribute type 3 has an invalid length.
[  379.973451][T21985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4955'.
[  379.979286][   T56] block nbd1: Receive control failed (result -104)
[  380.076699][T21988] netlink: 'syz.2.4956': attribute type 1 has an invalid length.
[  380.138741][T21992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4958'.
[  380.271944][T22005] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4963'.
[  380.411967][T22021] netlink: 'syz.0.4970': attribute type 1 has an invalid length.
[  380.926568][T22057] team0 (unregistering): Port device team_slave_1 removed
[  381.130672][T22066] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002
[  381.500628][T22083] pim6reg1: entered promiscuous mode
[  381.502887][T22083] pim6reg1: entered allmulticast mode
[  382.630488][T22142] tipc: Resetting bearer <eth:gre0>
[  382.685734][T22142] xfrm0: left promiscuous mode
[  382.687544][T22142] xfrm0: left allmulticast mode
[  382.689659][T22142] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  382.694027][T22142] geneve3: left promiscuous mode
[  382.695783][T22142] geneve3: left allmulticast mode
[  382.707283][T22142] bond10: left promiscuous mode
[  382.709490][T22142] bridge10: left promiscuous mode
[  382.726000][T22142] ip6gre1: left allmulticast mode
[  382.756797][   T51] lo speed is unknown, defaulting to 1000
[  382.757048][T13856] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  382.759186][   T51] syz1: Port: 1 Link DOWN
[  382.768679][T13856] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  382.781990][T13856] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  382.788040][T13856] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  382.830121][T22152] IPVS: set_ctl: invalid protocol: 58 172.20.20.28:20001
[  383.178108][T22188] batman_adv: batadv0: Adding interface: dummy0
[  383.182845][T22188] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  383.192889][T22188] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  383.391859][T22197] nbd3: detected capacity change from 0 to 127
[  383.400086][   T56] block nbd3: Receive control failed (result -104)
[  383.636995][T22239] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  383.660599][T22237] can: request_module (can-proto-5) failed.
[  383.688545][T22242] openvswitch: netlink: IP tunnel dst address not specified
[  383.762621][T22246] __nla_validate_parse: 12 callbacks suppressed
[  383.762633][T22246] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.5041'.
[  383.768435][T22246] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  383.771946][T22246] openvswitch: netlink: Duplicate key (type 0).
[  383.896982][T22253] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  383.902023][T17575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  383.905746][T17575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  383.974663][    C1] ------------[ cut here ]------------
[  383.976953][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  383.981470][    C1] WARNING: CPU: 1 PID: 0 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  383.985442][    C1] Modules linked in:
[  383.987584][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  383.991961][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  383.995942][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  383.998487][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 7d b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 b2 05 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  384.006269][    C1] RSP: 0018:ffffc900001e0758 EFLAGS: 00010246
[  384.008760][    C1] RAX: 16bd47ab03a00a00 RBX: 000000000000000c RCX: ffff8881006a8000
[  384.011971][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  384.015143][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  384.018254][    C1] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff88810d6759a8
[  384.021492][    C1] R13: 0000000000000000 R14: ffff888106280e40 R15: ffff8881062830d8
[  384.024687][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[  384.028249][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  384.030983][    C1] CR2: 00007fdf3ff74c40 CR3: 0000000020b64000 CR4: 00000000000006f0
[  384.034160][    C1] Call Trace:
[  384.035543][    C1]  <IRQ>
[  384.036767][    C1]  rate_control_send_low+0x194/0x7a0
[  384.038916][    C1]  rate_control_get_rate+0x20b/0x5d0
[  384.041143][    C1]  ieee80211_beacon_get_finish+0x39a/0x6c0
[  384.043441][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  384.045978][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  384.048217][    C1]  ? __ieee80211_beacon_get+0xce1/0x1880
[  384.050461][    C1]  __ieee80211_beacon_get+0xd3d/0x1880
[  384.052718][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  384.054952][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  384.057170][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  384.059613][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  384.061931][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  384.064819][    C1]  __iterate_interfaces+0x2ab/0x590
[  384.066980][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  384.069539][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  384.072521][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  384.074661][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  384.077217][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  384.079150][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  384.081252][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  384.083072][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  384.084961][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  384.086912][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  384.089062][    C1]  handle_softirqs+0x286/0x870
[  384.090633][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  384.092352][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  384.094090][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  384.096061][    C1]  __irq_exit_rcu+0xca/0x1f0
[  384.097859][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  384.099773][    C1]  irq_exit_rcu+0x9/0x30
[  384.101431][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  384.103503][    C1]  </IRQ>
[  384.104611][    C1]  <TASK>
[  384.105719][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  384.107943][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  384.110040][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 67 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  384.117035][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  384.119276][    C1] RAX: 16bd47ab03a00a00 RBX: ffffffff819683c8 RCX: 16bd47ab03a00a00
[  384.122243][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b8241 RDI: ffffffff8be33880
[  384.125119][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  384.128035][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa39030
[  384.131035][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d5000
[  384.133932][    C1]  ? do_idle+0x1e8/0x510
[  384.135536][    C1]  default_idle+0x13/0x20
[  384.137166][    C1]  default_idle_call+0x74/0xb0
[  384.138790][    C1]  do_idle+0x1e8/0x510
[  384.140309][    C1]  ? __pfx_do_idle+0x10/0x10
[  384.142115][    C1]  cpu_startup_entry+0x44/0x60
[  384.143894][    C1]  start_secondary+0x101/0x110
[  384.145683][    C1]  common_startup_64+0x13e/0x147
[  384.147529][    C1]  </TASK>
[  384.148907][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  384.152048][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  384.155647][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  384.159801][    C1] Call Trace:
[  384.161139][    C1]  <IRQ>
[  384.162405][    C1]  dump_stack_lvl+0x99/0x250
[  384.164307][    C1]  ? __asan_memcpy+0x40/0x70
[  384.166339][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  384.168555][    C1]  ? __pfx__printk+0x10/0x10
[  384.170568][    C1]  vpanic+0x281/0x750
[  384.172340][    C1]  ? __pfx__printk+0x10/0x10
[  384.174353][    C1]  ? __pfx_vpanic+0x10/0x10
[  384.175846][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  384.178006][    C1]  panic+0xb9/0xc0
[  384.179627][    C1]  ? __pfx_panic+0x10/0x10
[  384.181330][    C1]  __warn+0x31b/0x4b0
[  384.182647][    C1]  ? __rate_control_send_low+0x5df/0x820
[  384.184503][    C1]  ? __rate_control_send_low+0x5df/0x820
[  384.186600][    C1]  report_bug+0x2be/0x4f0
[  384.188071][    C1]  ? __rate_control_send_low+0x5df/0x820
[  384.190305][    C1]  ? __rate_control_send_low+0x5df/0x820
[  384.192524][    C1]  ? __rate_control_send_low+0x5e1/0x820
[  384.194830][    C1]  handle_bug+0x84/0x160
[  384.196569][    C1]  exc_invalid_op+0x1a/0x50
[  384.198192][    C1]  asm_exc_invalid_op+0x1a/0x20
[  384.199864][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  384.201938][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 7d b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 b2 05 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  384.208580][    C1] RSP: 0018:ffffc900001e0758 EFLAGS: 00010246
[  384.210456][    C1] RAX: 16bd47ab03a00a00 RBX: 000000000000000c RCX: ffff8881006a8000
[  384.213416][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  384.216495][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  384.219199][    C1] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff88810d6759a8
[  384.221856][    C1] R13: 0000000000000000 R14: ffff888106280e40 R15: ffff8881062830d8
[  384.224517][    C1]  ? __rate_control_send_low+0x5de/0x820
[  384.226419][    C1]  rate_control_send_low+0x194/0x7a0
[  384.228195][    C1]  rate_control_get_rate+0x20b/0x5d0
[  384.230071][    C1]  ieee80211_beacon_get_finish+0x39a/0x6c0
[  384.232053][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  384.234204][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  384.236188][    C1]  ? __ieee80211_beacon_get+0xce1/0x1880
[  384.238067][    C1]  __ieee80211_beacon_get+0xd3d/0x1880
[  384.240093][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  384.242365][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  384.244525][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  384.246553][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  384.248449][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  384.251254][    C1]  __iterate_interfaces+0x2ab/0x590
[  384.253341][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  384.255889][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  384.258923][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  384.261474][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  384.264302][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  384.266556][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  384.269072][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  384.271202][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  384.273572][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  384.275835][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  384.277544][    C1]  handle_softirqs+0x286/0x870
[  384.279152][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  384.280741][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  384.282522][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  384.284265][    C1]  __irq_exit_rcu+0xca/0x1f0
[  384.285822][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  384.287719][    C1]  irq_exit_rcu+0x9/0x30
[  384.289344][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  384.291159][    C1]  </IRQ>
[  384.292118][    C1]  <TASK>
[  384.293077][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  384.295063][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  384.296948][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 67 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  384.303340][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  384.305322][    C1] RAX: 16bd47ab03a00a00 RBX: ffffffff819683c8 RCX: 16bd47ab03a00a00
[  384.307913][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b8241 RDI: ffffffff8be33880
[  384.310495][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  384.313301][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa39030
[  384.316226][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d5000
[  384.318877][    C1]  ? do_idle+0x1e8/0x510
[  384.320364][    C1]  default_idle+0x13/0x20
[  384.321808][    C1]  default_idle_call+0x74/0xb0
[  384.323424][    C1]  do_idle+0x1e8/0x510
[  384.324886][    C1]  ? __pfx_do_idle+0x10/0x10
[  384.326611][    C1]  cpu_startup_entry+0x44/0x60
[  384.328218][    C1]  start_secondary+0x101/0x110
[  384.329883][    C1]  common_startup_64+0x13e/0x147
[  384.331556][    C1]  </TASK>
[  384.333333][    C1] Kernel Offset: disabled
[  384.334771][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:12:04  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff860b21e8 RBX=ffff888022182398 RCX=0000000000000000 RDX=ffff88801c7e3980
RSI=0000000000000000 RDI=ffff888022182398 RBP=ffffc9000381fcc8 RSP=ffffc9000381fb18
R8 =ffff88810357c543 R9 =1ffff110206af8a8 R10=dffffc0000000000 R11=ffffed10206af8a9
R12=dffffc0000000000 R13=1ffff92000703f6c R14=ffff888022183000 R15=ffff888022182000
RIP=ffffffff8b7b32a0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555687f0500 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055556880b5c8 CR3=0000000020b64000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fdf40012e53
XMM06=0000000000000000 00007fdf40012e4d XMM07=0000000000000000 00007fdf40012e61
XMM08=0000000000000000 00007fdf40012ee7 XMM09=0000000000000000 00007fdf40012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfef0
R8 =ffff888106750237 R9 =1ffff11020cea046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd8ee R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdf3ff74c40 CR3=0000000020b64000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fdf40012e53
XMM06=0000000000000000 00007fdf40012e4d XMM07=0000000000000000 00007fdf40012e61
XMM08=0000000000000000 00007fdf40012ee7 XMM09=0000000000000000 00007fdf40012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
